Privacy Policy

• Booking details: branch, date, time, number of guests and seating area.
• Contact details: first and last name, mobile number and, if you give it, email.
• Birthday (optional): day, month and year, so we can wish you well.
• Occasion (optional): for example a birthday or anniversary, so the branch can prepare.
• Allergies and seating preferences (optional), and any note you write to us.
• Your choice about receiving news and offers.
• Your approximate location, only if you tap "Find my nearest branch" and allow it on your phone.
• Technical and usage data from cookies and similar tools: pages visited, device and browser type, and how you arrived at the site.

• To take, confirm, change and manage your booking, and to contact you about it — because you asked us to, to carry out your booking.
• To prepare your table: occasion, preferences and allergies are passed to the branch team — with your consent, which you give by adding them.
• To send you news and offers by SMS, WhatsApp or email — only if you tick the box to receive them when booking. You can stop them at any time.
• To show you the nearest branch — with your consent, given by your phone when you allow location. The distance is worked out on your phone.
• To keep the website working, secure and free of abuse — our legitimate interest in running a safe service.
• To measure visits and improve our marketing with analytics and advertising cookies.
• To meet legal duties, for example answering lawful requests from competent authorities.

Allergy details are sensitive personal data under the PDPL. We use them only so the branch team can prepare your meal safely, we share them only with that team, and we keep them only with that booking. Adding them is optional. Please also tell your waiter on the day.

We do not sell your personal data.

• Our branch and guest-service teams, to serve you.
• Our reservation and guest system, which we run on our own servers in Saudi Arabia.
• Service providers acting on our instructions: the company that hosts our website, providers that deliver our booking messages, Google (maps, analytics and advertising) and Meta (advertising measurement).
• Competent authorities, where the law requires it.

Your bookings and guest record are stored in Saudi Arabia. Our website is hosted by an international provider, so what you type into it passes through servers outside the Kingdom on its way to our reservation system. Google and Meta process website usage data outside the Kingdom. We use these transfers only as far as needed, under the conditions set by the PDPL transfer regulations, and with safeguards in our agreements with these providers.

• Booking and contact details: while you book with us, and up to 3 years after your last booking. After that we delete them or make them anonymous.
• Allergies, preferences and notes: with the booking they belong to.
• Your consent to news and offers: until you withdraw it, and a record of it for as long as we need to show you agreed.
• Analytics data: up to 14 months.
• Longer only where a law requires it.

To make your next booking quicker, this website remembers your name, mobile and email, and your last branch and party size, in your browser on your device only. You can clear them from your browser settings at any time. When you open a "manage your booking" link, we set a secure cookie so you can see that booking without the link staying in the address bar.

We use cookies that the site needs to work (for example to keep your language and your booking link), and analytics and advertising cookies from Google and Meta that help us understand visits and measure our advertising. You can block or delete cookies in your browser settings; the booking will still work without analytics and advertising cookies.

Under the PDPL you have the right to:

• Be told how your personal data is collected and used (this policy).
• See the personal data we hold about you and get a copy of it in a clear, readable format.
• Have it corrected, completed or updated.
• Have it deleted when we no longer need it.
• Withdraw your consent at any time, for example to news and offers. This does not affect what was done before.

To use any of these rights, email info@tawabel.com from the email or mention the mobile number you booked with. We may ask you to confirm who you are. We will answer within 30 days. To stop offers, you can also reply STOP to our messages or call 920018998.

If you are not satisfied with our answer, you may complain to the Saudi Data and AI Authority (SDAIA), the competent authority for the PDPL.

We protect your data with access controls, encrypted connections (HTTPS) and limited staff access. If a breach puts your data at risk, we will notify SDAIA within 72 hours of learning of it and tell you without undue delay when required.

Bookings should be made by an adult. If you are under 18, please ask a parent or guardian to book for you.

We will update this page when our practices change and show the date of the latest version at the top. For important changes, we will tell you before they apply.

Bayt AlTawabel Company (Commercial Registration 1010205021), Riyadh, Saudi Arabia. Data requests and privacy questions: info@tawabel.com. Phone: 920018998.