⚠️ Notice
Draft under legal review — not official until approved by licensed Kuwaiti counsel. The platform is currently in trial operation.
1. About this Policy
This policy explains how we collect, use, and protect your personal data.
2. Data Controller
• Company: WeenAro7 — Single Person Company (Kuwait) for booking transportation, hotels, restaurants, and recreational venues (domestic). Commercial Registration No.: pending verification
• Country: Kuwait
• Contact: privacy@weenaro7.com
3. Data Collection
We collect registration data, preferences, reviews, technical usage info, and AI interaction content.
4. Usage
To operate the service, personalize recommendations, fulfill bookings, and comply with law.
5. Data Sharing
We do not sell data. We share only with UPayment, partners, and infrastructure/AI providers (Anthropic Claude).
6. Storage
Stored securely. Some global processing occurs for AI features.
7. Retention
Account data retained until deletion. Bookings retained for 7 years for compliance.
8. Cookies
We use essential, preference, and analytics cookies. Manage them via platform settings.
9. Your Rights
Access, correct, delete, or object to processing via privacy@weenaro7.com.
10. Children
The platform is not directed to anyone under 18, and we do not knowingly collect their data.
11. Legal Compliance & Data Protection
WeenAro7 processes data in line with the Data Privacy Protection Regulation issued by Kuwait's Communication and Information Technology Regulatory Authority (CITRA) No. 26/2024, per its scope of application, and applicable Kuwaiti laws. Our obligations include:
• Defining processing purposes clearly and limiting collection to what is necessary.
• Separating service consent from marketing consent — each is independent and withdrawable without affecting the core service.
• Processor categories: hosting, payment (UPayment), analytics, email, support, and maps — as necessary and under confidentiality obligations. We do not sell your data.
• Retention schedule: account data until deletion, then erased/anonymized; transaction and invoice records per the legal period; complaint records at least 6 months; analytics data for a limited period then aggregated.
• Cross-border transfer: some data may be processed by providers outside Kuwait with appropriate safeguards and within CITRA's scope.
• Data-subject rights (access/correction/deletion/consent withdrawal/objection): exercised via a dedicated channel at privacy@weenaro7.com.
• Security and breach notification: data secured to recognized standards, with notification to relevant authorities of any material breach.
For any question about your data or to exercise your rights, contact us at privacy@weenaro7.com.