Who we are
Farhah is a Saudi software platform that hosts service businesses. Each business you book with is an independent operator (the "data controller" for your booking); Farhah operates the platform on their behalf (the "data processor") and is itself the controller for platform-level data such as your account credentials.
Data we collect
We collect what is needed to run a booking and issue a tax-compliant invoice: your name, mobile number, the services you book, the time you book them for, payment details (handled by the gateway), and any optional notes the merchant recorded. Browser cookies keep you signed in. We also collect anonymised usage analytics to improve the service.
How we use it
To create and manage your bookings, send confirmations and reminders, issue ZATCA tax invoices, prevent fraud, comply with our legal obligations in Saudi Arabia, and improve the product. We do not sell your data to anyone, ever.
Who we share it with
Moyasar and Tamara process online card and BNPL payments. Wasabi stores uploaded images. The Saudi tax authority (ZATCA) receives your invoice for compliance. PostHog hosts product analytics in the EU. Each is bound by data-processing terms; none receive more than is required for their function.
Your data rights
You may request access, correction, deletion, restriction, or portability of your personal data at any time. To delete your profile, ask any merchant you booked with to run the deletion flow from their admin panel, or email us directly. We retain bookings, payments, and invoices for the period Saudi tax law requires (currently six years) even after deletion, with personal identifiers anonymised.
Cookies & analytics
A session cookie keeps you signed in to the admin or to a specific booking. We also use anonymised analytics cookies (PostHog, Google Analytics) to understand how the site is used. You can clear cookies at any time from your browser settings.
International transfers
Some processors (PostHog, parts of Wasabi) operate in the EU. Transfers rely on appropriate safeguards in line with Saudi data protection regulations and the EU's standard contractual clauses.
Children
Bookings on behalf of minors must be made by a parent or guardian. We do not knowingly collect data directly from children under thirteen.
Changes
We may update this policy when the product or law changes. Material updates are announced on the site and dated above.
Contact
Email info@pinkribbon.farhah.sa for privacy questions, deletion requests, or to reach our data protection contact.