Privacy Policy

Effective date: 22 September 2026
Last updated: 22 September 2026

Shaden Resort Al Ula, Managed by Accor (“the resort”, “we”, “us”, “our”) is a resort in Al Ula, Kingdom of Saudi Arabia. This notice explains what personal data we collect through shadenresort.sa, how we use it, and the rights you hold under the Saudi Personal Data Protection Law (PDPL).

This notice covers this website. Rooms booked through Accor’s own booking channels are also covered by Accor’s privacy notice, which applies to the data you give on those pages.

1. Who we are

The resort is owned by Shaden Hospitality and operated under management by Accor. The owning company is the data controller for the personal data collected through this website.

• Address: Al Hail Road, Al Ula, Kingdom of Saudi Arabia
• Email: HB6T0-RE@accor.com
• Telephone: 9200 01832

2. The data we collect

• Enquiry and event forms: your name, email address, telephone number and your message. These are the only fields our forms ask for.
• Event and stay details you choose to send us: dates, guest numbers, room or venue preferences, and any requirements you tell us about.
• Technical data: IP address, browser and device type, and the pages you visit, collected through cookies.

We do not ask for payment details on this website and no booking is completed here. Selecting Book Now takes you to Accor’s booking service, which collects and handles those details under Accor’s own notice.

3. Why we use it

• To answer your enquiry, hold a provisional booking and prepare a proposal for an event.
• To prepare for and deliver your stay or event, including any requirements you have told us about.
• To meet legal obligations, including guest registration, tax and accounting requirements in the Kingdom.
• To keep this website secure.

4. Our legal basis

We process personal data on the basis of your consent, given when you submit a form; to perform the contract for your stay or event; to comply with legal obligations; and for our legitimate interests in operating and securing this website. You may withdraw consent at any time.

5. Who we share it with

• Accor, as the operator of the resort, and the Accor systems used to manage reservations and guest service.
• Our hosting and email providers, who process data on our behalf.
• Suppliers and partners, only where delivering your stay or event requires it, and only the details they need.
• Government authorities, where disclosure is required by Saudi law.

We do not sell personal data.

6. Transfers outside the Kingdom

Accor operates internationally and some of our service providers process data outside Saudi Arabia. Where that happens, the transfer is made in line with PDPL requirements and subject to appropriate safeguards.

7. How long we keep it

We keep enquiry correspondence for as long as the enquiry is live, and stay, event and financial records for the period required by Saudi tax, accounting and hospitality regulations. Nothing is kept for longer than is necessary for the purposes set out above.

8. Cookies

This website uses strictly necessary cookies, which keep your browsing session working, remember your language choice between the English and Arabic versions, and help protect the site. We do not run analytics, advertising or remarketing on this website, and there is therefore no consent banner. You can block or delete cookies through your browser settings at any time.

9. Security

We apply technical and organisational measures appropriate to the risk, including access controls and encrypted transmission, to protect personal data against loss, misuse and unauthorised access.

10. Your rights

Under the PDPL you may ask to be informed of how your personal data is used, request access to it, request a copy in a readable format, ask for it to be corrected, ask for it to be destroyed, and withdraw your consent at any time.

To exercise a right, write to HB6T0-RE@accor.com. We respond within the periods set by the PDPL. You may also raise a complaint with the Saudi Data & AI Authority (SDAIA).

11. Children

This website is not directed at children. Bookings and enquiries are made by adults, and details of accompanying children are supplied by the booking adult and used only for the stay.

12. Changes to this notice

We may update this notice. The current version is always published on this page with its effective date.