Privacy Policy

Who we are

BookyPay is operated by COMPANY ASTAD FOR INFORMATION TECHNOLOGY. Our address is:

Data we collect

• Account data: name, phone/email, and storefront details when you register.
• Transaction data: payment amounts, payment links, and their statuses. We do not store card data on our servers.
• Customer-facing data: the information the owner chooses to display on the link (such as payer name, description, receipts) so the customer can verify who they are paying.
• Usage data: access logs, device/browser information, pages you visit.
• Cookies: to improve experience and security.

Purposes and legal basis

• Provide and operate the platform and perform our contractual obligations.
• Comply with legal obligations and prevent fraud or abuse.
• Technical support and service improvement based on our legitimate interests.
• Marketing where permitted and subject to your consent.

Data sharing

We may share necessary data with service providers to perform certain functions on our behalf, including:

• Payment service providers and processors.
• Hosting and cloud infrastructure.
• Support, analytics, and security.

We require appropriate security and contractual safeguards and share only the minimum data necessary. When a customer pays through a link, we transmit the transaction details required by the payment provider to process the checkout securely.

International transfers

Some data may be transferred outside the Kingdom of Saudi Arabia where necessary, with appropriate safeguards in line with PDPL.

Your rights

• Access, correct, and update your data.
• Request deletion where permitted by law.
• Withdraw consent where processing is based on consent.
• Submit a complaint to the competent authority (SDAIA).

Retention and security

We retain data for as long as necessary for the purposes described or as required by law.

We apply reasonable technical and organizational measures to protect data from unauthorized access or use.

Cookies

We use cookies to improve performance and experience. You can control cookies from your browser settings.

Payment link experience

Each payment link displays the owner/merchant name, amount, and description configured in BookyPay. Customers should review this information before proceeding to the payment provider’s hosted checkout page where the transaction is finalized under the provider’s own terms and privacy practices.

BookyPay records link analytics and notifications to support the owner. We do not access or store payment credentials entered on the provider’s checkout, and we do not intermediate settlement of funds between the provider and the owner.

Our role as intermediary

We act only as a technology intermediary between the owner/merchant and the customer. Any rights, warranties, or returns related to products/services are handled by the owner/merchant. BookyPay is not responsible for performance or quality.

Changes to this policy

We may update this policy from time to time. Updates take effect from the date they are posted on this page.