This Privacy Policy explains how Tawaem Information Technology Company ("Twins", "we", "us") collects, uses, shares, and protects personal data when beauty and lifestyle centers ("Centers") and individuals ("Clients") use the Twins platform, applications, and websites (the "Service"). We process personal data in line with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia.
1. Scope
This Policy applies to all users of the Service, including Centers that manage bookings and content through Twins and Clients who discover Centers and make bookings. It covers our websites, the Client App, the Dashboard, the POS, and the Specialists App.
2. Information we collect
Depending on how you use the Service, we may collect:
- Account data — name, email, phone number, business details, and login credentials.
- Booking data — services requested, appointment times, the Center involved, and booking history.
- Content — reviews, photos, and videos you submit about your experience.
- Payment-related data — limited details needed to calculate and settle commission; full card data is handled by our payment partners, not stored by Twins.
- Technical & usage data — device type, IP address, app interactions, and approximate location where permitted, to operate and improve the Service.
- Communications — messages and support requests you send to us.
3. How we use your information
We use personal data to:
- create and manage accounts and process bookings;
- connect Clients with Centers and display services, availability, and reviews;
- calculate and settle success-based commission;
- improve, personalize, and secure the Service;
- communicate with you about bookings, updates, and support;
- comply with legal and regulatory obligations.
4. Legal basis for processing
We process personal data where it is necessary to perform our agreement with you, where you have given consent (for example, for certain marketing or location features), to comply with a legal obligation, or for our legitimate interests in operating and improving the Service in a manner consistent with the PDPL.
6. Reviews & public content
Reviews, photos, and videos you choose to publish may be visible to other users and may be reflected on Google. Please avoid including sensitive personal information in public content, as it may be seen by others.
8. Data retention
We keep personal data only as long as necessary for the purposes described in this Policy, to comply with legal and accounting obligations, and to resolve disputes. When data is no longer needed, we delete or anonymize it.
9. Data security
We apply technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your rights
Subject to the PDPL, you have the right to:
- be informed about how your personal data is processed;
- access a copy of your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your data where legally permitted;
- withdraw consent where processing is based on consent.
11. Children's privacy
The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can remove it.
12. International transfers
Where personal data is transferred or processed outside the Kingdom of Saudi Arabia, we take steps to ensure an adequate level of protection consistent with the PDPL and its implementing regulations.
13. Changes to this Policy
We may update this Policy from time to time. We will revise the "Last updated" date and, where changes are significant, provide additional notice through the Service.
14. Contact us
For privacy questions or to exercise your rights, contact Tawaem Information Technology Company at privacy@twins.com.sa or through twins.com.sa. We will respond within the timeframes required by applicable law.