Last updated: 3 August 2026
This policy explains what personal data Wadana Go collects, why, who it is shared with and what you can ask us to do with it. It covers this website and the bookings made through it.
Who is responsible for your data
Wadana Go, operated by Wadana Go, is the controller of the personal data described here. You can reach us at hello@wadanago.com or on +966 56 400 3269.
- Registered name: Wadana Go
What we collect, and when
We collect only what a booking or an enquiry actually requires.
When you book transport
- Identity: full name, nationality and passport or national ID number. The ID number is required because a driver carrying you between cities may be asked for passenger details at a checkpoint.
- Contact: phone, email and WhatsApp number, so we can confirm your fare and reach you on the day.
- Emergency contact: a name and phone number, used only if something goes wrong during your journey.
- Trip details: pickup and drop-off, date and time, passenger and luggage counts, flight number, hotel or address, driver-language preference and any special requests you write.
- Booking record: your reference, the fare, currency, payment method and any promotional code you entered.
When you create an account
- Your email address and a password, which we store only as a one-way hash — we cannot read it.
- A session cookie (
wi_session) that keeps you signed in. It is essential and cannot be disabled while you are logged in.
When you contact us or subscribe
- What you write in an enquiry form, plus the contact details you give us.
- If you tick the marketing box at booking or signup: your email, name and the IP address the consent came from, kept as the record that you agreed. Marketing email is separate from booking email — you receive confirmations either way, and can unsubscribe from marketing in one click without affecting them.
Automatically
- Standard server logs, and your selected currency and language, which are stored in your browser rather than by us.
- Google Analytics, which shows us page views, device type and rough location so we can tell which pages help. What it stores depends on where you are. In the UK, the EU/EEA and Switzerland we ask first: no analytics cookie is set unless you accept in the banner, and choosing "Essential only" limits it to anonymous, cookie-free counts. Everywhere else it runs from your first page view, as on most websites. It never receives your name or booking details from us, and IP addresses are anonymised automatically.
- Microsoft Clarity, which records how pages are used — where people scroll, what they click, and where a form gets abandoned — so we can find the parts of the site that are confusing. It follows the same consent rule as Google Analytics above: we ask first in the UK, EU/EEA and Switzerland, it runs by default elsewhere, and choosing "Essential only" stops it. It is switched off entirely on the admin area, the driver portal and your own trips page, so pages that can display passport, licence or payment details are never recorded.
- Cloudflare Web Analytics, which counts page views. It sets no cookies and stores nothing on your device, and it cannot follow you to other websites — so it runs without asking, because there is nothing to ask permission for. It tells us how many people read a page, not who they are. It is off on the admin area and the driver portal.
Why we are allowed to use it
- To perform your booking — identity, contact, trip and payment details. Without these we cannot provide the service.
- Our legitimate interest in operating and securing the service — server logs, fraud and abuse prevention, rate limiting, and audience measurement where the law does not require asking first.
- Your consent — marketing email, and analytics cookies where we ask before setting them (the UK, EU/EEA and Switzerland). Either can be withdrawn at any time.
- Legal obligation — tax and accounting records for completed bookings.
Who else sees it
We do not sell your personal data, and we do not share it for anyone else’s advertising.
- Your assigned driver receives the details needed for your journey — your name, phone, pickup and drop-off, flight number and any special request. Drivers are given your emergency contact only where a journey requires it.
- Hostinger, which hosts the site and the database.
- Resend, which delivers our transactional and marketing email.
- Moyasar, a Saudi payment provider, if you choose to pay online. Your card details go to Moyasar directly and never reach our servers or our database — we store only a payment reference and whether it succeeded. Online payment is off unless enabled, in which case WhatsApp confirmation and cash to the driver are the options.
- Google Analytics — see "Automatically" above: we ask first in the UK, EU/EEA and Switzerland, and it runs by default elsewhere.
- Microsoft Clarity — see "Automatically" above. Same consent rule, and never active on the admin area, the driver portal or your trips page.
- Cloudflare — cookieless page counts only, as described above. It receives the address of the page viewed, and nothing that identifies you.
- Search partners. Flight and hotel search on this site is provided by third parties (Travelpayouts/Aviasales for flights, and white-label hotel search for stays). When you use those tools or follow a result, you are interacting with that provider under their own privacy policy, and they may set their own cookies. We pass them your search terms — dates, cities, passenger counts — not your booking or account details.
Where it is kept, and for how long
Data is stored on our hosting provider’s servers. Some of the processors above operate outside Saudi Arabia, so your data may be processed abroad under their respective safeguards.
- Bookings — kept while the booking is live and afterwards for the period tax and accounting rules require.
- Passport and ID numbers — kept only as long as the booking record requires them, and never displayed outside the admin and your assigned driver.
- Accounts — kept until you ask us to delete them.
- Marketing consent — kept while you are subscribed, and the unsubscribe record afterwards so we do not email you again.
- Enquiries — kept while we deal with them and for a reasonable period after.
Your rights
You can ask us to:
- send you a copy of the personal data we hold about you;
- correct anything that is wrong;
- delete your data, where we are not required to keep it;
- stop using it for marketing — immediately, and without giving a reason.
Email hello@wadanago.com and we will respond within 30 days. If you are not satisfied with our answer you may complain to the Saudi Data & AI Authority (SDAIA), which supervises personal data protection in the Kingdom.
Security
Access to booking records is limited to our admin accounts and the driver assigned to your trip. Passwords are stored as one-way hashes, sessions are held in signed HTTP-only cookies, and card details never touch our systems. No system is perfectly secure, so if a breach ever affects your data we will tell you and the regulator without undue delay.
Children
This service is intended for adults. Children travel as passengers on a booking made by an adult; we collect a child’s details only where that adult supplies them for the journey.
Changes
If we change how we use your data we will update this page and the date at the top. If the change is significant we will tell subscribers and account holders by email.