Legal
Legal information, privacy practices, and terms of use for HalaQR.
HalaQR operates a digital menu and ordering platform for restaurants, cafés, and hospitality businesses in the Kingdom of Saudi Arabia and the wider GCC. The documents below explain how we handle personal data, the rules governing use of our services, and how we align with applicable Saudi regulatory frameworks.
Regulatory alignment
PDPL — Personal Data Protection Law
Royal Decree M/19 and its Implementing Regulations govern how personal data is collected, processed, stored, transferred, and disclosed in Saudi Arabia. Our Privacy Policy reflects PDPL principles including lawful basis, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
NDMO — National Data Management Office Standards
NDMO Personal Data Protection Standards and related data management guidance inform our data governance practices, including classification, retention schedules, privacy notices, data subject request handling, and cross-border transfer assessments where applicable.
NCA ECC — Essential Cybersecurity Controls
The National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC) framework guides our technical and organizational security measures, including access control, encryption, logging, vulnerability management, and incident response for the HalaQR platform.
Legal documents
Privacy Policy
How HalaQR collects, uses, shares, retains, and protects personal data, and how data subjects may exercise their rights under the PDPL.
Terms & Conditions
The contractual terms governing access to and use of the HalaQR platform, subscriptions, acceptable use, and limitations of liability.