Privacy Policy

Last updated: 2026-10-18

1. Who we are

“Ghurra” is a cloud system for managing horse stables and equestrian centres, served from ghurra.net and its sub-domains. It is owned by Ahmed bin Mohammed Alhashem (“we”). This policy explains how we collect, use and protect personal data under the Personal Data Protection Law of the Kingdom of Saudi Arabia and its regulations.

2. Our role and the stable’s role

The subscribing stable enters the data of its staff, horse owners and customers and is responsible for it as the controller. We process that data on its behalf and only on its instructions to provide the service (processor).

We are directly responsible for the subscriber’s own account data and for data you send us when contacting us.

3. Data we collect

• Account data: name, username, mobile, email, language, role and permissions.
• Staff data entered by the stable: name, job title, nationality, ID type and number, contact, hire date and monthly cost.
• Horse owner and customer data: name, contact, address, invoices, payments, bookings and requests.
• Horse data: identity, passport, microchip, pedigree, health, feeding, training, breeding, photos and attachments.
• Technical data: sign-in and activity log (who did what and when), IP address and browser type, for security and audit.
• Camera links added by the stable; we do not store recordings.

4. Why we use it

• To run the service and its functions for the stable and its users.
• Security: identity checks, two-step verification, preventing unauthorised access, and the activity log.
• Work-related notifications and alerts, and the emails the service needs to send.
• Billing, support and improving the service.

We do not sell personal data, use it for advertising, or share it between stables.

5. Who we share it with

• Hosting: Oracle Cloud servers in Riyadh, inside the Kingdom of Saudi Arabia.
• Artificial intelligence: only when a user presses one of the AI (✨) buttons, the work data needed for that request (horse, feeding, stock and work data, which may include the names of the staff linked to it) is sent to the AI provider Anthropic to prepare the answer, and is processed outside the Kingdom. ID numbers, mobile numbers, email addresses and passwords are not sent, and nothing is sent unless the user presses the button.
• Backups: an encrypted copy of the data is kept on a cloud storage service (Google Drive) and cannot be read without the encryption key we hold.
• Email: an email service provider to send system messages.
• Authorities: only when legally required.

6. Where it is kept and for how long

Data is kept on servers in Riyadh, backed up every night, with the last 14 copies kept.

Stable data is kept for the subscription period. When it ends, the stable can download a full copy of its data; it is then deleted within 90 days and leaves the backups as they rotate, unless the law requires longer retention.

7. How we protect it

Encrypted connections (HTTPS), one-way hashed passwords, two-step verification, role-based permissions, full separation between stables, an activity log, and encrypted backups.

8. Cookies

We use only cookies needed for the system to work: the sign-in session, chosen language, chosen stable, and “remember this device” when the user selects it. We use no advertising or tracking cookies.

9. Your rights

Under the Personal Data Protection Law you may: be informed how your data is processed, access it and obtain a copy, correct it, ask for it to be destroyed when no longer needed, and withdraw your consent.

If your data was entered by a stable (as a staff member or horse owner), contact that stable first; we help it carry out your request. You may also contact us directly.

10. Minors

The service is for businesses and adults; we do not knowingly collect data from anyone under 18.

11. Changes

We may update this policy; we publish the new version with its date and notify subscribers of material changes.

12. Contact

For questions and requests about personal data: [email protected] — 056 292 2292