ROMENT · YOUR STAY, CLEARLY
Privacy policy
How we use your information, protect access and respect your choices.
Updated: 2026-10-11
Identity and stay registration
We request your name as on the document, document type and number, and nationality for pre-arrival verification and stay registration. Details are encrypted and restricted to authorized staff, with review activity logged. Verification is currently manual: you may book and pay while review is pending, but check-in instructions remain unavailable until identity approval and room preparation. Staff record Shomoos reporting after completing it in the official system. A status shown in Roment does not mean an automated Shomoos or identity-provider connection exists.
Information we use
Roment Company uses your mobile number to verify your account and manage bookings. Account information may include your name, language and optional email, stay dates, guest count, payment references, message status and marketing preference. We also record technical information needed to protect the service, including network addresses and login attempts. The website does not collect card details into Roment’s servers or allow visitors to access other guests’ records.
Why we use information
We use information to handle requests, payments and cancellations, provide arrival instructions and stay support, send verification, booking and reminder messages, secure accounts, handle complaints and meet applicable obligations. Some services cannot be provided without the essential information needed for them. Marketing is optional and separate from service messages; declining marketing does not prevent booking.
Service providers & processing locations
Staff access is limited by their work permissions. We use hosting, security, payment and messaging providers to deliver the service. The current infrastructure includes Hetzner hosting in Germany and Cloudflare for security and connectivity. When payment and messaging are enabled, necessary information is shared with the payment provider and the WhatsApp provider or messaging gateway connected to Roment. These services may process information outside Saudi Arabia; sharing and transfers must meet applicable requirements and safeguards. We do not sell guest information.
Your choices & rights
You can update available profile information and change your offers preference. Stop marketing through your account settings or a message’s unsubscribe link. Contact us to request access to your information, a copy, correction or destruction, or to withdraw optional consent, subject to applicable rights and exceptions. We verify identity before disclosing information. Certain records may need to be retained for legal obligations or ongoing claims.
Retention, security & cookies
We retain information as needed for booking, support, applicable obligations and claims, and review continued retention needs. Access controls, encryption of sensitive information and service protection measures are used. Cookies support sessions, verification and security; preferences such as appearance are stored on your device. When enabled, an external map may send connection information to its provider. Open “Privacy choices” in the footer to review tracking preferences for this browser. The choices dialog shows whether measurement is available. When activated and only after your consent, residence-page visits and a random browser identifier are sent to Google Analytics or Meta according to your choice. Meta also receives the IP address and browser information. When enabled with analytics consent, Google’s browser tag runs on metrics.roment.sa, receives browser/device context and IP, and stores analytics cookies there for at most 180 days, bounded by consent expiry. It is isolated from Roment account and booking forms. We may associate your choice with a payment attempt to measure a booking after confirmation and server verification of payment, sending its value, tax, apartment ID and a random transaction identifier. With analytics consent, Roment can retain a random campaign code from an enabled Roment link for up to 30 days and associate the last eligible code with the payment attempt. The code contains no guest identity. Purchase/refund associations follow the measurement retention periods below; campaign codes and arbitrary URL parameters are not sent to Google or Meta. With continuing consent, verified refunds adjust the original Google purchase value. A minimal purchase/refund ledger is kept for up to 180 days or until the consent record expires. Partial refunds allocate the saved purchase tax proportionally for measurement; these reports are not tax invoices. Meta does not receive refund adjustments. Events exclude names, contact information, stay dates, booking IDs, card information and URL queries. Consent is remembered in a protected cookie and server record for up to 180 days and must be renewed after tracking setup changes. Meta connection details are removed from the queue after the delivery attempt. Payment-linked browser context lasts at most 24 hours; events and payment measurement associations are deleted after 30 days. Withdrawal stops new measurement attempts and closes the browser tag; an already-started request may finish. It cannot recall data already received by a provider. These choices are separate from offers-message subscriptions. Using the website is not consent to optional marketing or advertising tracking.
Privacy enquiries
For a data request or a question about this policy, call Roment Company on +966 16 369 1754 and identify your request as a privacy enquiry. Do not include verification codes, card numbers or unit access codes in your request. This page displays its update date, and material changes will be explained when introduced.