Privacy policy

Who is responsible

This policy explains what personal data Wuslah (wuslah.com) collects and why. The data controller is Ahmed Saad Soliman, an individual based in Egypt, who runs Wuslah until it is a registered company.

To ask anything about your data, or to use your rights, message us on WhatsApp.

What we collect

Wuslah collects personal data in one place only: the Join request form on the For hotels page, which someone at a hotel fills in to say hello and ask to join. When you send it, we store:

• Hotel name (and, if it matches a hotel already on Wuslah, which one)
• Your name
• Your email or WhatsApp number (whichever you give)
• The time you agreed to be contacted
• The language of the form (English or Arabic)
• Your browser's user agent (the line that names your browser and device), to spot abuse

What we don't collect

Your IP address is used only for a moment, to limit how many forms one address can send (spam protection). We don't store it with your request.

Reading the guide, its agent files or using the Ask your assistant box gives us no personal data. The box only builds a link to ChatGPT or Claude and stores nothing; once you are on their site, their own privacy policies apply.

Wuslah sets no cookies and uses no analytics, tracking pixels or advertising. Our fonts are self-hosted on wuslah.com, so loading a page sends nothing to Google or any other font service.

Why we use it, and on what legal basis

We use the form data only to contact you about your hotel joining Wuslah. Logos, photos and the participation terms come later, through the hotel's private review link, and are covered there.

Under the GDPR, the legal basis is taking steps at the hotel's request before entering a contract (Article 6(1)(b)). For the user agent and the brief use of your IP address, it is our legitimate interest in keeping the form free of spam (Article 6(1)(f)).

Where it is stored

The form data is stored by Supabase in the European Union, in its Stockholm (eu-north-1) region, in a private database that only Wuslah's server can read.

The website is hosted by Vercel, which serves the pages and handles each request. Vercel keeps short-lived request logs, which include IP addresses, to run and protect the service.

Supabase and Vercel process the data for us under their data processing terms. Both are companies based in the United States; any transfer outside the European Union relies on the safeguards in those terms, such as the EU Standard Contractual Clauses.

How long we keep it

If the hotel joins, we keep the request while the hotel takes part and for 12 months after it leaves. If it doesn't join, we delete the request within 12 months of receiving it. You can ask us to delete it sooner.

Who we share it with

Nobody else. We don't sell or share your data; only Supabase and Vercel handle it, on our behalf.

Your rights

You can ask to see the data we hold about you, correct it, delete it, limit or object to its use, or get a copy to take elsewhere. Message us on WhatsApp and we will answer within one month.

You can also complain to a data protection authority, such as the one in the EU country where you live, or Egypt's Personal Data Protection Center.

Changes

If what we collect changes (for example when booking requests open), we will update this policy first and change the date at the top.