Privacy Policy

1. What we collect

To make and manage bookings we collect: your name, email address, phone number, guest/passenger names, and your booking history. If you create an account, we also store your saved travellers and preferences. Payment card details are entered directly with our licensed payment gateway. Rooms.bh never sees or stores them.

We also collect standard, anonymous usage data (pages viewed, searches, approximate location from your network, device type) to improve the service. This data is not linked to your identity.

2. How we use it

We use your data to confirm and service bookings, send booking confirmations and essential service emails, provide customer support, prevent fraud, and, only if you opt in, send offers. We do not sell your personal data.

3. Who we share it with

Only what is necessary to deliver your booking: guest names go to the property, passenger details to the airline, and payment is handled by the payment gateway. Service providers that host our infrastructure and send our emails process data under contract, and we never allow them to use it for their own purposes.

4. How we protect it

Personal details are encrypted at rest, transmitted only over HTTPS, and access inside Rooms.bh is role-restricted, protected by two-factor authentication, and audit-logged. We retain booking records as required by law and delete or anonymize data that is no longer needed.

5. Your rights

In line with Bahrain's Personal Data Protection Law (PDPL), you may request access to, correction of, or deletion of your personal data, and you may withdraw marketing consent at any time. Write to privacy@rooms.bh and we will respond within 30 days.

6. Cookies

We use only essential cookies: keeping you signed in, remembering your language, and an anonymous session identifier for aggregate analytics. We do not use advertising or cross-site tracking cookies.

7. Roam, our travel assistant

Roam answers travel questions and finds hotels for you. Your messages are processed by an artificial-intelligence model provided by Anthropic (Claude), under a contract that does not allow the provider to use them to train its models. Roam is limited to travel topics, is not a human, and may make mistakes; prices and availability are always confirmed at booking. Your conversations are kept with your account (or on your device when you are a guest) so you can return to them, and you can delete any conversation at any time from the Roam screen. Conversations may be reviewed by our staff for quality and safety.

8. Location and maps

Maps on hotel pages and in Roam are provided by Google Maps and Google Places; your requests to those services are subject to Google's privacy policy. If you use "near me" in our app, your device location is sent once to find hotels around you and is not stored.

9. Our mobile app

The Rooms.bh app uses the same account and the same rules as this website. It stores your sign-in session, language, currency, recent searches and recently viewed hotels on your device and, when you are signed in, on your account so they follow you between devices. If you allow notifications, we keep a device token to send booking updates; you can switch notifications off in your device settings at any time.

The app also uses two diagnostic services, both hosted in the European Union: Sentry, for crash and error reports (technical details of the failure only; no personal data), and PostHog, for anonymous usage analytics (which screens are used and for how long; not linked to your identity). You can switch usage analytics off in the app under Profile, Privacy.

Push notifications are delivered by Firebase Cloud Messaging (Google). To send them we store your device's push token together with your language and your notification choices. Booking updates (confirmation, payment reminders, refunds, cancellations) are on by default; offers are off unless you opt in, and both can be changed in the app under Profile, Notifications. The token is deleted when you sign out, turn notifications off or delete your account.

10. Deleting your account

You can delete your account from the website (Account, Delete account) or from the app. Deletion removes your name, email, phone number, password, saved travellers, saved hotels, recent searches, Roam conversations and notification devices. Booking and payment records are kept for the period required by Bahraini commercial and tax law, with your personal details replaced by an anonymous marker.

11. Who we are

Rooms.bh is operated by ATT Alwaseet Travel W.L.L., a licensed travel agency in Manama, Kingdom of Bahrain.

12. Contact

Privacy questions: privacy@rooms.bh, General support: support@rooms.bh, Manama, Kingdom of Bahrain.