1. Introduction & Overview
Welcome to Wjha (وجهة) ("we," "our," or "us"), operated under wjhastays.com. Wjha is a premier smart booking platform designed to connect guests with premium vacation homes, chalets, apartments, villas, and boutique hotel stays across Egypt.
We are committed to maintaining the highest standards of data privacy, regulatory compliance, and payment security. This Privacy Policy details the types of personal information we collect, how it is used, how payment transactions are protected in accordance with the Central Bank of Egypt (CBE) guidelines, and your privacy rights.
2. Information We Collect
We only collect personal information that is strictly necessary to provide and enhance our booking services:
- Account Information: Name, email address, mobile telephone number, profile picture, and account password.
- Host Verification Data: For hosts registering properties: National ID / Passport details, host biography, and payout preferences (e.g., InstaPay, Vodafone Cash, Bank Account IBAN) for booking disbursement.
- Reservation & Booking Details: Chosen property, check-in and check-out dates, guest count, special accommodation requests, and reservation history.
- Technical & Usage Information: Device model, operating system (iOS/Android), IP address, mobile push notification tokens (Firebase Cloud Messaging), and app interaction logs.
Wjha does NOT store, process, or capture full debit/credit card numbers, CVVs, or card PINs on its servers.
All electronic payment processing is handled exclusively through Paymob (Paymob Solutions for Digital Payments), a licensed Payment Service Provider certified with the highest international security benchmark: PCI-DSS Level 1 (Payment Card Industry Data Security Standard), authorized and compliant with the Central Bank of Egypt (CBE) digital payment frameworks.
3. How Payment Data is Handled
When you make a payment for a booking on Wjha:
- Direct Encryption: Payment card details entered by the user are transmitted directly over encrypted TLS/SSL channels to Paymob's secure payment infrastructure.
- Tokenization: Paymob returns a secure, encrypted token representing the transaction status (success, pending, failed) without ever exposing raw card numbers to Wjha.
- Supported Payment Methods: Visa, MasterCard, Meeza cards, mobile digital wallets (Vodafone Cash, Orange Money, Etisalat Cash, WE Pay), and Aman kiosk payments powered by Paymob.
4. How We Use Your Information
We process your personal information for lawful business purposes:
- Facilitating and confirming your property reservations with hosts.
- Sending essential booking updates, OTP login verification codes, and invoice receipts.
- Operating in-app messaging and consultation communication between guests, hosts, and customer support.
- Enforcing platform safety, verifying host listings, and preventing fraudulent activities.
- Complying with applicable laws, tax obligations, and regulatory requirements in the Arab Republic of Egypt.
5. Data Sharing & Disclosure
We respect your privacy and never sell or rent your personal information to third parties. Data is only shared in the following limited situations:
- With Property Hosts: When a reservation is requested or confirmed, the host receives necessary guest details (name, phone number, stay dates) to facilitate check-in and house access.
- With Authorized Service Providers: Trusted third-party infrastructure providers that assist our operations, such as Paymob (payment processing), Twilio / SMS gateways (OTP delivery), and Firebase (secure push notifications).
- Legal Compliance: When required by Egyptian law, court order, or governmental authorities to investigate fraud or legal disputes.
6. Data Security & Storage
We employ industry-standard administrative, technical, and physical safeguards to protect your personal information against unauthorized access, destruction, loss, or alteration. All web and API traffic is encrypted using 256-bit Secure Sockets Layer (SSL/TLS).
7. Your Privacy Rights
Depending on your location and subject to applicable laws, you possess the right to:
- Access the personal data we hold about your account.
- Request corrections to incomplete or inaccurate profile information.
- Request deletion of your account and associated personal data, provided no active bookings or legal obligations exist.
- Opt out of marketing communications at any time.
8. Policy Updates
We may revise this Privacy Policy periodically to reflect changes in our services, technological advancements, or regulatory requirements. Any material changes will be announced via our website or mobile application notification prior to taking effect.