Ministry of Tourism Licensing: What Hotels Need for Online Booking

Why does a hotel need to read the licensing rules before opening online booking?

When a hotel moves from selling rooms through traditional channels to selling them online, the most important question is not technical, but regulatory and operational: what activity is actually licensed? What exactly does that activity allow? Is the hotel selling its own accommodation units as an accommodation operator, or is it also performing a different role related to reservation management, brokerage, or marketing on behalf of others? These distinctions are not settled by impression or by the marketing language on the website; they are settled by the actual licence, by the scope of the activity, and by what the competent authority or a qualified legal adviser determines.

This review becomes even more important because online booking is not just a display screen. It is a chain of connected obligations: who has authority to conclude the contract? Who is responsible for confirming the final price? Who explains VAT and any fees? Who handles cancellation and refunds? And who keeps the records if a dispute arises or a regulator asks for documents? A hotel that answers these questions before launch reduces compliance errors that can cost far more than any technical improvement.

The official starting point for any compliance team is the Saudi Ministry of Tourism portal for regulations and guidelines: https://mt.gov.sa/en/guidelines-and-regulations. This portal is a current reference for regulatory material, but it does not mean that every activity listed there applies automatically to every hotel or every booking platform. The task is to match the service the hotel intends to provide with the correct text or classification, rather than assuming there is a broad, all-in-one licence for every night-time, daytime, or digital service.

In practical terms, it is not enough for a hotel to say: we have a hotel operating licence, therefore we can sell any service related to accommodation. Some services may be part of operating the establishment, some may require separate regulation, and some may only be provided by the hotel through a properly licensed entity in another category. For that reason, the starting point must be documented: the establishment licence, then the permitted activities, then the channels through which the product will be offered, and finally the internal agreements with the technology provider, intermediary, or distribution channel.

The difference between operating an accommodation establishment and the room-booking or brokerage category

The most sensitive distinction in this file is the difference between a licensed accommodation establishment and the category of booking intermediary, reservation management, or accommodation-unit booking. The regulatory text published by the Ministry of Tourism makes it clear that there is a difference between licensing the activity itself and licensing reservation services, marketing, or reservation administration. This means a hotel may not mix its role as an accommodation provider with a role as an intermediary that displays and sells on behalf of other parties, manages bookings for others, or creates a commercial route that goes beyond the actual scope of its licence.

The reference that should be read together with the Ministry portal is the tourism and travel services regulations file published on the Ministry’s CDN: https://cdn.mt.gov.sa/mtportal/mt-fe-production/content/policies-regulations/documents/tourism-regulations/Travel-and-Tourism-Services-Regulations-En-V012.pdf. This officially uploaded and dated file helps explain the classifications and categories, but it must not be treated as the final amendment for every later year, nor as an open-ended permission or denial that every hotel does or does not need a separate licence for online booking. The dividing line is simple: what exactly is the hotel doing?

If the hotel is selling only its own units, then the focus of compliance is the accuracy of its data, the accuracy of its price, transparency, record retention, cancellation policy, and confirmation mechanism. But if it also starts managing reservations for another entity, bundling offers for others, or marketing tourism products that are not its own, it may enter a different regulatory zone that requires a more careful professional review. Do not interpret the phrase “booking tools” or “channel dashboard” as automatic permission to act as a broker.

A useful operational example: a hotel with 120 rooms wants to open online sales for only three product types: daily rooms, suites, and a meeting room that belongs to the hotel. In that case, the regulatory question usually revolves around whether each product is consistent with the original licence and the declared activities. But if the hotel decides to add restaurant offers, pools, gyms, spa facilities, or activities in other premises, then the question shifts to whether the added product falls within the hotel’s activity or requires another arrangement. Verification is based on the actual activity, not on marketing goodwill.

Who has the authority to contract for online bookings inside the hotel?

The recurring problem in a digital launch is not simply the absence of a licence, but the absence of anyone who is authorised to sign or approve. The hotel must determine from the outset who has contractual authority: is it the owner, the operator, the management company, a separately licensed hotel entity, a local branch, or an authorised representative? Because any online booking is essentially a contractual commitment that binds the hotel to the guest or to the corporate account. If authority is unclear, a dispute may arise over the validity of the commitment, the price, or the cancellation terms.

This determination should not remain verbal. What is needed is a clear authority file showing who approves the product, who approves the price, who approves the policy, and who links the electronic signature or the approved text on the booking page to the internal contract. The compliance team is advised to keep an updated copy of the delegations of authority, approval minutes, and the chain of email or system approvals, because these records may matter more than the public advertisement when any later complaint is reviewed.

In larger hotels, authority may be distributed across several units: finance checks VAT, revenue management sets the final price, operations confirms operational capacity, sales approves the commercial description, and compliance reviews the wording. This distribution is healthy if it is documented. But if every department publishes whatever it wants without a single reference point, the customer may see one price, then a different price at payment, then terms that only appear after booking, and that is when legal and operational risks begin together.

The practical rule a hotel should adopt is that the party displaying the product must itself have an internal document proving it is authorised to display it on the terms shown. If the hotel works through a technology provider or booking channel, that provider should not appear to be concluding the contract unless it is expressly authorised to do so and within the correct regulatory boundaries. The distinction between technical display and contractual authority is not a small detail; it is the core of accountability.

Correct presentation of the product: room, daily use, suites, and add-ons

One of the most common causes of complaint in online booking is the mismatch between what the customer saw and what they actually received. For that reason, the hotel must review the product description before publishing it: is it a standard room, a day-use room, a suite, a meeting room, or another product? Is the stated duration the actual booking duration or the usage period within the day? Does the service include access to other facilities or not? It cannot be assumed that booking a room automatically grants additional rights to the pool, gym, or spa unless the product itself states that and the hotel actually provides it in a manner suitable for the offer.

The distinction between a daily room and a suite is very important. A guest may assume that any short-term booking gives full access to all facilities, while the actual position may be different depending on the product. Therefore, the booking page must be explicit: this product is for accommodation/use only, this add-on is available if offered, and this service is not included in the price unless it is stated in text. Any ambiguity here quickly turns into a dispute about value and expectations.

The hotel should also avoid inferring more from marketing images than the written page actually states. A photo may be illustrative, but it does not create an unmentioned benefit. If a suite image shows a view of a pool or a relaxation area, that cannot be turned into a promise that the booking includes that feature. The image describes the general character; the contractual right is created only by the text and the confirmed details.

In online hotel products, accuracy in naming matters a great deal. A wrong label such as “full stay package” when only daily use is actually offered can create a misleading impression. It is better for the hotel to review product names jointly with legal and operational teams: the short name, the short description, the content, the exclusions, and whether there are extra charges for guests, facilities, or extra time. This review should be done before launch, not after the first wave of reservations.

Pricing and tax: how should the hotel present the price without misleading the customer?

Price transparency in online booking is not just good manners; it is a core part of compliance. The hotel should display the final price or make it very clear whether the price is before tax or after it, and it should show any mandatory booking-related fees if they exist. It must not leave the customer to discover the full cost at the final payment step. It must also ensure that the final offer is consistent with the internal invoicing mechanism and with VAT handling if VAT applies to the product being offered.

The sound regulatory rule is that the description, the price, and the tax must be consistent across at least three layers: the offer page, the confirmation page, and the payment receipt. If a price is shown as inclusive, it must truly be inclusive. If the price requires added tax or fees, they must be disclosed clearly before completion, not after. This is especially important in hotels that sell through more than one channel, because inconsistent pricing formulas across channels without internal unification create a difficult matching problem.

Illustrative hypothetical example: if the hotel sets a default price for a two-day booking at SAR 1,000 before tax, and the tax is 15%, then the educational total would be SAR 1,150. This example is for calculation illustration only, not a projection or a commercial commitment. The point is that the customer should be able to see this type of calculation clearly, distinguish between the tax base and the final total, and not be surprised by fees that were never disclosed.

The hotel should also review the logic of discounts, coupons, and promotional codes. The price after discount is not merely a marketing number; it is a contractual number if it can be booked. Systems therefore need to calculate everything accurately: the discount, the tax after discount, and then the total. If there is more than one internal pricing unit, such as a room price, a suite price, and a meeting room price, these must be separated clearly instead of being merged into a single offer that could be misread.

Disclosure of accompanying services: meals, access to facilities, and operational limits

One of the most common points of confusion is when the hotel offers accommodation and then it is automatically assumed that every accompanying service is included. That is a mistake and it should be corrected at the first product-design stage. Meals, breakfast, pool access, gym access, spa, sports facilities, meeting rooms, and outdoor areas all need clear wording: are they included? Are they available as an add-on? Or are they not available in this product at all?

This clarification does not only serve the customer; it also serves operations. If meals are available in the hotel, that does not mean every online product must include them. And if there are facilities on site but they do not operate all day, or they only allow access at certain times or for certain groups under the hotel’s policy, they must not be advertised in absolute terms. Any service that does not align with the booking time or with the establishment’s operational capability should be excluded or reworded.

It should also be noted that adding a room or suite does not automatically grant free access to other facilities. This principle is very important in digital marketing because some customers read “stay” as “all-access,” while the actual contractual position may be limited. If the hotel wants access to a particular facility to be part of the product, it must state that in the offer description and confirm that the facility is actually available and within the approved operating hours.

Practical example: if the hotel offers a one-day booking for room use only and then wants to add access to a pool or spa, it should first check whether that facility is operated within the same entity and under the same usage conditions, and then ensure that any age, time, gender, capacity, or other operational condition does not conflict with the offer. If the hotel is not certain, the safer option is not to include the facility in the advertisement until the review is complete.

Cancellation and refund policy: do not publish what you cannot deliver

Cancellation policy is not a decorative clause. It must be visible before booking confirmation, understandable, and aligned with the hotel’s operational and financial systems and agreed terms. For new FUNDIQI bookings, free cancellation applies at least three full hours before the service starts in Riyadh time, and the paid amount after discount, including tax, is refunded to the original payment method within 5 to 10 working days. This is a contractual platform policy, not a general licensing rule issued by the Ministry of Tourism. Previous bookings retain the cancellation and refund terms accepted by the booking holder.

It must also be noted that any published cancellation policy should preserve the terms of previous bookings as they were, so the hotel must not change the rule retroactively for a booking that was already confirmed. The hotel must also clearly explain if there are any non-refundable charges in a specific product, or if certain promotional offers carry different terms, because dealing with exceptions without explanation creates legal and operational confusion.

It is also important for the hotel to check whether its refund system is actually ready to perform within the stated time frame. Saying that the refund will arrive in a few days and then delaying it without a documented reason undermines trust and increases complaints. Finance and customer service teams should therefore agree on a single wording: when does the clock start, who approves the cancellation, how is the request time proven, and what happens if the cancellation was made more than three hours before start but a technical issue occurred in the recording?

A simple internal mechanism may help: booking time, request time, approval time, refund time, and a fixed reference number. This is not merely administrative order; it is a defensive record if the hotel is asked why a refund was delayed or why it was rejected.

Privacy and data protection: what should the hotel disclose and what should it keep?

Any online booking means processing at least some personal data: the guest’s name, contact number, email address, payment details, and accommodation or usage preferences. Therefore, the hotel should not treat privacy as a copied paragraph at the bottom of the page, but as a daily operational workstream. It needs to define what data is collected, for what purpose, who can access it, how long it is kept, and whether it is used for marketing or only for fulfilment, documentation, and customer service.

Good compliance requires a privacy policy that is simple and understandable, and that appears before booking is completed. The hotel should also avoid asking for data that the booking itself does not require. The less unnecessary data collected, the lower the risk. If third-party tools are used for sending messages, processing payments, or managing channels, the hotel should review the contractual relationship and assess whether disclosure of that relationship in the privacy policy is required or appropriate based on the actual data flow.

Retention matters just as much as collection. The hotel needs to keep booking evidence, confirmation notices, any consent to the terms, cancellation records, payment settlement records, and any price-change review records if they exist. These are not only accounting documents; they are compliance evidence if a dispute, claim, or audit occurs. If the legal or regulatory retention period is unclear, it is better for the hotel to set an internal period through legal and finance advice together rather than relying on the judgement of an operations employee.

The hotel should also review its internal access controls for data: who can modify a booking, who can delete a record, who can reissue a receipt? If those permissions are not tightly controlled, an internal problem may arise before an external one does.

Checking the licence and legal status: how can the hotel make sure it is offering only what it is allowed to offer?

Checking the licence does not mean only hanging a copy of the licence on the wall; it means matching the licence to what is being sold online. The hotel is therefore advised to build an internal checklist before publishing: what is the licensed activity, what is the category, what is the branch or location, which products belong to the establishment itself, which services are handled by a third party, and what may not be included in the hotel’s channel without extra review?

The first regulatory reference is the Ministry portal: https://mt.gov.sa/en/guidelines-and-regulations, followed by the published regulations file: https://cdn.mt.gov.sa/mtportal/mt-fe-production/content/policies-regulations/documents/tourism-regulations/Travel-and-Tourism-Services-Regulations-En-V012.pdf. Reading these sources together helps explain the categories and the boundaries, but the final decision on a specific case must come from the competent authority or a qualified adviser. The internal team should not assume alone that “the requirements are clear” if the case falls between categories or combines more than one activity.

A small hotel with a limited accommodation licence may be allowed to sell only its own rooms, but it cannot automatically assume it is authorised to bundle and sell other products as one package unless that is within its scope or under a proper legal arrangement. And a hotel with more than one unit or more than one activity must review each unit separately. Verification here is not theoretical; it is the step that prevents confusion about legal status: is the customer dealing with the hotel itself, an intermediary, a technology interface, or a separate administrative entity?

A practical point is that the front-end wording should reflect the real legal status. If the party presenting the offer is the hotel itself, that should be stated clearly. If there is a channel management provider or booking intermediary, the relationship must be described in a way that does not mislead the customer into thinking the intermediary is the accommodation establishment or that it owns what it does not own.

The role of third parties: technology providers, distribution channels, and management offices

Many hotels do not build the booking system entirely in-house. They rely on a technology provider, a developer, an agent, or a management office. That is normal, but it increases the need for contractual precision. Every third party must have a clearly defined role in the contract: what does it do, what data does it touch, what boundaries may it not cross, and who is responsible for the offer text, the price display, the confirmation printout, or cancellation management?

A common mistake is to say the provider is “only technical” and then let it publish product text without review. Technology is not a substitute for compliance. If the platform provider automatically changes wording, adds promotional banners, or shows messages that may be understood as promises, the hotel should have a prior approval right. It must also be remembered that the role of a third party does not change the hotel’s legal status, and it does not automatically create a new licence or exempt the hotel from the licence required if its actual activity goes beyond the current one.

It is also helpful for the hotel to define in its dealings with third parties who is responsible for after-sales support: who receives cancellation inquiries, who corrects a date error, who handles the refund, and who keeps a copy of the booking record? Every answer should be written. And if the third party cannot retain evidence or provide it on request, that is a data management problem that is no less serious than a pricing problem.

In distribution across multiple channels, the base product version should be unified. The price should not be different on one site and on the invoice in another, and the description should not mention a service in one place and remain silent about it in another. Consistency across channels is part of compliance, not just a user-experience improvement.

Evidence retention: what should remain in the hotel archive?

Evidence retention is the final line of defence if a dispute occurs. A wise hotel does not wait for a problem before it starts keeping records; it builds an archive from the moment of launch. It should retain copies of the product page as published, the times of any edits, the price log, confirmation messages, the cancellation policy that was in effect at the time of booking, proof of consent to the privacy and terms, and any important correspondence with the customer about changes, cancellation, or refunds.

This evidence also helps in internal reporting. If the hotel notices that a particular product is causing confusion about tax, add-ons, or visit policy, it can trace the published version back to the moment when the problem began. But if pages change daily without archiving, it becomes extremely difficult to reconstruct what happened. That harms the hotel even if it acted in good faith, because good faith alone is not enough when evidence is requested.

The hotel’s records should also include proof of licence verification and internal approval before publication. That may be a signed checklist, an approved email from legal, a decision from an internal committee, or a record in a content governance system. The point is not bureaucratic formality; the point is the ability to prove that the product did not appear on the website without review.

If reviews, preferences, or guest inquiries exist, they should be handled carefully. The hotel should not store more information than necessary, and it should not publish reviews as proof of the legality of the product or the quality of the service. Reviews may be commercially useful, but they are not compliance evidence and they are not a substitute for the licence or operational documents.

Common hotel mistakes: how do small details become compliance problems?

The most common mistake is using broad, vague language that does not explain the product: “enjoy all facilities,” “complete experience,” “open access,” with no detail. These phrases may sound attractive, but they create a legal and operational expectation that is not guaranteed. The second mistake is pricing the offer in a vague currency or formula that does not explain whether the amount includes tax or not. The third is omitting cancellation details or placing them behind a link that the user does not see before confirmation.

Another mistake is for some hotels to rely on images of facilities that are not part of the published product, and then leave the customer to infer inclusiveness that does not exist. Some operators also make the opposite mistake, which is to reduce the description so much that it harms commercial conversion, but that is not an excuse to pass on inaccurate information. The answer is honest, short, and specific description, with neither exaggeration nor omission.

Another recurring error is assuming that any service available inside the hotel building can immediately be sold online. That assumption is incorrect because operational availability is one thing, while commercial inclusion within a licensed activity is another. A service may be available only at certain times, only for certain groups, or under different internal conditions. For that reason, the hotel should not write whatever it wants merely because the facility exists on the ground.

Illustrative hypothetical example: if the hotel publishes a meeting-room offer for one hour and later adds catering or filming equipment without reviewing capacity or the contract, the product can shift from a simple booking to a composite service package that needs greater scrutiny. In that case, the problem is not the technology, but the poor definition of the product boundaries.

How can a hotel build a clear internal decision before launch?

A good internal decision does not start with marketing; it starts with written questions. Does the product to be sold fall within the current operating licence? Does it require another regulatory category? Is there a third party involved in execution or marketing? Is the final price consistent? Is the cancellation policy ready? Is privacy defined? Do we have someone who retains evidence? If the team cannot answer any of these questions, the launch should stop until the review is complete.

The best practical model is a small committee including operations, finance, legal or compliance, and customer service. This committee does not need to be overcomplicated, but it does need a short minute: product description, licence verification, price and tax verification, terms verification, and then a publish-or-amend decision. That minute becomes an excellent governance document in any later audit.

Because regulatory texts may change, or their interpretation or application may change, it is wise not to build a permanent policy on one old reading. Instead, the hotel should schedule periodic reviews of the Ministry page and the published regulations, and assign someone in the team to check for updates regularly. Periodic review does not mean assuming that change is constant; it means avoiding reliance on an outdated text when the team is making operational decisions.

In all cases, if the scope of the activity is not clear, the hotel should ask the Ministry of Tourism or a qualified legal adviser before launching the product, rather than interpreting silence or ambiguity as permission.

How can hotels benefit from online sales without exceeding the scope of the licence?

Online sales can be a strong opportunity for a hotel if they are managed within clear boundaries. The hotel can increase room occupancy, improve demand management, reduce dependence on manual messaging, and present its products in a clearer and more documentable way. But these benefits only materialise when the team respects the real scope of the activity and prevents unplanned expansion into products, channels, or claims.

From an operational perspective, it is better for the hotel to start with one or two well-documented products and then expand gradually after confirming that the terms are sound. For example, if the hotel intends to offer a daily room, a suite, and a meeting room, it is reasonable to begin with what it has precise evidence for, and then add other add-ons only after the licence review, the terms review, and the schedule integration are complete. Fast expansion without control does not necessarily increase revenue and may instead raise the cost of disputes, modifications, and refunds.

The golden rule here is that compliance is not an obstacle to revenue; it is the condition for stable revenue. A hotel that defines its products clearly, prices them honestly, tests its cancellation policy, keeps its evidence, and knows whether it is selling as an accommodation establishment or as an intermediary is in a much better position than a hotel that launches first and seeks interpretation later.

If the hotel needs to redesign its commercial flow or add more channels or products, it is better to do so through advance legal and operational review so that small changes do not accumulate into a business model that is inconsistent with the original licence.

A practical takeaway for hotels that want safe and organised online booking

The conclusion is that the Ministry of Tourism licence in the context of online booking is not a theoretical topic that can be closed with a general statement. First, the hotel needs to understand the status of its licensed activity. Then it must distinguish between an accommodation establishment and the category of room booking or brokerage. Then it must fix contractual authority internally. Then it must write a truthful product description. Then it must present the price, tax, cancellation, and privacy in a consistent way. And finally, it must retain evidence throughout the booking cycle.

The hotel should also avoid basing its decisions on broad assumptions such as: “all our facilities can be sold,” or “we have a hotel licence, so we can do anything,” or “the technology platform carries all responsibility.” These statements may be commercially convenient, but they are weak from a regulatory perspective. The better approach is to build a short but strong compliance file and review it again whenever the product, the channel, or the operating terms change.

To begin in practice, review the Ministry portal here: https://mt.gov.sa/en/guidelines-and-regulations, and the published regulations file here: https://cdn.mt.gov.sa/mtportal/mt-fe-production/content/policies-regulations/documents/tourism-regulations/Travel-and-Tourism-Services-Regulations-En-V012.pdf. These are important reference sources, but the final interpretation of a specific case remains with the competent authority or a qualified adviser. If the hotel wants to present its digital products through a specialist booking channel, that should happen after reviewing the activity status, the contract, the price, the terms, and the evidence, not before it.

List your hotel on FUNDIQI

List your hotel on FUNDIQI at https://fundiqi.com/en/partners to discuss eligible facilities, availability and agreed terms before activating offers.