If you have any complaints about the use of your personal data or concerns regarding how your personal data is handled and your rights, you may submit a complaint to us directly using the contact details provided above in this Privacy Notice. If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the Saudi Data and AI Authority (SDAIA) or with the supervisory authority in the member state where you reside.

We collect personal data when you: complete an online contact form, visit our website, request, purchase and use a service from us, or communicate with us (including phone calls, chat, email, web forms and social media). The types of personal data we collect from you include: Identity Data: your first name, last name, photos, videos, passport, etc. Contact Data: your email address, telephone number(s), and home address. It is important that the personal data we hold about you is accurate and up to date. Please keep us informed of any changes to your personal data, such as changes in contact details.

We do not collect your personal data from other sources.

When necessary, we share your personal data with: our holding group, our service partners (such as airlines, hotels, etc.), tax and relevant regulatory authorities, prosecuting authorities, courts, and/or other relevant third parties connected with legal proceedings or claims, law enforcement agencies, and third parties where we are required to do so by law.

Your personal data may be transferred to and processed in countries outside the Kingdom of Saudi Arabia (KSA). Some of these countries may not provide the same level of data protection as your home country. If your personal data is transferred outside KSA, it will be shared with Almosafer's service providers and partners. We ensure that appropriate safeguards, such as Standard Contractual Clauses, Binding Corporate Rules, or other legal mechanisms, are in place to protect your data in accordance with the General Data Protection Regulation (GDPR) and the Saudi Personal Data Protection Law (PDPL). Our service providers and partners are committed to keeping your personal data confidential and will not share it with any third parties.

We keep personal data for as long as it is required for the following purposes: the purposes described above, to meet our legal or regulatory obligations, and for the exercise and/or defence of any legal claims.

We do not engage in any profiling activities with your personal data.

Almosafer recognises your rights relating to your personal data; however, these rights may be subject to various exceptions and limitations in accordance with the personal data protection system. You may request to exercise your rights at any time by contacting us. Contact details can be found in the Contact section above. You have the following rights regarding your personal data: Right to be Informed: Individuals have the right to receive clear and transparent information about how their personal data is collected, used, and shared. Right to Access: Request access to your personal data and obtain a copy. Right to Rectification: Request correction of inaccurate or incomplete data. Right to Erasure: Request deletion of your personal data under certain conditions, such as when the data is no longer needed for its original purpose. Right to Restriction: Request the restriction of processing your personal data under certain conditions. Right to Data Portability: Request to receive your data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller where technically feasible. Right to Object: Object to the processing of your data, including for direct marketing purposes. Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time.

In the event of a data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by law. If the breach is likely to pose a high risk to your rights and freedoms, we will also inform you without undue delay.

We do not engage in any profiling activities using your personal data.

We do not use any automated processes to make decisions about you that produce legal or significant effects concerning you.

We may update this Privacy Notice periodically to reflect changes in our practices or legal requirements. If we make significant changes, we will notify you by posting the updated notice on our website and revising the "Last Updated" date at the bottom of this notice. Last updated: 14th September 2024