Arrival Point Travel and Tourism is a company that provides services in the travel and tourism sector, and aims to offer a comfortable and enjoyable travel experience for its customers.

Believing in the importance of personal data and its confidentiality, this policy has been prepared to help beneficiaries understand the nature of the data we collect when they visit the company’s website or related platforms. This Privacy Policy is subject to the Personal Data Protection Law and its Implementing Regulations, and the company is committed to maintaining the confidentiality and privacy of the information and materials entered as the basis of this privacy notice. This information will not be disclosed except in accordance with the controls specified and prescribed by law.

By providing data in accordance with the Information Collection article, you fully agree to the storage, processing, and use of that data by the website. The website administration is keen to protect this information from unauthorized access and intrusion. The company reserves the right at any time to disclose any information to the competent authorities when necessary to comply with any government request in accordance with Saudi regulations. Some data will also be deleted automatically.

Use of the company’s website or its related electronic platforms constitutes the user’s agreement to the company’s Privacy Policy.

First: Personal data that will be collected

Basic data: Data collected directly from the user to benefit from the services provided through the website, such as name, ID number, mobile number, addresses, and contact numbers.

Payment data: Data collected for the purpose of processing payments, such as bank card number, payment amounts, and similar details.

Data obtained from other parties.

Location data.

Cookies data: Data collected through website logs, cookies, or similar technologies.

Second: Purpose of collecting personal data

Personal data is collected to follow up on service requests (such as booking tickets, hotels, or trips), respond to inquiries, or receive suggestions and complaints submitted by the user.

Third: Mandatory nature of data collection

Mandatory data: Some personal data is mandatory to provide the services available through the company’s website or to comply with regulatory requirements. Failure to provide that data may result in our inability to provide the requested service or a delay in providing it.

Optional data: Some personal data is optional and is collected to improve service quality and user experience. The user may choose not to provide that data without affecting access to the basic services we provide.

Data provided by the personal data subject is collected directly upon registration on the website.

Once the user visits the Arrival Point Travel and Tourism website, the company’s server records the user’s IP address, the date and time of the visit, and the URL of any website from which the user is referred to the company’s website.

Once the user visits the website, a small file is stored on the visitor’s device (browser), called a “cookie.” It is a file containing information that facilitates browsing the website.

If you use one of the company’s services, or send us an email through the website, you provide us with personal data.

Personal data collected on the company’s website or related platforms is processed in accordance with the regulatory procedures set out in the Personal Data Protection Law and its Implementing Regulations.

These operations include: collecting, recording, storing, indexing, arranging, modifying, updating, merging, retrieving, using, disclosing, transferring, blocking, erasing, and destroying data, and the like, in accordance with the Personal Data Protection Law and its Implementing Regulations.

The company may share data with other parties for legitimate purposes based on a legal basis, a legal procedure, a public interest, or research or study purposes without harming individuals’ privacy, in accordance with applicable laws and regulations.

We may share your data with the following parties:

Governmental and non-governmental entities (including, but not limited to: airlines, hotels, and embassies).

Entities with which the company cooperates under data-sharing agreements.

Personal data is stored on the company’s data center servers inside the Kingdom of Saudi Arabia, where it is protected according to the best electronic security standards defined by the National Cybersecurity Authority and international standards.

Data is destroyed three years after the storage date in a secure manner so that it cannot be viewed or recovered, based on the policies of the National Information Center.

Arrival Point Travel and Tourism will not disclose any personal data except in the cases specified by the Personal Data Protection Law and its Implementing Regulations.

The company will destroy your personal data once the purpose of its collection has ended. However, it may retain this data after the purpose of collection has ended if everything that leads to specific identification of the owner is removed, in accordance with the controls specified in the regulations.

Personal data is collected and processed based on the consent of its owner, who has the right to withdraw consent at any time unless there is another legal basis requiring retention of the data.

You may contact the company’s Data Management Office if you wish to withdraw your consent. Email: [email protected]

Right to be informed: The data subject has the right to know the methods of data collection, the legal bases for processing it, how it is stored and destroyed, and the parties with whom it may be shared.

Right to access personal data: The data subject may request a copy of their personal data free of charge via the email specified in this policy.

Right to correct personal data: The personal data subject has the right to request correction of personal data they believe is inaccurate, incorrect, or incomplete, via the email stated in this policy.

Right to destroy personal data: The personal data subject has the right to request destruction of their personal data in certain circumstances, unless there is a legal provision specifying a retention period or contractual requirements.

Right to withdraw consent to personal data processing: The data subject may withdraw consent to the processing of their personal data at any time, unless there are legal or contractual purposes that require otherwise.

The personal data subject may exercise their rights of access, correction, or destruction of data by contacting the company’s Data Management Office through the email stated in this policy.

Email: [email protected]

Name: Company Data Management Office

Email: [email protected]

If there are any complaints or inquiries related to the Privacy Policy or the handling of personal data, please contact the website administration via the following email: [email protected]

If no response is received within seven business days, the complaint or inquiry may be submitted to the company’s Data Management Office: [email protected]