1. Scope of this policy
This policy applies to personal data collected by Tourism Enterprise Company (Shams) through its website and the communication channels connected to it.
2. Data we collect
- Data you provide: your name, email address, mobile number, and the subject and content of your message when you use the contact form.
- Technical data: your browser and device type, operating system and the pages you visited, for the purposes of operating and improving the website.
We do not ask for sensitive data through this website, and we ask you not to send any bank details or ID numbers through the contact form.
3. Purposes of processing
- Responding to your inquiries and requests.
- Contacting you about the projects, services or partnership opportunities you asked about.
- Operating and securing the website and improving its user experience.
- Complying with legal and regulatory requirements.
4. Legal basis
We process your data on the basis of your consent when you submit the form, the legitimate interest in managing the company’s business and responding to correspondence, or a legal obligation where one applies.
5. Sharing data
We do not sell or rent your personal data. We may share it, to the extent necessary, with service providers working on our behalf (such as hosting or email) under confidentiality obligations, or with competent authorities when there is a lawful request.
6. Retention period
We keep your data for as long as necessary to fulfil the purpose for which it was collected, or for the period required by law, after which it is deleted or anonymized.
7. Data protection
We apply reasonable organizational and technical measures to protect your data against unauthorized access, disclosure or alteration. However, no transmission over the internet can be guaranteed to be completely secure.
8. Your rights
- To access the personal data we hold about you.
- To request the correction or updating of inaccurate data.
- To request the deletion of your data where permitted by law.
- To withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at [email protected].
9. Cookies
The website uses essential cookies to operate. For details, see the Cookie policy.
10. Contact
For any questions about this policy: [email protected], or use the contact page.
This wording is general and requires approved legal review, and alignment with the Kingdom’s Personal Data Protection Law, before publication.