1. Our approach
We treat information security as part of our responsibility towards shareholders, guests and partners, and we apply reasonable organizational and technical measures to protect our systems and the data we process.
2. Website security
- The website is served over an encrypted connection (HTTPS).
- The website is informational and does not store users’ data in a public database.
- The hosting components and connected services are updated regularly.
- Administrative access is limited to authorized people with the least privilege necessary.
3. Reporting a security vulnerability
If you discover a vulnerability or unexpected behaviour on the website, please report it to [email protected] with a clear description of how to reproduce the issue.
In return, we ask that you do not exploit the vulnerability, do not access data that does not belong to you and do not publish details before it has been fixed. We are committed to responding to genuine reports within a reasonable time.
4. Fraud and impersonation
Shams will never ask for bank card details or passwords by email or text message. Any message requesting such information in the company’s name should be treated as a fraud attempt.
The only official contact channels are the email address [email protected], the phone number +966 13 836 6669 and the official website domain.
5. Tips for visitors
- Always check the domain name before entering any information.
- Do not send sensitive data (ID numbers or bank details) through the contact form.
- Keep your browser and operating system up to date.