Privacy Policy

Account data: name, work email, mobile number and role of portal users.

Traveller data: full name as on the passport, date of birth, nationality, passport or national ID number and expiry, gender, frequent-flyer numbers and travel preferences, entered by the Client or the traveller.

Booking data: requests, itineraries, quotes, tickets, vouchers, approvals and changes.

Company and billing data: company name, commercial registration and VAT numbers, address, invoices and payments.

Technical data: sign-in times, IP address and device information, kept in security logs.

To fulfil the service the Client asked for: to source, quote, issue, change and cancel bookings; to issue invoices; and to send sign-in codes and booking notifications.

To meet legal obligations, including tax (ZATCA) record-keeping and requirements of the Ministry of Tourism and other authorities.

To keep the service secure and prevent misuse. We do not sell personal data and do not use it for advertising.

Airlines, hotels and travel suppliers (for example booking platforms we source from), only the data each booking needs.

Service providers that run parts of our platform, such as hosting, email delivery and backups, under contracts that oblige them to protect the data.

Government authorities where the law requires it.

International trips require sending traveller data to suppliers outside the Kingdom. We transfer it only as needed for the booking and in accordance with the PDPL rules on transfers outside the Kingdom.

Passport and ID numbers are encrypted at rest. Access to the back office is limited to authorised staff, every action on a request is logged, and all traffic is encrypted in transit. Backups stored outside our servers are encrypted.

Booking and invoice records are kept for as long as tax and commercial laws require. Traveller profiles are kept while the Client's account is active and are deleted or anonymised after the account is closed, unless the law requires us to keep them longer.

Under the PDPL you may ask to be informed about how your data is processed, to access and obtain a copy of it, to correct it, and to have it destroyed when it is no longer needed. You may also withdraw any consent you gave, without affecting processing that has already taken place.

Send requests to info@triptimett.com. We reply within the period set by the law. If you are not satisfied, you may complain to the Saudi Data & AI Authority (SDAIA).

We use only cookies needed to keep you signed in and remember your language. We do not use advertising or tracking cookies.

We may update this policy. The date at the top shows the latest version. Questions about privacy: info@triptimett.com.