Introduction
Ofuq Al-Zoom Trading Company (referred to as “AL-ZOOM Travel”, “the Company” or “we”), registered under Unified National Number 7051916232, holder of Travel and Tourism Services Licence No. 73106689, and based in Sakaka, Al-Jouf Region, Kingdom of Saudi Arabia, is committed to protecting the privacy of its customers and the visitors to its website.
This policy explains how we collect, use, store and share your personal data, and the rights you have over it, in accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H, its amendments and its implementing regulations.
Scope of this policy
This policy applies to all personal data we process when you use this website, contact us by WhatsApp, phone, email or social media, or request any of our services inside or outside the Kingdom.
The data we collect
We collect the minimum data needed to provide the service. Depending on the request, this includes:
- Identity and contact data: your name, mobile number and email address.
- Trip and booking data: the destination, travel dates, the number and ages of travellers, your accommodation, activity and transport preferences, and any notes you give us.
- Travel documents: passport details or a passport copy, when needed to complete flight, hotel, activity or visa bookings, or to issue a bank card in the destination country.
- Payment data: proof of payment such as transfer receipts. We do not ask for, or keep, your full credit card details.
- Special data you provide voluntarily: such as health, dietary or accessibility needs. We use it only to prepare the right service for you, and only with your explicit consent.
How we collect your data
- Directly from you when you fill in the request form on the website. The form only prepares a WhatsApp message, and nothing is sent until you press the send button in the app yourself.
- Through the conversations, calls and messages between you and our team.
- From the documents you send us to complete a booking.
Our website does not use advertising cookies or tools that track visitor behaviour. Hosting and network providers may log basic technical data, such as IP address and browser type, for operation and security purposes only.
Purposes of processing and legal basis
- Fulfilling your request and our contract with you: preparing the proposed programme, completing and confirming bookings, and providing airport, transport and activity services.
- Communication and follow-up: answering your questions and staying with you before, during and after your trip.
- Legal obligations: keeping accounting and commercial records, and responding to requests from the competent authorities in line with the law.
- Improving our services: measuring customer satisfaction and developing the quality of our service.
- Marketing: sending offers and news, only with your consent, and you may stop them at any time.
- Customer reviews: we only publish your review or name on the website or our accounts with your consent, and you may ask us to remove it.
Sharing data
We do not sell, rent or trade your personal data. We share it only as far as needed to deliver your service, with:
- Airlines, hotels and accommodation providers.
- Event and tour organisers, drivers and transport companies.
- Electronic SIM (eSIM) providers.
- Banks in the destination country when you ask us to issue a bank card.
- The technical service providers we use to communicate, such as WhatsApp and email.
- Government and judicial authorities when there is a lawful request.
We require everyone we work with to keep the data confidential and to use it only for the stated purpose.
Transferring data outside the Kingdom
The nature of travel services requires some of your data to be transferred to service providers in the destination country, such as hotels, airlines and event organisers. This transfer is limited to the minimum needed to carry out a booking to which you are a party, and follows the controls set out in the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom.
How long we keep data
We keep your data for as long as needed to achieve the purpose for which it was collected, and then for the period required by applicable law, such as commercial and accounting regulations. After that, we destroy the data or convert it into a form that does not identify you.
We delete passport copies and personal documents once the trip has ended and the related bookings have been settled, unless the law requires us to keep them longer.
Data security
We apply appropriate organisational and technical measures to protect your data from unauthorised access, use or disclosure, and we limit access to the staff who need it to do their work.
If a breach affecting your data occurs, we will notify the competent authority and inform you within the timeframes and procedures set by the law.
Your rights
The Personal Data Protection Law gives you the following rights:
- The right to be informed: to know the legal basis and purpose for collecting your data.
- The right of access: to view the data we hold about you.
- The right to a copy: in a clear and readable format.
- The right to correction: to ask us to update, correct or complete your data.
- The right to destruction: to ask us to destroy your data once it is no longer needed, unless the law requires us to keep it.
- The right to withdraw consent: at any time, without affecting processing that took place before the withdrawal.
How to exercise your rights
Send your request to Alzoomtravel@gmail.com or on WhatsApp at +966 57 085 0001. We may ask you for proof of identity to protect your data.
We will reply within 30 days of receiving your request. If you are not satisfied with our reply, you have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).
Data of minors
We do not collect data from anyone under eighteen except through their guardian and with the guardian’s consent, as part of family bookings.
External links and platforms
Our website contains links to external platforms such as WhatsApp, Instagram, Snapchat, TikTok and YouTube. The YouTube player on the website only loads when you press the play button, after which YouTube’s policy applies. Each platform has its own privacy policy, and we are not responsible for its practices.
Changes to this policy
We may update this policy from time to time. We publish the updated version on this page with the date of the last update, and we inform you of material changes through the contact channels available to us.
Governing law
This policy is governed by and interpreted in accordance with the laws of the Kingdom of Saudi Arabia.
Contact us
For any question about your privacy or this policy:
- Email: Alzoomtravel@gmail.com
- WhatsApp: +966 57 085 0001
- Phone: +966 53 208 1845
- Address: Sakaka, Al-Jouf Region, Kingdom of Saudi Arabia
