Al Sarh Travel & Tourism respects the privacy of users of the Al Sarh Visa Platform and is committed to protecting the personal data collected and processed when users access the Platform or request visa-related services through it.

We process personal data in accordance with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its Implementing Regulations.

This Privacy Policy explains the types of personal data we may collect, how and why we process such data, the parties with whom it may be shared, how we protect it, and your rights in relation to your personal data.

By using the Platform or providing your personal data through it, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

The Al Sarh Visa Platform is an electronic platform operated by Al Sarh Travel & Tourism, designed to facilitate visa application services, processing, and related travel services.

For the purposes of applicable personal data protection laws, Al Sarh Travel & Tourism processes personal data relating to the services provided through the Platform in accordance with the roles and obligations established under applicable laws and regulations.

2. Personal Data We Collect

We may collect and process personal data necessary to provide visa-related services. The information required may vary depending on the requested service, destination country, and requirements of the relevant authorities.

Personal and Identification Information

This may include:

• First name, last name, and full legal name.
• Date and place of birth.
• Gender.
• Current and previous nationality, where required.
• National ID or residency permit number, where applicable.
• Marital status, if required for the visa application.

Passport Information

This may include:

• Passport number.
• Passport issue and expiry dates.
• Place and authority of issue.
• A copy or image of the passport.
• Other passport information required to process the application.

Contact Information

This may include:

• Mobile or telephone number.
• Email address.
• Residential or postal address, where required.

Travel and Visa Information

This may include:

• Destination country.
• Visa type and purpose of travel.
• Intended travel dates.
• Flight and hotel reservations, where required.
• Previous visa information.
• Previous travel history where required by the relevant authority.

Supporting Documents

Depending on the visa requirements, we may request additional documents, including:

• Personal photographs.
• Employment or salary certificates.
• Bank statements.
• Flight and hotel reservations.
• Invitation letters.
• Travel insurance documents.
• Family, professional, educational, or employment-related documents.
• Any other documentation required by an embassy, consulate, visa application center, immigration authority, or other competent authority.

We seek to collect only the information and documentation necessary to provide the requested services or comply with applicable legal and regulatory requirements.

3. How We Collect Your Personal Data

We may collect personal data through:

• Information you provide directly through the Platform.
• Account creation and login processes.
• Visa application forms.
• Documents and files uploaded to the Platform.
• Communications with us by telephone, email, or customer service channels.
• Information generated through your use of the Platform.
• Third parties where obtaining such information is necessary and legally permitted for the provision of the requested service.

4. Why We Process Your Personal Data

We may process your personal data for purposes including:

• Creating and managing your user account.
• Receiving and processing visa applications.
• Reviewing submitted information and documents.
• Preparing and completing visa application forms.
• Submitting applications to embassies, consulates, visa application centers, immigration authorities, and other competent authorities.
• Scheduling visa appointments where required.
• Tracking application status and providing updates.
• Communicating with you regarding your application.
• Processing payments and issuing invoices.
• Providing customer service and support.
• Improving Platform performance and user experience.
• Protecting the Platform and preventing fraud, misuse, and unauthorized activities.
• Complying with applicable legal and regulatory requirements.
• Managing complaints, inquiries, claims, and disputes.

Personal data will be processed on the appropriate lawful basis depending on the nature of the data and the purpose for which it is processed.

5. Sharing Personal Data with Third Parties

We do not sell your personal data.

However, in order to provide the requested services, we may need to share certain personal data and documents, to the extent necessary, with parties including:

• Embassies and consulates.
• Ministries of foreign affairs and immigration authorities.
• Visa application centers.
• Relevant governmental and official authorities.
• Visa service providers.
• Insurance companies where insurance-related services are requested.
• Courier and delivery companies where passport or document delivery services are requested.
• Electronic payment service providers.
• Technology, hosting, and cloud service providers.
• Regulatory, judicial, or law enforcement authorities where disclosure is required by law.

Personal data is shared in accordance with applicable legal, regulatory, and contractual requirements.

6. Transfer of Personal Data Outside Saudi Arabia

Due to the international nature of visa services, providing the requested service may require certain personal data or documents to be transferred or made accessible to embassies, consulates, immigration authorities, visa application centers, or service providers located outside the Kingdom of Saudi Arabia.

Any cross-border transfer of personal data will be carried out in accordance with the applicable requirements and safeguards established under Saudi data protection laws and regulations.

7. Data Protection and Information Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, use, disclosure, alteration, loss, destruction, or other unlawful processing.

Depending on the nature of the systems and information involved, these measures may include:

• Secure and encrypted communications.
• Access controls and authorization procedures.
• Restricting access to authorized employees and service providers.
• Security measures designed to protect systems and databases.
• Regular security monitoring and updates.
• Procedures for responding to information security incidents and personal data breaches.

However, no electronic transmission or storage system can be guaranteed to be completely secure. We therefore continuously work to implement appropriate safeguards and reduce potential risks.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or for the period required by applicable legal, regulatory, contractual, or operational obligations.

Once there is no longer a lawful or legitimate need to retain personal data, it will be deleted, securely destroyed, or anonymized, as permitted or required by applicable laws and regulations.

9. Your Personal Data Rights

Subject to applicable laws and regulations, you may have certain rights regarding your personal data, including:

• Right to Be Informed: The right to know how your personal data is collected, used, and processed.
• Right of Access: The right to request access to your personal data in accordance with applicable legal requirements.
• Right to Obtain a Copy: The right to request a copy of your personal data where permitted by law.
• Right to Correction: The right to request the correction or updating of inaccurate, incorrect, or incomplete personal data.
• Right to Destruction: The right to request the destruction of personal data where the applicable legal conditions are met.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent in accordance with applicable laws without affecting the lawfulness of processing carried out before the withdrawal.

Certain rights may be subject to exceptions, restrictions, or conditions established under applicable laws and regulations.

10. Personal Data Relating to Other Individuals

If a User provides personal data relating to another person, such as a family member or accompanying traveler, the User is responsible for ensuring that they have an appropriate lawful basis to provide such information to the Platform and, where required, that the relevant individual has been informed about how their personal data will be processed.

11. Children's and Minors' Personal Data

Certain visa applications may require the processing of personal data relating to children or minors traveling with their families.

In such circumstances, personal data will be processed in accordance with applicable legal requirements, and we may request information, authorization, or consent from a parent or legal guardian where required.

12. Cookies

The Platform may use cookies and similar technologies to support essential functionality, improve the user experience, analyze Platform performance, and enhance security.

Cookies may include:

• Cookies strictly necessary for the operation of the Platform.
• Cookies used to remember user preferences.
• Analytics and performance cookies.
• Marketing cookies, where applicable and subject to any required consent.

Users may be able to manage certain types of cookies through their browser settings or through the consent management tools available on the Platform, where applicable.

13. Analytics and Technology Services

The Platform may use third-party technology services and tools for hosting, performance analysis, usage measurement, user experience improvement, and protection against fraudulent or unlawful activities.

Such services may collect certain technical information, including device type, browser type, operating system, Internet Protocol (IP) address, and information about interactions with the Platform, in accordance with applicable laws and policies.

14. Marketing Communications

We may send users offers, news, promotions, or other marketing communications by email, SMS, or other communication channels where permitted by applicable law and after obtaining any required consent.

Users may unsubscribe from marketing communications through the available opt-out methods.

Opting out of marketing communications will not affect essential service communications relating to visa applications, transactions, security notifications, or the provision of requested services.

15. External Websites and Links

The Platform may contain links to websites operated by embassies, consulates, visa application centers, government authorities, or third-party service providers.

Al Sarh's Privacy Policy does not apply to external websites or services that are not operated or controlled by us. Users are therefore encouraged to review the privacy policy of each external website before providing personal information through it.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, business practices, or applicable legal and regulatory requirements.

The updated version will be published on the Platform, together with the date of the most recent update.

17. Contact Us and Data Subject Requests

For questions regarding this Privacy Policy or to exercise your rights in relation to your personal data, please contact:

Al Sarh Travel & Tourism – Al Sarh Visa Platform

Email: Visa.idl@alsarh.com.sa

Telephone: +966114941111 - +966 504189032

Address: King Abdullah Road, Al Rahmaniyah District, Riyadh, Kingdom of Saudi Arabia

Requests will be handled in accordance with the procedures and timeframes prescribed by applicable laws and regulations.

18. Applicable Law

This Privacy Policy is governed by the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law, its Implementing Regulations, and other applicable decisions, rules, and regulatory requirements.

Our Commitment to Your Privacy

At the Al Sarh Visa Platform, we recognize that passport details, travel documents, and personal information require a high level of confidentiality and protection.

We are committed to processing your personal data only for legitimate and necessary purposes related to the provision of our services, implementing appropriate measures to protect your information, and never selling your personal data or using it in a manner inconsistent with applicable laws and regulations.