Privacy Policy & Data Usage
Arab Tourists in Vietnam Platform – Dragon Travel Agency
1. Introduction
Welcome to our online store! By using any service or product on this platform, you agree to all terms and conditions outlined in this policy. This agreement becomes effective upon registration, in accordance with Article 10 of the Saudi Electronic Transactions Law.
2. Definitions
- Store: “Arab Tourists in Vietnam” in all its forms (website, app, commercial platform).
- Consumer: Any natural person using the store’s electronic services.
- Personal Data: Information that identifies the consumer, such as name, email, phone number, passport number, etc.
⚖️ 3. Legal Basis for Processing
- Explicit consent from the consumer.
- Execution of the contract between both parties.
- Compliance with Saudi regulations (Ministry of Commerce, Tourism, and the Personal Data Protection Law – PDPL).
4. Data We Collect
- Registration data (name, email, phone number, password).
- Booking data (flights, visas, travel programs).
- Payment data (cards, bank accounts).
- Usage data (preferences, browsing history, cookies).
5. Purpose of Data Usage
- Booking and payment execution.
- Communication via email or WhatsApp.
- Enhancing user experience.
- Fulfilling legal and regulatory requirements.
️ 6. Consumer Rights (PDPL)
- Access and correction of personal data.
- Request deletion, restriction, or transfer.
- Object to processing for marketing purposes.
- Withdraw consent at any time.
7. Data Sharing
- With licensed payment providers.
- With service partners (airlines, hotels).
- With government authorities upon legal request.
8. Data Security
- Encrypted storage (HTTPS) per Saudi cybersecurity standards.
- Regular audits and strict access policies.
⏳ 9. Data Retention
- Retained for the duration of the relationship and two years thereafter.
- Expired data is deleted or anonymized.
10. Cookies
- Used to improve performance.
- Can be disabled via browser settings.
11. Data Breach Notification
- The authority will be notified within 72 hours.
- Affected users will be informed promptly.
12. International Data Transfer
- Data may be transferred to Vietnam for booking execution.
- Partners are required to comply with protection standards.
13. Child Data Protection
- We do not collect data from individuals under 18 without parental consent.
14. Direct Marketing
- Only with your permission.
- You may unsubscribe at any time.
15. Analytics Tools
- Such as Google Analytics.
- Data is collected anonymously and in aggregate.
16. External Links
- We are not responsible for the privacy policies of external websites.
17. Data Protection Officer
[email protected]
️ 18. Policy Updates
Continued use of the platform constitutes acceptance of updates.
19. Change Log
- Original version: January 2024
- First update: September 2024
- Second update: January 2025
- Third update: October 2025
20. Contact
[email protected]
WhatsApp Support: Number registered in your account
⚖️ 21. Jurisdiction
Subject to Saudi laws.
Disputes are referred to the competent judicial authorities.
22. Data Minimization Principle
We collect only what is necessary.
Data is not used for undisclosed purposes.
23. Data Protection Impact Assessment (DPIA)
Periodic assessments before launching new services.
Risk mitigation procedures are applied.
24. Subcontractors
Pre-screening and compliance with protection standards.
Annual audits of processing contracts.
25. Complaints to SDAIA
Consumers may file formal complaints with the Saudi Data & AI Authority.
We fully cooperate with investigations.
26. Training & Awareness
Annual staff training.
Regular workshops on legal and technical updates.
27. Policy Review
Every 6 months or upon new legislation.
Detailed change log maintained.
28. Physical Security & Encryption
Servers are secured and encrypted.
Penetration tests conducted regularly.
29. Processing Records
Detailed logs of all data processing activities.
Available to regulatory authorities upon request.
