سياسة الخصوصيةPrivacy Policy

1. Who We Are & Introduction

SmartTrip is a tourism provider based in Hail, Kingdom of Saudi Arabia. We offer heritage trips and destinations through our website at https://safar.web-www.net and our Android app (package: me.shokry.smarttrip).

We are committed to protecting your privacy. This policy explains what personal data we collect from you, how we use, share, and protect it, and the rights you have over it. It applies to your use of our app, website, and the related booking services.

By using our services, you acknowledge that you have read this policy and understood the practices described in it. If you do not agree with any part of it, please do not use the app or the service.

2. Information We Collect

We collect only the data needed to operate our services and complete your bookings. It falls into the following categories:

Account data

When you create an account with us, we collect:

• Your full name.
• Your email address.
• Your phone number.
• Your password, which is stored in hashed form using the bcrypt algorithm. We cannot see your original password.

Login sessions are managed using authentication tokens via Laravel Sanctum to verify your identity while you use the app.

Booking data

When you make a booking, we collect the related details:

• The selected trip and the chosen schedule or date.
• The number of travellers (party size).
• Any optional notes you choose to add to the booking.
• The booking contact details: the name, phone number, and email address associated with the booking.

Technical & log data

We collect a minimal amount of technical data and request logs for security, reliability, and to operate the service. We confirm that we:

• Do not track your precise location.
• Do not use any third-party advertising SDKs or trackers.
• Do not sell your personal data to anyone.

3. How We Use Your Information

We use the data we collect for the following legitimate purposes:

• Fulfilling your bookings — arranging trips and passing the details needed to trip operators and guides so they can deliver the service.
• Managing your account — letting you sign in, view your bookings, and update your details.
• Contacting you about your bookings, your enquiries, or important updates to the service.
• Keeping the service secure — detecting and preventing misuse or fraudulent activity.
• Meeting our legal duties — complying with the applicable laws and regulations of the Kingdom of Saudi Arabia.

4. Legal Basis & Consent

Our processing of your personal data is governed by the Saudi Personal Data Protection Law (PDPL). We rely on the following bases to process your data:

• Your consent, given when you create an account, provide your data, and use the service.
• Performance of a contract with you — completing the booking you requested and providing the related tourism service.
• Legal obligations that may require us to process or disclose certain data.
• Legitimate interest in securing our services and maintaining their reliability.

You may withdraw your consent at any time, noting that doing so may affect our ability to provide some services or complete an existing booking.

5. Sharing & Disclosure

We share your personal data only as far as necessary for the purposes described in this policy, and only with the following parties:

• Trip operators and guides — we share the booking data needed (such as the contact name, phone number, number of travellers, and date) only to the extent required to deliver the trip you booked.
• Hosting and service providers — they process data on our behalf to run our technical infrastructure, under confidentiality obligations.
• Authorities and competent bodies — we disclose data where required to do so by applicable law or regulation.

6. Data Security

We take reasonable technical and organisational measures to protect your data, most notably:

• Encryption in transit — all data is transmitted over HTTPS/TLS.
• Password hashing — passwords are stored hashed with bcrypt and are never stored as plain text.
• Access control — access to data is limited to authorised people on a need-to-know basis.

Despite our care, no method of electronic transmission or storage can be guaranteed to be completely secure, and we continuously work to improve our security measures.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, including:

• The period your account is active with us and we are providing services to you.
• The period needed to meet our legal or accounting obligations, or to resolve any potential disputes.

When your data is no longer needed, we securely delete or anonymise it. You may request deletion of your account and data at any time, as explained in the "Your rights" section.

8. Your Rights

Under the Personal Data Protection Law, you have the following rights regarding your data:

• Right of access — to know what data we hold about you and obtain a copy of it.
• Right to correct — to correct any inaccurate or incomplete data; you can update your account details directly within the app.
• Right to delete — to request deletion of your account and personal data. To make a request, please visit the Delete account & data page.

To exercise any of these rights, you can also contact us at [email protected], and we will respond to your request within the applicable statutory period.

9. Children

Our services are intended for adults and are not directed at children. We do not knowingly collect any personal data from minors. If we discover that we have collected a child's data without a lawful basis, we will delete it. If you believe a child has provided us with their data, please contact us so we can take the necessary action.

10. Cookies & Local Storage

We use local storage on your device for one limited purpose only: to remember your language preference (Arabic or English) so we can give you a better experience when you return. We confirm that we do not use any advertising cookies or marketing trackers.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our services or legal requirements. When we make a material change, we will update the "Last updated" date at the top of this page, and we encourage you to review it periodically. Your continued use of the service after we publish changes constitutes acceptance of the updated version.

12. How to Contact Us

For any question or request about your privacy or this policy, you can contact SmartTrip through:

• Email: [email protected]
• Phone / WhatsApp: +966 55 285 8382 (local: 0552858382)
• Website: https://safar.web-www.net
• Location: Hail, Kingdom of Saudi Arabia.

This policy is governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia.