ПОЛИТИКА КОНФИДЕНЦИАЛЬНОСТИ

What does this policy cover?

This Privacy Policy explains how the Ministry of Tourism (referred to as the “Ministry”, “we”, “us”, or similar expressions) uses your personal data when you interact with us. It also outlines your rights in relation to the protection of your personal data.
By using the Ministry websites or services, whether directly or indirectly, or through an authorized representative or on behalf of another party, you acknowledge and agree to this Policy. This Policy applies to adults, minors, and individuals with limited or no legal capacity. In such cases, consent for the collection, processing, and sharing of personal data of minors and individuals with limited or no legal capacity must be provided by their legal guardian or authorized representative.

What information do we collect?

The Ministry collects and processes personal data when you interact with our platforms or engage with us directly or indirectly. This may include, without limitation: profile information, full name, national identification number, personal photograph, demographic data (such as gender, age, date of birth, and similar information), contact details, email address, addresses, passport information and details, travel plan details, ethnicity, religion, genetic data, family records, criminal records, IP addresses, location data, credit and financial data, and any additional information required to verify identity or eligibility, where necessary.
If we are unable to collect the required personal data, we may not be able to provide our services, as it may not be possible to verify your identity, background, or preferences.

How do we collect your personal data?

Most of the personal data collected and processed by the Ministry is provided directly by you, or by an authorized representative, or on your behalf, including when you register a profile, submit forms or requests through the Ministry’s website or affiliated platforms, or when you interact with us directly, such as through interviews, phone calls, or other communications.
The Ministry may also obtain personal data indirectly from various sources, including data provided on behalf of another individual, partners of the Ministry of Tourism, government and semi-government entities, private sector entities, and third-party service providers.

Why do we collect your personal data?

The Ministry collects personal data for the following purposes:

  • Verifying identity and eligibility.
  • Creating and managing user profiles.
  • Providing a personalized digital experience, enhancing user profiles, and monitoring usage patterns.
  • Identifying users and obtaining their feedback.
  • Complying with security, legal, regulatory, and supervisory requirements.
  • Planning, organizing, and inviting individuals to market research activities and tourism-related events.
  • Delivering tourism services, monitoring tourism movement, and enhancing visitor experiences.
  • Evaluating users and visitors of the Ministry’s platforms and services, whether through the Ministry’s website or in coordination with relevant government entities.
  • Data analysis, quality assurance, and verification of submitted information.
  • Communication purposes, including awareness messages, promotional materials, circulars, service improvement initiatives, surveys, questionnaires, research, studies, analytics, and report generation.
  • Handling complaints and inquiries and providing customer care services, including calls and virtual visits.
  • Data request purposes.
  • Media coverage, including photography, audio, and video recordings.
  • Routing and submitting requests to relevant competent authorities.

The Ministry may share personal data with external entities, including partners of the Ministry of Tourism, government authorities and entities, semi-government entities, private sector entities, and third-party service providers, and may publish such data on social media platforms or other channels for media, promotional, organizational, or similar purposes.
In some cases, the entities with whom personal data is shared may act as independent data controllers that determine the purposes and means of processing independently. In such cases, the processing of personal data and the exercise of data subjects’ rights shall be subject to the applicable legal and regulatory jurisdiction of those entities, in accordance with the relevant laws and regulations.

How do we process your personal data?

The Ministry processes personal data collected and stored about you and others, manually and electronically, using its systems to provide services efficiently. The Ministry may also use data processing tools, decision-making tools, and analytics to develop insights and outcomes related to personal data.

On which legal basis do we process your personal data?

The Ministry processes personal data in accordance with the laws and policies applicable within the Ministry, including, without limitation, the Ministry of Tourism Personal Data Protection Policy, the Saudi Personal Data Protection Law (PDPL), the Ministry of Tourism Law, and other relevant national laws, regulations, policies, and procedures applicable within the Kingdom of Saudi Arabia.

How do we store your personal data?

The Ministry securely processes and stores personal data in databases located inside and outside the Kingdom of Saudi Arabia. Personal data is retained for the applicable retention period, and once such period expires, the Ministry will delete or destroy personal data falling within its jurisdiction, except where retention is legally required or where deletion may conflict or potentially conflict with applicable laws, regulations, procedures, requirements, or obligations related to other government entities.
The Ministry reserves the right to retain personal data for periods it deems appropriate, based on the nature of the data collected and the specific purpose for which it is processed.

What are your personal data protection rights?

The Ministry is committed to protecting personal data in accordance with the PDPL and ensuring that users are aware of their rights. Subject to applicable laws, regulations, and procedures, users have the right to:

  • Right to Be Informed: Request information regarding the legal basis and purpose for collecting their personal data.
  • Right of Access: Request access to their personal data held by the Ministry.
  • Right to Obtain: Request a copy of their personal data in a readable format.
  • Right to Rectification: Request correction or updating of inaccurate or incomplete personal data, provided this does not affect the Ministry’s operations or the purpose of collection.
  • Right to Destruction: To request the destruction of personal data held by the Ministry and falling within its jurisdiction once it is no longer required, provided this does not affect the Ministry’s operations or the purpose of collection, in accordance with applicable rules and procedures, and without prejudice to any legal obligation. This right shall not apply where the data falls under the jurisdiction of other government entities acting as the data owner. The Ministry reserves the right to refuse a request to exercise the right to destruction in cases where the personal data falls under the jurisdiction of other entities, where the Ministry does not have the final legal authority to dispose of or destroy such data, or where the nature of the data or applicable legal and regulatory requirements necessitate its retention.

What are cookies?

Our website uses cookies to identify you from other users so that we can provide you with an exceptional experience when visiting our website, as well as enhance the portal’s features.
Cookies are text files placed on your computer to collect standard internet log information and visitor behavior to remember information about your visit, hence facilitating your next visit and making it more user-friendly. By continuing to browse you agree to the storing of cookies on your device to enhance your site experience that could be utilized for analytical purposes.

How do we use cookies?

The Ministry of Tourism uses cookies in a range of ways to improve your experience on our website, including keeping you signed in and understanding how you use our website by collecting data and information when you interact with our website. Cookies collect information that has been provided when you log into our website, register as a new user, submit a form through, or interact and use our website. Data and information that are collected through cookies mostly include your personal information (e.g., as your name, address, email, phone number, etc.), website visit details including your URL, website clicks details, page response time, visit duration per web page, IP address, preferences, browser type and add-ons, time zone or any other information you provide us with when visiting the website.
The Ministry of Tourism works closely with other partners and external entities. Therefore, the Ministry of Tourism may receive your information when you visit other websites or use other services provided by the Ministry.

What types of cookies do we use?

There are several different types of cookies, however, this website may use the following:

  • Performance & Analytics Cookies — The Ministry uses these cookies to enable us to know visitors’ identities, number, and behaviour on the website. They also help us improve the way the website works, as MT is keen on ensuring that users can easily find what they are looking for.
  • Functionality Cookies — The Ministry uses these cookies to identify you on our website and remember your previously selected preferences (e.g., preferred language, region, etc.), customize the right web content for you and send you special greetings.
  • Advertising/Tracking Cookies — The Ministry uses these cookies to collect information about your visit to our website, the content you viewed, the links you followed and information about your browser, device, your IP address, etc.
  • The Ministry may share some of this data with third parties for several purposes and we may also share online data collected through cookies with our partners. This means that when you visit another website, you may be shown advertisements based on your browsing patterns on our website.

General Provisions

  • The response period applicable to the Ministry of Tourism for requests to exercise data subject rights shall not apply to requests that fall under the jurisdiction of other legally competent authorities.
  • Any request related to modification of an electronic visa must be submitted directly to the Ministry of Foreign Affairs, as the competent authority.
  • The Ministry retains the permanent and absolute right to reject any requests related to the exercise of data subject rights based on the nature of the data collected and processed, without the need to provide justification.
  • In the event of any discrepancy in terminology, the Arabic language shall prevail in this document, and interpretation of its provisions shall be carried out by the competent department within the Ministry of Tourism.

Changes to our privacy policy

The Ministry of Tourism regularly updates this Privacy Policy by publishing revised versions on the website without prior notice. Updated and non-updated provisions shall remain valid under the initial consent granted to this Policy.
The latest update to this Policy was on 08/02/2026.

Our contact details

If you wish to update your personal data in accordance with the Ministry’s policies and procedures, please contact us through the website or via email at: [email protected]
If you wish to contact the Personal Data Protection Officer, withdraw consent, or opt out of direct marketing communications, please contact us at 0118808448 or via email at: [email protected]
The Ministry reserves the right to refuse any request related to withdrawal of consent where the nature of the data collected and processed, or the purpose for which it was collected, necessitates the continuation of processing.
If you wish to exercise any of the rights outlined above, please use the designated link.
The Ministry has 60 business days to respond to any request submitted in relation to the above rights.