Privacy Policy

1. Introduction

This Privacy ("Policy") applies to the securing and processing of personal data by Riya Holidays Pvt. Ltd. (hereinafter "Riya Connect") in connection with personal data provided by any person ("User") who has purchased, intends to purchase, or enquires about any product or service made available by Riya Holidays through any of its interface channels including website, mobile site and mobile app (collectively referred to as "Sales Channels").

For the purpose of this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation or set of operations performed on personal data, whether or not by automatic means.
• References to "you" or "your" are references to the User; references to "we", "us" or "our" are references to Riya Holidays.

By accessing or using the website or any other Sales Channel, you agree to the terms of this Privacy Policy. If you disagree with it, please do not access or use our website or any other Sales Channel.

2. Information We Collect

We may collect and process the following types of personal data when you interact with our Sales Channels:

• Identity details (such as name, date of birth, gender, nationality)
• Contact details (such as email address, phone number, postal address)
• Travel-related information (such as passport details, travel preferences, booking history)
• Payment information (processed securely through authorised payment gateways)
• Technical and usage data (such as IP address, browser type, and how you use our website)
• Any other information you voluntarily provide to us

We do not collect special categories of personal data through our website — this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, genetic and biometric data. Nor do we collect information about criminal convictions and offences.

3. How We Use Your Information

We use your personal data for the following purposes:

• To process and manage your bookings, inquiries and requests
• To provide customer support and respond to your queries
• To communicate with you about your bookings, offers and relevant updates
• To improve our products, services and user experience
• To comply with applicable legal and regulatory obligations

We will only process your personal data when the law allows us to — that is, where it is necessary to perform a contract with you, to comply with a legal or regulatory obligation, for our legitimate interests provided your fundamental rights do not override them, or where you have given your consent.

4. Information Sharing

We do not sell, rent or trade your personal data. We may share your information with:

• Our group companies, business partners, service providers and suppliers involved in fulfilling your travel arrangements
• Government authorities or regulatory bodies, when required by law
• Third-party service providers who assist us in operating our Sales Channels (for example, payment gateways and IT service providers)

Your information will be shared with the end service providers — airlines, hotels, visa consulates, bus service providers, cab rental firms, railways and other suppliers — who are responsible for fulfilling your booking. All such third parties are obliged to protect your personal data and to use it only for the purposes for which it is shared.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These include pseudonymisation and encryption where appropriate, measures to ensure the ongoing confidentiality, integrity and availability of our processing systems, and a process for regularly testing and evaluating their effectiveness.

While we strive to protect your information, no method of transmission over the internet or method of electronic storage is 100% secure. We require any third parties processing your information to implement the same levels of protection.

6. Your Rights

Depending on applicable laws, you may have the right to access, correct, update or request deletion of your personal data. You may also withdraw your consent at any time, subject to legal and contractual obligations. Your rights may include:

• The right to be informed about how your personal data is used
• The right to access your personal data
• The right to have inaccurate or incomplete personal data rectified
• The right to have personal data erased in certain circumstances
• The right to restrict processing in certain circumstances
• The right to data portability
• The right to object to processing, including for direct marketing

You may exercise any of these rights by writing to support@riya.travel. We try to respond to all legitimate requests within one calendar month; if your request is particularly complex we will notify you and keep you updated. We may need to request specific information from you to confirm your identity before we act.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, regulatory, accounting or reporting requirements, and for the establishment or defence of legal claims. This period may extend beyond the end of your relationship with us, but only for as long as we need sufficient information to respond to issues that may arise later.

In some circumstances we may anonymise your personal data, so that it can no longer be associated with you, for research or statistical purposes. In that case we may use the information indefinitely without further notice to you.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date, and where the update is substantial we will tell you either by email or by a prominent notice on our website. We encourage you to review this Policy periodically. Your continued use of our website after we post any modification constitutes your acknowledgement of, and consent to, the modified Policy.

9. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: infosec@riya.travel
• Data protection requests: support@riya.travel
• Dubai: Office No 506, RHS Building, Al Raffa, Bur Dubai, United Arab Emirates, P.O. Box 186572
• Saudi Arabia: 512, 5th Floor, 7953 Khalid Bin Walid Street, Sharafiya, Jeddah 22234, Saudi Arabia

You can also reach our team through the contact form on our home page.