1. Notice
   This privacy policy explains how Shamal Travels Ltd collects, uses, and protects the information you provide when using our website or related services. Your privacy is important to us, and we are committed to ensuring that your information is secure.
   
   

2. Personal Data We Collect and Why
   We collect and process personal data according to the following principles:

Lawful, Fair, and Transparent Processing: We ensure the lawful, fair, and transparent processing of personal data.

Purpose Limitation: Personal data is collected for explicit, specified, and legitimate purposes.

Data Minimization: We collect only data that is necessary for the intended purposes.

Accuracy and Updates: We maintain accurate data and update it as required.

Storage Limitation: Personal data is stored only for the necessary period.

Rights of Data Subjects: Data subjects are informed of relevant matters relating to the collection and storage of their data.

3. Policies and Measures
   We adopt policies and implement appropriate technical and organizational measures to ensure compliance with data protection legislation. This includes maintaining a record of all processing operations under our responsibility.
   
   

4. Data Subject Rights
   Data subjects have the right to access their data, rectify inaccuracies, and request the deletion of their data when no longer necessary.
   
   

5. Data Breach Notification
   We notify the Data Protection Commissioner and relevant data subjects of any personal data breaches promptly.
   
   

6. Impact Assessment
   We conduct assessments of the impact of envisaged processing operations on the protection of personal data, especially where high risks to data subjects’ rights and freedoms exist.
   
   

7. Data Collection and Processing Restrictions
   We undertake not to collect or process personal data unless it is lawful, necessary for the intended purpose, and aligned with the rights and freedoms of data subjects.
   
   

8. Restrictions on Disclosures and Transfers
   We do not disclose or transfer personal data without lawful excuse or unless necessary for specific purposes outlined in the law.