Effective from the platform launch. This text describes current practice.
Qassim Destinations is operated by the Qassim Destination Management Office. This policy explains what data the platform collects, why, and the choices you have.
Browsing the public pages needs no account. If you register as a tourist, we store your name, email, phone number and a hashed password. If you register as a tour guide, we also store licence details, a short bio and a photo you provide. Reports you submit about a destination, support tickets and booking requests are stored with the details you enter.
To run your account, handle booking and support requests, verify and correct destination information, and improve the platform. We do not sell personal data.
We use a session cookie to keep you signed in and Google Analytics (GA4) to understand aggregate usage such as pages viewed and search terms. Your accessibility, language and visit-program choices are kept in your own browser storage and are not sent to us.
Booking details are shared with the tour guide you chose. Data may be shared with authorised government bodies where the law requires it, and with service providers who host or secure the platform under confidentiality obligations.
We keep account data while the account is active and for as long as needed to meet legal and audit obligations. Passwords are stored hashed, and access to administration is limited by role.
You may ask to access, correct or delete your personal data, or withdraw from analytics where available, by contacting us through the report form on any destination page or the support channel.
We may update this policy; the latest version is always published on this page.