Saudi Tourism Authority , is a government entity in the Kingdom of Saudi Arabia (Riyadh), established to highlight the Kingdom as a global and local tourist destination, attract visitors, encourage tourism, and achieve integration and cooperation between the public and private sectors to ensure the improvement of the visitor experience, which benefits the national economy. STA is committed to respecting and protecting your personal data in accordance with the Saudi PDPL, issued pursuant to Royal Decree No. (M/19) dated 09/02/1443 AH corresponding to 16/09/2021 G, and other applicable data protection laws. You can contact us via various available channels, using the below contact details.
The Privacy Policy was last updated on [15-Sep-2024]. You can review the updated history at https://www.sta.gov.sa/en/privacy-policy-old.
Saudi Tourism Authority collects various categories of personal data directly from you and indirectly. We process sensitive data only with your explicit consent, as required by applicable laws.
The Saudi Tourism Authority collects the minimum amount of personal data that achieves the purposes for which it was collected. Personal data includes, but not limited to:
Information Provided by You: Required information when using the services, when interacting with STA in person, or information you knowingly choose to disclose that is collected on an individual basis when registering on STA's platforms and applications or creating your user profile. This includes personal data such as your name, ID number, address, contact numbers, email, personal records, bank account numbers, credit card numbers, static or moving images, voice data, and other personal data.
Communications Data: Information exchanged through communication with STA, such as customer support requests, inquiries, feedback, and complaints.
Cookie Data: such as information collected via web logs, technologies, cookies, or similar technologies.
Your IP Address data includes your IP address details and details of the web browser version used.
User login information: (example but not limited to authentication credentials).
We will only collect and use your personal data in accordance with applicable Data Protection Law. In most cases, our lawful reasons will include:
We will keep your personal data for as long as required by law, 120 months or for any period necessary to fulfill our operational responsibilities, including but not limited to:
The data will be disposed (post retention expiration) securely in accordance with the relevant laws and regulations.
Direct Methods:
Information and personal data that the user provides directly to STA through online forms, paper inquiry forms, email, or by telephone.
Indirect Methods:
Or collected in a way that Personal Data is not to be recorded or stored in a form that makes it possible to directly or indirectly identify the Data Subject.
Personal data is stored inside the Kingdom of Saudi Arabia in the servers of the Saudi Tourism Authority, and these servers are protected with the best technologies in accordance with the policies and controls of the National Cybersecurity Authority and relevant laws and regulations.
We do not sell, trade, or otherwise disclose your personally identifiable information. Data may be shared with trusted third-party processors who assist us in our operations, subject to contractual obligations ensuring they protect your data.
We adhere to data privacy regulations in the Kingdom of Saudi.
To ensure the security and confidentiality of your personal data, we put in place all necessary technical and organizational means in accordance with the requirements issued by the National Cybersecurity Authority.
You have several rights regarding your personal data, including but not limited to:
For more information, please contact us at This form or through the email address: DGO-DPO@STA.gov.sa.
All our websites and applications are intended for use only by individuals who are at least 18 years old.
When you use our website, cookies are utilized to recognize you and improve your experience. You have the option to manage your cookie preferences, allowing you to opt-in or opt-out of non-essential cookies.
This website and the services provided by the Saudi Tourism Authority are available for your personal use, and your access and use of these services are subject to this privacy notice and Saudi laws. Accessing and using the service constitutes unconditional agreement to this notice from the date of first use. Your access and entry to this website is an unconditional or unrestricted acceptance to this privacy notice whether you were a registered user or not. This acceptance is in force as of the first date of your usage for this portal.
For more information about the related policies and laws referred to in this policy, you may use any of the following links:
If you have any concerns, or if we do not comply with the Personal Data Protection Law, you can file a complaint to the Data Governance Office using one of the following channels: