Partner Privacy Policy

Last updated: 29 October 2026

This policy explains how Dar AlTamaiz Tours, as data controller, collects, uses and protects the data of Partners and their representatives under CITRA Data Privacy Protection Regulation No. 26 of 2024.

1. Data we collect. Company data (trade name, licence number, address, logo); representatives (name, title, email, phone); financial (bank name, IBAN, settlement and commission history); documents (trade licence, registration certificates, insurance); product content (trips, prices, photos, descriptions); usage (logins, IP address, device type, portal activity); correspondence with our team and with Customers about bookings.

2. Why we use it. To review applications and verify the company and licence; manage the account and publish, translate and display Products; process bookings, settlements and invoices; communicate about the account, updates and complaints; protect the Platform against fraud and misuse; and meet accounting and legal obligations in Kuwait. We rely on performance of the partnership agreement, legal obligation and our legitimate interest in a secure platform. Marketing beyond account matters requires consent, which can be withdrawn at any time.

3. Sharing. We never sell Partner data. We share only what is necessary with: Customers (company name, product details and what is needed for the booking); service providers (hosting and cloud, banks and payment gateways, email and translation services) under confidentiality agreements; authorities when legally required in Kuwait; and Max Travels & Tourism, the IATA-accredited agent, where a booking involves flights. Some data may be stored on servers outside Kuwait with safeguards equivalent to the Regulation. Representatives resident in the EU or UK also have their GDPR rights. We keep and protect electronic transaction records in line with Ministry of Commerce Decision No. 109 of 2026.

4. Security. IBAN and bank data are encrypted at rest and in transit. Passwords are one-way hashed and visible to no one. Uploaded documents are accessible only to authorised admin staff. Card payments are processed by PCI DSS-certified payment gateways; we never store card numbers. We notify the Partner and the competent authority of any breach affecting its data within the timeframes the Regulation sets.

5. Retention. Data is kept for the duration of the partnership. After account closure, financial records and contracts are kept for 5 years and other data for 12 months, then deleted or anonymised.

6. Your rights. Partners and their representatives may request access, correction, or deletion (unless the law requires retention), withdraw marketing consent, or object to specific processing. Email info@dt-tour.com; we respond within 30 days. You may also complain to CITRA.

7. Cookies. The portal uses essential cookies for sign-in and security only. Analytics and advertising cookies are optional and managed from the cookie settings in the footer.

8. Updates and contact. We notify Partners of material changes 30 days in advance. Questions: Dar AlTamaiz Tours, Al-Rehab Complex, 1st floor, Office 32, Hawalli, Kuwait · info@dt-tour.com · +965 22204125