Privacy Policy

1. Introduction

RihlaGate ("we," "us," "our") is committed to protecting the privacy of everyone who registers for or enquires about our trips at rihlagate.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and your rights regarding that data.

By submitting a registration form or using our platform, you agree to the practices described in this policy.

2. Data We Collect

When you register for a trip through RihlaGate, we collect the following personal information:

Data Type	Purpose
Full name	Trip registration & identification
Email address	Booking confirmation & communication
Phone number	Trip coordination & emergency contact
Nationality	Trip eligibility & operator requirements
National ID or Passport number	Identity verification where required by trip operators
Student status (if applicable)	Eligibility for student discounts or specific trips

Payment information is not currently collected or stored by RihlaGate. Payment handling terms will be updated in this policy when a payment gateway is introduced.

We do not collect sensitive personal data such as religious beliefs, political opinions, biometric data, or health records unless explicitly required for a specific trip and disclosed to you at the time of registration.

3. How We Use Your Data

We use the personal data we collect solely for the following purposes:

• Trip registration — to confirm and manage your booking.
• Communication — to send you confirmation emails, trip details, updates, and support responses.
• Identity & eligibility verification — to confirm you meet the requirements of the trip you have registered for.
• Coordination with trip operators — to share the necessary details with the organizer(s) responsible for delivering your trip.
• Legal compliance — to meet any obligations required under Omani law.

We do not use your data for marketing, profiling, or automated decision-making without your explicit consent.

4. Data Sharing

4.1 Trip Operators & Partners

Your registration details (name, contact info, nationality, ID/passport, and student status where applicable) are shared with the trip operator — the individual, company, or partner who created and is responsible for delivering the trip. This is necessary for coordination, on-ground management, and safety purposes.

Trip operators are required to handle your data responsibly and only for the purpose of delivering your trip. RihlaGate is not responsible for the data practices of third-party operators once data is shared with them.

4.2 Legal Requirements

We may disclose your data to competent authorities if required by law or in response to a valid legal request from governmental bodies in the Sultanate of Oman.

4.3 No Sale of Data

We do not sell, rent, or trade your personal data to any third party for commercial purposes.

5. Data Storage & International Transfers

Your data is stored using Supabase, a cloud database platform. Supabase infrastructure is hosted on servers located in the European Union and/or the United States, which means your data may be transferred to and stored outside the Sultanate of Oman.

By using RihlaGate's platform, you consent to this international transfer of your data. We take reasonable steps to ensure that any data transferred is handled with an adequate level of protection consistent with this policy.

Additionally, our website is served via Cloudflare Pages, which may process limited technical data (such as IP addresses and page visit metadata) through its global network. Cloudflare Analytics is used for aggregate, privacy-preserving website usage insights — no individual-level tracking or cookies are used for analytics purposes.

6. Data Retention

We retain your personal data for one (1) year after the completion of your trip, after which it is deleted from our systems. If your trip is cancelled before it begins, we retain your data for up to one year from the original trip date.

You may request earlier deletion of your data at any time (see Section 8).

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure.

No method of transmission or storage over the internet is completely secure. While we take your data security seriously, we cannot guarantee absolute security.

8. Your Rights

As a participant, you have the following rights regarding your personal data:

• Access — You may request a copy of the personal data we hold about you.
• Correction — You may request that inaccurate or incomplete data be corrected.
• Deletion — You may request that your personal data be deleted, subject to any legal retention obligations.
• Objection — You may object to the processing of your data in certain circumstances.

To exercise any of these rights, please send a written request to: support@rihlagate.com

We will respond to your request within 14 business days. We may ask you to verify your identity before processing your request.

9. Cookies & Tracking

RihlaGate does not use cookies for tracking, advertising, or profiling. Cloudflare Analytics collects only aggregate, anonymized data about site traffic (e.g., page views, country of visitor) and does not track individual users or use cookies.

10. Children's Privacy

RihlaGate's platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If a minor is registering for a trip, their parent or legal guardian must complete the registration on their behalf and consents to this policy on their behalf.

If you believe we have inadvertently collected data from a minor without guardian consent, please contact us at support@rihlagate.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the updated version will be published at rihlagate.com with a revised effective date. Continued use of the platform after any update constitutes your acceptance of the revised policy.

12. Contact

Traveller & participant inquiries:
Email: support@rihlagate.com

Legal & business inquiries:
Email: info@rihlagate.com

Website: rihlagate.com