Privacy Policy
Privacy Policy – Thabat Aviation (Thavco)
Last Updated: August 2026
1. Introduction
At Thabat Aviation (Thavco), we value the privacy of our customers and users of our digital platforms. We are committed to handling personal data responsibly and transparently and to implementing appropriate measures to maintain its confidentiality and security.
This Privacy Policy explains how Thavco collects, processes, uses, and protects personal data when you use our website and digital platforms, access our travel, booking, and tourism services, or communicate with us through our customer service channels.
This Policy applies to website visitors, customers, users, and individuals whose personal information is provided to us for the purpose of making a booking or providing a service.
Thabat Aviation (Thavco) complies with the applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and its related regulations and decisions.
2. Personal Data We May Collect
We may collect and process personal data to the extent necessary to provide our services, manage bookings, improve the user experience, and fulfill our legal and regulatory obligations.
2.1 Identification and Contact Information
The information provided by the user may include:
Full name.
Mobile number.
Email address.
Country or city.
Other contact details provided when making a booking or contacting customer service.
Purpose of Use:
To communicate with customers, confirm bookings, follow up on requests, send service-related notifications, and respond to inquiries and requests.
2.2 Travel and Passenger Information
Depending on the nature of the service, we may require certain passenger information, including:
Name as stated in the travel document.
Nationality.
Date of birth.
Passport or identification details.
Visa information.
Travel and destination details.
Certain travel preferences or service-related requirements.
Purpose of Use:
To process bookings, issue tickets and required travel documents, coordinate with airlines, hotels, and tourism service providers, and comply with travel requirements and applicable authorities.
2.3 Payment and Billing Information
We may process information related to payments and billing, including:
Billing information.
Transaction amount.
Payment date.
Payment method.
Refund or settlement information, where applicable.
Payments are processed through authorized payment service providers. We do not retain complete bank card information except to the extent permitted by applicable law or required by the relevant payment service provider.
Purpose of Use:
To process payments, issue invoices, manage refunds and settlements, and administer financial transactions related to our services.
2.4 Booking and Transaction Information
We may retain records relating to services requested or purchased, including:
Bookings.
Amendments and cancellations.
Tickets and vouchers.
Refund requests.
Tourism services and packages.
Communications and requests related to bookings.
Purpose of Use:
To manage bookings, process requests, provide customer support, and address matters related to the requested service.
2.5 Technical Information
When you use our website or digital platforms, certain technical information may be collected automatically, including:
Device type.
Operating system.
Browser type and version.
IP address.
Performance information.
Error logs and technical issues.
Information regarding how the platform is used.
Purpose of Use:
To operate our platforms efficiently, enhance information security, identify technical issues, and improve performance and user experience.
2.6 Cookies and Similar Technologies
Our platforms may use cookies and similar technologies that help us understand how our website is used and improve its functionality.
These technologies may be used to:
Remember certain user preferences.
Improve website performance.
Analyze usage.
Develop content and services.
Identify technical issues.
Support marketing activities in accordance with applicable requirements.
2.7 Information Relating to Special Requirements
In certain circumstances, customers may provide additional information relating to their travel requirements, such as requests for assistance, dietary requirements, or other information necessary to provide the requested service.
Any information of a sensitive nature will be handled in accordance with applicable laws, regulations, and controls.
3. How We Use Personal Data
We use personal data collected only to the extent necessary for specific and legitimate purposes, including:
Travel Services and Bookings
To process flight, hotel, package, and other tourism bookings and to issue tickets, vouchers, and related documents.
Booking and Request Management
To manage bookings, amendments, cancellations, refunds, and other requests submitted by customers.
Communication and Customer Support
To communicate with customers regarding their bookings and requests, respond to inquiries, and handle complaints and feedback.
Service Improvement
To analyze the use of our platforms and services in order to improve our website, booking processes, and overall user experience.
Platform and System Security
To detect and prevent fraud, misuse, unauthorized access, and other security threats, and to protect our platforms and systems.
Legal and Regulatory Compliance
To process personal data where necessary to comply with applicable legal or regulatory obligations or respond to official requests from competent authorities.
Marketing Communications
We may use contact information to send offers, promotions, and information about our services in accordance with applicable requirements and necessary consents.
Customers may opt out of marketing communications through the available unsubscribe option or by contacting us.
4. Providing Information About Other Individuals
If a user makes a booking or requests a service on behalf of another individual, the user must ensure that they have the necessary authorization or consent to provide that individual's personal data.
Such information will be processed only to the extent necessary to complete the booking or provide the requested service.
5. Use of Data Through Digital Platforms and Applications
We may collect certain information when you use our website, applications, or digital platforms, either directly from you or automatically.
This may include account information, device information, IP address, booking details, and platform usage information.
Where a particular service requires access to certain device features, such as location services or notifications, such access will be subject to the permissions granted by the user and the settings of their device.
Disabling certain permissions may affect the availability of certain features or services that depend on them.
6. Sharing Personal Data
Personal data is not shared except to the extent necessary to provide a service, fulfill a request, comply with applicable requirements, or where otherwise permitted by law.
Data may be shared with:
Airlines and Travel Service Providers
Such as airlines, hotels, transportation companies, tourism package providers, activity providers, and other travel service providers.
Purpose: To process bookings and provide the requested services.
Technology and Service Providers
Such as payment service providers, hosting providers, technology systems, cybersecurity providers, and customer service providers.
Purpose: To operate our platforms and provide the technical and operational support required for our services.
Government Authorities and Competent Entities
Personal data may be disclosed where required by law or pursuant to an official request from a competent authority.
Purpose: To comply with legal requirements and protect legitimate rights and interests.
Other Parties with Customer Consent
Specific information may be shared with another party at the customer's request or with their consent where such sharing is related to a service or feature requested by the customer.
7. Data Protection and Information Security
We implement appropriate technical and organizational measures to help protect personal data against unauthorized access, loss, alteration, misuse, or unauthorized disclosure.
These measures may include:
Managing access permissions to personal data.
Applying appropriate security measures to systems and platforms.
Monitoring unusual activities.
Protecting data during transmission through appropriate measures.
Restricting access to authorized personnel.
Taking appropriate action in the event of security incidents in accordance with applicable requirements.
Users are also encouraged to maintain the confidentiality of their login credentials and not share them with others.
8. Data Retention and Disposal
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or for the period required by applicable laws, regulations, contractual obligations, or accounting requirements.
When the data is no longer required, it will be handled in accordance with applicable procedures, including deletion, destruction, or anonymization where required or appropriate under applicable laws.
9. Data Subject Rights
Data subjects are entitled to the rights provided under the Personal Data Protection Law (PDPL) and its related regulations, subject to applicable conditions and statutory exceptions.
Depending on the circumstances, these rights may include:
The right to know the purpose for which personal data is collected and processed.
The right to request access to personal data, subject to applicable requirements.
The right to request correction or completion of inaccurate or incomplete data.
The right to request destruction of personal data where permitted by law.
The right to withdraw consent where processing is based on consent.
Any other rights provided to data subjects under applicable laws and regulations.
Requests to exercise these rights may be submitted through our designated privacy contact channels.
We may request additional information to verify the identity of the requester before processing a request where necessary.
10. Transfer of Personal Data Outside the Kingdom
Certain services may require the use of service providers or systems located outside the Kingdom of Saudi Arabia, which may involve transferring personal data or providing access to such data from outside the Kingdom.
Where applicable, such transfers will be carried out in accordance with the requirements and controls set out under the Personal Data Protection Law (PDPL) and its related regulations, with appropriate measures taken to protect personal data and mitigate risks associated with such transfers.
11. Marketing Communications and Offers
We may contact customers through email, SMS, or other available communication channels to provide information about offers, discounts, new services, and travel-related information.
Marketing communications will be sent in accordance with applicable legal requirements and necessary consents.
Customers may opt out of marketing communications through the unsubscribe option provided in the communication or by contacting us.
Opting out of marketing communications will not affect essential service-related communications, such as booking confirmations, flight updates, or changes relating to the requested service.
12. User Responsibility for Account Information
If you create an account with Thavco, you are responsible for maintaining the confidentiality of your login credentials and password and for not sharing them with any other party.
If you suspect unauthorized use of your account or identify unusual activity, you should notify us as soon as possible.
13. Updates to This Privacy Policy
Thavco may update this Privacy Policy from time to time to reflect changes to our services, platforms, or applicable laws and regulations.
Any updated version will be published on our website. The “Last Updated” date displayed at the beginning of this Policy will indicate the current version.
We encourage users to review this page periodically for any updates.
14. Contact Us Regarding Privacy
For inquiries regarding this Privacy Policy or to submit a request relating to personal data, you may contact Thabat Aviation (Thavco) through our official contact channels:
Thabat Aviation (Thavco)
Website: www.thavco.com
Email: info@thavco.com
Kingdom of Saudi Arabia
We may request additional information to verify the identity of the requester before processing certain personal data requests.
General Provisions
This Privacy Policy has been prepared to explain how Thabat Aviation (Thavco) handles personal data in connection with its services and digital platforms.
In the event of any conflict between any provision of this Privacy Policy and any mandatory applicable legal requirement, the applicable laws and regulations of the Kingdom of Saudi Arabia shall prevail.