Privacy Policy

House of Travel LLC (“we,” “us,” or “our”) is committed to safeguarding user privacy and ensuring the confidentiality of the information collected while using our services and website in accordance with the Oman Personal Data Protection Law (PDPL) - Royal Decree No. 6/2022 and its Executive Regulations (MD 34/2024). This privacy policy outlines how we collect use, share and protect your personal data, your rights under PDPL and how to exercise those rights.

Data controller information

House of Travel LLC
PO Box 3295, 112, Muscat, Sultanate of Oman
Email: khot@kr.om
Phone No.: +968 24760500

Contact Information of Data Protection Officer

Name: Mr. Ali Said Ali Al Kalbani
Email: privacy@kr.om

The DPO is responsible for ensuring Khimji House of Travel’s compliance with the PDPL and for addressing all inquiries related to the processing of personal data.

Our Role

Under the Oman PDPL (Royal Decree No. 6/2022), House of Travel LLC operate in two capacities:

• Data Controller: We act as the Controller when we determine the purpose and means of processing your data to provide our direct travel services to you.
• Data Processor: We act as a Processor when we handle personal data solely on behalf of, and according to the documented instructions of, a Data Controller (such as a corporate employer or partner). When we play a role of a processor we request you to check your controller’s Privacy practices before sharing with us.

Personal Data we collect

House of Travel LLC collects only the minimum necessary data required to provide our services and comply with Omani law. The data collected includes:

1. Travel & Identity Information
To facilitate travel bookings and comply with Omani aviation and immigration regulations, we collect:

• Identity Details: Full Name (as per passport), Date of Birth, Gender, and Nationality.
• Official Documentation: Passport Number, Country of Issuance, Expiry Date, and Resident Card (Oman ID) details, photograph.
• Financial Information: Bank details and transaction history required for secure booking fulfilment.
• Contact Information: Email & Phone number

2. Website & Digital Interaction
When you use our online platforms, we collect:

• Account Information: Name, email address, date of birth, and encrypted login credentials.
• Cookies & Analytics: Technical data to enhance your browsing experience. For detailed information, please refer to our [Cookie Policy].

3. Communication & Support
When you contact us via our website, mobile numbers, or social media channels, we collect:

• Contact Details: Your name and mobile number.
• Service Preferences: Details of your travel inquiries, special requests, and preferences to provide personalized assistance.

Sensitive Personal Data
In limited circumstances and only where permitted by Oman PDPL, we may collect sensitive data (such as medical records or health reports).

• Purpose: This is collected solely to comply with legal requirements, facilitate emergency assistance, or meet specific airline/destination health regulations.
• Protection: We apply enhanced security measures and strict confidentiality protocols to preserve identity and safeguard sensitive data.

Minor Data

We only collect personal data of minors (under 18 years of age) from a parent or legal guardian for the purpose of travel bookings and related processing. This information is used strictly for its intended purpose and is never used for marketing.

Our website is not intended for use by minors. If you believe your child’s data has been shared with us without your consent, or if you wish to manage their information, you may exercise any of your rights under the Oman PDPL by contacting us.

Legal Basis & Purpose of Processing

We process your personal data only when a valid legal basis exists under the Oman PDPL:

• Explicit Consent: Your clear, written, or electronic approval.
• Contractual Necessity: To fulfil the travel services you have requested.
• Legal Obligations: To comply with Omani laws, court judgments, or regulatory requirements.
• Security of the Organization: To protect our systems, prevent fraud, and ensure the safety of our operations.

Our Purpose of processing,

• As a Data Controller: We process your personal data strictly for the purposes for which you engage us. Your data is treated as highly confidential and managed in full accordance with the Oman PDPL.
• As a Data Processor: When we act on behalf of another Controller (such as your employer), we process personal data strictly according to their documented written instructions and the safety standards mandated by the Law.

Our Commitment on Data Protection to Global Clients:

We treat all personal data with the highest level of care and security. House of Travel LLC operates in full alignment with applicable privacy regulations, including the Oman Personal Data Protection Law (Royal Decree 6/2022). We ensure that our processing activities respect the privacy standards of our global clients and the rights of their data subjects.

Data Subject Rights Under PDPL

As a data subject, you have the following rights:

• Access: Request a copy of your personal data held by House of Travel LLC
• Correction: Request correction of inaccurate or outdated data
• Erasure: Request deletion of your data under specific circumstances
• Deletion: Request erasure of your personal data, for example if consent is withdrawn or the data is no longer necessary.
• Withdrawal of Consent: Revoke previously given consent at any time.
• Restriction: Request temporary halt of processing under specific conditions
• Data Portability: Request transfer of your data in a machine-readable format
• Objection: Object to processing for direct marketing or other reasons.
• Complaint: If you have any questions or concerns regarding our privacy practices, we encourage you to contact our Data Protection Officer (DPO) directly. If our DPO is unable to resolve your concern to your satisfaction, you maintain the right to escalate your complaint to the Ministry of Transport, Communications and Information Technology (MTCIT).
• To exercise any of these rights, please contact: (DPO mail ID)

Marketing & Promotional Activities

We only use your personal information for direct marketing if you provide explicit consent. All our marketing communications include clear instructions on how to opt out at any time. You can withdraw your consent or change your preferences by replying directly to our emails, messaging us on social media, or contacting us through this website.

To deliver targeted travel updates, we use third party service providers. We have established formal Data Protection Agreements with third party service providers to ensure your personal data is handled with a level of protection that meets the standards of the Oman PDPL.

Limitation of Liability for Publicly Shared Data

While House of Travel LLC handles all private correspondence (Direct Messages) in accordance with the Oman PDPL (Royal Decree No. 6/2022), we do not encourage the disclosure of non-public personal information in public forums or comment sections. Users are advised that information shared publicly is outside of our exclusive control. Consequently, House of Travel LLC shall not be held liable for any damages, losses, or privacy breaches arising from the misuse of such information by other users or third parties.

Retention of Personal Data

We retain your personal data only as long as necessary to fulfil the purpose for which it was collected or as required by law. For regulatory, auditing, we store data for 10 years following the end of our relationship. Within this period, you may exercise any of your rights as per Oman PDPL. For more information, please refer to the "Rights of the Data Subject" section.

Data Security

We implement appropriate technical and organizational measures to protect the personal information we collect from or about you (including personal identifiable information) against unauthorized access, use, alteration, or disclosure. These measures include, among others:

• Encryption of personal data at rest and in transit, where applicable
• Role-based access controls and audit logging
• Staff training and internal privacy and information security governance measures

Cross-Border Data Transfers

We store personal data outside Oman using 3rd party Cloud Service Providers hosted outside Sultanate of Oman. We also transfer data to government authorities, hotels, and international partners (such as for visa processing and bookings) in third countries to deliver your requested services.

To ensure the safety of your information, we conduct Transfer Impact Assessments and maintain Data Protection Agreements with our partners to guarantee a level of protection equivalent to the Oman PDPL.

Link to other Sites

Our Services may contain links to other websites and services. Any information that you provide on or to a third-party website or service is provided directly to the owner of the website or service and is subject to that party’s privacy policy. Our Privacy Policy does not apply to such websites or services and we’re not responsible for the content, privacy, or security practices and policies of those websites or services. To protect your information, we recommend that you carefully review the privacy policies of other websites and services that you access.

Breach Notification

In case of a personal data breach:

• House of Travel LLC will notify the Ministry of Transport, Communications and Information Technology (MTCIT) within 72 hours.
• Affected data subjects will also be informed without undue delay if there is a risk to their rights or freedoms.

Changes to Privacy Policy

Any information that we collect is subject to the privacy policy in effect at the time that the Information is collected. We may, however, modify and revise this Privacy Policy from time to time. If we make any material changes to this Privacy Policy, we’ll notify you of those changes by posting them on the Services or by sending you an email or other notification at our sole discretion, and we’ll indicate when those changes will become effective.

Complaints and Contact Information

IF you believe your personal data has been mishandled or your privacy rights are violated,
Please contact

Data Protection Officer
Email: privacy@kr.om

Or write to:

House of Travel LLC
PO Box 3295, 112, Muscat, Sultanate of Oman
Email: khot@kr.om
Phone No.: +968 24760500