NBK Travel & Tourism (“we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store and share personal information when you visit nbktravel.com (“Website”), contact us, make a booking or use our related digital platforms, products and services (collectively, “Services”). It also explains the choices available to you and how you can contact us about your personal information. This Policy applies to information handled by NBK Travel & Tourism in connection with our Services. It does not cover the independent practices of third-party websites, airlines, hotels or other providers, which may have their own privacy policies.

1. Information You Provide

You can browse many parts of our Website without creating an account or providing your name. However, certain information is required when you make an enquiry, request a quotation, register an account or book a travel service. Depending on your request, we may collect your name, email address, telephone number, residential or billing address, country of residence and account details. For travel arrangements, we may also need passenger names, dates of birth, nationality, passport details, identification documents, travel preferences and other information required by the relevant supplier or authority. You may choose to provide additional information through correspondence, feedback, reviews, surveys or other submissions.

Where necessary for your requested arrangements, you may provide information about accessibility needs, dietary requirements or other special assistance. We will handle such information subject to applicable requirements, including obtaining consent where required. If you provide information about another traveller, you must be authorised to do so and ensure that they are aware of this Policy. Information concerning children should be provided by a parent, legal guardian or an authorised adult. You may choose not to provide certain information. However, this may prevent us from completing your booking or providing the service you request.

2. Information Collected Automatically

When you access our Website or digital Services, certain technical and usage information may be recorded automatically. This may include your IP address, approximate location derived from your IP address, browser type, device information, operating system, language settings, referring pages, pages visited, access dates and times, and interactions with the Services. We use this information to operate and maintain the Services, identify technical problems, monitor performance, understand usage and detect potentially unauthorised or fraudulent activity. Where this information identifies you or can be linked to you, we treat it as personal information.

3. Information Received from Other Sources

We may receive information from travel suppliers, booking partners, payment providers or an authorised person making arrangements on your behalf. For example, a supplier may provide booking confirmations or service updates, while a payment provider may confirm whether a transaction was successful. Where we receive information from other sources, we use it for the relevant service or another lawful purpose consistent with this Policy.

4. How We Use Your Information

We use personal information as necessary to respond to enquiries, prepare quotations, process bookings and deliver the travel services you request. We may also use it to manage accounts, verify payment authorisation, arrange refunds, communicate booking changes, provide customer support and resolve complaints. Other purposes may include improving our Services, preventing fraud, maintaining security, meeting legal and recordkeeping obligations, and establishing or defending legal claims.

Where permitted and subject to any required consent, we may use your contact details to send travel offers, newsletters and promotional communications. If we publish a testimonial containing your name or other identifying information, we will obtain your permission beforehand. The basis for processing depends on the information involved, the purpose and the applicable law. This may include your consent, the need to fulfil a booking or take steps at your request, compliance with legal obligations, or another basis permitted by applicable law. Where consent is required, we will request it separately. Acknowledging this Policy does not replace consent required for a particular activity.

5. Sharing Information to Deliver Your Booking

To arrange your travel, we may need to share relevant information with airlines, hotels, tour operators, transfer companies, visa service providers, insurers and other suppliers involved in your booking. These providers receive the information needed to perform their services. Some act independently and process information under their own privacy policies and legal obligations. We may also use service providers for website hosting, booking technology, payment processing, customer support, communications and other operational functions. Where they process information on our behalf, we require appropriate confidentiality and data protection arrangements.

Information may be shared with affiliates where necessary for the purposes described in this Policy and subject to applicable requirements. We may disclose information to authorities, regulators, professional advisers or other parties where required or permitted by law, including to investigate fraud, protect rights and safety, or respond to a lawful request. If our business undergoes a merger, acquisition, restructuring or transfer of assets, relevant personal information may be transferred as part of that process, subject to appropriate safeguards and applicable notification requirements.

6. Payment Information

Payments may be handled through banks, payment gateways and other authorised payment service providers. Information required to complete a transaction is processed in accordance with the relevant provider’s procedures and privacy policy. We may receive payment confirmations, transaction references and limited payment details needed to reconcile payments, manage bookings, investigate disputed transactions and process refunds. Payment and booking records may be retained for accounting, legal, fraud prevention and dispute resolution purposes. Please do not send full card details, card security codes or account passwords through ordinary email or other unsecured communication channels.

7. Cookies and Similar Technologies

Our Website may use cookies and similar technologies to support essential functions, remember preferences, understand visitor activity and improve the browsing experience. Cookies are small files stored on your device. Some are necessary for features such as account access or booking sessions. Others may support analytics or advertising where these features are used. Where required, non-essential cookies will be subject to your consent. You can manage cookies through your browser settings and, where available, the Website’s cookie controls. Disabling certain cookies may affect the operation of some features. Browser privacy signals may operate differently from website cookie controls. Please use the available privacy settings to communicate your preferences.

8. Marketing and Advertising

Where permitted by applicable law and with consent where required, we may send information about travel offers, holiday packages and related services. You can unsubscribe from promotional emails using the instructions included in the message or by contacting escalations@nbks.com. Opting out of marketing does not stop essential communications relating to your enquiries, bookings, payments, refunds or account security. Where analytics or advertising partners are used, they may process device identifiers and browsing activity through cookies or similar technologies, subject to the applicable consent requirements and privacy controls. We may also use aggregated information to understand audiences and assess promotional performance. Information described as anonymous will not be used to identify you personally.

9. International Transfers

Travel services often involve organisations in different countries. Your information may therefore need to be transferred to suppliers or processed on systems outside Qatar or your country of residence. For example, booking an overseas hotel or international flight may require us to send passenger information to providers in the relevant destination or other countries in which they operate. Where required by applicable law, we will apply appropriate safeguards to these transfers. You may contact us for further information about transfers connected with your booking or use of the Services. 

10. Keeping Your Information Secure

We use reasonable organisational, technical and physical measures designed to protect personal information against unauthorised access, misuse, alteration, loss or disclosure. Access to personal information is limited according to operational requirements and the purposes described in this Policy. However, no method of internet transmission or electronic storage is completely secure. You should protect your account credentials and notify us promptly if you suspect unauthorised access or misuse.

11. Retention of Personal Information

We retain personal information for as long as reasonably necessary to provide our Services and fulfil the purposes for which it was collected. Retention periods depend on the type of information, the booking or relationship involved, and applicable accounting, legal, regulatory and dispute resolution requirements. Deleting an account or requesting removal of information does not necessarily require immediate deletion of all booking and transaction records. Certain records may need to be retained for lawful purposes. When information is no longer required, we will delete it securely or anonymise it, subject to applicable requirements.

12. Your Privacy Rights and Choices

Depending on the law that applies to your information, you may have rights to request access to your personal information, correct inaccurate or incomplete details, or request deletion. You may also have rights to restrict or object to certain processing, receive a portable copy of information, or withdraw consent where processing relies on it. These rights are subject to applicable conditions and exceptions. For example, we may need to retain information required for legal obligations or an unresolved dispute. Withdrawing consent does not affect processing lawfully carried out before withdrawal. It may affect our ability to provide a service if the information is necessary for that service. Where the General Data Protection Regulation or other relevant data protection legislation applies, we will handle requests in accordance with those requirements. You may also have the right to raise a complaint with the relevant data protection authority.

13. How to Make a Privacy Request

To ask about your information or exercise an applicable privacy right, please email escalations@nbks.com. Please describe your request clearly and provide enough information for us to locate the relevant records. Do not include unnecessary sensitive information. We may need to verify your identity before disclosing or changing personal information. If you act on someone else’s behalf, we may also request evidence of your authority. We will respond within the period required by applicable law and explain any limitations that affect our response.

14. Children’s Information

Our Website and account registration facilities are intended for adults aged 18 and above. However, arranging family travel may require us to process information about children, including their names, dates of birth and travel documents. This information should be provided by a parent, legal guardian or an authorised adult and will be used for the relevant travel arrangements and associated obligations. If you believe a child has submitted personal information independently or without appropriate authorisation, please contact us so that we can review the matter and take appropriate action.

15. Third-Party Websites and Platforms

Our Services may contain links to websites, applications or platforms operated by other organisations. Their privacy practices are governed by their own policies. We encourage you to review those policies before submitting personal information. This Policy does not govern information you provide directly to independent third parties, even where you reach their platforms through a link on our Website.

16. Security Incidents

If we become aware of a security incident affecting personal information, we will investigate and take appropriate steps to contain the incident and reduce potential harm. We will notify affected individuals and relevant authorities where required by applicable law. Notifications may be provided by email or another appropriate method, depending on the circumstances.

17. Updates to This Policy

We may update this Privacy Policy to reflect changes in our Services, information handling practices or applicable requirements. The latest version will be published on the Website with a revised “Last updated” date. Where required, we will provide additional notice of significant changes and obtain consent before introducing processing that requires it. We encourage you to review this Policy periodically.

18. Contact Us

For questions about this Privacy Policy, concerns about your personal information or requests relating to your privacy rights, please contact: NBK Travel & Tourism, Al Waab 55, Salwa Road, P.O. Box: 6002, Doha, Qatar. Email: escalations@nbks.com, Website: https://nbktravel.com/

Last updated: 27 September 2026