Security

1. Our Approach

We treat information security as part of our responsibility to shareholders, guests, and partners, and we implement reasonable organizational and technical measures to protect our systems and the data we process.

2. Site Security

• The site is offered over an encrypted connection (HTTPS).
• The site is static meta and does not store user data in a public database.
• Hosting components and associated services are updated periodically.
• Administrative access is limited to authorized persons with the least necessary authority.

3. Report a vulnerability

If you discover a vulnerability or unexpected behavior at the site, please let us know at info@shamstourism.com.sa with a clear description of how to reproduce the problem.

In return, we ask that you do not exploit the vulnerability, do not access data that does not belong to you, and do not publish details before processing it. We are committed to responding to serious reports in a reasonable time.

4. Fraud and Plagiarism

Shams never asks for bank card details or passwords via email or text. Any message requesting this in the name of the company should be treated as a fraudulent attempt.

The only official channels of communication are mail info@shamstourism.com.sa And the phone. +966 13 836 6669 and the scope of the official website.

5. Tips for visitors

• Always check the domain address before entering any information.
• Do not send sensitive data (ID numbers or bank statements) via the contact form.
• Keep your browser and operating system up to date.