Privacy policy

Rent for Organizing Exhibitions and Conferences operates the Saudi Travel Market website and is responsible for the processing described here. For privacy requests and rights: info@stmksa.com.

When registering or submitting an application, we process the fields you provide, such as name, contact details, organisation, job title, participation category and any attachments required by the service. Forms identify required fields; consent, the reference and submission time are recorded.

Only after analytics consent, we record the page path without query parameters, referring domain without the full URL, language, screen-size category, visit time and browser/session identifiers. A trusted connection IP is encrypted and linked to the view when supplied by the server connection. We do not fingerprint devices or join analytics with your application data.

Form data is used to provide the requested service and manage registration and follow-up. Optional analytics helps understand page usage and referral sources and improve the website, based on your separate consent. Declining does not prevent use of forms or services.

Change your choice through Privacy preferences at the bottom of any page. Withdrawal stops analytics and removes visit details linked to this browser’s preference; it does not retrospectively affect prior lawful processing or applications you submitted.

Application data is accessible to authorised staff according to their duties. Analytics and IP access is administrator-only; IP disclosure is recorded in the activity log. Visitor and media registration data is sent to STM Meet when the integration is enabled to provide registration. Hosting or email providers may process data needed to deliver the service.

Local analytics does not send visit data to external advertising or analytics services. Opening an external link or embedded content may disclose your connection address to that provider under its policy. Any international data transfer is subject to applicable legal requirements and safeguards.

Full IP addresses are encrypted for 7 days after the view, then immediately made inaccessible and removed from analytics by a scheduled task. Visit details are kept for approximately 90 days; complete days are converted into daily counts without identifiers before detail deletion. Cookie preferences last 180 days; analytics sessions expire after 30 minutes of inactivity.

Registration, applications and attachments are retained as needed for service delivery, follow-up, legal obligations and disputes. You can request information about the retention applicable to your application or request deletion where applicable. Aggregate counts without identifiers remain for historical comparisons.

Under applicable law, you may request information about processing, access and a copy of your data, correction, completion or updating, deletion and withdrawal of consent. Email info@stmksa.com describing your request; we may request appropriate identity verification without collecting unnecessary information.

We handle rights requests within statutory periods and explain any permitted delay or limitation. You may complain to the competent Saudi data protection authority. This policy does not waive statutory rights or exclude obligations that cannot lawfully be excluded.

We apply access controls, input validation, session protection and encryption for specified sensitive data. No technical measure eliminates all risk; controls are reviewed and incidents handled under applicable requirements. Do not send passwords or authentication codes in privacy correspondence.

Material changes are communicated clearly, and a new choice is requested if analytics purposes change. Last updated: 7 November 2026.