مركز المساعدة

We store only the information required to fulfill your bookings, deliver services, and comply with legal obligations.

This includes:

• Your contact details (email and/or phone number)

• Passenger details (name, nationality, birthdate, ID/passport number) — if required by the rail supplier

• Booking history, ticket status, and system logs

• Language preference and device type (for improving UX only)

We do not store or process full payment card data. All payments are handled securely via PCI DSS–compliant payment processors, and we never see or store your full card number or CVV.

Your personal data is used strictly for the following purposes:

1. Fulfilling your bookings — issuing train tickets, managing changes or cancellations, and delivering real-time trip info

2. Compliance — sharing required data with rail suppliers when legally or contractually required (e.g. passport data in Saudi Arabia, China, etc.)

3. Customer support — helping you access, change, or recover your bookings

4. Product improvement — using non-identifiable data to improve our service (e.g. faster forms, better route suggestions)

We do not sell, rent, or share your personal data with any third parties for advertising or commercial purposes.

Only when required — and only the data strictly necessary for your ticket to be issued.

Example:

• In Germany or Korea: Name and date of birth may be enough

• In Saudi Arabia or China: Passport number, nationality, or gender may be required

This data is transmitted securely to the supplier’s system as part of the booking flow. We do not share your email, phone number, or marketing preferences with any supplier unless required by local law.

Yes. In accordance with GDPR and other applicable privacy laws, you have the right to:

• Request a copy of all personal data stored about you

• Request correction of inaccurate data

• Request erasure of your account and associated data ("right to be forgotten")

To make a request, email [email protected] from the email address used for booking. We will verify your identity and respond within the legally required time period.

We take data protection extremely seriously. Your personal information is safeguarded through a combination of organizational, technical, and legal controls:

• All communication between your device and our servers is encrypted using TLS/SSL

• Data is stored in secure infrastructure with restricted access

• Our OTP-based login system eliminates password risk and reduces surface for credential theft

• Access to customer data is limited internally to authorized personnel only and logged for audit purposes

• We do not store card numbers or CVVs — payment is processed externally via PCI DSS–certified partners

Rail Monsters complies with the European General Data Protection Regulation (GDPR), and we regularly review our practices to ensure compliance with global privacy standards.