Privacy Statement
Your privacy and your rights are important to us. This Privacy Statement has been updated in line with Royal Decree 6/2022 Promulgating the Personal Data Protection Law and explains what information we collect about you and how we use it. By ‘we’ or ‘us’ or ‘our’ we mean Travelex & Co LLC and its subsidiaries, address: Office No.504, CBD, Ruwi, Muscat, Oman.
Our stores, this website: www.travelex.com.om (the "Website") and our customer services telephone line are operated by Travelex & Co LLC (“Travelex” or "us" or "our") on behalf of itself and its holding companies and subsidiaries (together, the "Travelex group"), recognizes the importance of safeguarding the personal information of its customers.
Travelex collects, stores, processes and discloses (collectively "uses") your personal information in a manner consistent with the Royal Decree 6/2022 Personal Data Protection Law (“PDPL”). The following Privacy Statement sets out the basis on which any personal information will be processed by us and reflects Travelex's commitment to maintain the confidentiality of personal information and to provide its customers with the best possible service.
When is Personal Information Collected?
You may be asked by staff at one of our Travelex stores, prompted at various points on our Website or asked by one of our customer services advisers to provide us with your personal information. Accordingly, we may collect and process the following information about you:
- Information you provide when purchasing Travelex branded products or purchase currency from us;
- Copies of government issued identification documents
- Details of any transactions you carry out in-store at one of our stores and of the fulfilment of your order(s);
- Information you provide when entering Travelex prize draws or competitions;
- Information collected from optional surveys that we use for research purposes;
- Details of your visits to the Website and the resources that you access; and
- If you contact us, we may keep a record of that correspondence
Use and Retention of Personal Information
We only use personal information for the purpose(s) for which we tell you that it has been collected, and for other legitimate purposes as permitted by applicable data protection and other relevant laws, and retain it only as long as necessary for those uses and/ or in line with statutory retention requirements for financial transactions, due diligence, fraud or anti-money-laundering.
If you provide information when ordering travel money or other goods or services from Travelex, you agree that we may use the personal information for the purposes of:
To provide a requested service or carry out a contract with you
- collecting payment, processing and fulfilling your order and otherwise providing you with the information and Travelex Services you request from us;
- when we partner with other organisations to provide a particular Travelex Service (these partners will be identified to you at the time of the provision of the relevant Travelex Service e.g. when you visit the partner website or Money Exchange.
- providing you with service messages, including messages notifying you about changes to Travelex Services or changes to our terms, conditions and policies;
- enforcing any contract entered into between you and us for the provision of Travelex Services.
Where we have your consent
- contacting you (including by email or SMS) with marketing messages according to your marketing preferences.
- contacting you via email with short surveys, according to your survey preferences;
- sending you an e-receipt if you confirm you would like one;
Where we have a legal obligation
- complying with our mandatory legal and regulatory obligations (including fraud prevention, anti-money laundering and sanction screening). This includes checking the information you provide to us against information from our PEP & Sanction Screening software.
Security
We take the safeguarding of your information very seriously. The transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data during transmission, and any transmission is at your own risk.
Once we have received your information, we use strict cybersecurity procedures and controls to ensure it stays safe and secure.
Our security measures:
- information you send us via our Website or other Travelex systems are encrypted. This makes it unreadable to anyone who might try to listen in;
- updating and patching our servers in a timely manner;
- Our cyber control centre proactively monitors for abnormal and malicious activity in our servers and services;
- When information you've given us is not in active use, it is encrypted at rest.
We are regularly audited to confirm we remain compliant with our security certifications, including SOC 2 and PCI-DSS. As part of these audits, our security is validated by external auditors.
We restrict access to your personal information to Travelex employees who have a business reason for knowing such information and third-party service providers' processing data on our behalf.
All Travelex employees who have access to your personal data are required to adhere to this control and all third-party service providers are requested by Travelex to ensure appropriate safeguards are in place. In addition, contracts are in place with third-party service providers that have access to your personal data, to ensure that the level of security and protective measures required is in place, and that your personal data is processed only as instructed by us.
Where Travelex is required to make paper copies of your personal information, such information is either:
- Stored in a secure locked storage facility and when required, archived in the same manner; or
- Scanned onto our secure electronic systems (with the original paper copies shredded and destroyed) and, when required, archived in a safe and secure manner.
Disclosure of Personal Information to Third Parties
We may disclose your personal information to any member of the Travelex group (which means our subsidiaries, our ultimate holding company and its subsidiaries. Travelex will not share personal information with third parties outside of the Travelex group for marketing purposes without your consent.
We may disclose your personal information to third parties for the following purposes:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business assets;
- If Travelex or substantially all of its assets or Travelex’s holding company or substantially all of its assets are acquired by a third party, in which case personal information held by us about our customers will be one of the transferred assets;
- In accordance with the obligations bestowed on us by our third party product issuers so that they may process your order and, unless you have indicated that you would not like us to do so, keep you informed of similar products or services to those which you have bought (please note that these third party product issuers have their own privacy policies and accordingly we cannot accept any responsibility or liability for the handling of personal information by such third parties in accordance with such policies); and
- If we are under a duty to disclose or share your personal information in order to comply with our legal obligations or in order to enforce our conditions of sale (including the Online Terms and Conditions) and other agreements; or to protect the rights, property, or safety of Travelex, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
- Where you have provided consent to receive Travelex marketing, we will share your contact details with our communication partners in order to provide you with the requested Travelex marketing information.
International Transfers
We will only transfer your personal data outside Oman, where we have your explicit consent.
Where we have obtained your consent, we will ensure that recipient jurisdictions provide protections equivalent to the PDPL. Your Rights
By law, you have several rights (subject to certain conditions) when it comes to your information. These are set out below.
The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Privacy Statement.
The right of access. You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this Privacy Statement). This is so you’re aware and can check that we’re using your information in accordance with data protection law. You can do this by writing to us using the contact details at the bottom of this Privacy Statement.
The right to request correction. You are entitled to have your information corrected if it is inaccurate or incomplete. You can request that we rectify any errors in information that we hold by writing to us using the contact details at the bottom of this Privacy Statement.
The right to data portability. You are entitled to request that we provide your personal information in a machine-readable format.
The right to erasure. You have a conditional right to request the deletion or removal of your information that we hold by writing to us using the contact details in Section 14.
The right to restrict processing. You have rights to ‘block’ or supress further use of your information. When processing is restricted, we can still store your information, but will not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in the future.
The right to withdraw consent. If you have given your consent to anything we do with your information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). You can withdraw your consent to the processing of your information at any time by contacting us using the contact details at the bottom of this Privacy Statement
You may submit a data subject rights request using the contact details in the ‘Contact’ section below, We will respond to written data subject rights requests within 45 days of receipt.
IP Addresses and Cookies
We may collect information about your visits to the Website and your computer (including where available, your IP address, operating system and browser type) for system administration and to report such information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify you as an individual.
We collect such information by using a "cookie" file. Cookies are small pieces of information that are stored on your computer's hard drive by your browser. They help us improve the Website and make it possible for Travelex to identify some of your preferences. On revisiting the Website, Travelex's computer server will recognise the cookie, giving us information about your previous visits.
Most browsers are originally configured to accept cookies automatically, however, you may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. Please note that if your browser is not configured properly or if you alter your browser to disable the acceptance of cookies, you may not be able to use the Website. Unless you have adjusted your browser settings so that it will refuse cookies, our system will automatically issue cookies when you log on to the Website.
Please note that our advertisers may also use cookies, over which we have no control.
Links to Third Party Websites
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and accordingly we cannot accept any responsibility or liability for such policies. It is therefore advisable to check these policies before you submit any personal information to these websites.
Changes to Our Privacy Statement
Any changes we make to our Privacy Statement in the future will be posted on this page. Please do check our Privacy Statement from time to time to take notice of any changes made. By providing us with your personal information, using the Website and/or any service offered via the Website, in-store at one of our bureaux or over the phone, or by placing orders after we have changed the terms of our Privacy Statement, you will be deemed to have accepted these changes.
This Privacy Statement was last updated in April 2026
Removal from Travelex Marketing Communications
You have the right at any time to unsubscribe from receiving Travelex marketing information. While this may mean that you will not receive product or service information of interest to you, we respect anyone’s wishes not to be informed directly of these promotions or product introductions by emailing currencyservices.servicequality@travelex.com. Please specify that you want to be removed from the Travelex marketing email database. You will also be provided with an unsubscribe link in any marketing communications we may send you.
Contact
Questions, comments and requests regarding this Privacy Statement are welcomed and should be addressed to our local Data Protection Officer at: currencyservices.servicequality@travelex.com or Travelex & Co LLC, Office No.504, CBD, Ruwi, Muscat, Oman.