Privacy Policy

1. Introduction

2. Information We Collect

To provide you with our tour, transportation, and guidance services, we collect the following categories of personal data:

• — Identification and Contact Information: Full name, date of birth, nationality, passport number and details, Iqama (residence permit) number, email address, phone number (including WhatsApp), and postal address.
• — Tour and Travel Details: Information related to your pilgrimage or tour, including travel dates, flight details, hotel accommodation, itinerary preferences, group size, and special requirements (e.g., infant seats, wheelchair access).
• — Payment Information: We process payments for our services. While we may collect billing details, we do not permanently store sensitive credit card information electronically. All payment data is handled by secure and reputable third-party payment processors.
• — Communication Data: Records of our correspondence, including emails, phone calls, and WhatsApp messages, to manage your bookings and respond to inquiries.
• — Website Usage Data (Cookies): When you visit our website, we may collect data such as your IP address, browser type, and pages visited to improve your experience. We may use performance and functional cookies. You can manage your cookie preferences in your browser settings.

3. How We Collect Your Data

We collect information in the following ways:

• — Directly from You: When you fill out a booking form, contact us via email or phone, or communicate directly with our guides (e.g., Abu Yousef) to customize your tour.
• — Indirectly: From third-party partners (such as hotels or booking agents) or through publicly available sources, provided we have a legal basis for doing so.

4. How We Use Your Information and Legal Basis

We process your personal data to fulfill our contractual obligations and to comply with legal and regulatory requirements, in accordance with the Saudi PDPL. Our legal basis includes:

• — Contractual Obligation: To arrange your tour, transportation (e.g., Black GMC Yukon), purchase necessary permits, book partner services (hotels/airlines), and provide the agreed-upon ziyarat and guidance services.
• — Legitimate Interests: To improve our services, conduct quality control, manage customer relationships, respond to reviews, and to facilitate the successful completion of your pilgrimage or tour.
• — Legal Compliance: To verify your identity and eligibility for services, comply with government authorities, and meet security requirements.
• — Consent: We may ask for your consent to send you promotional offers or travel news. You have the right to withdraw this consent at any time.

5. Data Sharing and Disclosure

We respect your privacy and do not sell your personal data. We may share your information only in the following circumstances:

• — Service Providers: We share relevant information with our approved partners, including hotels, transport providers, and government authorities, strictly to execute your tour contract.
• — Legal Authorities: We may disclose data when required by law, court order, or to defend legal claims.
• — Cross-Border Transfers: If we transfer data outside the Kingdom of Saudi Arabia, we will ensure it is protected by standard contractual clauses or an adequate level of protection as stipulated by the National Data Management Office (SDAIA).

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by Saudi law:

• — Core Data: We will retain your name, contact details, tour information, and passport copies for a period of 7 years to maintain our business records and defend against potential claims.
• — Sensitive Data: Payment and credit card information records are permanently destroyed 60 days after the completion of your tour.

After the retention period expires, your data will be securely deleted.

7. Data Security

We are committed to protecting your data through organizational and technical measures in line with the National Cybersecurity Authority's requirements. We:

• — Limit access to personal data to staff who need it to perform their duties.
• — Use secure methods for data transmission and storage.
• — Ensure third-party service providers are contractually obligated to protect your data.

8. Your Rights Under Saudi PDPL

You have the following rights concerning your personal data:

• — Right to Access: Request a copy of the personal data we hold about you.
• — Right to Rectification: Correct inaccurate or incomplete data.
• — Right to Destruction/Deletion: Request the deletion of your data when it is no longer necessary, unless we are required by law to retain it.
• — Right to Withdraw Consent: Opt-out of marketing communications at any time.

To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days, as required by law.

9. Children's Privacy

Our services are intended for adults and individuals with legal capacity. We do not knowingly collect personal data from minors without the explicit consent of a legal guardian.

10. Changes to This Policy

We reserve the right to update this Privacy Policy periodically. We will post the updated version on our platforms, and we encourage you to review it regularly.