Who we are
This notice explains how Dar ul Islam Travel Ltd (“we”, “us”), company number [COMPANY NUMBER], [OFFICE ADDRESS], uses personal information. We are the controller of the information you give us through this website, by phone, by email or on WhatsApp. We are registered with the Information Commissioner’s Office (ICO) under registration number [ICO REGISTRATION NUMBER].
When you book, Al Kamil Travel Ltd, the organiser of your package, is also a controller of your information for the purposes of supplying your trip, and its own privacy notice applies to its use of it.
Questions about this notice or your data: email [EMAIL] or write to us at the address above, marked “Data protection”.
The information we collect
When you enquire or ask for a quote
- your name, phone or WhatsApp number and email address;
- your trip preferences: type of trip, dates, length of stay, hotel standard, number and ages of travellers, departure airport and anything you write in the message box;
- how you prefer to be contacted.
When you book
- full names, dates of birth, gender and nationality of every traveller;
- passport details and passport-style photographs, needed for flights and visas;
- relationship details where the Saudi authorities require them;
- payment records (not your full card number, which is handled only by our payment provider);
- emergency contact details.
Sensitive information
Booking Umrah or Hajj reveals your religious belief. You may also tell us about health conditions, disabilities, mobility needs or dietary requirements. These are special category data under UK data protection law. We use them only to arrange your trip and the help you need, and only with your explicit consent, which you can withdraw at any time (though we may then be unable to provide certain services). Vaccination records are requested only where the Saudi authorities require them.
Automatically
Our hosting provider keeps standard server logs (IP address, browser type, pages requested and time) for a limited period to keep the website secure and protect it from abuse. We do not use these logs to identify you.
About other people
If you give us information about other travellers, you confirm that they have agreed and that you have shown them this notice. Information about children is provided by the parent or guardian making the booking.
How we use it and our legal reasons
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and prepare a quote | Steps you asked for before a contract |
| Make and manage your booking, visas, flights and hotels; keep in touch about your trip | Performance of a contract |
| Arrange help with health, disability or other special needs | Your explicit consent |
| Keep accounting, tax and booking records; meet ATOL and other legal duties; respond to lawful requests | Legal obligation |
| Handle complaints and legal claims, prevent fraud, keep our systems secure | Our legitimate interests |
| Send early-bird offers and news by email or WhatsApp | Your consent, which you can withdraw at any time |
We do not make decisions about you by purely automated means, and we do not profile you.
Sending data outside the UK
To arrange travel to Saudi Arabia, your information must be sent to suppliers and authorities in Saudi Arabia. This transfer is necessary to perform the contract you have asked us to arrange. Some of our service providers (such as our website host and form provider) are based in or use servers in the United States or the European Economic Area. Where we use them, we rely on UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum, so that your data stays protected.
How long we keep it
| Information | Kept for |
|---|---|
| Enquiries and quotes that do not lead to a booking | 12 months from our last contact |
| Booking, payment and correspondence records | 6 years after the end of the financial year in which you travelled |
| Passport copies, photos and health information | Deleted 90 days after you return, unless needed for a complaint or claim |
| Marketing list | Until you unsubscribe; then only your email is kept on a suppression list so that we do not contact you again |
Your rights
You have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have information deleted where we no longer need it;
- restrict or object to our use of it, including at any time to direct marketing;
- data portability, for information you gave us under contract or consent;
- withdraw consent at any time, without affecting what we did before.
Email [EMAIL] to use any of these rights. We may ask you to prove your identity. We will reply within one month. It is free unless a request is clearly unfounded or excessive.
If you are unhappy with how we use your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Keeping your data safe
The website is served only over encrypted HTTPS connections with strict security settings. Access to customer information is limited to the staff who need it, protected by strong passwords and two-factor authentication. We will never ask you to send passport or payment details over unencrypted channels or social media direct messages other than our verified business WhatsApp. If a data breach is likely to put your rights at risk, we will tell you and the ICO as required by law.
Children
This website is not intended for children, and we do not knowingly collect information directly from anyone under 18. Information about child travellers is only accepted from their parent or legal guardian.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it was last changed. If we make significant changes that affect how we use your existing information, we will tell you directly.