Privacy Policy

Who we are

The data controller for this website is [Registered Company Name Ltd] (company number [Company Registration Number]), registered office [Registered Office Address, City, Postcode, United Kingdom]. If you have a question about this policy or about how we handle your information, contact us at [dataprotection@example.co.uk] or by post at our registered office.

Personal information we collect

We aim to collect only what we need to answer your enquiry and, where you go on to book, to arrange your travel. Depending on how you interact with us, this may include:

• Contact information — name, email address, telephone number and WhatsApp number.
• Enquiry information — travel dates, departure airport, number of travellers, budget range, hotel preferences and any requirements you tell us about.
• Booking information — the details required by airlines, hotels and visa processing, which may include passport and identity information at the booking stage. We do not collect passport or identity data through the website enquiry forms.
• Payment information — handled by our payment provider; we do not store full card details on this website.
• Website usage information — pages viewed and general technical information, collected only where you have allowed analytics cookies.
• Communication records — emails, WhatsApp messages and call notes relating to your enquiry or booking.

Why we use your information and our lawful basis

We rely on the following lawful bases under UK GDPR: performance of a contract (arranging travel you have asked us to book), legitimate interests (responding to enquiries, improving our service, preventing fraud), consent (marketing messages, non-essential cookies) and legal obligation (accounting and records we are required to keep).

Marketing

We will only send you marketing messages where you have asked us to, in line with the Privacy and Electronic Communications Regulations. You can withdraw your consent at any time by using the unsubscribe link in any message or by contacting us.

Cookies and analytics

Non-essential cookies, analytics and advertising technologies only load after you have given consent through our cookie banner. You can change your choice at any time using the 'Cookie settings' link in the footer. See our cookie policy for the full detail.

Who we share information with

To arrange travel we may share necessary details with airlines, hotels, ground handlers, transfer providers, visa processing services and our IT and communications suppliers. We share only what is needed for the service. A current list of categories of processors is available on request.

International transfers

Arranging travel to Saudi Arabia necessarily involves transferring some information outside the UK. Where we transfer personal data internationally we take steps to ensure an appropriate safeguard is in place, such as UK adequacy regulations or the International Data Transfer Agreement / Addendum. [Confirm the specific mechanism used with your legal adviser.]

How long we keep information

Enquiries that do not lead to a booking: [retention period to be confirmed]. Booking records: retained for the period required by accounting and limitation rules, currently [retention period to be confirmed]. Marketing consents: retained until withdrawn plus a short record of the withdrawal.

Security

We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit and staff confidentiality obligations. No transmission over the internet can be guaranteed to be completely secure.

Your rights

Under UK data protection law you have the right to:

• Be informed about how your data is used.
• Request a copy of the personal data we hold about you.
• Have inaccurate data corrected.
• Request erasure in certain circumstances.
• Restrict or object to certain processing.
• Data portability where applicable.
• Withdraw consent at any time where we rely on consent.

Complaints

Please contact us first at [dataprotection@example.co.uk] so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk.