Data Protection Policy

1. About Us

The website is operated by:

• Makkah Gateway Ltd
• Company Number: 13084240
• Registered Office: 19 Ritter Street, London, England, SE18 4DT

2. Applicable Data Protection Law

We aim to process personal information in accordance with applicable UK data protection legislation, including:

• The UK General Data Protection Regulation (UK GDPR)
• The Data Protection Act 2018
• Other applicable privacy and electronic communications legislation

3. Personal Information We May Collect

Depending on the services you use, we may collect information such as:

• Full name
• Date of birth
• Contact details
• Email address
• Telephone or mobile number
• Address
• Nationality
• Passport and travel-document information where required for travel arrangements
• Visa-related information
• Flight and accommodation information
• Booking and travel preferences
• Payment and transaction information
• Correspondence and communications with us
• Information provided when making an enquiry or requesting a quotation
• Technical information relating to your use of our website

4. Travel and Booking Information

Travel bookings may require information that is more detailed than information normally required for a general website enquiry.

For example, when arranging international travel or Umrah services, we may need passenger, passport, visa, accommodation, flight and transportation information.

We may share necessary information with relevant travel suppliers and service providers where this is required to arrange or administer your booking.

5. Special Category Information

Certain information may constitute special category personal data under the UK GDPR.

Where necessary for a travel service, we may process such information only where an appropriate lawful basis and applicable condition under data protection law is available.

For example, information concerning health or accessibility requirements may sometimes be required to provide appropriate travel assistance.

We will seek to limit the collection and use of such information to what is reasonably necessary for the relevant service.

Customers should not provide sensitive information unless it is genuinely required for their enquiry, booking or travel arrangements.

6. How We Use Personal Information

We may use personal information to:

• Respond to enquiries
• Provide quotations
• Process and manage bookings
• Arrange flights, accommodation and transportation
• Process visa-related services where applicable
• Communicate booking information
• Process payments
• Provide customer support
• Handle complaints and refund requests
• Prevent fraud and misuse
• Maintain website and system security
• Comply with legal and regulatory obligations
• Keep appropriate business records
• Improve our services
• Send marketing communications where we have an appropriate legal basis and, where required, your consent

7. Lawful Basis for Processing

We will process personal information only where we have an appropriate lawful basis under applicable data protection law.

Depending on the circumstances, this may include:

• Contract — Processing may be necessary to provide requested travel services, arrange a booking or take steps at your request before entering into a contract.
• Legal Obligation — We may process information where necessary to comply with a legal or regulatory requirement.
• Legitimate Interests — We may process information where necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.
• Consent — Where required, we may ask for your consent before processing certain information, particularly for certain types of marketing or other activities where consent is legally required. You may withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8. Sharing Personal Information

We may share relevant personal information with trusted third parties where necessary to provide our services or comply with our legal obligations.

Depending on your booking, these may include:

• Airlines
• Hotels
• Transportation providers
• Visa service providers
• Tour operators
• Payment providers
• Booking technology providers
• IT and hosting providers
• Customer-service providers
• Professional advisers
• Fraud-prevention providers
• Government authorities or regulators where legally required

9. International Transfers

Some of our suppliers or service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection requirements.

Depending on the circumstances, this may include using an adequacy regulation, appropriate contractual safeguards or another lawful transfer mechanism.

10. Data Security

We take reasonable technical and organisational measures designed to protect personal information against:

• Unauthorised access
• Accidental loss
• Unauthorised alteration
• Unlawful disclosure
• Destruction
• Other inappropriate processing

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:

• Provide travel services
• Maintain booking records
• Meet legal and accounting requirements
• Resolve disputes
• Prevent fraud
• Enforce contractual rights
• Comply with regulatory obligations

12. Your Data Protection Rights

Subject to applicable legal conditions and exemptions, you may have rights under UK data protection law, including the right to:

• Request access to your personal information
• Request correction of inaccurate or incomplete information
• Request deletion of personal information in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain types of processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent
• Make a complaint to the Information Commissioner's Office (ICO)

13. Accessing Your Information

If you would like to request access to personal information that we hold about you, please contact Makkah Gateway Ltd.

We may need to verify your identity before responding to a data protection request.

We will normally respond within the timeframe required by applicable data protection legislation.

14. Keeping Your Information Accurate

We aim to keep personal information accurate and up to date.

If your personal information changes, or you believe information we hold about you is incorrect, please contact us and request an update.

For travel bookings, it is particularly important that passenger information is accurate because incorrect information may affect flights, visas or other travel arrangements.

15. Marketing Communications

Where permitted by law, we may send information about our services, offers, packages and travel-related updates.

Where consent is required, we will obtain the appropriate consent before sending marketing communications.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Even if you opt out of marketing, we may still send essential service communications relating to an existing booking or enquiry.

16. Cookies and Similar Technologies

Our website may use cookies and similar technologies for purposes such as:

• Website functionality
• Security
• Analytics
• Performance
• Remembering preferences
• Marketing, where applicable

17. Children's Information

Our website is not specifically directed at children.

Where a booking involves a child, information relating to the child may be collected from a parent, guardian or other authorised person where necessary to arrange the relevant travel services.

We encourage parents and guardians to ensure that information submitted about children is accurate and limited to what is necessary for the booking or service.

18. Third-Party Websites

Our website may contain links to third-party websites and services.

Third-party websites have their own privacy policies and data-protection practices. We are not responsible for the privacy practices of websites that we do not operate.

You should review the relevant third party's privacy information before submitting personal information to them.

19. Data Breaches

If we become aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable data protection requirements.

Where legally required, we will notify the relevant regulatory authority and/or affected individuals within the applicable timeframe.

20. Data Protection Complaints

If you have concerns about how we have handled your personal information, please contact Makkah Gateway Ltd first so that we have an opportunity to investigate and address your concern.

You also have the right to complain to the UK's data protection regulator:

• Information Commissioner's Office (ICO)
• The ICO provides guidance and information about data protection rights and complaints through its official website.

21. Data Protection Contact

For questions about this Data Protection Policy or to exercise your data protection rights, please contact Makkah Gateway Ltd using the contact information published on our website.

• Makkah Gateway Ltd
• Company Number: 13084240
• Registered Office: 19 Ritter Street, London, England, SE18 4DT

22. Policy Updates

We may update this Data Protection Policy from time to time to reflect changes to our services, technology, legal requirements or data-processing practices.

The latest version will be published on this page, with the updated date shown at the beginning of the policy.

23. Your Continued Use of the Website

By continuing to use our website, you acknowledge that you have had the opportunity to review this Data Protection Policy.

Where applicable law requires specific consent, we will obtain that consent separately rather than relying solely on continued use of the website.