Privacy Policy

Effective Date: 22 March 2026

At Hajj Guides UK, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, when applicable, Saudi Arabia’s Personal Data Protection Law (PDPL).

1. Information We Collect

We may collect the following types of personal data:

Identity Information: Name, date of birth, nationality, passport number.
Contact Information: Email, phone number, home address.
Travel Information: Flight details, accommodation bookings, group allocations.
Health and Safety Information: Vaccination records, medical declarations required for Hajj.
Payment Information: Billing details, payment confirmations.
Guardian Information (for under-18 pilgrims): Parent/guardian name, contact details, and consent records.

We collect this information when you or your guardian:

Register for our services.
Complete booking or onboarding forms.
Communicate with us via email, phone, or WhatsApp.
Provide information to facilitate Hajj arrangements.

2. How We Use Your Information

Your personal data is used to:

Process your Hajj registration and bookings.
Facilitate travel, accommodation, and related services.
Communicate important updates about your Hajj journey.
Ensure compliance with Hajj authorities’ requirements.
Maintain records for legal, regulatory, and audit purposes.

We process personal data only when we have a lawful basis, such as consent, contractual necessity, or legal obligation.

3. Children Under 18

For pilgrims under the age of 18:

Personal data is collected only with the consent of a parent or legal guardian.
Data is necessary to ensure safe and legal Hajj arrangements, including travel, accommodation, and health requirements.
Guardians are responsible for providing accurate information.
Shared data may be transferred to Hajj authorities and service providers in Saudi Arabia and will be subject to UK GDPR and Saudi PDPL safeguards.

4. International Data Sharing & Transfers

Sharing with Hajj and Service Providers

To deliver our services, we may share your personal data with:

Hajj authorities in Saudi Arabia.
Airlines, accommodation providers, transport operators, and visa processors.
Official Hajj platforms and authorised Hajj service partners.

This sharing is necessary for the fulfilment of your Hajj arrangements.

UK GDPR Compliance

As a UK-based data controller:

Personal data is shared only when necessary and for lawful purposes.
We implement appropriate technical and organisational safeguards for transfers outside the UK.
You have rights to access, correct, delete, or restrict processing of your data.
You may lodge a complaint with the UK ICO if your data protection rights are infringed.

Saudi Arabia PDPL Compliance

When your data is shared with organisations in Saudi Arabia:

Data is processed under Saudi Arabia’s Personal Data Protection Law (PDPL).
Recipient organisations must protect personal data and uphold data subject rights.
Cross-border transfers are regulated under PDPL; recipients must implement safeguards.
Data will be handled according to recipient privacy policies and Saudi law, which may differ from UK standards but are legally enforceable.

By using our services, you explicitly consent to the transfer and processing of personal data by authorised Saudi Hajj authorities and service providers.

5. Data Retention

We retain personal data only as long as necessary to:

Fulfil the purposes for which it was collected.
Comply with legal, regulatory, and contractual obligations.
Resolve disputes, enforce agreements, or protect our legal rights.

Afterward, we securely delete or anonymise your data.

6. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access your personal data.
Correct inaccuracies.
Request deletion (“right to be forgotten”).
Restrict processing of your data.
Withdraw consent at any time (where applicable).
Object to certain processing activities.
Data portability, where applicable.

These rights apply even when your data is shared internationally. You can exercise your rights by contacting us at info@hajjguides.org.

7. Data Security

We implement reasonable technical, administrative, and organisational measures to protect your data against:

Loss or theft.
Unauthorized access, disclosure, or modification.
Accidental or unlawful destruction.

All electronic communications and transfers are encrypted where possible.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in practices, legal requirements, or international transfer regulations. The effective date will be updated accordingly.

Please review this policy regularly to stay informed about how we protect your data.