Privacy Policy

Khayriyah Services is the data controller for the personal information described in this policy. We are registered in England and Wales under company number [Company Number], with a registered address at [Registered Address].If you have any questions about how we handle your data, contact us at [privacy email].

Booking an Umrah trip involves handling more documentation than most purchases, because visas, flights and hotels all require identity details. We collect:

• To process your booking
• To support you before and during the trip - sending itineraries, group updates and pre-departure guidance.
• To respond to enquiries - answering questions you send by form, email or WhatsApp.
• To meet legal obligations - keeping financial records and tax requirements.
• To improve our service - understanding how our website is used and reviewing feedback after a trip.

Under UK GDPR we rely on the following bases:

• Performance of a contract - to deliver the trip you have booked.
• Legal obligation - for financial records and regulatory requirements.
• Legitimate interests - to run and improve our business, provided your rights are not overridden.
• Consent - for marketing messages, non-essential cookies, and any health information you share. You can withdraw consent at any time.

We share only what is necessary, and never sell your personal data. Recipients may include:

• Payment processors and our accountants
• Website, email and booking software providers acting on our instructions
• Law enforcement or regulators where we are legally required to disclose

• Booking and Financial records - [6] years after trip, to meet tax and accounting requirements.
• Enquiries that do not become bookings -  [12 months]
• Marketing contacts - until you unsubscribe.

We use appropriate technical and organisational measures to protect your information, including access controls, encrypted storage and limiting who on our team can view travel documents. No method of transmission is completely secure, so please avoid sending passport copies over unsecured channels where we have offered a more secure alternative.

You have the right to:

• Ask for a copy of the personal data we hold about you
• Have inaccurate information corrected
• Ask us to delete your data, where we have no continuing legal reason to keep it
• Restrict or object to how we use your data
• Receive your data in a portable format
• Withdraw consent for marketing or health data at any time

To exercise any of these, email admin@khayriyah.com. We Will respond within the week

Our website uses essential cookies to function, and analytics cookies to understand how visitors use the site. Analytics and any advertising cookies are only set with your consent, which you can change at any time through the cookie banner or your browser settings.

We use [list your tools, e.g. Google Analytics, Meta Pixel]. Refusing non-essential cookies will not affect your ability to book.

With your consent, we may send occasional emails or messages about upcoming trips and departure dates. Every message includes a way to unsubscribe, and you can opt out at any time by replying or emailing us. Opting out of marketing does not stop essential messages about a trip you have booked.

Where children travel as part of a family booking, their details are provided by a parent or guardian, who is responsible for the accuracy of that information and for consenting on the child's behalf. We do not knowingly collect data directly from children through our website.

We may update this policy from time to time. Any changes will be published on this page with a revised date. Where a change materially affects how we use your data, we will notify you directly.