Draft for review: This Privacy Policy is a draft prepared for Umrah with Ateeq. All items in [square brackets] must be confirmed by Al Baitul Ateeq Tours and Travels (and ideally reviewed by a lawyer) before publishing.

This Privacy Policy explains how Al Baitul Ateeq Tours and Travels, trading as Umrah with Ateeq, collects, uses, shares and protects your personal data when you use umrahwithateeq.com, book a Hajj or Umrah package with us, or contact us.

Last updated: [Agency to confirm date of publication]

1. Who we are

Umrah with Ateeq is the Hajj and Umrah website of Al Baitul Ateeq Tours and Travels (“we”, “us”, “our”), a travel agency with two branches:

• Mujahid Nagar, Nizamabad, Telangana, India [full address and PIN code]
• Murad Nagar, Hyderabad, Telangana, India [full address and PIN code]

Phone and WhatsApp: +91 90006 53539. E-mail: [agency e-mail]. Under India’s Digital Personal Data Protection Act, 2023, we are the “Data Fiduciary” for the personal data described in this policy.

2. Information we collect

We collect only the information we need to arrange your pilgrimage and to run this website:

• Identity and contact details: name, mobile and WhatsApp numbers, e-mail address, postal address, date of birth and, for Tax Collected at Source (TCS) on overseas tour packages, the PAN of the person paying.
• Travel documents: passport details and copies, photographs, vaccination certificates and other documents needed for visas and travel.
• Family contacts: names and phone numbers of family members you choose to give access to Track My Pilgrim.
• Booking and payment records: packages booked, amounts paid and due, receipts and invoices. Card, UPI and net-banking details are entered on and processed by our payment gateway; we do not store your full card number, CVV or UPI PIN.
• Bank transfer proof: UTR or reference numbers and screenshots you upload.
• Referral and wallet records: referral codes, rewards earned, wallet balance and, if you request a payout, the bank details you give us for it.
• Messages and enquiries: what you send us through contact forms, e-mail, phone or WhatsApp.
• Website usage data: IP address, browser and device type, pages visited, language preference and cookie choices (see section 9).

Some documents, such as a vaccination certificate or details of a medical condition or mobility needs, may reveal health information. We use it only to meet travel requirements and to look after you during the trip.

3. How we use your information

• to process your booking and manage your account and customer dashboard;
• to apply for your visa through the Saudi authorities’ systems;
• to book flights, hotels, transport and ziyarat, and to organise your group and tour leader;
• to issue receipts and invoices, and to send booking confirmations, payment reminders and travel updates by e-mail and WhatsApp;
• to show limited trip details to family members you authorise through Track My Pilgrim;
• to run the referral programme and wallet;
• to answer your questions and handle complaints;
• to meet our legal, accounting and tax obligations, such as GST and TCS records;
• to keep the website secure and to improve it.

We process your data on the basis of the consent you give when you register, book or send us an enquiry, and for other legitimate uses permitted by law, such as meeting our legal obligations. We will not send you promotional messages unless you have agreed to receive them, and you can opt out at any time.

4. Who we share it with

We share your information only as far as needed to provide your trip, or when the law requires it:

• Saudi government visa and pilgrimage systems (such as Nusuk) and their authorised service providers, for visas and permits;
• airlines, hotels, ground transport and ziyarat providers;
• our payment gateway and banks, to process payments and refunds;
• WhatsApp (Meta) and our e-mail service provider, to deliver messages;
• our website hosting and IT service providers, who store data on our behalf;
• government, tax and law-enforcement authorities when the law requires it.

Some of these recipients are outside India, for example in Saudi Arabia, so your data may be transferred abroad where this is needed for your trip. We never sell your personal data or share it with others for their marketing.

5. Track My Pilgrim and family access

If you use Track My Pilgrim, the family members you authorise can see limited details of your trip: hotel names and locations, your itinerary, your tour leader’s contact details and trip updates. It does not show your passport, documents or payment records. You can ask us to add or remove family members at any time.

6. How we protect your data

• Passport numbers and payout (bank) details are stored encrypted.
• Uploaded documents are kept in private storage, not on public web pages.
• Access is limited to staff who need it to handle your booking.
• Card and UPI payments are made on the payment gateway’s secure pages over encrypted (HTTPS) connections.

No system is completely secure. If a personal data breach affects you, we will inform you and the authorities as required by law.

7. How long we keep it

We keep your data for as long as it is needed for your trip, for our records and to meet legal and tax requirements: [Agency to confirm retention period, e.g. booking and invoice records for X years; passport copies and photographs deleted X months after return]. When data is no longer needed, we delete it or anonymise it.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them, you can:

• ask for a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it for your trip or by law (for example tax records);
• withdraw your consent at any time (this does not affect what was done before, and we may then be unable to continue your booking);
• nominate another person to exercise these rights for you in the event of your death or incapacity;
• raise a grievance with us and, if you are not satisfied with our response, complain to the Data Protection Board of India.

To use these rights, please contact our Grievance Officer: [name, e-mail, phone]. We will respond [Agency to confirm the response time, e.g. within X days].

9. Cookies

Our website uses:

• Essential cookies for login, security and the booking process;
• Preference cookies to remember your language (English or Urdu) and your cookie-consent choice;
• Analytics cookies, only if enabled and, where required, with your consent, to understand how the site is used. [Agency to confirm whether analytics is used and which provider]

You can change your choice through the cookie notice or your browser settings. Blocking essential cookies may stop parts of the site from working.

10. Children

Children travel with a parent or guardian. The personal data of anyone under 18 is provided by the parent or guardian travelling with them, who gives consent on the child’s behalf. We use it only to arrange the child’s travel.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its date, and we will tell you about important changes by e-mail or WhatsApp.

12. Contact us

For any question about your data, contact Al Baitul Ateeq Tours and Travels on +91 90006 53539 (phone or WhatsApp) or at [agency e-mail], visit either of our branches, or use our contact page.