1. Data Controller
UmrahDeals OÜ is the data controller responsible for your personal data. Our registered address is Tornimäe tn 5, 10145 Tallinn, Estonia. Registry code: 17451729.
For privacy-related inquiries, contact info@umrah.deals.
2. Information We Collect
We collect the following categories of personal data:
- Contact Information: name, email address, and phone number.
- Booking Details: travel dates, package selection, and guest information.
- Passport Information: passport number, country of issue, expiry date, and date of birth for visa processing.
- Payment Information: we do not store full card details; payments are securely processed by Revolut.
- Technical Data: IP address, browser type, and device information collected when you visit our website.
3. How We Use Your Information
- To process and confirm your booking.
- To apply for your visa on your behalf.
- To communicate about your booking and provide customer support.
- To comply with legal and regulatory obligations.
- To improve our website and services.
4. Legal Basis for Processing
We process personal data under the following GDPR legal bases:
- Performance of a Contract: processing needed to fulfill your booking.
- Legal Obligation: processing required by immigration and travel regulations.
- Legitimate Interests: processing to improve our services and prevent fraud.
- Consent: where you explicitly agree, such as for marketing communications.
5. Third-Party Sharing
We share personal data only with trusted third parties needed to deliver our services:
- Duffel: for flight booking and ticketing.
- Booking.com: for hotel reservations, subject to its privacy policy.
- Revolut: for secure payment processing.
- Saudi Authorities: for visa application processing as required by law.
We do not sell your personal data to third parties for marketing.
6. Data Retention
We retain personal data only as long as needed for the purposes for which it was collected.
Passport and visa-related data are deleted within one month after travel. Booking records and contact details are retained for up to six years to meet Estonian accounting and tax requirements.
7. Your Rights
Under the GDPR, you have the following rights:
- Access: request a copy of personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure: request deletion of your data in certain circumstances.
- Restriction: request limits on how we use your data.
- Data Portability: receive your data in a structured, machine-readable format.
- Objection: object to processing based on legitimate interests.
To exercise these rights, contact info@umrah.deals. We will respond within one month.
8. Cookie Usage
We use essential cookies needed to operate the site and process bookings. We do not use third-party tracking or advertising cookies. You can manage cookie preferences in your browser.
9. Data Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. Payments are handled by Revolut using industry-standard encryption. No internet transmission is completely secure, so absolute security cannot be guaranteed.
10. Policy Changes
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version will always be available on this page.
11. Contact Us
Questions or concerns can be sent to info@umrah.deals or via WhatsApp at +372 5395 4280.