Privacy Policy

When you inquire about a trip or book a package with us, we collect the information you provide directly. This includes your name, email address, and phone number — the basics we need to arrange your travel. For Hajj and Umrah bookings and international travel packages, we may also ask for passport details, travel dates, dietary preferences, and accessibility requirements.

If you use the contact form on our website, we collect your name, contact information, travel interest (such as family travel, religious tourism, or honeymoon), preferred destination, number of travelers, and your message. Our booking form collects similar details along with specific package preferences.

Our website also uses cookies and analytics tools (Google Analytics and Meta Pixel) to understand how visitors browse our pages. These tools only load after you give consent through our cookie banner.

We use your information to process bookings and coordinate with airlines, hotels, and tour operators on your behalf. When you book an Umrah package, a family trip, or any other service, your data lets us confirm reservations, send you itinerary details, and communicate about any changes or updates.

If you opt in to hear from us, we may send you promotional offers or seasonal updates about new travel packages. You can always unsubscribe from these communications. We will never send you marketing messages without your prior consent.

We use analytics data (anonymized) to understand which destinations and services our visitors are most interested in, which helps us improve our offerings.

You can reach Umayya Travel through Facebook Messenger to ask about travel packages, request help with bookings, or ask general questions. When you message us on Messenger, we receive your Facebook display name and your Messenger ID, which Facebook provides automatically as part of the conversation.

We use this information solely to respond to your inquiry and to follow up on your conversation. We do not sell or share your Messenger data with third parties for marketing purposes. Message records are kept only as long as needed to resolve your inquiry and to provide any follow-up travel services you requested.

If you would like us to delete the data associated with your Messenger conversations with us, please email info@umayyatravel.com and we will remove your records within 30 days.

We share your personal information only with the third parties directly required to deliver your travel services: airlines, hotels, tour operators, and payment processors. For example, when you book an Umrah package, we share your name and passport details with our accommodation partner in Medina or Makkah to confirm your room reservation.

We require all third parties to respect the security of your personal data and to handle it in accordance with the law. We do not sell your personal information to any third party for marketing or any other purpose.

Our website is served over an encrypted HTTPS connection, and we use CSRF protection on all forms to prevent unauthorized submissions. Payment information is processed securely through PCI-compliant payment processors and is not stored on our servers.

We regularly review our security practices to ensure your data stays protected. Access to customer personal data is restricted to authorized Umayya Travel staff who need it to process your bookings.

We keep booking records for 7 years after your last transaction with us, as required by Spanish tax law. Contact form inquiries that do not convert into a booking are retained for 12 months and then deleted. Facebook Messenger conversation records are kept only as long as necessary to respond to your inquiry and process any resulting travel requests.

Analytics cookies expire according to their own timelines and are only loaded if you grant consent through our cookie banner.

Under the GDPR, you have the right to request a copy of the personal data we hold about you. You can also ask us to correct any inaccurate data or to delete your data when there is no compelling legal reason for us to keep it. If you previously consented to receiving marketing messages, you can withdraw that consent at any time.

To exercise any of these rights, email info@umayyatravel.com with a description of your request. We will respond within 30 days. If you are not satisfied with how we have handled your data, you also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Espanola de Proteccion de Datos).

Our website uses a cookie consent banner. No analytics or marketing cookies are loaded until you grant consent. If you consent, we use Google Analytics to measure site traffic and Meta Pixel to understand the effectiveness of our advertising. These tools do not identify you personally; they operate on aggregated data.

You can change your cookie preferences at any time through the cookie banner or your browser settings. Essential cookies necessary for the site to function (such as language preference and session) are set without additional consent as permitted by law.

If you have questions about this privacy policy or would like to exercise your data protection rights, please reach out to us: