privacy policy
At Prestige Umrah, every journey is more than just travel—it's a sacred experience that stays with you forever. We are here to make that journey seamless, comfortable, and spiritually uplifting.
Last updated: 27 September 2026
How we collect, use and protect your personal information when you enquire about or book an Umrah journey with us.
Table of Contents
- Who we are
- Information we collect
- Sensitive information
- How and why we use it
- Who we share it with
- International transfers
- How long we keep it
- Marketing
- Cookies
- Keeping your data safe
- Your rights
- Complaints
- Changes to this policy
- Contact us
1. Who we are
Prestige Umrah (“we”, “us”, “our”) arranges Umrah packages for pilgrims travelling from the United Kingdom.
This policy applies to information we collect through prestigeumrah.co.uk, by phone, email, WhatsApp, social media and in person.
2. Information we collect
Information you give us
- Contact details: name, email address, phone number and postal address.
- Enquiry details: travel dates, departure and return airports, preferred airline, preferred hotels, number of adults and children, children’s ages and any comments you add to our enquiry form.
- Booking and travel documents: full names as shown on passports, dates of birth, nationality, passport numbers and expiry dates, passport photographs and any other details needed for flights, hotels and your Umrah visa.
- Payment information: payment amounts, dates and references. Card payments are processed by our payment provider; we do not store full card numbers.
- Emergency contact details you choose to give us.
- Communications: messages, emails, call notes and feedback, including reviews you agree to let us publish.
Information we collect automatically
- Technical data such as IP address, browser type, device information and the pages you visit on our website, collected through cookies and similar technologies (see Cookies).
Information from others
- If one person books for a group or family, they will give us details of the other travellers. Please make sure everyone in your party has seen this policy.
- Airlines, hotels and Saudi authorities may send us booking confirmations, schedule changes or visa decisions relating to you.
3. Sensitive information
Some information we handle is treated as special category data under UK GDPR:
- Religious belief: booking an Umrah journey may indicate your religion.
- Health information: for example mobility needs, wheelchair assistance, medical conditions, dietary requirements or vaccination records that you tell us about so that we can arrange suitable flights, hotels and transfers.
We only use this information to arrange and support your journey. We rely on your explicit consent, which you give when you provide it to us, and where necessary to protect someone’s vital interests in an emergency. You can withdraw consent at any time, but we may then be unable to arrange some services.
4. How and why we use your information
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and preparing quotations | Steps at your request before entering a contract; legitimate interests |
| Booking flights, hotels, transfers, Ziyarah and your Umrah visa | Performance of our contract with you |
| Taking payments, issuing invoices and keeping accounting records | Contract; legal obligation |
| Issuing ATOL certificates and meeting package travel regulations | Legal obligation |
| Contacting you about schedule changes, disruption or emergencies while you travel | Contract; vital interests |
| Handling complaints, claims and legal matters | Legitimate interests; legal obligation |
| Improving our website and services, and preventing fraud | Legitimate interests |
| Sending offers and news about Umrah packages | Consent, or legitimate interests for existing customers (see Marketing) |
We do not make decisions about you based solely on automated processing.
5. Who we share your information with
We only share what each party needs to provide your services. We never sell your personal information.
- Airlines, including passenger data they are legally required to pass to border authorities.
- Hotels, transfer companies and Ziyarah guides in Saudi Arabia.
- Saudi authorities and authorised service providers, including the Ministry of Hajj and Umrah and the Nusuk platform, for visas and permits.
- Payment providers and banks that process your payments.
- The Civil Aviation Authority (CAA) and ATOL scheme bodies where needed for financial protection.
- Insurers, if you ask us to arrange travel insurance or if a claim arises.
- Service providers who support our business, such as website hosting, email and cloud storage, customer messaging (including WhatsApp), accountancy and IT support. They act only on our instructions.
- Professional advisers, courts, the police or regulators where required by law or to protect our legal rights.
6. International transfers
Because you are travelling to Saudi Arabia, we must send some of your personal information there, for example to hotels, transport providers and the Saudi visa system. The UK has not made an adequacy decision for Saudi Arabia. These transfers are necessary to perform your contract with us, which is permitted under UK GDPR.
Some of our team and service providers may access your information from outside the UK. Where this happens, we use appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for more information.
7. How long we keep your information
| Information | Retention period |
|---|---|
| Enquiries that do not lead to a booking | 2 years from your last contact |
| Booking, payment and travel records | 6 years after your return date, for legal, tax and claims purposes |
| Passport copies and visa documents | Deleted within 6 months of your return, unless needed for a claim |
| Health and accessibility information | Deleted within 6 months of your return, unless needed for a claim |
| Marketing preferences | Until you unsubscribe; we keep a suppression record so we do not contact you again |
8. Marketing
We will only send you marketing emails or messages if you have agreed to receive them, or if you are an existing customer and we are telling you about similar Umrah services. In that case we always give you a simple way to opt out, as required by the Privacy and Electronic Communications Regulations (PECR).
You can unsubscribe at any time by using the link in any email, replying “STOP” to a message, or contacting us. Unsubscribing will not affect messages about an existing booking.
9. Cookies
Our website uses cookies and similar technologies. Strictly necessary cookies keep the website secure and working, for example page caching and form security. Other cookies help us understand how visitors use the site so we can improve it. We only use non-essential cookies, such as analytics or advertising cookies, with your consent, which you can give or withdraw through our cookie banner.
You can also block or delete cookies in your browser settings. Blocking some cookies may affect how the website works.
10. Keeping your information safe
We use appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS), access controls, secure passwords and limiting access to staff who need it. Please send passport copies and other sensitive documents only through the channels we give you, and never by social media comments or public posts.
If a data breach is likely to affect your rights, we will tell you and the Information Commissioner’s Office (ICO) where the law requires it.
11. Your rights
Under UK data protection law you have the right to:
- Access a copy of the personal information we hold about you.
- Rectification: ask us to correct inaccurate or incomplete information.
- Erasure: ask us to delete your information where there is no good reason to keep it.
- Restriction: ask us to limit how we use your information.
- Objection: object to our use based on legitimate interests, and to direct marketing at any time.
- Portability: ask for information you gave us in a commonly used electronic format.
- Withdraw consent where we rely on it.
To make a request, contact us using the details below. We will respond within one month and there is normally no fee. We may need to verify your identity first.
12. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.
14. Contact us
For any question about this policy or your personal information:
- Email: info@prestigeumrah.co.uk
- Phone: +44 203 468 9888
- Post: 13 Station Road, London, SE25 5AH
Booking with us? Please also read our Terms & Conditions, which explain your booking, payments, cancellations and financial protection.