Privacy Policy

1. Introduction

OomrahBooking ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using our services, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our platform.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Full name (as per passport)
• Identity card (IC) number
• Passport number and expiry date
• Date of birth
• Email address and phone number
• Emergency contact information
• Payment and billing information

2.2 Automatically Collected Information

When you access our platform, we automatically collect:

• Device information (type, operating system, browser)
• IP address and location data
• Usage data (pages visited, time spent, clicks)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

We may receive information from Service Providers about your bookings, payment processors about transactions, and social media platforms if you connect your accounts.

3. How We Use Your Information

We use the information we collect to:

• Process and manage your bookings
• Facilitate visa applications with Saudi authorities
• Communicate with you about your bookings and our services
• Process payments and provide refunds
• Verify your identity and prevent fraud
• Improve our platform and services
• Send promotional communications (with your consent)
• Comply with legal obligations
• Resolve disputes and enforce our terms

4. Information Sharing

We may share your information with:

4.1 Service Providers

Travel agents need your personal and passport information to process your Umrah booking, arrange visas, flights, and accommodations.

4.2 Saudi Authorities

Your information is shared with Saudi Arabian immigration and visa authorities as required for Umrah visa processing.

4.3 Payment Processors

We share necessary information with payment processors to complete transactions securely.

4.4 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

5. Data Security

We implement appropriate security measures to protect your information:

• SSL/TLS encryption for data transmission
• Encrypted storage for sensitive data
• Regular security audits and assessments
• Access controls and authentication measures
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services and fulfill bookings
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records (typically 7 years)

You may request deletion of your account, subject to legal retention requirements.

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your data
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, contact us at privacy@oomrah.my.

8. Cookies

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze platform usage and performance
• Provide personalized content and ads

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

9. International Transfers

Your information may be transferred to and processed in countries outside Malaysia, including Saudi Arabia for visa processing. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Children's Privacy

Our platform is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform or sending you an email. Your continued use of our services after changes constitutes acceptance of the updated policy.