Arrihlah Ltd (trading as Arrihlah Tours)
1. Who we are
Arrihlah Ltd, trading as Arrihlah Tours, is a travel company registered in England and Wales under company number 15445501. Our registered office is at Office 5829, 321–323 High Road, Romford, RM6 6AX, United Kingdom.
We are the “data controller” for the personal information described in this policy. That means we decide how and why your information is used.
We are registered with the Information Commissioner’s Office under registration number [ICO REGISTRATION NUMBER].
How to contact us about your information:
- Email: info@arrihlah.com
- Phone: +44 7822 015260
- Post: Office 5829, 321–323 High Road, Romford, RM6 6AX
2. What information we collect
Information you give us when you enquire or book:
- Name, title and date of birth
- Email address, telephone number and postal address
- Passport number, nationality, issue and expiry dates, and a copy of your passport
- Photograph, where required for a visa application
- Details of who you are travelling with, including family members and children
- Emergency contact details
- Payment information
Information about your travel needs:
- Dietary requirements
- Accessibility and mobility requirements
- Room and group preferences
- Any medical or health information you choose to share where it affects your travel arrangements
Information about how you use our website:
- IP address, browser type and device information
- Pages viewed and how you arrived at our site
- Cookie data (see Section 10)
Information from your enquiry channel:
- Messages you send us by WhatsApp, Facebook Messenger, Instagram, email or our website form, and our replies
- Your social media profile name, where you contact us through those platforms
3. Sensitive information
Some of the information we handle is treated as “special category data” under UK data protection law, which means it is given extra protection.
Religious belief. If you book Umrah, Hajj or a religious tour with us, this may indicate your religious beliefs. We only use this information to arrange the travel you have asked us to arrange.
Health information. If you tell us about a medical condition, disability, mobility need or dietary requirement, we use it only to make appropriate arrangements with airlines, hotels and transport providers.
We rely on your explicit consent to process this information, or on the fact that it is necessary to establish, exercise or defend legal claims. You can withdraw your consent at any time, although this may mean we cannot complete your booking.
4. Why we use your information, and our legal basis
| What we use it for | Our legal basis |
|---|---|
| Arranging and confirming your booking | Performance of a contract with you |
| Applying for visas on your behalf, including through Saudi platforms | Performance of a contract with you |
| Passing your details to airlines, hotels, transport providers and wholesalers | Performance of a contract with you |
| Taking payment and issuing invoices | Performance of a contract with you |
| Responding to your enquiries | Legitimate interests — replying to people who contact us |
| Meeting our legal, financial protection and tax obligations | Legal obligation |
| Keeping records for financial protection schemes | Legal obligation |
| Sending you marketing about our trips | Consent, or legitimate interests where you are an existing customer |
| Improving our website and understanding how it is used | Consent (for non-essential cookies) |
| Preventing fraud and keeping our business secure | Legitimate interests |
| Arranging travel that meets your religious, dietary or health needs | Explicit consent |
5. Who we share your information with
We share your information only where it is necessary to arrange your travel or where we are legally required to.
Travel suppliers and partners
- Airlines
- Hotels in the United Kingdom, Saudi Arabia and other destinations
- Ground transport and transfer providers
- Tour guides and group leaders
- Wholesale travel operators and consolidators through whom some of our packages are arranged
Government and official bodies
- The Saudi Ministry of Hajj and Umrah, and official Saudi platforms including Nusuk, for visa and pilgrimage permits
- Border, immigration and customs authorities in the countries you travel to
- UK authorities where we are legally required to disclose information
Financial protection and industry bodies
- The Travel Trust Association (TTA) and the Travel Network Group (TTNG)
- The Civil Aviation Authority, in connection with ATOL protection where it applies to your booking
Service providers
- Payment processors
- IT, website and email providers
- Our accountants
Marketing platforms, where you have consented to cookies — see Section 10.
We do not sell your personal information to anyone.
6. Sending information outside the UK
Arranging international travel means your information will be sent to countries outside the United Kingdom, including Saudi Arabia and other destination countries.
Some of these countries do not have data protection laws that the UK considers equivalent to its own.
Where we transfer your information outside the UK, we do so because:
- It is necessary to perform our contract with you. We cannot arrange your flight, hotel, visa or pilgrimage permit without sending your details to the relevant airline, hotel, or Saudi authority; or
- We have put appropriate safeguards in place, such as an approved contract, with the organisation receiving the information.
If you would like more detail about the safeguards we use, please contact us.
7. How long we keep your information
| Information | How long we keep it |
|---|---|
| Booking and travel records | 7 years after your trip, to meet financial and tax obligations |
| Passport copies and visa documents | Deleted within [X] months of your return, unless we need them for an ongoing matter |
| Enquiries that do not lead to a booking | [X] months |
| Marketing contact details | Until you unsubscribe, or after [X] years of no engagement |
| Website and cookie data | As set out in Section 10 |
We delete or anonymise information once we no longer need it.
8. Your rights
Under UK data protection law you have the right to:
- Be told what information we hold about you and why
- Access a copy of your information
- Correct information that is wrong or incomplete
- Ask us to delete your information, where we no longer need it
- Restrict how we use your information in certain circumstances
- Object to us using your information, including for marketing
- Receive your information in a portable format, or ask us to send it to another organisation
- Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email info@arrihlah.com. We will respond within one month.
There is no charge for making a request.
9. Marketing
We will only send you marketing where you have agreed, or where you have booked with us before and we are telling you about similar trips.
Every marketing message includes an unsubscribe link. You can also ask us to stop at any time by emailing info@arrihlah.com or replying to any message.
Unsubscribing from marketing does not affect messages about a booking you have already made.
10. Cookies and tracking
Our website uses cookies and similar technologies.
Essential cookies are needed for the website to work. These do not require your consent.
Analytics and advertising cookies help us understand how the site is used and show relevant advertising. These are only set if you consent. They include:
- Google Analytics and Google Tag Manager — to understand how visitors use our site
- Meta Pixel — to measure the effectiveness of our advertising on Facebook and Instagram
You can change your cookie preferences at any time using the cookie settings on our website, or by changing your browser settings.
Some of these providers are based outside the UK. Their own privacy policies explain how they use information:
- Google: policies.google.com/privacy
- Meta: facebook.com/privacy/policy
11. Keeping your information secure
We take appropriate steps to protect your information, including restricting who can access it and using secure systems to store it.
Passport copies and identity documents are handled with particular care and shared only with the parties who need them to arrange your travel.
No system is completely secure. If a data breach occurs that is likely to put your rights at risk, we will tell you and the Information Commissioner’s Office as required by law.
12. Children
We arrange travel for families, and this often includes children.
Where you book on behalf of a child, we rely on you to provide their information and to have the authority to do so. We use children’s information only to arrange their travel.
We do not knowingly market to children.
13. Complaints
If you are unhappy with how we have handled your information, please contact us first at info@arrihlah.com so we can try to resolve it.
You also have the right to complain to the Information Commissioner’s Office:
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
14. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Where changes are significant, we will let you know.
15. Contact us
Arrihlah Ltd (trading as Arrihlah Tours) Office 5829, 321–323 High Road Romford, RM6 6AX United Kingdom
Email: info@arrihlah.com Phone: +44 7822 015260 Company number: 15445501