1. Introduction

Welcome to Perfect Umrah. We are fully committed to protecting the privacy, confidentiality, and personal data of our users and traveling pilgrims. This policy explains how Perfect Umrah and Travels Limited collects, processes, and safeguards your information in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller & Legal Identity

This website is owned and operated by Perfect Umrah and Travels Limited, a private limited company registered in England and Wales under Company Number 16226457. We operate as a registered Data Controller with the Information Commissioner's Office (ICO).

• Registered Office: 25 Gervase Close, Wembley, London, HA9 9EH, United Kingdom.

• Operational Branch: 13 Station Road, London, SE25 5AH, United Kingdom.

• Official Contact: support@perfectumrah.co.uk | 0207 183 5330

3. Information We Collect

To provide professional travel consultancy, organize land arrangements, and fulfill administrative assistance for your pilgrimage documents, we collect:

• Personal Identity Data: Full name, date of birth, and gender.

• Travel & Identification Documentation: Scanned passport details, passport-sized photographs, and UK residency status parameters (such as Biometric Residence Permits or digital share codes necessary for Umrah visa administrative pre-audits).

• Contact Data: Email address, telephone numbers, and physical or billing address files.

• Financial Data: Secure payment card details (processed securely via encrypted, PCI-DSS compliant third-party merchant banking gateways).

• Transaction Data: Itemized details regarding the custom land arrangements, hotel allocations, and ground transport itineraries managed for you.

4. Legal Basis for Processing Personal Data

We process your personal information under the following authorized legal frameworks:

• Performance of a Contract: To execute, manage, and deliver your requested custom ground arrangements and travel itineraries.

• Legal Obligation: To satisfy statutory reporting requirements under UK travel structures or to process administrative data required for standard foreign entry clearances.

• Legitimate Interests: To safely manage business operations, secure our digital platform architecture, and ensure consumer safety.

5. Data Sharing & Third-Party Disclosures

We do not sell your personal data. Your information is shared exclusively with essential entities strictly required to fulfill your travel arrangements:

• Primary Fulfillment Partner: Our certified supplier, Times Travel Ltd (ATOL 74904), to securely process flight-inclusive configurations when requested.

• On-Ground Services Network: Verified hospitality networks, transport management systems, and local supplier desks physically operating in Makkah and Madinah to secure your accommodation and vehicle logistics.

• Official Portals: Direct secure web-interfaces used exclusively to transmit your application profile fields to competent sovereign database registries for entry visa processing.

6. Your Individual Data Protection Rights

Under the UK GDPR, you possess clear, enforceable rights regarding your personal information, including:

• The right to be informed about how your data is used.

• The right to access copies of the personal data we hold about you.

• The right to rectification of inaccurate or incomplete information.

• The right to erasure ("the right to be forgotten") under specific statutory conditions.

• The right to restrict or object to the processing of your personal files.

• The right to data portability.

To exercise any of these individual rights, or if you have an inquiry regarding your information safety, please contact us directly at support@perfectumrah.co.uk. If you believe your data has been handled incorrectly, you maintain the absolute right to lodge a formal complaint with the Information Commissioner’s Office (ICO) by visiting www.ico.org.uk.

7. Data Security Protocols

We implement robust technical, administrative, and organizational data security measures to protect your personal records from unauthorized access, accidental loss, alteration, or disclosure. All digital transmission channels use advanced encryption protocols to safeguard your private data infrastructure.