Privacy Policy

Last updated: June 2026

1. Who We Are

Hajj Umrah Tours is operated by Adil Travels, Ground Floor, 72/231, Ghaffar Manzil Colony, Jamia Nagar, Okhla, New Delhi, Delhi 110025, India. Contact: hajjumrah.inservices@gmail.com

2. What Data We Collect

  • Account data: Name, phone number, and optional email address when you register.
  • Booking enquiries: Name, email, phone, package selected, and enquiry date.
  • Contact messages: Name, email, phone, and message text submitted via our contact form.
  • Technical data: Server logs (IP address, browser type, pages visited) for security and diagnostics.

3. How We Use Your Data

  • To respond to your booking enquiries and contact messages.
  • To send you service-related emails (booking confirmations, account updates).
  • To improve our website and detect fraud.

We do not sell your data to third parties. We do not store payment card details.

4. Data Storage and Security

Your data is stored in MongoDB Atlas (cloud database, EU/US regions). Passwords are hashed using bcrypt before storage. Authentication sessions use httpOnly cookies that are inaccessible to JavaScript. Uploaded slider images are stored on Cloudinary.

5. Third-Party Services

  • Cloudinary — image hosting for website content.
  • Google Fonts — typography loaded from Google servers.
  • Google Maps — embedded map on our website.
  • Gmail (SMTP) — used to send booking confirmation emails.

6. Cookies

We use a single authentication cookie (token) to maintain your logged-in session. This cookie is httpOnly, expires after 7 days, and contains no personal information. We do not use advertising or analytics cookies.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data (right to erasure).
  • Object to or restrict processing of your data.

To exercise these rights, email us at hajjumrah.inservices@gmail.com. Account deletion is also available from your account dashboard.

8. Data Retention

Account data is retained until you delete your account. Booking enquiry records are retained for 3 years for business and legal purposes. Contact messages are retained for 1 year.

9. Children

Our services are not directed at children under 13. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy periodically. The date at the top of this page reflects the latest revision.