Privacy Policy

1. Who we are and what this policy covers

Haqqi Tours (حقي تورز) is a travel agency and tour operator. Haqqi Tours is a trading name of RoomsFinder Ltd, a company based in London, United Kingdom. VAT registration number GB 348711976. We are responsible, as data controller, for the personal data described in this policy. Here, “we”, “us” and “our” mean Haqqi Tours, and “you” means any visitor to www.haqqitours.com and any traveller who contacts us or books a service with us.

This policy applies to personal data collected through our website and its forms, by email, by telephone and through WhatsApp conversations with our team. It does not apply to websites or applications operated by third parties, even when we link to them.

2. Legal framework

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For visitors and travellers located in the European Union or the European Economic Area, we also apply the General Data Protection Regulation (EU GDPR).

In line with these frameworks, we process personal data lawfully and fairly, only for specified and legitimate purposes, limited to what is necessary, kept accurate and up to date, retained no longer than required, and protected by appropriate security measures.

3. Personal data we collect

When you send a booking request or an enquiry through a form on our website, we collect the information you choose to give us, which may include:

When we confirm a booking, we may need further details required by the supplier that issues a ticket or delivers the service, such as the names of all travellers exactly as they appear in their passports, dates of birth, nationality or passport details for flight, train, ferry or certain attraction tickets. We ask for such details only when the service requires them.

We also keep a record of our communications with you by email and WhatsApp, including your messages, our quotations and written confirmations, payment records, and any feedback or complaint you send us.

Please give us only the information needed for your request. If you choose to share sensitive information, for example about a health condition relevant to accessibility, we use it only to arrange the service you have asked for and share it only with those who need it for that purpose.

• travel date and preferred times;
• number of adults and children, and the ages of the children;
• hotel name or pickup address;
• flight number and arrival or departure details for transfers;
• full name;
• telephone or WhatsApp number;
• email address;
• any message or special request you add, such as accessibility needs or luggage details.

4. Website measurement data

Our website uses a first-party measurement script that we operate ourselves. It uses no cookies and does not store your IP address. It keeps a random visitor identifier in your browser’s local storage and session storage so that we can count visits and understand the steps of the booking process. Together with that identifier, it records the pages viewed, the source or referring page, campaign tags (UTM), device type, language and the country derived at the moment of collection.

This data does not tell us who you are, and we do not use it to build advertising profiles. We use no advertising cookies and no third-party tracking tools: no Google Analytics and no Meta pixel. The script respects your browser’s Do-Not-Track setting. Further details are given on our Cookies and Marketing Preferences page.

The booking form remembers what you type in your browser’s session storage during your visit, so that your entries are not lost if you move between pages. This information stays on your device and is deleted when you close the tab or window, unless you send the form.

As with any website, the servers that deliver our pages must receive certain technical information from your device in order to send the pages to you. This is handled by our web hosting provider for the purpose of delivering and securing the website.

5. Why we use your data and on what legal basis

We use personal data for the following purposes and on the following legal bases:

Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

• To answer your enquiry and prepare a quotation: this is necessary to take steps at your request before a contract is concluded, and it is in our legitimate interest to respond to people who contact us.
• To confirm, deliver and support your booking, including passing the necessary details to drivers, guides and ticket-issuing operators: this is necessary to perform our contract with you.
• To receive payments, keep accounting records and meet tax, commercial and other legal obligations: this is necessary to comply with the law.
• To handle complaints, claims and disputes: this is necessary to establish, exercise or defend legal rights.
• To measure and improve our website and booking process using first-party data that does not identify you: this is in our legitimate interest in running a useful and efficient website, balanced against your rights.
• To send you offers and news: on the basis of your consent or, for existing customers, about similar services where the law allows. You can stop these messages at any time.
• To protect the safety of travellers and staff and to prevent fraud or misuse: this is in our legitimate interest and, where applicable, required by law.

6. Who we share your data with

We never sell personal data. We share it only with those who need it to deliver the service you have booked or to support our operations:

Each recipient receives only the data relevant to its role. Suppliers that deliver services under their own responsibility, such as airlines, process your data under their own privacy policies.

• our staff who handle your request and booking;
• drivers and guides who deliver your transfer or tour, who receive what they need for pickup and service, such as your name, telephone number, pickup address, flight number and number of travellers;
• airlines, rail operators, ferry operators, attraction operators, hotels and other suppliers that issue tickets or deliver part of your service;
• service providers that support our operations, such as our web hosting and email providers, acting on our instructions;
• Stripe, our payment service provider, which processes card payments on behalf of RoomsFinder Ltd under its own privacy policy; we receive only confirmation of the payment, never your card details;
• public authorities, courts or professional advisers, where we are legally required to share data or where it is necessary to establish or defend legal claims.

7. Communication on WhatsApp

After you send a form, we usually continue the conversation on WhatsApp, because it is fast and convenient for travellers. WhatsApp is operated by WhatsApp/Meta under its own terms and privacy policy, which govern how that service processes your data. If you prefer, tell us and we will communicate with you by email instead.

8. International transfers

We are based in the United Kingdom and deliver services in many countries. To provide a service abroad, we may need to transfer your data to a supplier in the destination country, and our service providers may process data in other countries. When we transfer personal data outside the United Kingdom, or outside the EU/EEA for data received there, we do so in accordance with the transfer rules of the UK GDPR and, where applicable, the GDPR, and only to the extent necessary to provide the service you requested.

9. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy. Enquiries that do not lead to a booking are kept for a limited period to allow follow-up and are then deleted. Booking, payment and accounting records are kept for the periods required by UK commercial and tax law and for as long as necessary to handle any claim. When data is no longer needed, we delete, destroy or anonymise it.

10. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration. Access is limited to people who need it for their work, and they are bound by confidentiality.

No method of transmission over the internet is completely secure. We therefore ask you not to send passport images or payment card details by ordinary email or chat unless our team has asked for them through an agreed channel.

11. Children’s data

Our services are booked by adults. When a booking includes children, we collect their ages and, where a ticket requires it, their names and identity details, from the parent, guardian or adult making the booking. We use this information only to price and deliver the service and to meet supplier and legal requirements.

12. Your rights

Subject to the conditions set by applicable law, you have the right to:

You may also object to a decision that affects you and is based solely on automated processing of your data, and claim compensation for damage caused by unlawful processing. We do not take decisions about you based solely on automated processing.

• learn whether we process your personal data and obtain access to it;
• learn the purposes of processing and the third parties, in the United Kingdom or abroad, to whom your data is transferred;
• ask us to correct inaccurate or incomplete data;
• ask us to delete or destroy your data where the conditions for processing no longer apply;
• object to processing, including processing for direct marketing;
• ask us to restrict processing in certain circumstances;
• receive the data you gave us in a structured, commonly used format and have it sent to another controller, where applicable (portability);
• withdraw your consent at any time where processing is based on consent;
• lodge a complaint with the competent supervisory authority.

13. How to exercise your rights

Send your request to info@haqqitours.com, stating your name, the contact details you used with us and the right you wish to exercise. We may ask for information to verify your identity before acting on the request, so that we do not disclose data to the wrong person. We answer requests within 30 days.

14. Complaints to the supervisory authority

If you are not satisfied with our response, you may complain to the competent authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO). If you are in the EU or the EEA, you may also contact the data protection authority of the country where you live or work. We would appreciate the opportunity to address your concern first.

15. Marketing communications

We send offers only to people who have opted in, or to existing customers about similar services where the law allows. You can stop any message by replying STOP on WhatsApp or by emailing info@haqqitours.com. Stopping marketing does not affect service messages about a booking you have made.

16. Changes to this policy

We may update this policy to reflect changes in our services, our practices or the law. The date of the latest update is shown on this page. Where changes are significant, we will take reasonable steps to inform travellers with active bookings.

17. Contact

For any question about this policy or your personal data, contact us at info@haqqitours.com or on WhatsApp at @haqqitours. Our team answers in Arabic and English.