1. Introduction

Welcome to Al Kiswah Umrah Transport. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data: includes first name, last name, username or similar identifier.
• Contact Data: includes email address and telephone numbers.
• Transaction Data: includes payment card details processed on our behalf by Stripe, Inc., our third-party payment processor. We do not store your full card number, CVV, or card expiry date on our own servers. Stripe's handling of your payment data is governed by Stripe's own Privacy Policy (https://stripe.com/privacy).
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

3. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To process and deliver your booking.
• To manage our relationship with you.
• To improve our website, products/services, marketing or customer relationships.
• To recommend products or services that may be of interest to you.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

5. Third-Party Payment Processing

We use Stripe, Inc. to process all online card payments. When you make a payment, your card information is transmitted directly and securely to Stripe using industry-standard encryption. Stripe is PCI-DSS Level 1 certified, the highest level of certification available in the payments industry. We only receive confirmation of payment success/failure and a non-sensitive payment reference — never your full card details.

6. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us using the details set out below: