Privacy Policy

1. Who we are

Makkah Madinah Hajji Services is a Uganda-based Hajj and Umrah travel agency. We are the data controller for the personal information described in this policy.

2. Information we collect

We collect the information you provide directly: your name, email address, phone number, and travel details when you create an account, submit an enquiry, or book a package. We collect travel documents you upload (passport, national ID, visa, payment receipts) solely to process your journey. We collect payment transaction data through our payment providers (we do not store full card numbers).

3. Device and fraud-prevention data

To protect your account and prevent fraud, we use Fingerprint, a device-identification and risk-intelligence service, on high-value actions such as sign-in, registration, password recovery, booking, payment and administrative actions. Fingerprint may collect technical data about your device and browser (such as device and browser characteristics, operating system, and network signals) to generate a unique visitor identifier and a risk assessment. We store only a minimal record — a visitor identifier, request identifier, user identifier, platform, action, risk result and timestamp — and use it to detect suspicious activity. This data is processed on the basis of our legitimate interest in securing our services, and Fingerprint is our data processor for this purpose.

4. How we use your information

We use your information to provide and manage your bookings, process payments, arrange visas and travel documents, communicate with you about your journey, respond to enquiries, secure our services against fraud, and comply with legal obligations. We do not sell your personal information.

5. Sharing

We share your information only where necessary: with our staff, with service providers (airlines, hotels, visa processors, payment providers, email and analytics providers), and with authorities where required by law. All providers are bound to protect your data.

6. Storage and security

Your data is stored on encrypted infrastructure (Supabase and Vercel). Travel documents are held in private, access-controlled storage and are accessed only through short-lived, authorized links. We retain your data for as long as needed to provide services and meet legal obligations, after which it is deleted or anonymized.

7. Your rights

Depending on your location (including under the EU/UK GDPR and Uganda’s Data Protection and Privacy Act), you may have the right to access, correct, delete, or obtain a copy of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below; we will respond within the legally required timeframe.

8. Contact

For any privacy questions or requests, email us at info@makkahmadinah.ug.