1. Who we are
ENJAAZ PLUS TRAVEL LTD (company number SC874759, registered in Scotland) is the controller of the personal information described in this policy. Our office is at House of Sher Mall, Unit 11, 1st Floor, 203–211 Wallace Street, Glasgow G5 8NT, United Kingdom.
Questions about this policy or your information: email bookings@enjaazplustravel.co.uk or call +447555379966.
2. What we collect
- Contact details: your name, phone number and email address.
- Travel details: destinations, dates, travellers, preferences and anything else you tell us about the service you need.
- Identity and travel documents you upload or send us, such as passport copies and photos, when a service (for example a visa, Umrah or security approval) requires them.
- Payment records: amounts, dates and references. Card payments are handled by Stripe; we never see or store your full card number.
- Messages you exchange with us by phone, WhatsApp, email or the website chat.
- Technical information needed to run the website safely, such as your IP address and browser type, and the advertising campaign (UTM link) that brought you to the site.
3. Information about other travellers and children
If you book for other people, you confirm that they have agreed to you giving us their information and that you will share this policy with them. For children, the information must be given by a parent or guardian.
4. Sensitive information
Some services involve special category information: an Umrah or Hajj booking can reveal your religious beliefs, and you may tell us about health conditions, dietary or mobility needs so that we can arrange suitable travel or insurance.
We use this information only to provide the service you asked for, with your explicit consent, which you give when you request that service or tell us about your needs. You can withdraw your consent at any time, but we may then be unable to provide that service.
5. Why we use it, and our legal basis
- To give you quotes, make and manage your bookings and applications, take payments and keep you updated. This is necessary to perform our contract with you, or to take steps you ask for before entering into one.
- To meet legal obligations, such as keeping accounting records and responding to lawful requests from authorities.
- To keep our services secure, prevent fraud and improve how we work. These are our legitimate interests, and we balance them against your rights.
- We only send you marketing if you have agreed to it or, where the law allows, about similar services you have bought from us. Every marketing message lets you opt out, and you can also opt out at any time by contacting us.
6. Do you have to give us your information?
You do not have to, but without the information a service needs (for example passport details for a visa or flight booking) we cannot provide that service.
7. Who we share it with
- Travel suppliers and authorities needed for your booking or application: airlines, hotels, transport and tour providers, embassies, visa centres and the relevant government bodies.
- Service providers that help us run the business, under contracts that protect your information: Stripe (card payments), Hostinger (website hosting in the United Kingdom and email), Meta (WhatsApp messages) and Anthropic (the AI assistant that answers website chat and WhatsApp messages).
- Professional advisers, insurers and authorities where the law requires it or to establish or defend legal claims.
- We never sell your personal information.
8. Our AI assistant and automated decisions
Our website chat and WhatsApp may be answered first by an AI assistant, which can hand the conversation to a member of our team at any time. It answers questions and records requests; it does not make decisions about you that have legal or similarly significant effects. Every quote, booking and application is handled by our staff.
9. International transfers
Some suppliers and service providers are outside the United Kingdom (for example the airline or embassy for your destination, or service providers based in the United States). When we send information abroad we rely on UK adequacy regulations or on safeguards approved under UK data protection law, such as the International Data Transfer Agreement. Information sent to an embassy or supplier abroad because your trip or application needs it is transferred to perform your contract.
10. How we protect it
Uploaded documents are stored encrypted, and links for documents and payments are private and expire. Access to customer records is limited to staff who need it for their role.
11. How long we keep it
We keep booking and payment records for six years after the end of the financial year they relate to, as UK tax and company law require. We keep identity documents only for as long as your booking or application needs them, and other information only as long as necessary for the purposes above.
12. Your rights
- You have the right to access the personal information we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent you may withdraw it at any time.
- To use any of these rights, or to complain about how we handle your information, email bookings@enjaazplustravel.co.uk. We reply within one month.
- If you are not satisfied with our answer, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.