Privacy Policy

This Privacy Policy explains how Al-Maqam ("Al-Maqam", "we", "us", or "our") collects, uses, shares, and protects your personal information when you visit our website, create an account, or use our services for hotels, transport, eSIM, prayer times, and related content for Makkah and Madinah (collectively, the "Services").

By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services. This Policy should be read together with our Terms of Service.

1. Who We Are

Al-Maqam is a travel-assistance platform that helps pilgrims and travellers find and book accommodation, transport, eSIM connectivity, and access spiritual resources for their journey to the Holy Lands. For any privacy matter, you can reach our data protection contact using the details in Section 13.

2. Information We Collect

2.1 Information you provide to us

• Account data — name, email address, password (stored in encrypted/hashed form), and preferred language.
• Booking and order data — travel dates, city and hotel preferences, traveller details, and items added to your cart or checkout.
• Communications — messages, support requests, newsletter sign-ups, and feedback you send us.

2.2 Information collected automatically

• Device and usage data — IP address, browser type, device identifiers, pages visited, and time spent on the Services.
• Session data — an anonymous session identifier stored in your browser to remember your activity and preferences.
• Cookies and similar technologies — see Section 7.

2.3 Information from third parties

• Booking and affiliate partners — when you book accommodation through partners such as Booking.com (via Travelpayouts), we may receive confirmation of referrals or transactions.
• Payment processors — limited transaction confirmation data. We do not store full card numbers on our servers.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Services, including processing bookings and orders;
• Create and manage your account and authenticate your access;
• Personalise content, language, prayer times, and recommendations;
• Communicate with you about bookings, support, updates, and — where you have opted in — newsletters and offers;
• Improve and analyse the performance, security, and usability of the Services;
• Detect, prevent, and address fraud, abuse, or technical issues;
• Comply with legal obligations and enforce our Terms.

4. Legal Bases for Processing

Where applicable law (such as the GDPR) requires it, we rely on the following legal bases:

• Contract — to provide the Services you request;
• Consent — for marketing communications and non-essential cookies (you may withdraw consent at any time);
• Legitimate interests — to secure, improve, and protect the Services, balanced against your rights;
• Legal obligation — to comply with applicable laws.

5. How We Share Information

We do not sell your personal data. We share information only as follows:

• Service providers — hosting, infrastructure, analytics, and email providers acting on our instructions;
• Booking and travel partners — when you choose to book through them, to complete your reservation;
• Payment processors — to process transactions securely;
• Legal and safety — where required by law, court order, or to protect rights, safety, and property;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. International Data Transfers

Your information may be processed in countries other than your own, including where our hosting and partners operate. Where data is transferred internationally, we take steps to ensure an appropriate level of protection consistent with applicable law.

7. Cookies and Tracking

We use cookies and similar technologies (including browser local storage) to keep you signed in, remember preferences, maintain your cart, and understand how the Services are used. You can control cookies through your browser settings; disabling some cookies may affect functionality.

8. Data Retention

We retain personal data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

9. Data Security

We implement technical and organisational measures designed to protect your information, including encryption in transit, hashed passwords, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data;
• Object to or restrict certain processing;
• Withdraw consent at any time;
• Request a portable copy of your data;
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 13.

11. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us