Harmain Booking Privacy Policy
This Privacy Policy outlines the practices of Harmain Booking Company ("Harmain Booking," "we," "us," "our") regarding the collection, use, and sharing of information about you when you visit and interact on our website (including mobile and desktop versions) and mobile app (collectively referred to as the "Site"), or through other means connected to the Sites (such as contacting our customer service team via chat or email). Below is a summary of our privacy practices. The full Privacy Policy is available below, and you can click on the links for any of the points detailed in the summary table for further information.
1. Collection: We may gather information such as your name, phone number, email address, and credit card details through your use of the Site or from third-party services, like social media or messaging apps.
2. Use: Your information might be used to provide the services requested, maintain and improve the Site, communicate with you, and send marketing communications.
3. Mobile Devices: With your permission, we can send push notifications about your reservations and selected Harmain Booking programs.
4. Sharing: Your information may be shared with travel suppliers, third-party service providers, business partners, and our affiliate group companies.
5. Country-Specific Privacy Rights: Depending on where you live, you may have the right to request information about how we share certain categories of your information with third parties.
6. Cookies: Cookies and similar technologies may be used to help provide our Site, understand and tailor your preferences, and display relevant advertising.
7. Marketing Channels and Opting Out: Depending on your preferences, we may use different marketing channels to communicate with you. You can opt out of Harmain Booking's direct marketing communications through the unsubscribe or opt-out mechanisms provided in our communications or through your Harmain Booking account, depending on the channel.
8. International Transfers: We ensure appropriate protections for cross-border data transfers as required by law.
9. Information from Other Partners: Information may be collected from affiliated entities, business partners, or other third-party providers, and you may opt out of this collection.
10. Security: Reasonable security measures are in place to protect your information, and we require our service providers to do the same.
11. Data Subject Rights: You have the right to access, correct, delete, or port your information, or object to certain processing.
12. Updates to Privacy Policy: Any material changes will be communicated by posting the updated Privacy Policy and taking other necessary steps.
13. Third-Party Links: Links to third-party websites not owned or controlled by us are provided, governed by their own user terms and privacy statements.
14. Additional Considerations: Information related to minors, policy language, and Terms of Use.
15. Contacting Us: For any questions regarding this Privacy Policy or our privacy practices, please contact us as detailed below.
1. Information We Collect
We collect information that you provide when using the Site, such as your or your guest's name, address, phone number, credit card details, email address, travel supplier name, travel location and/or length of stay, and your Harmain Booking account password for your travel reservations. For flight reservations, we may also collect passenger name, date of birth, gender, nationality, passport details (including passport number, country of issue, and expiry date), information about your flight (e.g., prices, booking date, itinerary, check-in details, additional services purchased), and information on loyalty or similar programs with your flight supplier.
By visiting our Site, we may automatically collect certain usage information, such as your IP address, geographic data, country, search preferences, browser, and information about your device's operating system, application version, language settings, and pages shown to you. If you are using a mobile device, we might collect device ID, location (with consent), and device-specific settings.
If booking tours or travel activities, additional information may be collected, including passport details, date of birth, height and weight, pick-up location, preferred language, and any special requirements for participation.
For customer support interactions or communications through social media, messaging apps, or with travel suppliers via us, we will collect information you choose to provide.
Submitting reviews, participating in referral programs or promotions, providing feedback, or seeking help with the Sites or our communications platforms also involves providing personal data.
When making a booking for other guests or on behalf of someone else, ensure they are aware and have accepted how Harmain Booking uses their information (as described in this Privacy Policy).
Travel suppliers may also share information about you with us – this can occur if you have questions about your pending booking or if disputes arise regarding your booking.
Participation in Harmain Booking programs may involve collecting additional information from accommodations about your stay; for example, see the information collected as part of the Harmain Booking Umrah program. When making a reservation, our system registers the means and websites used for the reservation. We may also collect certain information through cookies, tags, and similar technologies, as detailed below.
The Harmain Booking Umrah Program
For reservations made on our dedicated Umrah landing page, we may collect, store, process, and disclose additional personal data, including passport numbers, nationality, flight details, and date of birth for each guest under a reservation, as well as the email address and telephone number of the lead guest. This data is required to process travel reservations and visa applications with Saudi Arabian Government authorities, including the Ministry of Hajj and Umrah, and the Ministry of Foreign Affairs. Your personal data will be disclosed through the ministries’ service provider in Saudi Arabia and retained by Harmain Booking as outlined in this Privacy Policy.
The Harmain Booking Together Program (Thailand)
For reservations made through the Harmain Booking Together Program, additional personal information required includes the last digits of your Thai citizen ID card and the telephone number used to register for the Program. This data is necessary for processing travel reservations and meeting Thai government eligibility requirements. Your data may be disclosed.
2. Utilization of Collected Information
The information gathered via the Platform is used to:
· Facilitate the services you've requested, including establishing a user profile, processing and confirming your booking, and engaging in communication about requested services (e.g., pre-booking or post-booking support through various channels like our Platform, email, phone, social messaging apps such as WhatsApp, Line, Kakao, WeChat, etc.), handling special requests, cancellations, rewards.
· Send marketing communications related to products, services, updates, offers, and promotions that might interest you. The "Marketing Channels and Opting-out of Marketing" section provides more details on the marketing channels we use and how you can opt out. You always have the option to decline.
· Conduct surveys or provide you with information about our services on our Platform or on other sites you may visit.
· Enhance and personalize the Platform experience, including displaying/providing ads about Harmain Booking's or third parties' products and services that might be of interest to users, and for internal training purposes.
· Ensure you’re and the Platform's security.
· Fulfil legal rights or obligations, including responding to requests and legal demands.
· When you book through one of our business partners' websites or apps, we may also receive information like your name and booking details to process your booking and to identify the originating channel of your booking.
During interactions with our customer support team, live monitoring or call recordings may be conducted for quality and reference purposes, including the use of recordings for handling claims, training, and fraud detection. If you prefer not to have your call recorded, you may opt out by stating your preference or simply by disconnecting. Call recordings are stored temporarily and are automatically deleted after a certain period unless Harmain Booking has a legitimate reason to retain the recording for a longer duration, including for fraud investigation and legal purposes.
If you have not completed a booking online, we may send up to two reminders to proceed with your booking. This additional service helps you continue a booking without needing to restart the process. Reminder communications are one-time only, and booking details used for these reminders are deleted in accordance with our data retention policy.
Please note that confirmation emails and text messages sent after your booking are not marketing communications. These are part of the booking process, containing information for your check-in and an invitation to submit a review. You will continue to receive these even if you have opted out of our marketing communications. Opting into Price Alerts does not impact your other communication preferences. You can opt out of Price Alerts by clicking the "turn off price alerts" link or a similar option in the Price Alert message.
If you have chosen a Mix and Save offer but only completed part of it (e.g., booking one room but not the other), we may send you an email to remind you to complete all bookings for your selected offer. This communication is part of the Mix and Save booking process, confirming your selection and reminding you in case you forgot to complete all bookings. We may also send a pre-check-in email about room changes during your stay.
If you're booking for another person, you have the option to include the guest's email for them to receive the booking confirmation and an invitation to submit a review, according to this privacy policy.
Customer Support on Social Messaging Apps
We may operate social media accounts and integrate with social media services (e.g., WhatsApp, Line, Kakao, WeChat) for communication about your bookings and our services. Connecting with us through these apps may involve your social media provider sharing information like your username, phone number, or profile details, as governed by your provider's privacy settings. We advise reading their privacy and cookie policies thoroughly.
We recommend not sharing sensitive personal data (including credit card information) on any customer support channels. If you choose to share, you explicitly consent to Harmain Booking using that information as described in this Privacy Policy.
Communications with Travel Suppliers on the Platform
We may offer you and certain travel suppliers various means to communicate about bookings and reservations, directing communications through the Platform.
You can reach out to us with queries about your booking or travel via the Platform and other available channels.
We may monitor communications on any provided channels and use automated systems to review, scan, and analyze communications for security, fraud prevention, compliance with legal and regulatory requirements, misconduct investigations, product development and improvement, research, customer engagement (including providing information and offers that we believe may be of interest to you), and customer or technical support. We reserve the right to block or review communications that we believe may contain malicious content, spam, or pose a risk to you, travel suppliers, us, or others. Note, all communications sent or received using the Platform’s communication tools will be received and stored by us. Business partners through whose platform you made the booking and travel suppliers may choose to communicate with you directly via email or other channels that we do not control.
Algorithms and Machine Learning
As detailed in our Terms of Use, we employ tools in providing and seeking to improve and develop our services that use algorithms and machine learning (including predictive analytics tools and tools deploying generative AI algorithms to create new content). These tools may utilize your information. In cases where these tools are used, we may ask you to refrain from entering personally identifiable details. We consider applicable laws and other relevant factors in how we deploy and use such tools.
3. Mobile Devices
With your consent, we may send push notifications about your booking, guest reviews, potential future stays, or participation in Harmain Booking programs, including coupons. You may allow us to access your location or contact details to provide requested services. When you upload a photo from your mobile device, it may also include location information. Please check your mobile device settings to understand how to change preferences for sharing information or receiving (or opting out of) push notifications (including SDK and push token data). Device operating systems may differ in default settings for push notifications.
4. Sharing Your Information
In relation to your use of our Platform and services, we may share your information as follows:
Travel Suppliers including accommodation properties (e.g., the specific accommodation you've requested us to book) and/or third-party accommodation suppliers (e.g., Booking.com), airlines, car rental companies, insurance providers, and, where available, activity providers, who fulfill your travel reservations. These suppliers, acting as independent data controllers, may contact you as necessary to obtain additional information, facilitate your travel reservation, communicate with you before your arrival, or respond to a review you submit, in accordance with their own privacy policies. Third-Party Service Providers who provide data processing services (e.g., web hosting) or otherwise process personal data for purposes such as credit card and payment processing, business analytics, customer service, marketing, survey distribution, online services and advertising delivery tailored to your interests, and/or fraud prevention (including Google reCAPTCHA, subject to its Privacy Policy and Terms of Use). We may share one-way hashed information with third-party partners who may combine it with other identifiers for business analytics on advertising effectiveness. Our third-party service providers are only allowed to process information as necessary for their functions and are prohibited from sharing or using the information for other purposes. Business Partners with whom we may jointly offer products or services, or whose products or services may be offered on our Platforms. You can identify when a third-party business partner is involved because their name will appear alongside ours. If you choose to access these optional services, we may share your personal data with those partners on occasion. Examples include a third-party loyalty program through which you earn points or a third-party booking site through which you made the booking. These third parties may contact you directly to obtain additional information under their privacy policies. Corporate Family refers to Harmain Booking affiliates that are part of our corporate family. Your personal data may be shared within our corporate family for internal decision-making, administrative purposes, and to provide you with products or services that may interest you. Other Entities for Legal Reasons, including law enforcement, regulatory bodies, and other public authorities (e.g., in response to a court order, subpoena, or legal process), to enforce our terms, policies, or rights, to protect our operations, rights, privacy, safety, property, yours, or others', or to allow us to pursue available remedies or limit damages we may sustain. In the event of a merger, acquisition, or sale of assets, we may transfer information, including personal data, provided that the receiving party agrees to respect your personal data in a manner consistent with our Privacy Policy. We may share anonymized or aggregated data with others, such as advertisers, professionals, or business partners, to analyze Platform usage trends, conduct market research, or improve and tailor our services. This data does not identify you personally.
We do not sell or rent your personal data.
5. International Data Transfers
The sharing of your information as described in this Privacy Policy may involve transferring your data outside of your country of residence, to countries whose data protection laws may differ from those in your country (including to countries outside the European Economic Area). In such cases, we ensure that the recipient of your personal data offers an adequate level of protection, for instance by entering into the appropriate data transfer agreements and, where required, standard contractual clauses for the transfer of data as approved by the European Commission (Art. 46 GDPR) or other relevant authorities. You may obtain a copy of these measures by contacting us as outlined below.
6. Security and Retention of Your Personal Data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. While no system is completely secure, we believe the measures we have implemented reduce the likelihood of security problems to a level appropriate to the type of data involved. We continuously monitor and test our systems and use advanced technologies (such as encryption) to protect your personal data.
We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the Platform to you; (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
7. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, update, delete, restrict, or object to our processing of your data. You may also have the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal), the right to receive a copy of your data in a structured, commonly used, and machine-readable format (and to request the transfer of this data to another entity), and the right not to be subject to automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise these rights, please contact us as specified below. We may request specific information from you to help us confirm your identity and process your request.
