MyUmrah's Privacy Notice

 

This privacy notice is valid for all websites, applications or other services and offerings (collectively "the Services") operated by Haramian Global Resources and its subsidiaries ("we","us", or "MyUmrah").

In this Privacy Notice, we provide information about how Haramain Global Resources processes personal data in relation to your use of the Services. Personal data is any data that can be used to identify you, either directly or indirectly.

As a metasearch company, Haramain Global Resources may redirect you to the websites or apps of third parties. Please note that we have no control over these third-party services, and that your use of these third-party services is subject to the privacy policies posted on the corresponding websites or apps, and not to the Privacy Notice.

Contibuous technological development, changes to our services, changes to laws, or other reasons may require us to amend our Privacy Notice.We will make changes to this Privacy Notice regularly, and we ask that you keep yourself informed of its contents.

 

1.  Who is responsible for the processing of personal data described in this Privacy Notice?

Haramain Global Resources controls the processing operations described in this Privacy Notice. Haramian Global Resourcses is a company incorporated under the laws of Malaysia and it has its office at No 31, Jalan S2 B16, Dataran Centario, Pusat Dagangan Seremban 2, 70300 Seremban, N.Sembilan.

To exercise your data protection rights, or to ask a general question about the processing of your personal data by Haramain Global Resources or about this Privacy Notice, you can contact our team by sending an email to admin@myumrah.my.

To contact our data protection officer directly, please send an email to admin@myumrah.my with the subject line "To the attention of the data protection officer". Please note, emails send to this address will not automatically be confidential/only read by the data protection officer. Should you require a confidential exchange with our data protection officer, please state so in your email to us and we will arrange such exchange.

 

2.  Your rights

You have the following rights with respect to your personal data. Please refer to section 1 to get information about how to contact us and to exercise such rights.

2.1  General rights

You have the following legal data protection rights under the relevant legal conditions, the right to information, the right of access, the right to deletion, the right to correction, the right to restriction of processing and the right to data portability.

2.2  Right to revoke consent

You have the right to revoke consent previously provided to us at any time. The consequence of this will be that we will no longer process your personal data in relation to that consent in the future. The revocation of the consent does not affect the legality of any processing carried out on the basis of the consent up to the time of your revocation thereof.

2.3  Right to object to processing of data based on legitimate interests

If we process your personal data on the basis of legitiate interests, you have right to object at any time for reasons arising out of your particular situation against such processing. If you object, we will no longer process your personal data unless we can establish compelling and legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing aids the enforcing, exercise or defending of legal claims.

2.4  Rights to object direct marketing

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to such processing. For further details on how to object to any form of direct marketing, please see Section 6.1.

2.5  Right to complain to a supervisor authority

You also have the right to complain to a competent data protection authority if you believe that your personal data is being processed in violation of applicable data protection legislation. You may contact any data protection authority in Malaysia, in particular at your place of residence.

 

3.  What data we collect from you

When you use our Services, we may process these types of personal data:

• User Data

Personal data collected for the creation of member account, such as your name, email, address, telephone number, password. Contact details and other information you may share with us, such as your postal address, age, gender, state of residence, social network profiles, messages you sent to our team, feedback, comments, replies to survey or interviews, participation to any of our promotional activities.

• Usage data

Information about how you use our Services, including the details inputted by you when you conduct a search using our Services (inclusing destination, date, number of guests), details viewed and links clicked. Interaction with our marketing communication: we may collect information about your engagement with our direct marketing messages, including our newsletter and push notifications (for instance, analytics on the number of times you open our newsletter or click on hyperlinks in it).

• Booking data :When you use of Services and click a link to any package offer that is listed in our Servies, the online booking site making that offer may send us personal data relating to any subsequent booking or reservation that you make on the online booking site.
• Location data:We may process approximate location information based on your IP address (state and district level). Furthermore, with your prior consent, we may use GPS data to provide you with customized search results on your mobile.
• Bank data: We may ask use to share, from time to time, your bank details whenever you place booking in our site.
• Technical data: Examples include IP address, cookies, identification data (session ID, member ID, device ID) access status/HTTP status code, browser software and version,operating systems and its interface, internet service provider, language and other configuration settings.

 

4.  Why and how we use your personal data

Below you will find information about (i) the reasons why we collect and use your personal data, as well as, for each purpose, (ii) the corresponding legal basis and (iii) the categories of personal data invloved. Your personal data may be used in the following ways:

• Provide our Services, including help you compare Umrah Packages offered by our business partners to find you ideal package. Legal basis: performance of a contract, consent.Categories of personal data used: user data, usage data, booking data,location data, technical data.
• Create and maintain a safe and reliable environment for our Services, including of your MyUmrah user account. Legal basis: compliance with legal obligation, legitimate interest. Categories of personal data used: usage data, technical data.
• Understand how you use our Services and use the feedback you may send to us to improve our Services, identify trends in the industry, and develop new products and features to improve your experience.Legal basis: consent,legitimate interest. Categories of personal data used: user date, usage data,booking data, technical data.
• Send you direct marketing communication about our Services or related services, provide you with advertisement on our Services as well on third party websites (whether personalized or not) and otherwise administer promotional activities (such as sweepstakes and similar giveaways). Legal basis: consent, legitimate interest. Categories of personal data used: user data, usage data, technical data.
• Communicate with you, respond to your questions and comments, and provide customer service.Legal basis: performance of a contract, legitimate interest. Categories of personal data used : user data, usage data, booking data, bank data.
• Fulfill contractual obligations with third parties, especially our business partners. Legal basis : performance of a contract, legitimate interest.Categories of personal data used: user data, usage data, booking data.
• Comply with legal obligations, requests from law enforcement, prevent fraud and estabish, exercise ofr defend legal claims. Legal basis: compliance with legal obligation, legitimate interest, performance of a contract. Categories of personal data used: user data, usage data, booking data, technical data.

 

5.  With whom we share your data

We may share your personal data with the following categories of recipients, provided there is an appropriate legal basis:

• Our wholly owned subsidiaries.
• Authentication partners: for instance, when you sign in or log into our Services using third-party services such as Facebook, Google or Apple.
• Third party service providers who provide data processing services to us, such as: hosting and storage providers, customer service providers, communication providers, security and fraud prevention providers, debt collectors, analytics, advertising and marketing providers.
• Third party service providers who provide services to us that are independent data controllers, such as seecurity and fraud prevention services, social media networks and advertising and marketing providers.
• Travel and Tours Agencies which registered with us as our business partners.
• Law Enforcement Authorities. To prevent, detect and prosecute illegal activities, threats to state or public security and to prevent threat to peole's lives.
• As part of a corporate transaction such as a merger, divesture, consolidation, or asset sale.

If we transfer data to our service providers, they may only use the data to perform their tasks.The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have suitable technical and organizational measures and are regularly monotored by us.