Privacy Policy

This policy explains how Tawafe ("we") handles personal information when you visit our website, request a demo, or when your company uses the Tawafe system to run its Hajj and Umrah operations.

Who we are and our role

• For website visitors and demo requests: we are responsible for your information.
• For customer and pilgrim data inside the system: the subscribing company (the Hajj and Umrah operator) is responsible for that data, and we process it on its behalf and only on its instructions. See "Data Protection & Processing" for details.

Information we collect

Through the website

• Demo request form: name, company name, phone number, email (optional), city, company size, notes, and the modules and plan you selected.
• WhatsApp contact: the contact button opens WhatsApp; that conversation is subject to WhatsApp's own policies.
• Basic technical data: such as IP address and browser type, logged by our servers for security and abuse prevention.

We do not use advertising trackers or analytics cookies on the website.

Through the Tawafe system (subscribing companies)

• Staff account data: name, email, role and permissions.
• Data the company enters about its customers and pilgrims, such as names, phone numbers, passport details, contracts, payments and housing.
• Technical logs needed to run the system and diagnose errors.

How we use information

• To respond to demo requests and follow up with you.
• To provide, operate, maintain and support the system.
• To protect the platform and prevent fraud and abuse.
• To invoice and manage subscriptions.
• To meet legal requirements.

We do not sell personal information, and we never use a company's pilgrim data for our own marketing.

Sharing information

We share information only as far as necessary with:

• Service providers that help us operate: hosting and databases, network protection and routing, email delivery, internal automation for handling demo requests, and the smart reading service for passport images when the passport-scanner app is used.
• Authorities: when we are legally required to.

Our service providers must protect the data and use it only to provide their services to us.

Security

We apply reasonable technical and organisational measures, including encrypted connections (HTTPS), isolation of each company's data at the database level, role-based permissions and restricted administrative access. No system is 100% secure, but we continuously work to improve protection.

Retention

• Demo requests: kept as long as needed to follow up with you, then deleted or anonymised.
• Company data in the system: for the duration of the subscription, then as described in "Data Protection & Processing".

Your rights

You may ask to access, correct or delete your information, or object to its processing, in line with applicable law. If your information is held by a Hajj and Umrah company that uses Tawafe, please contact that company directly; we will help it handle your request.

Changes to this policy

We may update this policy from time to time; the date of the latest update appears at the top of this page. For material changes we will notify subscribing companies in advance.

Contact us

For any privacy question: WhatsApp ⁦+90 582 570 10 25⁩ — Email ⁦[email protected]⁩