Privacy Policy

When you use our services, we may collect the following types of personal information: • Contact Details: Full name, email address, phone number, and postal address provided through inquiry forms, booking requests, or direct correspondence. • Travel Documents: Passport details, visa application data, and nationality information required for booking flights, hotels, and processing visa applications on your behalf. • Payment Information: Credit/debit card details or bank transfer information necessary to complete booking transactions. Payment data is processed through secure, PCI-compliant payment gateways and is not stored on our servers. • Booking Preferences: Travel dates, destination preferences, seating preferences, dietary requirements, and any special accommodation requests. • Corporate Client Data: Company name, corporate travel policy details, employee travel profiles, and billing information for B2B account management. • Website Usage Data: IP address, browser type, device information, pages visited, and interaction patterns collected through cookies and analytics tools to improve our website experience.

We use the personal information we collect for the following purposes: • Booking & Reservation Processing: To make flight, hotel, tour, and visa bookings on your behalf with airlines, hotels, and consular services. • Customer Communication: To respond to inquiries, provide booking confirmations, send itinerary updates, and share important travel advisories. • Service Improvement: To analyze usage patterns and feedback in order to enhance our website, customer service, and travel offerings. • Legal & Regulatory Compliance: To meet obligations under Pakistani law, IATA regulations, and international travel industry requirements. • Corporate Account Management: To administer corporate travel accounts, generate consolidated reports, and manage credit arrangements. • Marketing Communications: With your consent, to send promotional offers, travel deals, and newsletter content. You may opt out at any time.

We share your personal data only when necessary to fulfill our services: • Airlines & Hotels: We transmit booking details to airlines, hotel chains, and ground service providers to secure your reservations. • Visa Authorities: When processing visa applications, we submit required documentation to relevant embassies and consular offices. • Payment Processors: Payment details are shared with PCI-compliant payment gateways for secure transaction processing. • GDS Platforms: Booking data is processed through our Global Distribution System partners (Travelport/Galileo) for real-time reservation management. • Legal Authorities: We may disclose information if required by law, court order, or government regulation. We do not sell, rent, or trade your personal information to any third party for their marketing purposes.

Our website uses cookies and similar technologies to: • Essential Cookies: Enable core website functionality such as navigation, form submissions, and session management. • Analytics Cookies: Help us understand how visitors interact with our website through anonymized usage statistics (e.g., Google Analytics). • Preference Cookies: Remember your settings, language preferences, and previously viewed destinations. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

We implement appropriate technical and organizational measures to protect your personal information: • SSL/TLS encryption for all data transmitted through our website. • Secure storage systems with access controls limited to authorized personnel. • Regular security assessments and updates to our infrastructure. • Staff training on data protection and confidentiality obligations. While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy: • Booking Records: Retained for a minimum of 7 years as required by Pakistani tax and aviation regulations. • Visa Application Records: Retained for 3 years following application submission. • Marketing Preferences: Retained until you opt out or request deletion. • Website Analytics: Anonymized data retained for up to 26 months.

You have the following rights regarding your personal data: • Access: Request a copy of the personal information we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your personal data, subject to legal retention requirements. • Opt-Out: Withdraw consent for marketing communications at any time. To exercise any of these rights, please contact us at info@alkaram.pk or call +92 370 9950898.

When you communicate with Al-Karam Travels via our official social and messaging channels (WhatsApp Business, Facebook Page Messenger, and Instagram Direct), we collect and process necessary conversation data: • Data Collected: Your public profile name, phone number (for WhatsApp), Page-Scoped User ID (PSID), Instagram Scoped ID (IGSID), social handle, and message transcripts. • Purpose of Processing: To respond to your customer support requests, provide real-time airline ticket quotes, send hotel reservation confirmations, update visa application progress, and coordinate emergency travel assistance. • Zero Third-Party Advertising Sharing: We strictly do not sell, rent, lease, or transfer Meta user data or message content to third-party data brokers, advertising networks, or unauthorized entities. • Retention: Social messaging conversations are retained solely for the duration necessary to service your travel bookings, resolve inquiries, and comply with aviation audit regulations.

Under Meta Platform Policy and global privacy standards (GDPR/CCPA), users have the right to request deletion of any personal data collected through Facebook, Instagram, or WhatsApp integrations. Method 1: Automated Deletion via Facebook Settings (Recommended) 1. Go to your Facebook profile's Settings & Privacy > Settings. 2. Navigate to Apps and Websites under the Security section. 3. Locate Al-Karam Digital CRM (or Al-Karam Travels). 4. Click Remove. This automatically triggers our secure server-to-server Data Deletion Callback endpoint (/api/meta/data-deletion), which removes and anonymizes your profile records and provides a unique confirmation tracking code. Method 2: Direct Written Request to our Data Protection Officer If you contacted us directly on WhatsApp, Facebook Messenger, or Instagram and wish to have your contact details and message transcripts purged from our CRM: • Email: info@alkaram.pk with the subject line: *"Meta Data Deletion Request"*. • Include your phone number (for WhatsApp) or social media handle/PSID. • Our engineering and compliance team will verify your request and purge your personal communication records within 48 business hours.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any significant changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: Al-Karam Travels (Pvt) Ltd. Head Office: 07, Business Plaza, Mumtaz Hasan Rd, Off I.I. Chundrigar Rd, Karachi Email: info@alkaram.pk Phone: +92 370 9950898