Privacy Policy

Last updated: 24 September 2026

This Privacy Policy explains how Travelpack.pro LLC (“TravelPack.pro”, “we”, “us”), 212 E 22nd St Suite, Cheyenne, WY 82001, United States, processes personal data when you use the website travelpack.pro, our hotel enquiry and booking services, and our travel-agency (B2B) portal.

1. Data we collect

• Enquiries and quotes: name, e-mail address, phone number, travel dates, destination, group size and the content of your message.
• Bookings: lead guest name, e-mail, phone, nationality, names and ages of accompanying guests, special requests, chosen hotel, room and meal plan, price and payment status. Payment card details are never stored on our servers; when online payment is offered it is handled by a licensed payment provider.
• Travel-agency accounts (B2B): agency name, address, licence and VAT numbers, contact person, login e-mail and a hashed password, booking history, invoices and balances.
• Technical data: IP address, browser and device type, pages visited, language and currency preferences, and the date and time of requests, collected through server logs and cookies.

2. Why we use your data

• To answer your enquiries and prepare quotes (performance of pre-contractual steps at your request).
• To make, confirm, modify and cancel hotel bookings, issue vouchers and invoices, and communicate with the hotel about your stay (performance of a contract).
• To manage agency accounts, credit limits and payments (performance of a contract, legitimate interest in managing our business).
• To operate, secure and improve the website, prevent fraud and abuse, and keep statistics (legitimate interest).
• To comply with accounting, tax and travel-industry obligations (legal obligation).
• To send you information about our services only if you have agreed to it; you can withdraw your consent at any time.

3. Who receives your data

Your data is shared only as far as necessary to deliver the service you requested:

• Hotels and accommodation providers in Makkah and Madinah, who receive the guest names and stay details needed to hold and honour your reservation.
• Hotel wholesalers and booking suppliers through which some rooms are contracted (for example Emerging Travel Group / RateHawk), who receive the booking details required to confirm the room.
• Service providers acting on our instructions: web hosting, e-mail delivery, payment processing and analytics.
• Authorities where the law requires it, for instance for Hajj and Umrah registration or tax audits.

We do not sell personal data and we do not share it with third parties for their own marketing.

4. International transfers

TravelPack.pro operates from the United States and serves hotels in the Kingdom of Saudi Arabia; our servers may be located in either country. When data leaves the country where you live, we rely on the contractual and organisational safeguards required by the applicable law (including the Saudi Personal Data Protection Law and, for residents of the European Economic Area or the United Kingdom, standard contractual clauses).

5. How long we keep it

• Enquiries that do not lead to a booking: 24 months after the last exchange.
• Bookings, vouchers, invoices and payments: for the duration required by accounting and tax law (generally 10 years), then deleted or anonymised.
• Agency accounts: for the life of the business relationship plus the legal retention period.
• Server logs: up to 12 months.

6. Cookies

The website uses a strictly necessary session cookie (security and form protection), a preference cookie that remembers your language and currency, and — only when enabled in our settings — Google Analytics measurement cookies to understand how the site is used. You can block or delete cookies in your browser; the site keeps working, but your preferences will not be remembered.

7. Security

Connections to the website are encrypted (HTTPS), passwords are stored only as salted hashes, access to booking data is restricted to authorised staff and partners, and our administration tools are protected by authentication and rate limiting. No method of transmission over the Internet is fully secure, so we cannot guarantee absolute security.

8. Your rights

Depending on where you live (including under the Saudi PDPL and the EU/UK GDPR), you can ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent. To exercise these rights, use the contact form or write to our postal address above; we answer within 30 days and may ask you to confirm your identity. You may also complain to the data-protection authority of your country.

9. Children

Our services are intended for adults. Data about minors is processed only when a parent or guardian provides it as part of a booking (for example the names and ages of children travelling with them).

10. Changes and contact

We may update this policy when our services or the law change; the date at the top shows the latest version. Questions about privacy can be sent through the contact form, by WhatsApp using the number shown on every page, or by post to the address above.