Privacy notice
How Safar e Hur collects, uses and protects personal information. Last updated 1 November 2026.
This notice explains how Safar e Hur Ltd uses the personal information of people who contact us, register interest, join our mailing lists, apply for or travel on our journeys, and use My SEH, our pilgrim portal.
Safar e Hur Ltd is a private limited company registered in England and Wales (Company No. 17227563). We are the controller of the personal information described here, and we are registered with the Information Commissioner’s Office (ICO).
For any question about your information, or to use any of your rights, please email info@safarehur.com.
We collect only what we need for each stage of a journey. Taking part in a pilgrimage may reveal your religious beliefs, and we treat everything we hold about you with that in mind.
- Interest and enquiries
- Your name, email address, telephone number, country of residence, how many people may travel, and anything you choose to tell us in your message.
- Mailing lists
- Your name and email address, and a record of when you confirmed that you wanted to hear from us.
- My SEH account
- Your email address and a password, which our sign-in provider stores only in scrambled form. Nobody at Safar e Hur can see it.
- Applications and bookings
- Names as on the passport, date of birth, nationality, contact details, the people travelling with you, the package chosen, your answers to the journey’s questions, and payment records.
- Travel documents
- Passport details and scans, and visa documents, needed to arrange visas and accommodation.
- Health and accessibility
- Only if you choose to tell us, and only after you have given explicit consent: mobility, medical, dietary or accessibility needs, so that we can support you safely.
- Emergency contacts
- The name, relationship and telephone number of someone we can contact in an emergency. Please let them know that you have given us their details.
- Children
- A parent or guardian gives us a child’s details. Children do not have their own accounts.
- Payments
- Amounts, dates, the name of the person paying and the bank reference. We never ask for or keep card or bank account numbers.
- Using this website
- When you send a form, a scrambled form of your internet address that cannot be turned back, used only to stop spam.
The law requires a reason, called a lawful basis, for each use of personal information. Ours are:
- Arranging your journey
- Reviewing applications, offering places, bookings, visas, accommodation, transport and keeping you informed. Basis: our contract with you, or steps you ask us to take before one. For a child, the contract is with the parent or guardian.
- Replying to you
- Answering enquiries and registrations of interest. Basis: our legitimate interest in replying to people who contact us.
- News of future journeys
- Only if you ask for it. Basis: your consent, which you can withdraw at any time using the link in every email.
- Religious belief
- Your journeys with us may reveal your faith. We use this only to arrange and record those journeys, and share it outside Safar e Hur only as this notice describes.
- Health and accessibility
- Supporting you safely during the journey. Basis: your explicit consent. In an emergency, we may share what is needed to protect someone’s life.
- Payments and records
- Recording payments and keeping company and tax records. Basis: legal obligation, and our contract with you.
- Safety and security
- Safeguarding children, protecting accounts and keeping a record of changes. Basis: legitimate interests, and legal obligation where it applies.
- Previous travellers
- If you travelled on Arbaeen 2026, we keep the details you gave us then, so that your journey appears in My SEH. Basis: legitimate interests. You can ask us to remove them.
- Photographs
- We publish photographs in which people can be recognised only with their consent.
We never sell your information. We share it only where it is needed:
- Service providers
- Supabase (database and sign-in, in London), Vercel (website hosting, in London), Resend (sending email, in Ireland) and Google Workspace (our email inbox). They act only on our instructions.
- Journey suppliers
- Hotels, transport companies and visa services in Iraq receive only what they need to deliver your journey, such as names, passport details and rooming.
- Authorities
- Where the law requires it, for example immigration authorities, the police or the courts.
Some of our service providers are United States companies whose staff may access information from outside the UK. These transfers are protected by UK data protection safeguards, such as the UK–US data bridge or the UK’s approved contract terms.
Iraq is not covered by UK adequacy arrangements. We send journey suppliers there only what is necessary to deliver the journey you have asked us to arrange.
- Passport and visa documents
- Deleted after the journey, normally within 180 days of being uploaded.
- Health information
- Normally deleted 90 days after it is given.
- Bookings and payments
- Six years after the end of the financial year in which the journey took place, as company and tax rules require.
- Enquiries and interest
- Two years after we last heard from you, unless you go on to book.
- Mailing lists
- Until you unsubscribe.
- Your account and journey history
- While your account is open. If you ask us to close it, we keep only what we must, such as payment records.
You can ask for a copy of your information, ask us to correct or delete it, ask us to restrict or stop using it, and ask for it in a format you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. We do not make decisions about you by automated means.
To use any of these rights, please email info@safarehur.com. We will reply within one month.
If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Only the people who need your information for their role can see it. Staff use two-step sign-in, passport documents are visible to a small number of named people, and every view of a document is recorded. If something goes wrong, we will tell you, and the ICO where the law requires.
We use only the cookies needed for this website to work, such as keeping you signed in to My SEH. We use no advertising or analytics cookies.
We will update this notice when the way we use information changes, and show the date at the top of the page.