Privacy Policy

Effective Date: November 1, 2026

Company Name: ZARAYA TRAVEL GROUP LIMITED (“we,” “us,” or “our”)

Company Number: 17234076

At ZARAYA TRAVEL GROUP LIMITED, we are committed to safeguarding and protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy outlines how we collect, process, utilize, and protect your information when you interact with our website, direct contact channels, and digital advertising forms (including TikTok Lead Generation forms).

1. Data Controller and Contact Information

For the purposes of applicable data protection laws, ZARAYA TRAVEL GROUP LIMITED is the Data Controller responsible for your personal information.

  • Email Contact: zarayatravel@gmail.com  

2. Information We Collect

When you submit inquiries through our website or social media lead ads (such as TikTok), we collect only the necessary information required to deliver travel quotes and services:

  • Full Name: To correctly identify and address you.
  • Telephone Number: To contact you regarding travel availability, pricing, and inquiries.
  • Email Address: To transmit itineraries, booking confirmations, and travel details.
  • Travel Preferences: Destinations, dates, traveler counts, and specific requests provided in your inquiry.

3. Purpose and Legal Basis for Processing

We process your data strictly under recognized legal bases:

  • Pre-Contractual Steps & Performance of a Contract: Processing inquiries you initiate to provide quotes or fulfill a travel booking contract.
  • Legitimate Interests: Managing our business operations, internal record keeping, and replying to customer service requests, balanced against your privacy rights.
  • Consent: Where you opt in to receive promotional newsletters or marketing updates (which you can withdraw at any time).

4. Data Security and Limitation of Liability

We implement industry-standard technical and organizational security measures (such as encrypted data transmission and restricted access controls) to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

  • Third-Party Platforms: When data is collected via platforms like TikTok, it is also processed in accordance with the TikTok Privacy Policy. While we ensure secure handling of data transferred to our systems, we cannot be held liable for security breaches or system failures originating directly from third-party social media ad platforms beyond our immediate operational control.
  • Internet Transmission Disclaimer: Transmission of information via the internet is never completely secure. While we do our utmost to protect your personal data, we cannot guarantee the absolute security of data transmitted to our site; any transmission is at the user’s own risk.

5. Disclosure and Sharing of Data

We do not sell, rent, or trade your personal data to commercial entities. We share data only where strictly necessary:

  • Travel Suppliers & Vendors: Hotels, airlines, tour operators, and insurance providers—solely to secure bookings requested by you.
  • Service Providers: Trusted IT, hosting, and CRM vendors bound by strict confidentiality obligations.
  • Legal Obligations: When required by UK law, regulatory authorities, or to protect our legal rights.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, resolve inquiries, or comply with statutory UK accounting and legal obligations. Once no longer required, data is securely deleted or anonymized.

7. Your Data Protection Rights

Under UK data protection laws, you retain the following rights:

  • Right of Access: Request copies of your personal data held by us.
  • Right to Rectification: Request correction of inaccurate or incomplete details.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your data where no overriding legal basis for retention exists.
  • Right to Restrict Processing: Limit how we process your information.
  • Right to Object / Withdraw Consent: Opt out of marketing communications or withdraw consent at any time.

To exercise these rights, please contact us using the company details provided in Section 1.

8. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect operational changes or legal requirements. The latest version will always be posted directly on our website with an updated effective date.

Scroll to Top