<h2>Who we are</h2><p>AY Malloum Travel and Tours Ltd is the data controller for the personal information described in this policy.</p><h2>What we collect</h2><p>We collect the information you give us when you register, make a booking or contact us: your name, email address, phone number, and where a booking requires it, passport numbers, dates of birth, nationality and traveller details. We also collect payment confirmation references. We do not store full card numbers.</p><h2>Why we collect it</h2><ul><li>To make, confirm and deliver your booking</li><li>To pass traveller details to airlines, hotels, tour operators and immigration authorities, which require them</li><li>To process your payment and issue an invoice or receipt</li><li>To send you your confirmation, e-ticket, voucher and travel reminders</li><li>To send you offers and travel ideas, if you have asked us to</li><li>To meet our legal, tax and record-keeping obligations</li></ul><h2>Who we share it with</h2><p>Only the suppliers needed to deliver your booking, plus our payment processors. We do not sell or rent your data to anyone.</p><h2>How long we keep it</h2><p>We keep booking records for as long as required for tax and legal purposes, typically seven years. We delete marketing data on request at any time.</p><h2>Your rights</h2><p>You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it where we are not legally required to keep it. Write to us at the email address on the Contact page.</p><h2>Security</h2><p>Passwords are hashed and never stored in readable form. Payments are handled by our gateway partners over encrypted connections. The site is served over HTTPS in production.</p><h2>Cookies</h2><p>We use cookies to keep you signed in and to remember what is in your basket. We do not use advertising cookies.</p>