1. Who We Are and What This Policy Covers

Hisar Tour is operated by HISAR USA INC. (“Hisar Tour,” “we,” “us,” or “our”), a New Jersey corporation (entity ID 0450208903) with its principal business address at 970 Clifton Avenue, Suite 202, Clifton, NJ 07013, USA. “Hisar Tour” is a registered alternate name of HISAR USA INC. in the State of New Jersey. HISAR USA INC. is a wholly owned subsidiary of United American Muslim Association of N.Y., Inc., a religious non-profit organization established in the State of New York.

This Privacy Policy explains how we collect, use, disclose, protect, and retain personal information when you visit hisartour.com, contact us, request information, attend a webinar or seminar, register for an Umrah or Hajj program, make a booking or payment, travel with us, or otherwise interact with us online or offline.

By using our services or providing personal information to us, you acknowledge the practices described in this Policy.

2. Relationship to Our Terms and Conditions

This Privacy Policy is a notice describing our information practices. It is not the contract for your travel.

Your travel contract is our Terms and Conditions, which govern booking, payment, cancellation, refunds, liability, and dispute resolution — including a binding arbitration provision. This Policy does not replace or modify those Terms, or the airline conditions, visa requirements, supplier conditions, or Saudi government and Nusuk requirements that apply to a particular journey.

Where the Terms and this Policy address the same subject — for example, marketing communications or the use of photographs and video — read them together. If they conflict on a contractual question, the Terms control.

3. Information We Collect

We collect information you provide directly, information generated through your use of our website and communications, and information we receive from suppliers and travel partners where permitted by law.

• Contact and identity information: name, postal address, email address, telephone number, WhatsApp number, date of birth, nationality, gender, and emergency-contact details.
• Travel and booking information: departure city, preferred travel dates, room and occupancy preference, fellow travelers, roommate preferences, dietary or accessibility requests, itinerary choices, booking status, group assignment, and communication preferences.
• Passport, visa, and travel-document information: passport number, passport issue and expiry dates, passport copy or scan, passport photograph, visa information, nationality, and other documents required to arrange travel or comply with entry, airline, hotel, insurance, or government requirements.
• Payment and transaction information: payment status, transaction references, billing information, and information needed to process payments, refunds, chargebacks, or accounting records. Payment card details are processed by our payment processors under their own privacy notices; we do not store full payment card numbers.
• Health, mobility, and assistance information: mobility needs, wheelchair requirements, dietary needs, and other assistance information you choose to provide so we can coordinate reasonable travel support. Please provide only information relevant to your travel needs.
• Religious participation information: your registration for an Umrah or Hajj program, group and imam assignment, and participation in religious guidance sessions.
• Communications: emails, telephone calls, SMS and WhatsApp messages, form submissions, customer-service requests, webinar questions, reviews, and feedback.
• Images, video, and audio: photographs, video, and audio recorded during group programs, seminars, ziyārah, and travel; testimonial recordings you provide; and webinar recordings. See Section 9.
• Website and device information: IP address, browser type, device identifiers, pages viewed, referral source, approximate location derived from IP address, cookie and pixel identifiers, and interactions with our website, emails, and advertising.
• Account information: if you create an account on hisartour.com, your username, password (stored in hashed form), and account activity.

4. Notice at Collection — Categories, Purposes and Retention

The table below summarizes the categories of personal information we collect, why, who we disclose them to, and how long we keep them.

Scroll the table sideways on a mobile device to see all columns.

Where a specific period cannot be stated, we retain information for as long as reasonably necessary for the purpose described, and then delete or de-identify it.

5. Sensitive Personal Information

Some of the information above is treated as sensitive personal information under California and certain other state laws. For Hisar Tour this includes:

• Government identification numbers — passport number and passport copy;
• Religious beliefs — inherent in your registration for an Umrah or Hajj program;
• Health information — mobility, wheelchair, dietary, and medical disclosures you provide;
• Racial or ethnic origin — where you provide it, or where a document you provide contains it.

We collect and use sensitive personal information only to perform the services you have requested, to comply with legal, visa, airline, insurance, and government requirements, to ensure safety, and to prevent fraud.

We do not use or disclose sensitive personal information to infer characteristics about you, for cross-context behavioral advertising, or for any purpose other than those listed above. Because our use falls within the permitted purposes, the right to limit the use of sensitive personal information does not apply to our processing under California law. You may still request access, correction, or deletion under Section 16.

6. How We Use Personal Information

We use personal information as reasonably necessary to:

• Respond to inquiries and recommend suitable Umrah or Hajj options;
• Process registrations, reservations, payments, refunds, and travel arrangements;
• Coordinate flights, hotels, ground transportation, visas, insurance, group assignments, seminars, and on-ground support;
• Provide guidance and support for registration on the Nusuk platform (Section 8);
• Verify identity, travel eligibility, and document accuracy;
• Provide customer support before, during, and after travel;
• Send service messages, booking updates, safety notices, itinerary changes, and required travel communications;
• Send marketing messages by email, telephone, SMS, or WhatsApp where you have requested or consented to receive them;
• Improve our website, services, packages, customer experience, security, and operations;
• Detect, investigate, and prevent fraud, misuse, security incidents, or unlawful activity;
• Comply with legal, regulatory, tax, accounting, insurance, airline, visa, and government obligations;
• Establish, exercise, or defend legal claims and enforce our agreements.

7. How We Share Personal Information

We share personal information only as needed for the purposes described in this Policy, with:

• Travel and operational partners: airlines, hotels, transportation providers, tour operators, camp operators, guides, insurance providers, visa and document-processing partners, and other suppliers involved in your journey.
• Government and regulatory bodies: embassies, consulates, immigration and border-control authorities, the Saudi Ministry of Hajj and Umrah, and other entities where disclosure is required for travel, visa, legal, or safety purposes.
• Technology and business-service providers: customer-relationship management, email, website hosting, forms, communications, analytics, advertising, payment, security, and accounting providers that process information for us or on our behalf, under contract.
• Professional advisers: insurers, auditors, lawyers, accountants, and other advisers where necessary.
• Corporate successors: in connection with a proposed or completed merger, financing, reorganization, or sale of assets, subject to applicable law.
• Other parties with your direction or consent.

We do use analytics and advertising technologies that process limited online identifiers. Under California and certain other state privacy laws, that activity may qualify as “sharing” for cross-context behavioral advertising. Section 11 explains how to opt out.

8. Nusuk and Hajj-Related Information

For Hajj, your booking and payment take place on the Saudi government's official Nusuk platform (hajj.nusuk.sa), not on hisartour.com. Nusuk is operated under the authority of the Saudi Ministry of Hajj and Umrah and processes your information under its own terms and privacy practices, which we do not control.

Where you ask us to help with Nusuk registration, we may view or assist with information such as your passport details, photograph, and profile data. We do this only to provide the guidance you have requested. We do not retain Nusuk credentials, and we ask you never to share them with us or with anyone else.

9. Photography, Video, Webinars and Testimonials

We record photographs, video, and audio during group programs, seminars, ziyārah, and travel, and we publish selected material for educational, documentary, and marketing purposes.

The full terms — including the distinction between incidental group footage (notice and opt-out) and individually featured material or testimonials (separate written consent required), the rule for travelers under 18, and our removal commitment — are set out in Section 21 of our Terms and Conditions.

In summary: if you do not wish to appear, tell us in writing before departure or tell your group leader at the time of recording. If you later ask us to remove material in which you appear, we will remove it from our own website and the social channels we control within a reasonable time. We cannot recall printed material already distributed, or content that third parties have independently downloaded or republished.

Webinars and online seminars may be recorded. We will say so at the start of the session. Questions submitted in writing during a webinar may be read aloud; we will not publish your full name without your consent.

10. Cookies, Analytics and Advertising Technologies

We and our service providers use cookies, pixels, tags, local storage, and similar technologies to operate the website, remember preferences, understand how visitors use our pages, measure campaign performance, and improve our services.

The categories of technology currently used on hisartour.com include website and booking platform cookies necessary to operate the site; a customer relationship management tool used to manage inquiries and bookings; web analytics; a social media advertising pixel; and a review display service. Non-essential technologies are loaded only after you make a choice in our cookie consent banner.

You can manage cookies through your browser settings; disabling some cookies may affect website functionality.

11. Do Not Sell or Share My Personal Information

We do not sell personal information for money. However, our use of advertising technologies may constitute “sharing” for cross-context behavioral advertising under California law, and “targeted advertising” under the privacy laws of several other states.

You have the right to opt out. You can do so in any of these ways:

1. Use the “Do Not Sell or Share My Personal Information” link in the footer of every page of hisartour.com;
2. Enable a Global Privacy Control (GPC) signal in your browser or extension. We treat a GPC signal as a valid opt-out request for the browser and device on which it is sent;
3. Email hisartour@uama.us with the subject line “Do Not Sell or Share.”

We will process your request without requiring you to create an account, and we will not discriminate against you for exercising this right. An authorized agent may submit a request on your behalf where the law permits, subject to verification.

12. Marketing Communications

Email. Opt out using the unsubscribe link in any marketing email.

SMS and WhatsApp. Consent to marketing messages is collected separately and is never a condition of booking. Message and data rates may apply; message frequency varies. Reply STOP to opt out and HELP for assistance.

Telephone. Tell any Hisar Tour representative that you do not wish to receive marketing calls, or email hisartour@uama.us.

Opting out of marketing does not stop essential service messages about an existing inquiry, booking, payment, travel change, safety issue, or other transaction. We may continue to send those while your booking is active.

13. International Transfers

Umrah and Hajj travel requires international coordination. Your information may be processed or disclosed in the United States, Saudi Arabia, Canada, Turkey, and other countries where our suppliers, service providers, or the relevant authorities operate.

Data-protection laws in those locations may differ from, and may offer less protection than, the laws of your home jurisdiction. Where information is transferred to a supplier acting for us, we require by contract that it be used only for the purposes we specify and protected with appropriate safeguards. Disclosures to government authorities are made because they are required for your travel, visa, or entry.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide travel services; comply with legal, tax, accounting, airline, visa, insurance, chargeback, and recordkeeping obligations; resolve disputes; maintain security; and enforce our agreements.

Retention periods by category are set out in the table in Section 4. In particular:

• Passport copies and scans are deleted 6 months after your return date.
• Passport numbers are deleted 24 months after your return date.
• Health and mobility information is deleted 12 months after your return date.
• Financial and booking records are retained for 7 years for tax and accounting purposes. Retaining a financial record does not require retaining the passport copy or health information associated with it.

15. Security and Incident Response

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls, encrypted transmission, and restricted handling of travel documents.

However, no website, storage system, transmission, or communication method is completely secure. Please send passport images and other sensitive documents only through the method our team provides to you, and never send payment card details by email or messaging application. If you are unsure how to send a document safely, contact us and we will tell you.

If we become aware of a security incident affecting your personal information, we will investigate promptly and notify you and any relevant authorities where required by applicable law and within the timeframes those laws require.

16. Your Privacy Rights and Choices

Depending on where you live and which law applies, you may have the right to:

• Know and access the personal information we hold about you;
• Correct inaccurate personal information;
• Delete personal information, subject to legal and contractual exceptions;
• Obtain a portable copy of certain personal information;
• Opt out of targeted advertising, sale, sharing, or profiling (Section 11);
• Limit the use of sensitive personal information (see Section 5);
• Appeal a decision we make about your request.

How to make a request. Email hisartour@uama.us with the subject line “Privacy Request,” or call +1 (201) 201-8992. Please describe your request and provide enough information for us to verify your identity and locate the relevant records. We may need additional information before completing your request. Authorized agents may submit requests where the law permits, subject to verification and proof of authority.

We will respond within the timeframe required by applicable law — generally 45 days, extendable where permitted.

Appeals. If we deny a request that carries an appeal right, you may appeal by replying to our decision or emailing hisartour@uama.us with the subject line “Privacy Appeal.” We will respond in writing with our decision and reasons.

No discrimination. We will not deny services, charge different prices, or provide a different level of service because you exercised a privacy right.

17. Notice for California Residents

California residents may have rights to know, access, correct, delete, obtain a portable copy, limit certain uses of sensitive personal information, and opt out of the sale or sharing of personal information.

• Categories collected, purposes, and retention: see Section 4.
• Sensitive personal information: see Section 5.
• Categories disclosed for a business purpose in the preceding 12 months: identifiers, travel documents and document identifiers, protected classifications, commercial information, health and assistance data, internet activity, geolocation, audio and visual information, and inferences — to the recipient categories listed in Section 7.
• Sale: we do not sell personal information for money.
• Sharing for cross-context behavioral advertising: internet activity and geolocation identifiers — see Section 11 to opt out.
• Financial incentives: we offer none.

18. Notice for Other U.S. State Residents

Residents of New Jersey, Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have rights to access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, or profiling, and appeal our decisions. The availability and scope of these rights depend on the law that applies to us and to your request.

Use the contact details in Section 16 to exercise any of these rights. We honor verified requests in accordance with the applicable requirements.

19. Notice for Canadian Residents

Because we serve pilgrims traveling from Canada, our handling of Canadian personal information is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation.

Under PIPEDA you may request access to the personal information we hold about you and request correction of inaccuracies. You may also withdraw consent to certain uses, subject to legal and contractual restrictions — noting that withdrawing consent to processing necessary for your travel may make it impossible for us to provide the service.

We have designated an individual accountable for our privacy practices:

Privacy Officer, HISAR USA INC.
Email: hisartour@uama.us (subject line: “Privacy Officer”)
Phone: +1 (201) 201-8992
970 Clifton Avenue, Suite 202, Clifton, NJ 07013, USA

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

20. Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13 through our website without parental or guardian authorization.

A parent or legal guardian may provide a child's travel information where necessary to arrange family travel, visas, accommodation, or related services. Travelers under 18 must be accompanied by a parent or legal guardian booked on the same program (Terms and Conditions, Section 28).

If you believe a child has provided information to us without appropriate authorization, contact us so we can review and address the matter.

21. Third-Party Links and Services

Our website links to third-party websites and services, including the Nusuk platform, travel suppliers, payment services, maps, meeting-scheduling tools, social-media platforms, and messaging services such as WhatsApp and Telegram. Their privacy practices are governed by their own policies. We are not responsible for third-party privacy practices, content, or security.

22. Accessibility

If you need this Policy in an alternative format, or need assistance exercising a privacy right, contact us at hisartour@uama.us or +1 (201) 201-8992 and we will assist you.

23. Changes to This Privacy Policy

We may update this Policy from time to time. Updates are published on this page with a new version number and effective date. Where a change is material, we will provide additional notice by email or through the website, as required by law. Previous versions are archived and available on request.

24. Contact Us

HISAR USA INC. d/b/a Hisar Tour
970 Clifton Avenue, Suite 202
Clifton, NJ 07013, USA

Phone / WhatsApp: +1 (201) 201-8992
Email: hisartour@uama.us
Website: hisartour.com

• Privacy requests: email with the subject line “Privacy Request”
• Advertising opt-out: email with the subject line “Do Not Sell or Share”
• Appeals: email with the subject line “Privacy Appeal”