This policy explains what personal data we collect, why we need it, who we share it with, and how long we keep it. Please read it before you send us your documents.
1. Who we are
SKYSHIP Travels & Tourism is a sole proprietorship owned by Rizwan. Our office is at Office 201, 2nd Floor, Gulberg Square, Gulberg Business Park, Gulberg Green, Islamabad, Pakistan. In this policy, "we" and "us" mean SKYSHIP Travels & Tourism.
We decide how your data is used, so we are responsible for it.
Contact for privacy questions: info@skyshiptravels.com, or WhatsApp +966 54 759 7447 (Saudi Arabia) and +92 318 759 7447 (Pakistan).
2. Which laws we follow
We serve customers in Saudi Arabia and Pakistan. For customers in Saudi Arabia, we follow the Saudi Personal Data Protection Law (PDPL) and its regulations. We also follow the laws of Pakistan.
3. What data we collect
We only ask for what the service needs. Depending on the service, this can include:
- Contact details: name, WhatsApp number, email, home address (for courier).
- Identity documents: passport copy, photo, CNIC (Pakistan), iqama (Saudi Arabia), police character certificate.
- Family documents: nikah nama, family registration certificate (FRC), and children's passports, B-form or birth certificate.
- Sponsor details: for family visit visas, details of the person in Saudi Arabia who invites you, such as their iqama.
- Financial documents: bank statements, salary certificate, employment letter, NOC.
- Education documents: degrees and certificates for attestation.
- Travel history: old visas and past travel.
- Health documents: vaccination or polio card, and a medical report when a visa needs it.
- Religious document: a certificate of accepting Islam, only when visa rules ask for it.
- Account access: login details or one-time codes (OTP) for portals such as Absher, Nafath or Nusuk, only when you ask us to do the work for you (see section 7).
- Payment details: payment receipts, and your bank account or IBAN if we send you a refund.
- Appointments: biometric appointments we book in your name (for example Tasheer or VFS).
- Messages and recordings: our WhatsApp chats with you, and CCTV in our office.
- Advert forms: details you enter in our forms on Facebook or Instagram.
Some of this is sensitive data (health, religion, children's data). We only collect it when a visa or service needs it, and only with your consent.
4. Where the data comes from
Most data comes from you, on WhatsApp, by email or in our office. Some comes from a family member or sponsor who applies for you. If you send us someone else's data, please make sure they agree.
5. Why we use your data
- To give you the service you asked for: visas, tickets, hotels, transport, attestation, PRO work and insurance.
- To send you quotes, updates and your documents.
- To keep accounts and invoices, as tax law requires.
- To answer questions and complaints.
- To keep our office safe (CCTV).
We use your data based on your consent, and because we need it to provide the service you booked. We do not use it for any other purpose, and we never sell your data.
We will only send you offers on WhatsApp or email if you agree. You can say "stop" at any time.
6. Who we share your data with
We only share what each party needs to do its part:
- Saudi government portals: Nusuk / Masar, the MOFA visa portal, Absher and Muqeem.
- Other governments: visa portals and embassies of the UAE, Bahrain, Oman and other countries.
- Pakistan offices for attestation: MOFA, HEC, IBCC, education boards and embassies.
- Biometric centres: such as Tasheer and VFS.
- Travel suppliers: airlines, hotels and transport companies in Makkah and Madinah.
- Insurance companies, for travel or visa insurance.
- Partner agencies and suppliers whose systems are used to process visas and bookings.
- Courier companies, such as TCS or Leopards.
- Our software providers: WhatsApp Business, email, cloud storage (Google), our booking and accounts software, and our website host. They store data for us and may not use it for their own purposes.
- Authorities, when the law requires it.
7. Portal logins and OTP codes
Some services need access to your account on a government portal. We only use your login or OTP for the work you asked for. We do not keep it after the work is done. If you are a regular customer, we only save your login when you agree in writing, for example on WhatsApp. We keep it in a secure place, not in chats, and delete it whenever you ask.
8. Sending data to other countries
Our office is in Pakistan. If you are in Saudi Arabia, your data is sent to Pakistan so our team can work on it. It is also sent to the country you are applying to, and to our software providers, who may store it in other countries. We only send what is needed, and we protect it as this policy describes.
9. How long we keep your data
| Data | How long |
|---|---|
| Documents and visa files | 3 years after your last service, then deleted |
| Invoices and payment records | 6 years, as Pakistan tax law requires |
| Logins and OTP codes | Deleted when the work is done, unless you agree we save them |
You can ask us to delete your documents earlier. We may keep invoices for the full 6 years because the law requires it.
10. How we protect your data
- Our staff use office phones, office SIMs and office WhatsApp accounts, not personal ones.
- Only staff who work on your file can see it.
- We do not ask you to upload passports on our website.
- Paper files are kept in our office.
If a data breach puts your rights at risk, we will inform the authority and you, as the law requires.
11. Children
We collect children's data only when a parent or guardian applies for them, and only with that parent's or guardian's consent.
12. Your rights
You can ask us to:
- tell you what data we hold about you and how we use it;
- give you a copy of your data;
- correct data that is wrong or out of date;
- delete your data when we no longer need it;
- stop using your data, by withdrawing your consent.
If you withdraw consent during a booking, we may not be able to finish the service. Refunds then follow our Refund Policy.
To use your rights, write to info@skyshiptravels.com or message us on WhatsApp. We will reply within 30 days. We may ask you to confirm who you are first.
If you are in Saudi Arabia and you are not happy with our answer, you can complain to the Saudi Data & AI Authority (SDAIA).
13. Our website
Our website does not ask for your documents. It links to WhatsApp, and WhatsApp's own privacy policy applies to your chats. Our host keeps basic technical logs to run the site safely. See our Cookie Notice for cookies.
14. Changes to this policy
We may update this policy when the law or our services change. The date at the top shows the latest version. If a change affects how we use your data, we will tell you.