Meta WhatsApp Business API Compliant
Last Updated: October 31, 2026

Privacy Policy

At Hifaza Travels, we are deeply committed to protecting your privacy, securing your personal data, and maintaining complete transparency regarding how your information is handled, especially across our Meta WhatsApp Business API messaging services and digital booking platforms.

WhatsApp Business API

Official messaging channel powered by Meta Platforms, Inc. Used exclusively for opt-in inquiries, bookings, itinerary confirmations, and travel updates.

Zero Data Selling

We never sell, rent, monetize, or broker your personal phone numbers, chat transcripts, or travel documentation to third-party advertisers.

Data Deletion Rights

Full control over your data. Easily request total erasure of your contact details, chat logs, and records at any time with prompt processing.

01. Identification of Business & Scope

This Privacy Policy is issued by Hifaza Travels (“we”, “us”, or “our”), a premier travel agency operating from Kozhikode (Calicut), Kerala, India (PIN: 673001), accessible online via https://hifazatravels.com.

This policy governs the processing, retention, and handling of personal data collected through:

  • Our website and digital inquiry portals (hifazatravels.com).
  • Our official WhatsApp Business Platform (Meta WhatsApp Business API) communications via our registered telephone numbers: +91 80892 96162, +91 73061 09985, and +91 93834 91478.
  • Direct telephone, electronic mail, and in-person travel consultations for booking Kerala tour packages, international holidays, flight ticketing, and Hajj & Umrah pilgrimages.

02. Information We Collect via WhatsApp & Digital Channels

In accordance with Meta developer guidelines and applicable data protection legislation, we only collect data that is strictly necessary to fulfill your travel inquiries, issue travel documentation, and offer seamless customer support.

WhatsApp Profile & Contact Data

Your mobile phone number linked to WhatsApp, public WhatsApp profile display name, and status information provided via your WhatsApp client during interactions.

Communication Content & Inquiries

The contents of messages, voice notes, photos, and files you send to us requesting travel packages (such as Kerala tours, Wayanad excursions, Munnar stays, Umrah packages, flight availability, and hotel inquiries).

Booking & Identification Documentation

When you proceed with a formal booking, we may collect passenger full names, date of birth, passport copies, visa information, government-issued IDs, and emergency contact details necessary for flight ticketing, Saudi Ministry of Hajj & Umrah portal submissions, or hotel registration.

Technical & Transmission Metadata

Message delivery status, read receipts, timestamps, message unique identifiers, and server logging data generated automatically by Meta's WhatsApp Cloud API infrastructure.

03. Purposes of Processing WhatsApp Data

We utilize the data gathered through the WhatsApp Business API strictly for lawful, legitimate, and declared travel facilitation purposes:

Customer Support & QueriesResponding to travel inquiries, customized itinerary requests, and price quotations.
Transactional NotificationsSending flight e-tickets, hotel booking vouchers, Umrah package confirmations, and invoice receipts.
Critical Travel AlertsNotifying passengers about flight schedule changes, gate updates, visa processing progress, or emergency travel advisories.
Opt-In Promotional MessagesSharing seasonal discounts and new holiday departures solely when prior explicit consent has been granted.

04. WhatsApp Opt-In & Consent Policy

In strict adherence to Meta's WhatsApp Business Messaging Policy, Hifaza Travels ensures that all outbound messages sent via the WhatsApp API comply with opt-in guidelines:

  • User-Initiated Inquiries: When you initiate contact with us by tapping our WhatsApp link, scanning a QR code, or sending a direct message to our business number, you consent to receiving responses concerning your specific travel query.
  • Website Form Submissions: When you submit an inquiry form on our website requesting travel packages, you are explicitly informed that an advisor will contact you via WhatsApp or phone.
  • No Cold Messaging / Spam: We do not purchase contact databases or send unsolicited bulk promotional broadcasts to individuals who have not requested information from Hifaza Travels.

05. How to Opt-Out (WhatsApp “STOP” Mechanism)

Instant Revocation of Messaging Consent

You hold the absolute right to revoke consent and stop receiving WhatsApp messages from Hifaza Travels at any time. We provide multiple frictionless methods:

Method 1 (Instant In-Chat)

Reply with “STOP” in WhatsApp

Simply reply to any message from our business number with the single word: STOP, UNSUBSCRIBE, or CANCEL.

Our automated system immediately marks your profile as opted out from non-transactional messages.

Method 2 (Support Request)

Email or Call Our Desk

Email us at hifazatravels@gmail.com with the subject line “WhatsApp Opt-Out Request” including your mobile phone number, or call +91 80892 96162.

Please Note: If you have an active flight booking or pending visa application with us, critical transactional updates (e.g., flight cancellations or gate changes) may still be delivered by our operations agents to guarantee your travel safety, unless you specifically ask us to delete all records.

06. User Data Deletion Instructions

Meta App Review & Compliance Mandate

In accordance with Meta Platform terms and international data privacy regulations (including India's Digital Personal Data Protection Act and GDPR), users have the absolute right to request the permanent deletion of their data collected through our WhatsApp Business API integration or website.

1

Submit Your Deletion Request

Send an email to our Privacy Officer at hifazatravels@gmail.com with the subject:
Data Deletion Request - WhatsApp API
Alternatively, send a WhatsApp message to +91 80892 96162 containing the text DELETE MY DATA.

2

Provide Required Verification Details

To prevent fraudulent deletion requests, include:

  • Your full legal name
  • Your registered WhatsApp phone number (with country code, e.g., +91...)
  • Approximate date of your recent booking or inquiry (optional, helps locate records)
3

Processing Timeline & Confirmation

Our data protection desk acknowledges receipt within 48 hours. Your contact profile, WhatsApp chat history, and uploaded attachments will be permanently deleted from our active customer databases within 30 calendar days.

Legal Exceptions to Deletion

Under Indian tax, aviation, and statutory audit laws, certain financial records (tax invoices, GST filings, and issued airline ticket logs) must be retained for the minimum period prescribed by the Government of India before final archival destruction.

07. Meta Platform & Cloud Infrastructure Disclosure

Our WhatsApp messaging services are powered by Meta Platforms, Inc. through the official WhatsApp Business Platform / WhatsApp Cloud API.

By conversing with Hifaza Travels over WhatsApp, you recognize that transmission and processing of messages adhere to Meta's security architecture:

  • WhatsApp messages sent between your device and the WhatsApp Business API are encrypted in transit using industry-standard Transport Layer Security (TLS).
  • Meta processes message data as a data processor on our behalf, in compliance with the WhatsApp Business Data Processing Terms and the WhatsApp Privacy Policy .
  • Hifaza Travels does not control Meta's internal server hosting or data routing infrastructure.

Strict Anti-Monetization Pledge

We solemnly pledge that Hifaza Travels does NOT sell, rent, monetize, or trade your personal data, phone numbers, or WhatsApp chat logs to third-party data brokers, telemarketers, or commercial ad networks.

08. Third-Party Service Providers & Subprocessors

To complete travel reservations and issue official documentation, relevant personal details may be shared with authorized third parties solely on a need-to-know basis:

Airlines & Global Distribution Systems (GDS): To issue tickets, manage seat allocations, and fulfill passenger name records (Amadeus, Sabre, Air India, IndiGo, Saudia, Emirates, etc.).

Pilgrimage & Visa Regulatory Authorities: The Ministry of Hajj & Umrah (Kingdom of Saudi Arabia), accredited visa processing agents, and consular authorities for entry clearance.

Hotel & Transport Vendors: Partner resorts, hotels in Kerala and international destinations, and local luxury coach operators for group tours.

Payment Gateways & Banking Partners: Regulated payment processors for processing travel deposits and payments securely (we do not store full card numbers).

09. Data Security & Retention

We employ robust technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

  • Access Controls: Travel consultant access to customer records is restricted based on role necessity and multi-factor authentication.
  • Encrypted Communications: All web communication uses HTTPS (SSL/TLS), and WhatsApp messaging follows Meta's secure cloud APIs.
  • Retention Window: Routine WhatsApp inquiry chats that do not result in a confirmed booking are purged every 180 days. Confirmed travel booking dossiers are retained for the statutory period mandated by Indian tax and accounting authorities.

10. Your Rights (Indian DPDPA 2023 & GDPR)

Under India's Digital Personal Data Protection Act, 2023 (DPDPA), the General Data Protection Regulation (GDPR), and related frameworks, you hold the following rights:

Right to Access:Request a summary of your personal data and processing activities.
Right to Correction:Request correction of inaccurate, outdated, or incomplete information.
Right to Erasure:Request deletion of your data as detailed in Section 06.
Right to Grievance Redressal:Lodge a complaint with our Grievance Officer if you believe your privacy rights have been infringed.

11. Children's Privacy

Our digital platforms and WhatsApp Business channels are directed towards adults aged 18 and over. We do not knowingly collect personal information directly from minors. When children travel as part of family tour packages or pilgrimages, necessary booking details (such as passport copies and names) are collected solely from the accompanying parent or legal guardian.

12. Grievance Officer & Contact Information

In compliance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are provided below:

Office Address

Hifaza Travels

Calicut (Kozhikode), Kerala, India - 673001

Privacy Desk Emailhifazatravels@gmail.com

Subject line: Attention: Grievance Officer

Official WhatsApp API Line+91 80892 96162

Primary Business WhatsApp Account

Desk Phone Support

+91 73061 09985 / +91 93834 91478

Monday to Saturday (09:00 AM - 06:00 PM IST)

Policy Version: 2.1 (Meta WhatsApp API Compliant)Jurisdiction: Kozhikode (Calicut), Kerala, India

Have questions about your trip or booking?

Connect directly with our travel advisory specialists on WhatsApp or visit our contact page.