Al-Najaf Travel & Tourism Company is a travel agency in Iraq. This policy explains how we collect, use and protect customer data when we provide bookings and communicate with customers, including via WhatsApp and Facebook/Instagram ads.

• Contact details: name, phone, WhatsApp number, email.
• Travel data needed for bookings: passport details, travel dates, booking and payment details.
• Messages exchanged with us on WhatsApp.

To fulfil and follow up on the services customers request, to send travel-related reminders, and to answer people who contact us through our ads. We never sell or rent customer data.

Only with service providers we need: Meta (WhatsApp, Facebook, Instagram) to send/receive messages and show our ads — we do not send customers' personal data to Meta for advertising; our hosting and database providers; and airlines, hotels or authorities when needed to complete a booking or visa the customer asked for.

Only authorised staff can access data, according to their role. We keep data for as long as we serve the customer and as required by accounting and legal obligations, then delete it.

Customers may ask to access, correct or delete their data. To request deletion, email najaftours09@gmail.com with your name and phone number; we delete your data within 30 days, except what the law requires us to keep.