Privacy Policy

This Privacy Policy is issued by Mashaer Fleet, a transportation services company registered in England and Wales with a principal place of business at:

We operate a premium chauffeur-driven transportation platform serving pilgrims, families, business travellers, and visitors across Saudi Arabia. Our services include airport transfers at Jeddah (King Abdulaziz International Airport), Madinah (Prince Mohammad bin Abdulaziz Airport), Riyadh (King Khalid International Airport), and Taif airports; intercity routes between Jeddah, Makkah, Madinah, and Riyadh; and dedicated Hajj, Umrah, and Ziyara pilgrim convoys.

For the purposes of UK data protection law, Mashaer Fleet is the data controller responsible for the personal data described in this policy. We are committed to handling your data responsibly, lawfully, and transparently.

This policy applies to all individuals who use our website at mashaerfleet.com, make a booking through our platform, contact us via phone, email, or WhatsApp, or travel with us as a passenger anywhere in our operational network.

We collect only the data necessary to provide, confirm, and improve your transportation experience. The categories below outline what we may hold about you:

We collect personal data through the following channels:

• Website booking form — when you fill in your journey details, personal information, and submit a reservation at mashaerfleet.com.
• WhatsApp & phone enquiries — when you contact us directly on +44 7490 357 451 to arrange a customised booking.
• Email — when you send enquiries or booking requests to booking@mashaerfleet.com or mashaerfleet@gmail.com.
• Driver communication — when your assigned driver shares a contact number and vehicle image with you before pickup, a record of that communication is maintained.
• Cookies and site analytics — automatically when you browse our website (see Section 9 for full details).
• Third parties — occasionally from travel agents, Hajj/Umrah tour operators, or corporate accounts that book on your behalf.

We use your personal data only for the purposes outlined below. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

We will never sell, rent, or trade your personal data to third parties for marketing purposes. Any communication from Mashaer Fleet is either directly related to your booking or, in the case of promotional messages, sent only with your prior consent.

As a UK-registered business, Mashaer Fleet processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We also comply with Saudi Arabia's Personal Data Protection Law (PDPL) for all processing activities carried out within the Kingdom.

Every processing activity we conduct rests on one of the following lawful bases:

• Contract performance — processing your booking details, dispatching your driver, and sending confirmation are necessary to fulfil the transportation contract between us.
• Legal obligation — we may be required to retain certain records to comply with Saudi Ministry of Transport regulations, UK tax and accounting law, or valid law enforcement requests.
• Legitimate interests — improving our platform, detecting fraud, maintaining security, and responding to customer service queries, provided these interests are not overridden by your rights.
• Consent — for optional communications such as promotional messages, service newsletters, or Hajj/Umrah travel tips. You may withdraw consent at any time by contacting us (see Section 14).
• Vital interests — in emergency situations where sharing your data may be necessary to protect your life or safety or that of another person.

Mashaer Fleet shares personal data only where strictly necessary and always under appropriate data protection agreements. Recipients include:

• Assigned drivers and partner transport operators — your name, phone number, pickup location, and booking reference are shared with your allocated driver to enable coordination. Partner operators fulfilling rides on our behalf are contractually bound to our data standards.
• Payment processors — when online payment is active, your billing and transaction data is handled by PCI-DSS certified payment gateways. We receive only a tokenised confirmation — we never see or store your full card details.
• WhatsApp / Meta Platforms — when you contact us or we send you driver details via WhatsApp, your messages are subject to Meta's own privacy policy in addition to ours. We recommend reviewing Meta's policy at their official website.
• Cloud infrastructure & hosting providers — our platform and database are hosted on secure, industry-standard cloud infrastructure. These providers operate as data processors under our instructions and are prohibited from using your data for their own purposes.
• Analytics providers — anonymised, aggregated website usage data may be shared with analytics tools to help us understand how our site is used and improve the booking experience.
• Legal and regulatory authorities — we will disclose data to the Saudi Ministry of Transport, Saudi police, UK Information Commissioner's Office, or other competent authorities when required by applicable law or valid legal order.
• Hajj & Umrah tour operators — if your booking was made through a licensed tour operator or travel agency, we may share journey confirmation data with them to coordinate your itinerary.

Mashaer Fleet operates across two jurisdictions — the United Kingdom and the Kingdom of Saudi Arabia. This means your personal data may be transferred between these two countries as part of our normal operations, for example when a booking made via our UK-registered platform is fulfilled by our Saudi operational team.

Saudi Arabia is not currently designated as an adequate country under UK GDPR. Where we transfer personal data from the UK to Saudi Arabia, we ensure appropriate safeguards are in place, which may include:

• Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
• Internal data transfer agreements binding our Saudi operational teams to UK GDPR equivalent standards
• Technical and organisational security measures appropriate to the risk level of the data being transferred

Our passenger base is internationally diverse — including pilgrims from the USA, UK, Europe, Southeast Asia, and other regions. Data originating from EU residents is also handled in accordance with EU GDPR as a matter of policy, even where not strictly required under UK law.

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law. Our standard retention schedules are:

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

Under UK GDPR and, where applicable, Saudi Arabia's Personal Data Protection Law, you have the following rights regarding your personal data:

To exercise any of these rights, contact us using the details in Section 14. We will respond within one calendar month. There is no charge for exercising your rights unless requests are manifestly unfounded, excessive, or repetitive.

Our website uses cookies — small text files placed on your device — to make the site function correctly and to help us understand how visitors use it. We use the following categories:

• Strictly necessary cookies — essential for the website to function (e.g. maintaining your session, remembering your booking progress). These cannot be disabled.
• Analytics cookies — we use Google Analytics to collect anonymised data about page views, session duration, and traffic sources, which helps us improve the booking experience. IP addresses are anonymised before storage.
• Preference cookies — remember choices you make on the site such as language preference and vehicle type selections to improve your return visits.
• Marketing cookies — only placed with your explicit consent. If enabled, these allow us to show relevant advertising on third-party platforms such as Google and Meta.

You can manage your cookie preferences at any time through our cookie consent banner, your browser settings, or by contacting us. Disabling analytics or marketing cookies will not affect your ability to make a booking.

Mashaer Fleet's services are directed at adults aged 18 and over. We do not knowingly collect personal data from children under 13 directly through our platform.

Where children under 18 travel as passengers, bookings must be made and personal data submitted by a parent or legal guardian, who assumes responsibility for the accuracy of any data provided. If you believe we have inadvertently received personal data from a child without appropriate consent, please contact us immediately and we will delete it promptly.

Our website and communications may contain links to external websites — such as hotel booking platforms, Hajj permit portals, or mapping services. We are not responsible for the privacy practices of those sites and recommend reviewing their individual privacy policies before submitting any personal data.

When you contact us via WhatsApp, your messages pass through Meta's infrastructure and are subject to WhatsApp's Privacy Policy as well as this document. We use WhatsApp solely for booking coordination and customer support — we do not use it for advertising or data harvesting.

We may update this Privacy Policy periodically to reflect changes in law, our services, or data processing practices. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify registered users via email where the changes materially affect how we handle their data.
• Display a notice on our website for a minimum of 14 days following any significant update.

We encourage you to review this policy periodically, especially before making a new booking. Continued use of our services after an update constitutes acceptance of the revised policy.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how we handle your information, please reach out to us: