Privacy
Every day, our businesses serve people who trust us with information about themselves — clients, partners, passengers, travellers, families who visit our venues, and the people who work for us. This page summarises how Mallah Company and its group companies handle personal data. The full policy is available as a PDF below.
01
Names and contact details; booking, order, travel and project details; billing records for our clients; the details you enter in our inquiry form; and, where needed, passport or ID details for travel or official contracts. Where cameras are used at our premises or venues, recordings for safety and security.
02
To deliver our services and goods, keep customers, visitors and staff safe, invoice our clients, answer your inquiries, and meet our legal obligations.
03
Only with the people delivering your service, the organisation that booked it, service providers who help us run our systems, and authorities where the law requires. We never sell personal data or share it for marketing.
04
Our staff may not disclose who they served, where or when, and may not photograph or post about customers or visitors — especially children.
05
Access to our systems is restricted by role, staff use individual accounts, and paper records are kept secure.
06
Most records are kept for 5 years, then securely deleted or anonymised. Inquiries that do not lead to business are kept for up to 24 months.
07
You can ask to see, correct or delete your data, or withdraw your consent. We respond within 30 days.
Contact our Legal Department Manager at mohamed@lemallah.com (please mark your message “For the attention of the Legal Department Manager”).
Available in English
Document MC-POL-002 · Version 1.0 · Approved by the Managing Director · Reviewed annually