Privacy Policy

We only collect information that is necessary to provide our services to you. This may include:

• Identity: Full name, CNIC or passport number (required for hotel and trip bookings per Pakistani hospitality law)
• Contact details: WhatsApp number, phone, and email address
• Booking details: Check-in/out dates, number of guests, room preferences, trip packages selected
• Group info: University name, corporate entity, group size (for trip and event bookings)
• Payment records: Transaction reference, amount paid, payment method — we do not store raw card numbers
• Media consent: Whether you've agreed to photography/videography during trips or events
• Feedback and reviews: If you voluntarily submit ratings or survey responses
• Usage data: Browser type, device, pages visited — collected anonymously via analytics

Murree Heights operates across multiple booking and service channels. Your data may be received through any of the following:

Regardless of which channel you use, the same privacy standards apply. Your data is never used for purposes beyond what you authorized when you first contacted us.

• To confirm, manage, and fulfill your hotel, trip, event, transport, or property booking
• To communicate updates, changes, or important information related to your booking
• To plan and organize group trips, events, and transport logistics efficiently
• To process payments and maintain financial records as legally required
• To send relevant promotions, offers, or seasonal deals — only if you've opted in
• To improve our website, services, and booking experience based on aggregated feedback
• To protect against fraud, unauthorized access, or violations of our Terms & Conditions
• To comply with legal obligations under Pakistani law and regulatory requirements

• We do not sell your data to any third party, advertising network, or data broker — ever
• Limited sharing with service partners (verified hotels, transport providers, photographers) only when required to fulfill your specific booking — and only the data they need
• Our booking data is logged to a secure Google Sheets database accessible only to authorized Murree Heights staff
• We may disclose information to law enforcement or regulatory authorities if required by Pakistani law or in cases of serious violation
• Aggregated, anonymized analytics data (no personal identifiers) may be used to improve our platform

• All booking forms are submitted over HTTPS encrypted connections
• Booking records are stored in access-controlled spreadsheet databases — visible only to our core team
• WhatsApp communications benefit from end-to-end encryption provided by WhatsApp's platform
• We do not store raw payment card numbers; only payment confirmation references are retained
• Our team is instructed never to share guest information outside the team without explicit authorization
• We regularly review access permissions and remove outdated records as appropriate

You have the following rights regarding your personal data:

• Access: Request a summary of what data we hold about you
• Correction: Ask us to correct any inaccurate information
• Deletion: Request deletion of your data (subject to any legal retention requirements)
• Opt-out: Unsubscribe from marketing messages at any time by replying "STOP" on WhatsApp or email
• Portability: Request a copy of your data in a readable format
• Objection: Object to any specific use of your data and we will review and respond

• Our website may use essential cookies to remember your preferences and session state
• We may use anonymous analytics (page views, traffic sources) to understand how visitors use our site — no personally identifiable information is collected
• We do not use advertising cookies, retargeting pixels, or cross-site tracking
• You can disable cookies in your browser settings; some features may be limited as a result

We retain your booking information for as long as necessary to:

• Fulfill your booking and provide any post-booking support
• Comply with financial and legal record-keeping requirements (typically 3–5 years under Pakistani law)
• Resolve any disputes or claims related to your booking

After this period, your personal data is deleted or anonymized. You may request earlier deletion by contacting us directly.

Murree Heights services are intended for adults (18+) or families where a parent/guardian is making the booking. We do not knowingly collect personal information from children under 13 without verified parental consent. Group bookings that include minors must be managed by an adult representative who accepts responsibility for the group.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or best practices. When we do:

• The "Last Updated" date at the top of this page will be revised
• Significant changes will be announced via our WhatsApp Channel or social media
• Continued use of our services after the update constitutes acceptance of the revised policy