Privacy
What we do with your information, in plain words.
We hold more about you than most companies you deal with: not only a name and a number, but a passport, a bank statement and whatever else an embassy asks for. This page says what we collect, why we have it, who else sees it, how long we keep it and how to make us delete it.
- This version
- 12 August 2026
- Company
- IBEX Global Tours, Islamabad
- To ask about your data
- 051-8770026
- Certification claimed
- None
The short version.
- We collect what we need to answer you, to make your booking, and to apply for your visa. Nothing on this website asks for a document before we need it.
- Your visa file goes to the embassy or consulate of the country you are travelling to. That is the point of collecting it, and it means your documents leave our office and usually leave Pakistan.
- Your name and passport details go to airlines and hotels, because a ticket and a room cannot exist without them.
- We do not sell your information, we do not pass it to other travel companies, and we do not use your documents for anything other than the trip you are booking.
- You can ask us what we hold about you, ask us to correct it, and ask us to delete it. The telephone number and the office address are at the bottom of this page.
- We claim no certification under any data protection standard, and nothing here should be read as one.
This version of the policy is dated 12 August 2026 and is published for IBEX to confirm.
The points listed in the last section of this page are the ones only the business can settle, mainly how long records are kept in practice. They are written here as the intended position rather than as a description of what already happens, and they are listed in public rather than left in a note somewhere, because a privacy policy that quietly guesses is the kind that fails the first time somebody tests it.
Who we are.
One company, one office, and it is the one you can walk into.
IBEX Global Tours
Block 40, Street 51, Sector F-11/3, Islamabad, Pakistan.
Telephone 051-8770026. WhatsApp 0331 1111606, which also rings.
We are the company responsible for the information described on this page. Anything you want to ask, change or have deleted, ask on that number or in person at that address.
Why there is no email address on this page
The only written address this company publishes today is a free mailbox, and a privacy page is the last place to invite people to send identity documents to one. An address on our own domain is being put in place and it will be published here when it exists. Until then, requests about your information are taken on the telephone or at the office, and we will confirm in writing from a named address once you are dealing with a particular person.
What we collect.
Grouped by the moment it reaches us, because that is how you will remember giving it to us.
Your name, your telephone number, the email address if you choose to give one, the destination and dates you are asking about, how many people are travelling, and anything else you write in the message. If you arrive from an advertisement or a search, we also see which page you came in on.
The conversation itself, including any photographs or documents you choose to send, and your WhatsApp number and display name. A copy of the conversation is kept in our customer records so that whoever picks up your file next can see what you were already told.
The full names of everyone travelling as printed in their passports, dates of birth, passport numbers and expiry dates, nationality, contact details, room and seat preferences, and any medical, mobility or dietary need you tell us about so that it can be arranged.
This is the most sensitive part and it is the largest. Depending on the destination it can include your passport itself, photographs, your national identity card, bank statements and account details, salary certificates or business registration and tax papers, property or asset documents, employment letters, family documents such as a marriage or birth certificate, and previous visas or refusals. We ask for what the mission asks for and we tell you why each item is on the list.
The payment reference, the amount, the date and the account or instrument used. Card numbers are not stored by us. Payment is to the company bank account printed on the invoice, and the bank holds its own record of the transfer.
Whatever you type into the enquiry form, and the ordinary technical information any website receives, such as the pages requested and the browser making the request. We do not use cookies to follow you around other websites, and if that ever changes this section will change before it does.
Why we hold it.
To answer you
You asked us a question about a trip. We need a way to reply and a note of what you asked, so the next person to pick up your file does not make you start again.
To make and run the booking
A flight, a hotel room and a coach seat all have to be in somebody's name. Without passport details there is no ticket, and without a telephone number nobody can reach you when a flight moves.
To apply for your visa
Every document in the visa list is there because the mission asks for it. We do not collect documents in case they are useful later, and if you ask why an item is on the list you will get a straight answer.
Because the law requires it
Invoices, payment records and tax records have to be kept for a set period whether we want to or not. Airlines and hotels are also obliged to collect and pass on certain passenger details, and we cannot book around that.
To keep you safe on the trip
An emergency contact, a medical note or a mobility need is held so that the tour manager travelling with your group can act on it rather than discover it.
To tell you about departures, if you want that
We may send you news of a departure that fits what you asked about. You can tell us to stop at any time, on the same number you have been messaging, and it stops. Saying stop does not affect a booking you already hold.
Who else sees it.
The honest list, including the parts that are outside our control once they leave here.
Your visa file is submitted to the mission of the country you are travelling to, or to the centre that mission has appointed to receive applications. This is the whole purpose of collecting it. It means your documents leave our office, and it usually means they leave Pakistan. What happens to them after they are lodged is governed by that mission and not by us, and we cannot recall a file once it has been submitted.
Names as printed in the passport, dates of birth, passport numbers and contact details, because a ticket cannot be issued without them and many countries require passenger details in advance of arrival.
Names, room arrangements and arrival dates, plus anything relevant that you have told us about mobility, medical needs or food. Hotels in many countries are required to register guests with local authorities, which is a legal obligation on them rather than a choice of ours.
The group list, the passport details needed at borders and check in, your telephone number, and the emergency contact you gave us.
Enquiries and conversations are held in GoHighLevel, the system we use to keep track of who has asked us what. It is operated by a company outside Pakistan and your information is stored on its servers, which are also outside Pakistan.
Messages you send us travel through WhatsApp, which is operated by Meta and governed by its own terms rather than by this page. We can control what we do with a conversation once it reaches us. We cannot control the platform it arrived on, which is worth knowing before you send a document through it.
Travel insurance details where insurance is arranged as part of the trip, and information we are required by law to give to a court, a regulator or a government body. If we are ever compelled to hand something over, we will tell you unless we are prohibited from doing so.
We do not sell your information, and we do not pass it to other travel agencies, advertisers or list brokers.
Everyone on the list above receives what they need for your trip and nothing else. Nobody on it receives your documents in order to market to you.
Your passport and your documents.
- Do not send us passport scans, bank statements or family documents with a first enquiry. Nobody needs them to answer a question about a price or a date, and we will not ask for them until your booking reaches the stage where the visa file is prepared.
- When we do hold an original document, you get a receipt for it, and you can ask at any time where it is and when it is coming back.
- We ask for the documents the mission asks for. If you think an item on the list is excessive, ask, and we will tell you which requirement it answers.
- Documents are returned or deleted on the clock set out below, not kept indefinitely because deleting them was nobody's job.
Anyone who asks you to send a passport scan to a personal mailbox or a personal bank account, in this industry, is a risk to you.
That includes anyone claiming to be us. Payment to IBEX is to the company account printed on the invoice and never to an individual, and if anything you receive from us looks different from that, ring the office on 051-8770026 before you act on it.
How long we keep it.
These periods are the intended policy and are among the points IBEX must confirm before this page is in force.
Kept for twenty four months, so that if you come back next season we still know what you were quoted, then deleted.
Kept for seven years after the trip. These are accounting records and we are not free to delete them earlier, whatever anyone asks.
Kept until twelve months after the decision on your application, then deleted. They are held that long only because a later application to the same mission is easier to prepare and defend when the previous file can be seen.
Held only for as long as the application physically needs it, and returned to you as soon as the mission returns it to us. You get a receipt for it and you can ask where it is at any point.
Kept alongside the enquiry or booking they belong to, and deleted on the same clock as that record.
Asking us what we hold, or asking us to delete it.
Ring 051-8770026, message or ring 0331 1111606 on WhatsApp, or come to the office at Block 40, Street 51, Sector F-11/3, Islamabad, and say what you want.
- Ask what we hold about you, and we will tell you what is on your file.
- Ask us to correct something that is wrong. A misspelled name on a booking is worth fixing immediately rather than at the airport.
- Ask us to delete what we hold. Say so, and we will delete everything we are free to delete.
- Ask us to stop sending you messages about departures, and we will stop.
- We will confirm what we have done, and we aim to do it within thirty days of you asking.
What we cannot delete, and why
- Invoices, payments and accounting records, until the period the law requires has passed. This applies to every business in the country and we are not able to make an exception.
- Anything already lodged with an embassy or consulate. Once a file has been submitted it belongs to that process, and we cannot recall it or have it destroyed on request.
- Records we need to defend a claim or comply with an order from a court or a regulator, for as long as that lasts.
Everything outside those three is deleted when you ask, and we will tell you plainly which of your information fell into which group rather than answering with a paragraph you cannot check.
Families, children and booking for other people.
Booking for your family
Most bookings here are made by one person for several travellers, which means you are giving us other people's passport details. Please make sure they know, because we deal with the person who made the booking and they may not expect that.
Children
Where a child is travelling, we hold what the airline and the mission require, which usually means the passport, the date of birth and a document showing the relationship to the accompanying parent. It is given to us by the parent or guardian who made the booking and it is used for nothing else.
Corporate and group bookings
Where an organisation books for its people, the organisation gives us the traveller details and the travellers themselves should be told what has been passed on. We hold it for that trip and for the accounting record afterwards.
What this page does not claim.
No certification, from anybody
We do not hold a certification under the General Data Protection Regulation, under any information security standard, or under any other data protection scheme, and nothing on this page should be read as one. This is a statement of what we do, not a certificate somebody issued us.
No claim about other people's systems
WhatsApp, the customer records system we use, the airlines and the missions all operate under their own terms. We tell you which of them receive your information so that you can go and read those terms. We are not in a position to make promises on their behalf.
No security theatre
Access to files is limited to the people working on your booking, documents are not left on shared personal devices, and paper is kept at the office. We are not going to describe that as bank grade or military grade, because those phrases mean nothing and are usually written by companies that have not thought about it.
No pretence about where the data sits
Our customer records system and WhatsApp are both operated outside Pakistan, and a visa file by definition goes to another country's mission. If it matters to you that your information leaves Pakistan, it does, and you should know that before you send anything.
Changes to this page.
When what we do changes, this page changes with it and the date at the top changes too. If a change materially affects information we already hold about you, for example a new system holding your documents or a different retention period, we will say so rather than quietly republishing. The version of this policy that applies to your booking is the one published when you booked, and we keep the earlier versions.
Still to be confirmed by IBEX before this page is in force.
Published rather than hidden, because a policy with a silent gap in it is the kind that fails the first time somebody tests it.
- The legal name of the entity that signs contracts and issues invoices, and its registration number, if it differs from the trading name IBEX Global Tours.
- The retention periods in the section above: twenty four months for enquiries, seven years for booking and payment records, and twelve months after the decision for visa documents. These must be confirmed as what actually happens, and the accounting period must be checked against the requirement that applies in Pakistan.
- Who inside the company is responsible for answering a request about personal information, so that a caller can be put through to a named person rather than to whoever answers.
- Whether any advertising or measurement tracking runs on the live website, for example a Meta pixel or a website analytics tag. If it does, the section on what we collect from this website must name it and say what it does before the site goes live.
- Whether any part of the visa file is sent to a partner agency, a courier or a filing service in addition to the mission itself, since anyone in that chain belongs on the list of who else sees it.
- Where paper documents are physically kept at the office, who can open that cabinet, and what happens to a document when the trip is over.
- The correspondence address on the company domain, once it exists, so that requests can be made in writing rather than only by telephone.
- Whether travel insurance is arranged by IBEX or bought by the traveller, since that decides whether an insurer belongs on the sharing list at all.
What happens to this list
Each item is either answered and written into the body of this page, or corrected there. When the list is empty, this section goes with it and the date at the top becomes the date the policy took effect. Until then, nothing above is being presented as settled practice where it is not.
Questions about anything on this page can go to the office on 051-8770026, or in person at Block 40, Street 51, Sector F-11/3, Islamabad. How to reach us, and when somebody will reply, is on the contact page.