This policy explains what information umrabadal.com collects, why, and how it is used. We collect only what is needed to perform an Umrah Badal on your behalf and to keep you informed about it.
Who we are
This site is umrabadal.com, operated by a small team based in Makkah. Our contact email is contact@umrabadal.com.
What information we collect
When you book an Umrah Badal, we collect:
- Your email address (for sending confirmation and video proof)
- The full name of the person on whose behalf the Umrah will be performed
- Their relationship to you (mother, father, etc.)
- Their gender
- The reason Umrah Badal is being arranged
We collect payment information only to process your order. Card details are handled by our payment processor and never stored on our servers.
How we use information
The information collected is used solely to perform the Umrah you booked, deliver the confirmation and video proof to you, and respond to your support questions. We do not sell, rent, or share your personal information with third parties for marketing.
Payment processing
Payments are processed by our payment provider. Their privacy practices apply to data they collect during checkout.
Cookies
We use minimal cookies needed for the website to function (such as your shopping cart and login session). We do not use cookies for advertising or third-party tracking on this site.
Your rights
You have the right to request a copy of the personal data we hold about you, to request correction of any inaccurate data, and to request deletion of your data once your booking has been completed and the legal record-keeping period has passed. Email contact@umrabadal.com to make any of these requests.
Retention
Booking and order records are kept for the period required for tax and accounting purposes. After that period they are securely deleted.
Advertising and analytics partners
We use the Meta Pixel and Meta Conversions API to measure how our advertising performs and to deliver relevant ads to people likely to be interested in our service. These tools collect technical information about your visit (pages viewed, products viewed, completed bookings) and may include hashed contact details (email, phone, first and last name) when you book. Meta acts as an independent data controller for parts of this processing under the joint controller arrangement available at facebook.com/legal/controller_addendum.
For visitors in the European Union, the European Economic Area, the United Kingdom, and any other region requiring explicit consent for marketing cookies, the Meta Pixel and Conversions API only activate after you give consent through our cookie banner. If you decline, no Pixel events fire and no server-side events are sent to Meta.
International data transfers
Meta Platforms, Inc. is established in the United States. When you give consent and we share data with Meta, that data is transferred outside the European Economic Area. The transfer is protected by the European Commission’s Standard Contractual Clauses (Module 2: Controller to Processor), Meta’s supplementary measures as required by the Schrems II ruling, and Meta’s certification under the EU-U.S. Data Privacy Framework where applicable. You can review Meta’s privacy policy at facebook.com/privacy/policy.
Our payment processor (WooPayments, operated by Automattic, Inc.) and our hosting provider (Hostinger International Ltd.) may also process data in countries outside the EEA. Each operates under appropriate safeguards including Standard Contractual Clauses where required.
Special category data (religious belief)
umrabadal.com offers a religious service: Umrah Badal, the proxy performance of an Islamic pilgrimage in Masjid al-Haram, Makkah. Your visit to this website, or your booking with us, may indicate your religious belief, which is a special category of personal data under Article 9 of the UK GDPR and the EU GDPR.
The lawful basis for processing this data is your explicit consent under Article 9(2)(a). We collect that consent through:
- The cookie banner shown on your first visit, for analytics and advertising data shared with Meta.
- The booking form when you place an order, for the religious service we then perform on behalf of the named beneficiary.
You may withdraw consent for advertising and analytics at any time by emailing contact@umrabadal.com, or by clearing the ub_consent cookie in your browser and choosing Decline when the banner re-appears. Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.
Your rights under GDPR and UK GDPR
If you are in the European Union, European Economic Area, or United Kingdom, you have the right to:
- Access the personal data we hold about you;
- Have inaccurate data corrected;
- Have your data deleted (right to erasure), subject to legal record-keeping requirements;
- Restrict or object to processing, including marketing processing;
- Withdraw consent for any processing based on consent, at any time, without affecting the lawfulness of processing carried out before withdrawal;
- Receive your data in a portable format;
- Lodge a complaint with your national data protection authority (the list of EU/EEA authorities is at edpb.europa.eu/about-edpb/about-edpb/members; for UK residents, the supervisor is the Information Commissioner’s Office at ico.org.uk).
To exercise any of these rights, email contact@umrabadal.com. We respond within 30 days as required by GDPR.
Contact
For any privacy question, email contact@umrabadal.com.