Legal
Privacy Policy
Last updated: 10 August 2026
This policy explains what UmrahScanr collects through the website, why it is used, when it is shared and the choices available to you.
1. Who this policy covers
This policy applies to visitors, people submitting package enquiries or listing reports, and representatives applying to list an agency on UmrahScanr. UmrahScanr is responsible for the personal data it collects through these functions.
2. Information we collect
Package enquiries may include your name, WhatsApp number, number of pilgrims, preferred travel month, selected package and message. Agency applications may include business and representative details, contact information, location, registrations, online presence, package activity and declarations. Listing reports include the package, report category and any details you choose to provide.
3. Technical data and cookies
Our hosting and application infrastructure may process IP address, browser and device information, request time, requested pages, error and security logs. Supabase authentication uses cookies for authorised administrator sessions. The public site does not currently use an advertising tracker or a third-party behavioural analytics package. If that changes, this policy and any required consent controls must be updated before the new tracking is used.
4. How we use information
We use submitted information to process enquiries and applications, review agencies and package listings, investigate incorrect-information or safety reports, maintain records of consent and authorisation, secure and troubleshoot the platform, prevent abuse, communicate about a submission, and comply with lawful obligations.
5. WhatsApp handoff
After a package enquiry is stored, the site opens WhatsApp with a prepared message containing the enquiry and package details. The current handoff uses UmrahScanr's configured WhatsApp number and may be routed onward to the relevant agency. Opening or sending the message causes WhatsApp and Meta to process information under their own policies. Do not include passports, identity documents, bank details, card information or passwords.
6. When information is shared
Information may be processed by service providers that support the platform, including Supabase for database and authentication services and Hostinger for website hosting and delivery. Enquiry details may be shared with the relevant agency so it can respond. We may disclose information where required by law, to protect users or the platform, or to investigate suspected fraud or abuse. We do not sell personal information.
7. International processing
Service providers and WhatsApp may process information outside your state or country. Their locations and safeguards are governed by their own infrastructure and terms. By choosing the WhatsApp handoff, you understand that the message is processed separately from UmrahScanr's website.
8. Retention
We keep enquiry, application and report records only for as long as reasonably needed for the purposes described above, including follow-up, verification, dispute prevention, security and legal records. Retention may vary by record type. When information is no longer required, we will delete or anonymise it where reasonably practicable, unless continued retention is required by law or for a legitimate claim or safety investigation.
9. Security
We use access controls and database security features intended to protect submitted information. No internet service is completely secure, and we cannot guarantee absolute security. Public forms are not intended for identity documents, financial credentials or other highly sensitive information.
10. Your choices and rights
You may ask whether we hold your personal data, request access, correction, updating or deletion, withdraw consent where processing depends on consent, or raise a grievance about our handling of your information. We may need enough information to verify your identity and locate the relevant record. Some information may be retained where legally permitted or required.
11. Children
The platform is intended for adults arranging travel or authorised agency representatives. A parent or lawful guardian should provide any information relating to a child that is necessary for a travel enquiry. Do not submit unnecessary personal data about children.
12. Policy updates
We may update this policy when the platform, providers or legal requirements change. Material changes will be reflected on this page, and the “Last updated” date identifies the current version.
13. Contact and grievances
For privacy requests or grievances, contact the official UmrahScanr Instagram account @umrahscanr and identify the enquiry or application sufficiently for us to locate it. Do not send identity documents or other sensitive files through Instagram; we will provide a safer verification method if required.