Privacy Policy

Last updated: 25 August 2026

UmrahMarket ("we", "us") operates the website umrahmarket.co.uk. This policy explains what data we collect and how we use it. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

Who we are, and what we are not

UmrahMarket is a comparison platform. We do not sell Umrah packages, take bookings, or process payments. When you enquire about a package, you are taken to the travel agency's own website, which has its own privacy policy that will then apply.

Information we collect

Pilgrims (visitors). You do not need an account to use UmrahMarket. We do not ask visitors for names, emails or payment details.

When you click through to an agency, we log an anonymised record of that click — a one-way hashed form of your IP address, your browser type, and the referring page — so we can measure which packages are popular. This does not identify you personally.

We also record anonymous search trends — the search attributes you choose (departure airport, travel month, city, budget range, room type and number of travellers) and how many packages matched your search. This contains no name, email, phone number or IP address and cannot identify you. We use it to understand demand and help agencies list the trips pilgrims are looking for, and we retain it for up to 12 months.

Agencies. If you have an agency account, we store your name, email, a securely hashed password, and the package information you submit.

How we use it

To operate and improve the platform, show relevant packages, measure interest in listings, keep the service secure, and (for agencies) provide the dashboard. Our lawful bases are legitimate interests (running and improving the service) and, for agency accounts, performance of a contract.

Cookies

We use one strictly necessary cookie to keep agency users signed in, and a small preference cookie to remember your cookie choice.

With your consent, we use Google Analytics (provided by Google) to understand how visitors use the site so we can improve it. It sets its own analytics cookies and is loaded only after you accept on our cookie banner; if you decline, it is not loaded. We also use a privacy-friendly, cookieless analytics tool that sets no cookies and needs no consent.

In our "Plan your own Umrah" section we offer an optional flight-search tool provided by our travel partner (Kiwi.com, via the Travelpayouts network). Because it sets its own cookies, we load it only after you consent — either by accepting on our cookie banner or by choosing "Load flight search". If you decline, the tool is not loaded and no partner cookies are set. You can withdraw consent at any time by clearing cookies for this site in your browser. We do not use advertising cookies.

Who we share data with

We use trusted service providers to run UmrahMarket: Vercel (hosting), Neon (database), and Mapbox (maps). They process data only on our instructions, and we never sell your data. With your consent, we also use Google Analytics (Google) to measure site usage; Google processes that data under its own terms.

If you consent to the optional flight search, it is loaded from our travel partner (Kiwi.com, via the Travelpayouts network). They act as independent controllers of any details you enter into that search, under their own privacy policies — not ours.

Affiliate links

Some parts of UmrahMarket include affiliate links — an affiliate flight search in our "Plan your own Umrah" section, and "check availability" links to Booking.com on some hotel pages. If you follow one and go on to book with the partner, we may earn a commission — at no extra cost to you. We do not send your personal data to these partners; any information you enter on their site is governed by their privacy policy, not ours.

Data retention

Anonymised click logs are kept for analytics for up to 24 months. Anonymous search-trend data is retained for up to 12 months. Agency account data is kept for as long as the account is active.

Your rights

Under UK GDPR you have the right to access, correct, or erase your personal data, to object to or restrict processing, and to data portability. To exercise any of these, email us at the address below. You may also complain to the Information Commissioner's Office (ico.org.uk).

Contact

Questions about this policy or your data? Contact us.