Privacy Policy

We collect personal details necessary to facilitate holy travel packages. This includes:

• • Personal details: name, active email, verified phone, birthdate, and gender.
• • Identity documentation: international passports, biological photos, and vaccine cards.
• • Payment and financial metadata: bank accounts, provider transaction signatures, and wallet logs.
• • Travel settings: hotel preferences, departure ports, and airport requests.

Your data is processed only to fulfil your journey:

• • Processing flights, booking hotels, and issuing ground transport cards.
• • Preparing and filing visa requests with Saudi Arabia authorities.
• • Communicating flight changes, agent alerts, and savings deadlines.
• • Meeting NAHCON compliance auditing and anti-fraud protocols.

Payment transactions on umrah.ng are routed through PCI-DSS compliant providers and banking partners. We never store raw card numbers, PINs, or CVV digits in our databases. All database connection pipelines use end-to-end transport protection.

All document uploads are processed through encrypted private storage. Access is limited to assigned staff processing your specific trip. Physical and digital files are scheduled for erasure 12 months after completion of travel, subject to legal retention requirements.

We share relevant trip details only with essential logistical partners:

• • Airlines for bookings and passenger manifests.
• • Hotels for room registration and special requests.
• • Saudi visa authorities and NAHCON for pilgrimage permits.
• • Payment processors for transaction matching and payout safety.

Active portal accounts remain in our active system. Inactive profiles with no active bookings are anonymized after 24 months. Secure document scans are permanently cleared 12 months post-travel, subject to applicable law.

You have rights under applicable Nigerian data-protection law:

• • Request a copy of information stored under your profile.
• • Correct inaccurate passport or contact details.
• • Request profile deletion, subject to active travel and legal obligations.
• • Revoke processing consent where consent is the legal basis.

Our portal uses necessary session cookies for selections, wallet state, and login sessions. Limited analytics help us monitor page performance and improve loading across Nigerian network carriers.

We do not create independent customer accounts for pilgrims under 18 without explicit parental verification and adult guardian-linked credentials.

For questions about our privacy and security standards, contact our privacy division:

• • Email: dpo@umrah.ng
• • Head Office: umrah.ng Security Operations, Suite 3B, Ikeja, Lagos, Nigeria