Privacy policy
This policy explains what Umrah.to collects, why, who sees it and what you can ask us to do. It describes how the site actually works today. Last updated 2026-09-19.
Who we are
Umrah.to is published by Four Cents. Contact for anything in this policy: info@fourcents.ca.
What we collect, and why
| When | What | Why |
|---|---|---|
| Quote or guidance request (the form on /operators and on city, nationality and guide pages) | Name, email, phone or WhatsApp if you give it, departure city, number of travellers, month or season, budget, trip type, your message, the page you sent it from and the page that referred you, and your IP address. | To reply, and to pass your request to operators who can quote you. |
| Newsletter signup | Email address and IP address. | To send occasional Umrah planning emails. |
| Correction link on a page | Page address, your message, and your email if you give it. | To fix the page and, if you asked, tell you. |
| Operator listing application | Company name, contact name, email, phone, country, website, accreditations, Nusuk or Masar authorisation details, your message, the page and referrer, and your IP address. | To verify and publish the listing and to send you pilgrim enquiries. |
| Every visit | Standard web-server logs: IP address, page requested, time, browser type and the referring page. | Security, abuse prevention and keeping the site running. We do not use these logs to profile visitors. |
How submissions are stored
Each form submission is emailed to our team mailbox and appended to a submissions log on our server so that nothing is lost if an email fails. The mailbox is provided by an email service provider that processes the message on our behalf. Access is limited to the people who handle requests.
Who we share it with
- Operators you asked to be matched with. If you request quotes, we send your name, contact details and trip details to independent operators we have checked and who serve your departure country, so they can quote you. They become responsible for how they handle your details once you deal with them; we ask them to use your details only for your enquiry.
- Service providers that run our email and hosting, only to the extent needed to deliver those services.
- Nobody else. We do not sell, rent or trade personal information, we do not share it with advertisers, and we do not share it with any government or with Nusuk.
What we do not do
- No advertising trackers, no analytics scripts that identify you, no social-media pixels.
- No cookies set by us. The site works without any.
- No accounts, no passwords, no payment details: we never take payment for a trip.
- No location access.
What stays on your device
Tools and the offline companion store their state in your browser's local storage: ticked checklist items, tawaf and sa'i counters, and whether you dismissed the install banner. The service worker keeps copies of pages you have opened so they work offline. None of this is sent to us, and clearing your browser data removes it.
Third parties your browser contacts
Pages load fonts from Google Fonts, and the live page fetches prayer times from the Aladhan API, weather from Open-Meteo and exchange rates from a public rates API. Each of these providers receives the request from your browser, including your IP address, under its own privacy policy. We do not send them anything about you. Links to external sites are marked and open their own policies.
How long we keep it
- Quote requests, corrections and operator applications: for as long as needed to handle the request and keep a record of what we sent to whom, after which we delete or anonymise them. Ask and we will delete yours sooner.
- Newsletter address: until you unsubscribe or ask us to remove it.
- Server logs: rotated on a short cycle for security purposes only.
Your rights
Whatever country you are in, you can ask us to tell you what we hold about you, correct it, delete it, stop sharing it with operators, or stop emailing you. Email info@fourcents.ca from the address you used and we will act within a reasonable time, normally a few days. Depending on where you live you may also have the right to complain to a data-protection authority.
Children
The site is written for adults planning travel. We do not knowingly collect details from anyone under 16. If a child has sent us a form, a parent or guardian can email us and we will delete it.
Security
Forms are sent over HTTPS. Submissions are stored on our own server with restricted access and are not shared beyond the recipients above. No system is perfectly secure; tell us at once if you believe your details have been misused.
Changes
When this policy changes we update the date at the top and, for material changes, note it on this page. Continued use of the site after a change means the updated policy applies.