Legal
Privacy statement
Last updated: May 7, 2026
Note: we are working on an extended legal version with a Dutch privacy lawyer. The text below is the working basis and contains the core information you need to understand how we handle data.
This English text is a convenience translation. In case of any difference, the Dutch version prevails.
1. Who are we?
UmrahManager is a product of Mazin (sole proprietorship / trade name), based in the Netherlands. For questions about your data, email info@umrahmanager.app or message us via the contact page.
2. Which data do we process?
We process two kinds of personal data:
- Agency data: name, email address, phone number, Chamber of Commerce number and payment details of the agency owner / staff.
- Customer data: the data the agency enters about its pilgrims (name, passport, contact, preferences, payments, documents). The agency is the data controller for this; UmrahManager is the processor.
3. Why do we process that data?
To enable the agency to manage its customers, communicate, and carry out the trip. We do not use the data for our own purposes, not for advertising, not for profiling. We do not sell data to third parties.
4. Where is the data stored?
Our database is hosted with Supabase in Frankfurt (Germany, EU). Email delivery runs via Resend (eu-west-1). Files (passport scans, documents) are stored encrypted in private cloud storage within the EU. No data leaves the EU.
5. How long do we keep it?
As long as the agency is active with us. On cancellation we export the data for the agency and permanently delete it within 90 days (unless statutory retention periods require otherwise, e.g. for financial records).
6. Your rights (GDPR)
You have the right to access, rectification, erasure and data portability. For requests: email info@umrahmanager.app — we respond within 30 days. Complaint? You can turn to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Cookies
We use only functional cookies — for login and session management. No tracking cookies, no advertising pixels, no analytics tools that collect your behaviour.