Umrah Link is a software platform for Umrah companies. This page explains how we handle personal data on our website and in the platform. Last updated: 18 October 2026.
Umrah Link is a cloud platform Umrah companies use to run their packages, groups, pilgrims and staff. We are based in Jeddah, Saudi Arabia.
Each company using the platform owns the data of its pilgrims, customers and staff and decides what is entered and why; we process that data on its behalf and on its instructions. For visitors to our website, demo requests and companies’ accounts with us, we are responsible.
On our website: what you type in the demo request form (name, company, phone or email, message), and technical logs (IP address, browser, time of request) to protect the service.
In the platform: what the company and its staff enter, such as pilgrims, bookings, visas, payments and staff records, and an audit trail of who did what and when.
To provide the service the company asks for, to answer your request, to protect the platform from misuse, and to meet our legal obligations. We do not sell personal data or use it for advertising.
If a company connects its own WhatsApp number (Meta’s WhatsApp Business Cloud API), messages to and from that number pass through Meta, which processes them outside Saudi Arabia. Customers’ messages reach the company as support tickets; a staff member who links their number uses the copilot from WhatsApp with their own permissions only.
We keep a linked staff number encrypted, and outside the 24-hour window we send only templates Meta has approved.
Some features use AI providers (such as Anthropic in the United States). They run for a company only after it confirms their privacy impact assessment and the data path is approved; the copilot sees only what the staff member may see and takes no action without confirmation.
Only with the service providers we need to run the platform: hosting, the messaging providers (email, SMS, WhatsApp) a company connects, approved AI providers, and payment and e-invoicing (ZATCA) providers when used. No route that takes personal data out is used before it is approved in our data-path register.
Each kind of data has a purpose and a retention period, and is deleted or masked when it ends. Each company has a separate database, and documents and keys are kept in a protected vault. Details are on the security page.
Under Saudi Arabia’s Personal Data Protection Law you may ask to see, correct and delete your data. If your data is held by an Umrah company using the platform, contact that company first — it decides — and we will help it carry out your request.
To unlink your number from the copilot on WhatsApp: send “unlink” to your company’s WhatsApp number, or press Unlink on the My copilot page. The number stops at once and is removed from our records when its retention period ends.
To delete any other data: ask the company you deal with, or call us on the number below and we will take your request up with it.
For any privacy question: call us on +966 55 252 5261, Jeddah, Saudi Arabia. We may update this policy; the date of the last update is at the top of the page.
