What we hold, and why

Who is responsible

Umrah Online Taxi runs this site and the transfer service behind it. If you want to know what we hold about you, or want it changed or removed, write to support@umrahonline.taxi or message the WhatsApp number on the contact page. A person reads both.

What we ask you for

When you ask for a fare: your name, a WhatsApp number, and the journey itself, which means the pick-up and drop-off points, the date and time, how many of you there are, how much luggage you have and the vehicle you want. An email address is optional. Anything you write in the notes box is stored as you wrote it.

When you create an account: your name, your email address, a WhatsApp number and a password. The password is stored as a hash. Nobody here can read it, and nobody here can tell you what it is.

When you write a review: the rating and the words. A published review is signed with your first name and the first letter of your family name, never the whole name.

Automatically: your IP address is counted when you sign in, register or ask for a password reset, so that repeated attempts can be slowed down. That count is held for ten minutes and then disappears on its own.

What we never ask for

We do not take card details. There is no payment on this site at all: you pay the driver at the end of the journey, so there is nothing to store.

We do not ask for passport or identity documents, and we do not track where you are. There is no advertising profile and no analytics account following you around.

Cookies and what your browser keeps

If you are signed out, this site sets no cookies at all. Nothing is stored, nothing is read.

If you sign in, WordPress sets the session cookies it needs to keep you signed in. Signing out clears them.

If you choose the light or the dark appearance, that choice is written into your own browser under the name uot-theme. It stays on your device and is never sent to us.

The home page currently loads a reviews widget from cdn.trustindex.io, which is a company outside this site with its own privacy policy. It is the only thing on any page here that reaches a server we do not run.

Who else sees it

The driver assigned to your journey is given your name, your number and the pick-up details. He cannot find you without them, and he is given nothing else.

Hostinger hosts this site and its database, and our email leaves through their mail servers, so your enquiry passes through their systems on its way to us.

When you type an address into the search box, the letters you type are sent to Mapbox through our own server so that it can suggest places. Your name, your number and your booking are not sent with it.

We do not sell your details to anybody, and we do not pass them to anybody else for their own use.

How long we keep it

We keep an enquiry and the record of a journey while we are arranging it for you, and for a period afterwards so that we can answer a question about a journey you have already taken and keep our own accounts straight.

Ask us to delete your account and what is attached to it, and we will. Some records may have to be kept where the law requires it, and we will tell you plainly if that applies to anything of yours.

What you can ask us to do

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia you can ask us what we hold about you, ask for a copy of it, ask us to correct anything that is wrong, ask us to delete it, and withdraw your agreement to us holding it.

Write to support@umrahonline.taxi and we will answer. If you are not satisfied with the answer, you can raise it with the Saudi Data and Artificial Intelligence Authority.

How it is kept safe

The whole site is served over an encrypted connection. Passwords are hashed by WordPress and never stored as text. An enquiry you sent as a guest is only ever attached to an account once the email address on that account has been confirmed through a link we sent to it.

A customer account can reach nothing in the WordPress dashboard. The Mapbox key the place search uses stays on our server and is never handed to your browser.