How we protect your data

سياسة الخصوصية وحماية البيانات

NUR JOURNEY collects only what is necessary, stores it securely, and never sells your personal information to third parties.

Our Privacy Commitment

We collect only the minimum data required to run the platform and verify Hajj/Umrah eligibility. We never sell your data. We never share it beyond the legally required institutions (CBE, EIASC, Telecom for SMS delivery).

1. Information We Collect

Identity data: full name, date of birth, nationality, and national ID number (required for Hajj/Umrah eligibility verification).
Contact data: mobile phone number and email address (used for SMS notifications and account communications).
Payment reference data: your Telebirr or CBE transaction reference number (we do not store card numbers or PIN codes).
Usage data: pages visited, time on site, and device type — collected anonymously for performance analytics.

2. How We Use Your Data

To create and manage your participation account and issued tickets.
To deliver transaction confirmations and journey updates via SMS (Ethio Telecom / Safaricom ET SMPP).
To verify eligibility with the Ethiopian Islamic Affairs Supreme Council (EIASC) during the cohort selection process.
To fulfil our legal obligations under Ethiopian financial and anti-money-laundering regulations.
We never sell, rent, or trade your personal data to any third party for marketing purposes.

3. Data Security

All data in transit is encrypted using TLS 1.3 or higher.
Sensitive identity documents are stored with AES-256 encryption at rest.
Access to personal data is restricted to authorised personnel on a strict need-to-know basis.
We conduct periodic security audits and penetration tests.

4. Third-Party Sharing

Commercial Bank of Ethiopia (CBE): your name and contribution amount are shared as required for escrow account administration.
Ethiopian Islamic Affairs Supreme Council (EIASC): identity data is shared for eligibility verification and cohort selection oversight.
Ethio Telecom / Safaricom ET: phone number shared solely for transactional SMS delivery.
No advertising networks, social media platforms, or data brokers receive your personal information.

5. Data Retention & Deletion

Active participant data is retained for the duration of the programme and for 7 years thereafter, as required by Ethiopian financial record-keeping law.
Inactive or non-participating account data is deleted after 2 years of inactivity.
You may request deletion of your account data by contacting support@nourjourney.et. Note that legally mandated retention periods override deletion requests for relevant records.

6. Your Rights

You have the right to access a copy of the personal data we hold about you.
You have the right to correct inaccurate data.
You have the right to request deletion of data not subject to legal retention requirements.
To exercise any of these rights, contact: privacy@nourjourney.et

Last updated: October 2026 · For any privacy concerns email privacy@nourjourney.et · Read our Terms of Participation

Preparing your journey…