Cookie Policy
Every cookie this website sets, what it is for, and how long it lasts.
Version 1.0 · Effective
Cookies we use
| Name | Set when | Purpose | Lifetime | Category |
|---|---|---|---|---|
| um_consent | When you make a choice in the cookie banner or Your Privacy Choices, or when your browser sends a Global Privacy Control signal | Remembers your cookie choices, the version of this policy you saw and a consent ID you can quote to us | 12 months | Strictly necessary, first party |
| region_pref | Only when you choose a country, on the country page at umairmanzoor.com or with the footer’s region switcher | Remembers the country you chose (us, ca or pk) so the home address opens that country’s site | 12 months | Strictly necessary, first party |
| Cloudflare Turnstile | On the pages with our inquiry form, the booking pages and Find my booking only | A security check that helps stop automated spam; it runs in its own frame and does not see what you type | As set by Cloudflare for the check | Strictly necessary, Cloudflare |
| tz_pref | When you open a booking page (from your browser’s time zone), or when you choose a time zone there | Remembers the time zone you chose, so booking times are shown in it | 12 months | Strictly necessary, first party |
| __Host-um_admin_session | Staff sign-in to the admin area only | Keeps an authorized staff member signed in | Up to 12 hours; the sign-in ends sooner after 30 minutes without activity | Strictly necessary, first party |
| __Host-um_step_up | Staff signing in again for a sensitive admin action | Records that the staff member has just signed in again | 10 minutes | Strictly necessary, first party |
| Sign-in security cookies set by Auth.js, the sign-in software | During staff sign-in only | Protect the sign-in exchange with Microsoft and the sign-in forms, and return staff to the admin page they asked for | Short-lived: for the sign-in, or until the browser is closed | Strictly necessary, first party |
| um_internal | Staff sign-in to the admin area only | Marks a staff member’s browser so the firm’s own visits are left out of the site’s statistics | 12 months | Strictly necessary, first party |
| _ga | Only if analytics is on for you (see Your choices) | Distinguishes one browser from another so visits can be counted | 2 years | Analytics, set by Google Analytics on this site |
| _ga_<container id> | Only if analytics is on for you (see Your choices) | Keeps the state of a visit | 2 years | Analytics, set by Google Analytics on this site |
Analytics and advertising
We use Google Analytics to see which pages are read and how visitors find the site. Whether it runs before you choose depends on where you are visiting from, not on which pages you read. For visitors in the United States and Pakistan it is on until you turn it off. For visitors in Canada, the EEA, the UK and Switzerland, or where we cannot tell where you are, it stays off until you accept. The site uses no advertising cookies.
On the pages with our inquiry and booking forms, including Find my booking, and on our Tax deadlines page, Cloudflare Turnstile runs a security check in its own frame and may store what it needs for that check in your browser. It is strictly necessary to protect the form and is not used for analytics or advertising. Nothing else from another company loads in your browser without your choice.
Your choices
The “Your Privacy Choices” link at the foot of every page opens a panel where you can switch analytics on or off at any time. Turning it off deletes the analytics cookies this site can remove and stops them being set again. The panel shows your consent ID and the date of your choice, so you can quote them to us. We honor a Global Privacy Control signal from your browser as a request to opt out of advertising.
You can also block or delete cookies in your browser’s settings. If you delete region_pref, the home address shows the country choice again.
If this changes
If we add advertising or any other optional cookie, we will update this policy first, list each cookie here and ask you again through the banner.
How this list is checked
This list is generated from the site’s cookie inventory. An automated scan of the site, made as a visitor from each region would see it, fails if it finds a cookie that is not listed, or anything from another company loading that your choice, or the rule for where you are, does not allow. Last scan: October 12, 2026.
Version history
- Version 1.0, effective . First published version.