Privacy Policy

1. Introduction

Masjid Al-Ummah is a project of MAU (Charity No: 1204404). We are committed to protecting your privacy and handling your personal data transparently. This policy explains how we collect, use, and safeguard your information.

2. Data Controller

MAU
Watford, Hertfordshire
United Kingdom
Email: [email protected]

3. Information We Collect

We collect the following types of personal data:

• Contact Information: Name, email address when you submit our contact form
• Donation Information: Name, email, payment details (processed securely by Stripe), and for Gift Aid claims: home address and postcode
• Technical Data: IP address, browser type, and pages visited (via Cloudflare analytics)
• Communication Preferences: If you subscribe to our newsletter or updates

4. How We Use Your Information

We use your personal data to:

• Process your donations and send receipts
• Claim Gift Aid from HMRC on eligible donations
• Respond to your enquiries via the contact form
• Send updates about our projects (with your consent)
• Comply with legal and regulatory requirements
• Improve our website and services

5. Legal Basis for Processing

We process your data based on:

• Contract: To process donations you have made
• Legal Obligation: For Gift Aid claims and charity reporting
• Legitimate Interest: To improve our services and communicate with supporters
• Consent: For marketing communications (you can withdraw at any time)

6. Payment Security

All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. We never store your full card details on our servers. Stripe's privacy policy can be found at stripe.com/privacy.

7. Data Sharing

We share your data only with:

• Stripe: For payment processing
• HMRC: For Gift Aid claims (donor name, address, donation amount)
• Microsoft 365: For email communications
• Cloudflare: For website hosting and security

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

8. Data Retention

We retain your data for:

• Donation records: 7 years (as required for Gift Aid and charity accounting)
• Contact form submissions: 2 years
• Marketing preferences: Until you unsubscribe

9. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests

To exercise these rights, email us at [email protected].

10. Cookies

Our website uses essential cookies for functionality. We use Cloudflare for hosting, which may set security cookies. We do not use advertising or tracking cookies.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be available on this page with the date of last update.

12. Contact & Complaints

For privacy-related enquiries, contact us at [email protected].

If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.