Privacy Policy
Last updated: March 2025
1. Who We Are
Masjid Al-Hikmah Islamic Centre ("we", "us", or "our") is the data controller responsible for your personal data. We are a registered charity in England and Wales (Charity No. 1041977).
If you have any questions about this policy or how we handle your data, please contact us at:
Email: info@masjidalhikmah.co.uk
Phone: 020 8472 2745
2. What Data We Collect
We collect personal data in the following circumstances:
- 1
Online Donations
Your name, email address, and payment details (processed securely by Stripe). We also store the donation amount, fund, and frequency. If you opt in to Gift Aid, we additionally record your home address.
- 2
Contact Enquiries
Your name, email address, phone number, and the content of your message when you contact us through our website or by email.
- 3
Website Usage
Standard server logs (IP address, browser type, pages visited, time and date of visits). This data is not linked to individual identities and is used solely for maintaining and improving the website.
We do not collect any special category data (such as religious beliefs, health data, or biometric data) through this website.
3. How We Use Your Data
| Purpose | Lawful Basis |
|---|---|
| Processing your donation and issuing a receipt | Contractual necessity |
| Claiming Gift Aid on your behalf (where applicable) | Legal obligation (HMRC requirement) |
| Responding to your contact enquiry | Legitimate interests |
| Sending donation updates or appeals (only with your consent) | Consent |
| Maintaining website security and performance | Legitimate interests |
| Complying with legal and regulatory obligations | Legal obligation |
4. Payment Processing (Stripe)
All online payments are processed by Stripe, a PCI DSS-compliant payment processor. We do not store your full card details on our systems at any point — this data is held by Stripe under their own privacy policy.
Stripe may set cookies on your device as part of the checkout process. You can review Stripe's privacy policy at stripe.com/gb/privacy.
5. Sharing Your Data
We do not sell or rent your personal data. We may share it only in the following limited circumstances:
- —Stripe — to process your payment
- —HMRC — to claim Gift Aid where you have elected to do so
- —Legal obligation — if required by law, court order, or competent authority
6. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Donation records | 7 years (HMRC requirement) |
| Gift Aid declarations | 6 years after the last donation claimed |
| Contact enquiries | 2 years from the date of enquiry |
| Server logs | 90 days |
7. Your Rights
Under UK GDPR you have the following rights:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate or incomplete data.
- Right to erasure: You can request deletion of your data where there is no compelling reason to keep it.
- Right to restrict processing: You can ask us to pause processing your data in certain circumstances.
- Right to object: You can object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting prior processing.
To exercise any of these rights, please email info@masjidalhikmah.co.uk. We will respond within 30 days.
8. Complaints
If you believe we have mishandled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or call 0303 123 1113. We would appreciate the opportunity to address your concerns directly before you contact the ICO.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.