Privacy Policy

Last Updated: March 2026 | Effective immediately for all donors.

Masjid Daar us Sunnah ("we", "us", or "our") is committed to protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.

1. Information We Collect

We collect and process the following data about you:

• Identity Data: First name, last name, and title. This is required to identify the source of funds for anti-money laundering (AML) compliance.
• Contact Data: Email address and billing address. This is required to issue donation receipts and for fraud prevention verification.
• Financial Data: We do not store full credit/debit card numbers on our servers. Payment data is encrypted and processed directly by our secure payment partners (Stripe, PayPal, and Square). We retain transaction references (e.g., Transaction IDs) for accounting reconciliation.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform. This helps us secure our site against bot attacks and improve user experience via PostHog analytics.

2. How We Use Your Data

We use your data strictly for the following purposes:

• To process your donation: We use your identity and financial data to execute the payment transaction via our banking partners.
• To claim Gift Aid: If you opt-in to Gift Aid, we are legally required to share your name, address, and donation amount with HM Revenue & Customs (HMRC).
• To improve our appeal: We use aggregated, anonymised data to understand how visitors use our site. This constitutes our Legitimate Interest in ensuring the success of the appeal.
• To communicate with you: We will send transactional emails (receipts). We will only send marketing or appeal updates if you have expressly opted in or if there is a legitimate interest based on your previous support.

3. Data Retention (How long we keep it)

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

The Legal Minimum

By law, we must keep basic information about our donors (including Contact, Identity, and Transaction Data) for six financial years after the end of the financial year in which the transaction occurred, for tax purposes (HMRC). Therefore, our standard retention period is seven (7) years.

After this period, data is securely deleted or anonymised so that it can no longer be associated with you.

4. Disclosure of Your Information

We may share your personal data with the parties set out below for the purposes set out in this policy:

• Service Providers: Stripe, PayPal, Square, and PostHog.
• Regulators: HM Revenue & Customs and other authorities based in the United Kingdom who require reporting of processing activities.
• Professional Advisers: Auditors and bankers who provide consultancy and accounting services to the Masjid.

5. International Transfers

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it. Our analytics provider, PostHog, processes data within the EU/EEA, offering an adequate level of data protection recognised by the UK Government.

6. Your Legal Rights

Under the Data Protection Act 2018 and UK GDPR, you have rights including:

• Request access to your personal data.
• Request correction of the personal data that we hold about you.
• Request erasure of your personal data after the 7-year legal retention period has expired.

To exercise any of these rights, please contact us at admin@dusunnah.com.

7. Contact Us

Masjid Daar us Sunnah is the controller and responsible for your personal data.
Email: admin@dusunnah.com
Address: Uxbridge Rd, London W12 8LH