Privacy Notice

Supporter Privacy Notice

This Privacy Notice explains:

who we are
how we collect, share and use your personal data
how you can exercise your privacy rights

Muslim Aid is the data controller responsible for your personal data (referred to as "we", “us” or “our” in this privacy notice) and we are committed to respecting your privacy.

Muslim Aid is a registered charity in England and Wales with registration number 1176462 and Data Controller registration number Z1169585.

Contact Us

If you have any questions about

this privacy notice
the use of your personal data
or wish to request to exercise any of your rights

please contact our Data Protection Officer using the following details:

By email:[email protected]

By post: Kazient Privacy Experts ℅ Muslim Aid Data Protection Officer
               The Minster Building
               Great Tower St
               EC3R 7AG
               United Kingdom

Making a Data Protection Complaint

If you have any concerns about the use of your personal data or the way we handle your requests relating to your rights, you can raise a complaint directly with us by using the contact details provided in this notice.

If you are not satisfied with the way we handle your complaint, you are entitled to raise a complaint directly with the UK Information Commissioner’s Office via the details available on their website: www.ico.org.uk.

Personal Data We Collect From You

We collect personal data when you:

make a donation to us
visit our website
complete an online contact form
participate in a competition or promotion
attend one of our events
communicate with us (including phone calls, chat, email, web forms, social media)

The types of personal data we collect from you include/are:

Identity Data which includes your first name, last name, date of birth and age
Contact Data which includes your home address, email address and phone number
Financial data which includes your bank account details
Profile Data which includes feedback, survey responses
Technical Data which includes internet protocol (IP) address, browser type, and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website
Verification Data which includes identification documents such as driving licence
Any personal data about you included in free text boxes; including in relation to enquiries, feedback, or comments submitted to us

We may also collect Special Categories of Data when you participate in a fundraising event which includes:

Health data which includes any physical disability, mental disability or any medical condition

It is important the personal data we hold about you is accurate and up to date.

Please keep us informed of any changes to your personal data for example change of contact details, etc.

Personal Data We Collect from Others

Sometimes we work with carefully selected third parties and we may receive your personal data from them.

The third parties include:

business partners
suppliers
sub-contractors
advertisers
referrers

How We Use Your Personal Data

Data Protection law permits us to process your personal data only if we have a valid legal basis to do so.

We use your personal data for the following purposes:

Purpose/Activity	Type of Data	Lawful basis of processing
To provide information that you have requested	Identity Contact	Legitimate interests
To manage our relationship with you (including updating you with important changes)	Identity Contact Profile	Performance of a contract
To keep you informed about campaigns, projects, updates and opportunities	Identity Contact Profile Marketing	Consent
To process and administer your: donations gift aid claims Identity Contact Profile Financial		Performance of a contract
To use data analytics and to improve our website, services, marketing, and consumer experiences	Technical Profile Usage	Legitimate interests
To manage our sponsorship programs	Identity Contact Profile	Legitimate interests

To support fundraising activities and manage fundraising events	Identity Contact Profile	Legitimate interests
Meeting our legal and regulatory obligations	Identity Contact Profile	Legal obligation
To keep you safe when you participate in any activity or even with us	Health	Vital interests

We’ll only ask for Special Categories of Data when we absolutely need to and use it in limited circumstances.

Where we are processing your personal data for our legitimate interests, you may object to the processing of your personal data.

We need certain personal data from you to be able to provide services to you.

Sharing Your Personal Data

When necessary, we share your personal data with:

our service providers
tax, government, and any relevant regulatory authorities
prosecuting authorities and courts, and/or other relevant third parties connected with legal proceedings or claims
law enforcement agencies
third parties where we are required to do so by law

Transfer of Your Personal Data Outside the UK

Your personal data may be transferred outside of the UK to our trusted service providers.

We require third parties to keep your personal data confidential and secure.

We ensure that suitable protection is maintained at all times by ensuring that appropriate safeguards are in place.

Retaining Your Personal Data

We keep personal data for as long as it is required by us for the

purposes described above
to meet our legal or regulatory obligations
for the exercise and/or defence of any legal claims

Profiling

There may be some circumstances where we use your personal data for profiling.

We always make sure the way we process your personal data is safe and fair to you.

Where we are processing your personal data for profiling activities, you may object to the processing of your personal data.

Automated Decision Making

We do not use any automated processes to make decisions about you that produce legal or significant effects concerning you.

Your Data Subject Rights and How to Exercise Them

You have rights relating to the personal data we hold about you, however, they may be subject to various exceptions and limitations.

You can request to exercise your rights at any time by contacting us. The contact details can be found in the Contact Us section of this notice.

Your rights:

Right to be informed: We are obliged to provide clear and transparent information about our processing activities of your personal data.

Request access to your personal data (commonly known as a “data subject access request”): You have the right to understand what personal data we hold about you and why.

Request correction of the personal data: If we hold inaccurate or incomplete personal data, you have the right to request us to rectify or correct your personal data.

Request erasure of your personal data: You may ask us to delete or remove personal data where there is no good reason for us to continue to process it. Please note, however, that we may not always be able to comply with your request for erasure for specific legal reasons.

Request restriction of processing of your personal data: You may ask us to stop processing your personal data. We will still hold the data but will not process it any further. You may exercise the right to restrict processing when one of the following conditions applies:

the accuracy of the personal data is contested
processing of the personal data is unlawful
we no longer need the personal data for processing but the personal data is required for part of a legal process
the right to object has been exercised and processing is restricted pending a decision on the status of the processing

Right to Withdraw Consent: You may withdraw consent at any time if we are relying on your consent to process your personal data. This won’t affect any processing already carried out before you withdraw your consent or processing under other grounds.

Right to object: You have the right to object to our processing of your personal data where:

processing is based on legitimate interest
processing is for the purpose of direct marketing

Please note when you request to exercise any of your rights we may request specific information from you to help us confirm your identity and keep your personal data protected.

Force24 Cookies & Tracking

Our organisation utilises Force24’s marketing automation platform.

Force24 cookies are first party cookies and are enabled at the point of cookie acceptance on this website. The cookies are named below:

F24_autoID
F24_personID

They allow us to understand our audience engagement thus allowing better optimisation of marketing activity.

f24_autoId – This is a temporary identifier on a local machine or phone browser that helps us track anonymous information to be later married up with f24_personid. If this is left anonymous it will be deleted after 6 months . Non-essential, first party, 10 years, persistent.

f24_personId – This is an ID generated per individual contact in the Force24 system to be able to track behaviour and form submissions into the Force24 system from outside sources per user. This is used for personalisation and ability to segment decisions for further communications. Non-essential, first party, 10 years, persistent.

The information stored by Force24 cookies remains anonymous until:

Our website is visited via clicking from an email or SMS message, sent via the Force24 platform and cookies are accepted on the website.
A user of the website completes a form containing email address from either our website or our Force24 landing pages.

The Force24 cookies will remain on a device for 10 years unless they are deleted.

Other Tracking

We also use similar technologies including tracking pixels and link tracking to monitor your viewing activities

Device & browser type and open statistics

All emails have a tracking pixel ( a tiny invisible image ) with a query string in the URL. Within the URL we have user details to identify who opened an email for statistical purposes.

Link Tracking

All links within emails and SMS messages sent from the Force24 platform contain a unique tracking reference, this reference help us identify who clicked an email for statistical purposes.