Privacy Policy

1. Who we are

Muslim Help UK is the data controller for the personal data described in this notice. We are A registered charity in England and Wales, no. 1148089.

• Postal address Po Box 1046, London RM9 9RY
• Office address 1st Floor, 255-259 Commercial Road, London E1 2BT
• Email info@muslimhelp.org
• Phone 020 3633 2779
• Data protection contact [TO CONFIRM: named contact or role]
• ICO registration number [TO CONFIRM]

2. What we collect

When you donate

• Your name, email address, postal address and phone number.
• The amount, the appeal you chose, and whether the gift is single or monthly.
• Whether you are a UK taxpayer, if you make a Gift Aid declaration.
• A payment reference and the last four digits of your card. We never see or store your full card number. Payment details go directly to our payment provider.

When you contact us or sign up

• Your name and contact details, and the content of your message.
• Your marketing preferences, and a record of when and how you gave or withdrew consent.

When you use the website

• Strictly necessary storage that makes the donation basket and your cookie choice work. This needs no consent because the site cannot function without it.
• If, and only if, you agree, analytics and marketing cookies that tell us which appeals are read and how our campaigns perform. See our cookie policy.

Special category data

We do not seek health or religious data. If you volunteer it, for example a health condition relevant to a fundraising event, we use it only for that purpose and only with your explicit consent, which you can withdraw at any time.

3. Why we use it, and our lawful basis

UK GDPR requires a lawful basis for every use of your data. Ours are set out in full below.

4. Gift Aid and HMRC

If you make a Gift Aid declaration, we claim an extra 25p from HMRC for every £1 you give, at no cost to you. To do that we must pass your name, home address and donation details to HMRC, and we must keep the declaration and supporting records for HMRC audit. This is a legal obligation, so we cannot delete these records on request while the retention period runs.

You must pay enough UK Income Tax or Capital Gains Tax in the tax year to cover the amount all the charities you support will reclaim. If you stop paying enough tax, tell us and we will cancel the declaration.

5. Who we share it with

We do not sell your data and we do not swap donor lists. We share it only with:

• Our payment provider, to take your gift securely. [TO CONFIRM: named provider once the platform is live.]
• HMRC, for Gift Aid.
• Our email and IT suppliers, who process data on our written instructions only. [TO CONFIRM: list.]
• Our auditors, and regulators such as the Charity Commission and the Fundraising Regulator, where required.
• Law enforcement, where we are legally obliged to.

Every supplier is bound by a written contract that meets Article 28 and may act only on our instructions.

6. Sending data outside the UK

Some of our suppliers process data outside the UK. Where they do, we rely on UK adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for a copy of the safeguards we use.

Note that we do not treat your act of giving us data as agreement to an international transfer. Consent is not our transfer mechanism.

7. How long we keep it

When a period ends we delete the data or anonymise it so it can no longer identify you.

8. How we keep it safe

The site is served over HTTPS. Card details are entered on our payment provider's own secure form and never reach our servers. Access to donor records is limited to staff who need it, and is protected by individual accounts. We keep a record of any personal data breach and will report a qualifying breach to the ICO within 72 hours, and to you without undue delay where the risk to you is high.

9. Your rights

You can ask us, free of charge, to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate or incomplete.
• Delete it, where we have no continuing legal reason to keep it.
• Restrict what we do with it while a dispute is resolved.
• Object to processing based on legitimate interests. You can object to direct marketing at any time and we must stop.
• Port it to another organisation, where processing is by consent or contract and is automated.
• Withdraw consent at any time. This does not affect anything we did lawfully beforehand.

We answer within one month. We may extend by two further months for complex requests and will tell you if we do. We may ask you to confirm your identity first.

10. Marketing and how to stop it

We only send marketing emails and texts if you asked us to. Every message carries a one-click unsubscribe, and you can also email or phone us. We act on the request straight away.

You can also register with the Fundraising Preference Service, which lets you stop a named charity contacting you. We follow the Code of Fundraising Practice and are committed to the standards of the Fundraising Regulator.

11. Cookies

Nothing but strictly necessary storage runs until you make a choice. Analytics and marketing cookies only load if you opt in, and you can change your mind at any time. The full list, with each cookie's purpose and duration, is on our cookie policy, along with a button to reopen your settings.

12. Children

This website is meant for adults. We do not knowingly collect data from anyone under 16. If you believe a child has given us their data, tell us and we will delete it.

13. Complaints, including to the ICO

Please raise a concern with us first so we can put it right. If you are still unhappy, you have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection:

• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
• Helpline 0303 123 1113
• ico.org.uk/make-a-complaint

Complaints about our fundraising can also go to the Fundraising Regulator, and complaints about the charity itself to the Charity Commission.

14. Changes to this policy

We review this notice at least once a year and whenever our processing changes. The review date is at the top of the page. If a change materially affects you we will tell you directly.