Darul-Noor (operating as High Barnet Islamic Centre) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, the “Data Controller” is:

• Name: Darul-Noor
• Charity Number: 1190170
• Address: 1 Bath Place, Barnet, EN5 5XE, United Kingdom
• Email: info@darulnoor.org.uk

2. Information We Collect

We may collect and process the following data about you:

• Identity Data: Name, title, date of birth, and gender (e.g., when registering for the Madrasah or an event).
• Contact Data: Email address, telephone number, and postal address.
• Financial Data: Bank details or payment card information when you make a donation (processed by third parties, see section 4).
• Special Category Data: As a religious organisation, we may process data revealing your religious beliefs. We may also collect health information (e.g., allergies) for children attending our Madrasah to ensure their safety.
• Technical Data: IP address, browser type, and operating system when you visit our website.

3. How We Use Your Information

We use your data for the following purposes:

• To process donations and claim Gift Aid (where applicable).
• To manage registration and attendance for the Madrasah and educational courses.
• To communicate with you regarding centre updates, prayer times, and appeals (only if you have opted in).
• To ensure the safety and safeguarding of children and vulnerable adults in our care.
• To improve our website and services.

4. Third-Party Payment Processors

We do not store your debit/credit card information on our own servers. Donations and payments made through our website are handled by secure third-party payment processors. Their privacy policies will apply to the financial data you provide to them:

• Stripe: Used for secure credit/debit card processing.
• LaunchGood / JustGiving: Used for fundraising campaigns.
• GoCardless: Used for processing Direct Debit donations.
• Bank Transfers: Processed directly by your bank and ours.

5. Legal Basis for Processing

We process your data under the following lawful bases:

• Consent: When you subscribe to our newsletter or agree to be contacted.
• Legitimate Interests: To run our charity effectively and communicate with our members (e.g., informing you of Eid prayer times).
• Legal Obligation: For processing Gift Aid with HMRC or for safeguarding purposes.
• Vital Interests: In medical emergencies regarding Madrasah students.

6. Data Security and Retention

We have implemented security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to trustees, staff, and volunteers who have a business need to know.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements (e.g., Gift Aid records must be kept for 6 years).

7. Your Rights

Under the UK GDPR, you have the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data (“right to be forgotten”).
• Object to processing of your personal data.
• Withdraw consent at any time.

To exercise any of these rights, please contact us