Draft — not yet adopted
This notice was drafted for the masjid based on what this website actually collects. It has not been reviewed or adopted by the trustees, and it is not legal advice.
Every highlighted blank must be filled before publication, and the trustees should have the final text checked by someone qualified.
Who we are
Makkah Masjid Bolton, of 100–110 Grecian Crescent, Bolton, Lancashire BL3 6QU, is the data controller for the personal information described in this notice.
Registered charity number: to be confirmed.
Questions about this notice, or about your information, should go to info@makkahmasjidbolton.co.uk or 01204 524200. The person responsible for data protection at the masjid is name and role to be confirmed.
What we collect
We only collect information you give us. This site has no analytics, no advertising and no tracking of any kind.
| When you… | We collect |
|---|---|
| Send a message through the contact form | Your name, email, phone (if given), the topic and your message |
| Donate | Amount, the cause chosen, email, phone (optional) and any dedication message. Card details go directly to our payment provider — we never see or store them |
| Make a Gift Aid declaration | Your full name, home address and postcode. HMRC requires these to process the claim |
| Enquire about a course or the madrassah | Student's name and age, whether the student is a child, the parent or guardian's name and contact, and previous experience |
| Enquire about venue hire | Your name and contact, the event type, dates, times and approximate guest numbers |
| Apply for membership | Your name, date of birth, contact details and home address |
| Submit a funeral request | Your name, relationship to the deceased and contact details, together with information about the deceased needed to arrange the burial |
| Register for the youth club | The information on the registration pack, including emergency contacts and any medical needs. Handled on paper, not through this website |
Information we do not collect here
DBS check details are not collected through this website. Volunteer vetting is handled offline through the proper channel, so no criminal records information is held by the site.
Why we use it, and our lawful basis
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Replying to your enquiry | Legitimate interests — you asked us a question and expect an answer |
| Arranging a funeral, nikah, course place or hall booking | Performance of a contract, or steps taken at your request before entering one |
| Processing a donation and issuing a receipt | Performance of a contract, and legal obligation for our financial records |
| Claiming Gift Aid | Legal obligation — HMRC requires the donor's name and address |
| Keeping a membership record | Consent, given by ticking the box on the membership form |
| Sending you news and updates | Consent, given separately. You can withdraw it at any time |
| Health or religious details you choose to tell us | Explicit consent, or the legitimate activities of a not-for-profit religious body |
Where we rely on consent, you can withdraw it at any time by contacting us. Withdrawing consent does not affect anything done before you withdrew it.
How long we keep it
| Information | Kept for |
|---|---|
| General enquiries | to be confirmed — we suggest 12 months after the matter is closed |
| Donation records | 7 years, to meet charity accounting requirements |
| Gift Aid declarations | 6 years after the last donation they cover, as HMRC requires |
| Membership records | For as long as you remain a member, then to be confirmed |
| Madrassah and course records | to be confirmed — the trustees should set this alongside the safeguarding policy |
| Funeral records | to be confirmed |
Who we share it with
We do not sell your information, and we do not share it for marketing. We share it only where we have to:
- Our payment provider — to take card payments securely. They handle your card details; we do not.
- HMRC — name and address, where you have made a Gift Aid declaration.
- Funeral partners — the registrar, the cemetery and, where needed, the coroner, in order to arrange a burial.
- Where the law requires it — including where there is a safeguarding concern about a child or an adult at risk. See our safeguarding policy.
Our payment provider may process data outside the UK. Where that happens it is covered by the safeguards required under UK data protection law.
Your rights
You have the right to:
- Ask what we hold about you, and get a copy
- Have anything inaccurate corrected
- Ask us to delete it, where we have no continuing reason to keep it
- Object to our using it, or ask us to restrict how we use it
- Withdraw consent, where consent is what we relied on
- Ask for a copy in a portable format
Ask by email or phone. We will respond within one month and there is no charge.
Cookies
This website sets no tracking or advertising cookies. There is no analytics and no social media pixel.
Some pages load fonts and icon libraries from other organisations' servers, which means those organisations can see your IP address. We have deliberately left the map off the contact page for the same reason.
To be decided: if the trustees later add a map, analytics or a donation widget that sets cookies, this section must be updated and a cookie banner added before those go live.
Complaints
If you are unhappy with how we have handled your information, please tell us first — we would rather put it right.
You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or 0303 123 1113. You can complain to them without telling us first.
Changes to this notice
This notice was drafted on date of adoption and should be reviewed at least every two years, or sooner if what we collect changes.