Privacy Policy
We are committed to protecting your privacy and personal information. This policy explains how we collect, use, and safeguard your data in accordance with UK GDPR regulations.
Last updated: 27 September 2026
Data Controller Information
Organisation: Alamin Spiritual Centre
Charity Number: 1206713
Registered Address: 78 Brantwood Dr, Bradford, BD9 6QS, United Kingdom
Information We Collect
Personal Information
- Name and contact details (email, phone, address)
- Donation history and payment information
- Communication preferences
- Information provided during spiritual consultations (with consent)
- Details you give when requesting a service (with consent), such as your mother’s name, gender, date of birth, a brief description of your concern, which may include health information, or the question you ask for a fatwa
- Names of anyone else you mention in a service request, such as family members included in your request or someone involved in an Istikhara decision or a fatwa question. Please only mention someone who knows you are asking.
- Correspondence and feedback
Technical Information
- IP address and browser information
- Website usage data and analytics
- Cookie preferences and settings
- Device information for mobile accessibility
How We Use Your Information
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent: For marketing communications and optional services
- Legitimate Interest: For charity operations and donor relations
- Legal Obligation: For charity compliance and financial reporting
- Vital Interests: For emergency spiritual support when necessary
Purposes of Processing
- Processing donations and Gift Aid claims
- Providing spiritual guidance and support services
- Sending updates about our charitable work
- Maintaining donor records and acknowledgments
- Website improvement and user experience
- Compliance with charity regulations
Data Sharing and Third Parties
We do not sell or rent your personal information. We may share your data with:
- Payment Processors: SumUp handles donations and service payments; Stripe handles consultation payments. We share the contact and payment details needed to process your payment, but not your private service-request message.
- Online Bookings: Cal.com and Google use your booking details to arrange appointments and online consultations.
- HMRC: For Gift Aid claims and charity compliance
- Email Service Providers: For responding to enquiries, confirming requests and sending updates
- Website Service Providers: Cloudflare helps us store and protect information you submit through our website.
- Spam Protection: Cloudflare Turnstile uses browser, device and network information to protect our forms from spam. See the Turnstile Privacy Addendum.
- Analytics Services: For website improvement, only after you allow analytics cookies
- Legal Advisors: When required by law or for charity governance
All third parties are required to maintain appropriate security measures and use your data only for specified purposes.
Data Retention
- Donation Records: 7 years (HMRC requirement)
- General Contact Information: 3 years after last contact
- Spiritual Consultation Records: 2 years (with consent)
- Online Service Requests: Temporary copies are normally deleted seven days after payment, or seven days after submission if unpaid. We keep them longer when needed to resolve a payment or confirmation problem. Correspondence and consultation records follow the periods above.
- Marketing Communications: Until you unsubscribe
- Website Analytics: 26 months maximum
We regularly review and securely delete data that is no longer needed for our charitable purposes.
Your Rights Under UK GDPR
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal requirements)
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Object: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for marketing communications
To exercise these rights, contact us at info@alaminspiritual.com or +44 7770 183110. We will respond within one month.
Security Measures
We implement appropriate technical and organisational measures to protect your personal data:
- SSL encryption for all data transmission
- Secure payment processing through PCI DSS compliant providers
- Regular security updates and monitoring
- Limited access to personal data on a need-to-know basis
- Staff training on data protection responsibilities
- Regular backups with encryption
Cookies and Website Analytics
We use cookies and similar technologies to improve your website experience:
- Essential Cookies: Required for website functionality
- Analytics Cookies: To understand how visitors use our site
- Preference Cookies: To remember your settings
You can manage your cookie preferences through your browser settings. Essential cookies cannot be disabled as they are necessary for the website to function.
International Data Transfers
Some service providers process personal information outside the UK, including in the European Union. For these transfers, we ensure:
- Adequate protection through adequacy decisions or appropriate safeguards
- Data Processing Agreements with clear privacy obligations
- Regular monitoring of third-party security practices
Children's Privacy
We take special care to protect children's privacy. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child under 13, please contact us immediately.
For spiritual guidance involving minors, we always seek appropriate parental or guardian consent and maintain strict confidentiality.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to registered users
- Updating the "Last updated" date at the top of this policy
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
Data Protection Officer: For specific data protection queries, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk.