Privacy Policy

1. Who we are

Muslimaat Association ("we", "us", "our") is a registered charity based in Sheffield, United Kingdom (Charity #1052325). We are committed to protecting your privacy and handling your personal data responsibly.

Our registered address is: Floor 4, Don Valley House, Savile Street East, Sheffield, S4 7UQ.

2. What information we collect

We may collect the following personal information when you interact with us:

• Name and contact details (email address, phone number)
• Information you provide through our contact or booking forms
• Information shared when you attend our events or drop-in sessions
• Email address if you subscribe to our newsletter
• Donation information processed through our payment provider

3. How we use your information

We use your personal information to:

• Respond to your enquiries and provide support
• Process bookings for our services and events
• Send you newsletters and updates (only with your consent)
• Process donations and issue receipts
• Improve our services and website
• Comply with our legal obligations as a registered charity

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Consent — for newsletter subscriptions and marketing communications
• Legitimate interests — for responding to enquiries and providing our services
• Legal obligation — where we are required by law to process your data
• Contract — when processing is necessary to fulfil a booking or service

5. How long we keep your data

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected. Contact enquiries are kept for up to 2 years. Donation records are kept for 7 years in line with charity accounting requirements. Newsletter subscribers' data is kept until you unsubscribe.

6. Sharing your information

We do not sell, rent or trade your personal information to third parties. We may share your data with trusted service providers who assist us in operating our website and services (such as payment processors and email platforms), who are required to keep your information confidential.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Withdraw consent at any time (for consent-based processing)
• Lodge a complaint with the Information Commissioner's Office (ICO)

8. Cookies & website

Our website uses essential cookies to function correctly. We may also use analytics cookies to understand how visitors use our site. You can manage cookie preferences through your browser settings.