Privacy Policy Last updated: 8 September 2026

This Privacy Policy explains how Al-Hira Mosque & Education Centre ("we", "us", "our") collects, uses, stores, and protects your personal information when you use al-hiramosque.com ("Website") and the services you book or request through it. We are committed to protecting your privacy and handling your personal data safely and lawfully, in line with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are Al-Hira Mosque & Education Centre is operated by Hazrat Sultan Bahu Trust (UK), a charity registered in England and Wales (charity number 292697). The Trust is the data controller responsible for your personal data.

Al-Hira Mosque & Education Centre

Website: al-hiramosque.com Email: alhira.edu@outlook.com Telephone: 020 8552 7681 Address: 241 Plashet Rd, London E13 0QU Hazrat Sultan Bahu Trust (UK) — registered office

2. What Information We Collect A) Information you provide to us Enquiries, Q&A and feedback

Name (if submitted) Email address Any message you send through our contact forms, the Q&A page, or by email Star rating and feedback message, if you submit feedback through the Website Account information (if you create, or are given, an account)

Email address and password (passwords are stored in hashed form — we never see or store your actual password) Any profile details or content you submit through your account Quran class registration — our classes are for children aged 5–16. When a parent or guardian registers a child, we collect:

The child's name, age, gender, and current Quran learning level The parent or guardian's name, phone number, email address, and home address Any additional notes provided by the parent or guardian A parent or guardian must complete this registration on behalf of their child.

Alim course registration — our Alim course is open to applicants aged 14 and over. We collect:

The applicant's name, age, gender, and current Quran level Emergency contact details Email address and phone number Home address Any additional notes provided by the applicant or, where the applicant is under 18, by their parent or guardian Applicants aged 18 or over may register themselves. Where the applicant is under 18, a parent or guardian must complete the registration and provide consent on their behalf.

Nikah (marriage) bookings — when you submit a nikah booking request through the Website, we collect:

The groom's full name, phone number, and address The bride's full name, phone number, and address The names and addresses of four witnesses — two from the groom's side and two from the bride's side Your preferred nikah date Your council registrar appointment confirmation email, which you upload to the form Any additional notes you provide We also ask the bride and groom to bring valid photo ID to the mosque before the ceremony. We only look at this in person, to confirm that the people being married are who they say they are. We do not photograph, photocopy, scan, or keep any record of your ID.

Information about witnesses. If you name someone as a witness, you are giving us their name and address. We use this only to record and conduct the nikah and to issue the Islamic marriage certificate, and we keep it as part of our permanent marriage record. Please make sure your witnesses know you are giving us their details, and point them to this policy. If you are a witness and want to know what we hold about you, contact alhira.edu@outlook.com.

Funeral and janazah services. These are arranged by telephone or in person, not through the Website. We take only the details we need at the time to carry out the arrangements, and we do not keep a written record of them afterwards.

Hall hire and other enquiries. These are handled through our contact form or by telephone, and we collect only the details you choose to give us.

Donations — if you make a donation, payment is processed securely by our payment provider, SumUp. We do not collect or store your card details. We receive a record of the donation amount and date, and your name and email address where you provide them.

B) Information collected automatically When you visit the Website we may collect:

IP address, browser type and version, device type, operating system, the pages you visit and time spent on them, and the website that referred you. We collect this through cookies and similar technologies. Non-essential analytics are only collected if you consent to them through our cookie banner. See section 7.

C) Our mobile apps Our iOS and Android apps have their own privacy policies, which are available within each app and on their App Store and Google Play listings. This policy covers the Website only.

3. How We Use Your Information We use your information to:

Respond to enquiries and Q&A submissions Create and manage user accounts Process Quran class and Alim course registrations, and run those classes Arrange and conduct nikah ceremonies, and issue Islamic marriage certificates Arrange and carry out funeral and janazah services Process and acknowledge donations Send you service-related communications (for example registration confirmations, class notices, and account emails) Send you community notices, where you have asked to receive them Protect the safety and welfare of children and adults at risk who take part in our activities Operate, secure, and improve the Website Manage your cookie preferences Keep proper financial and charity records Prevent fraud and protect the security of our systems 4. Lawful Bases for Processing General personal data (Article 6 UK GDPR) Consent — for example, accepting optional cookies, submitting a feedback form, or signing up to optional communications. You can withdraw your consent at any time. Contract, or taking steps at your request — for example, managing your account, processing an enrolment, or arranging a nikah you have booked. Legitimate interests — for example, responding to enquiries, recording witness details so a nikah can be validly conducted and certified, keeping the Website secure, and running the organisation's services. We only rely on this where our interests do not override your rights. Legal obligation — where the law requires it, including financial and charity record-keeping. Vital interests — in rare cases, where we need to act to protect someone's life or prevent serious harm. Special category data (Article 9 UK GDPR) Some of the information we hold reveals religious belief. This is "special category data" and is given extra protection under data protection law. It applies in particular to Quran class and Alim course registrations, nikah bookings, and funeral arrangements, because taking part in these things indicates a person's religion.

Where we process this information, we rely on:

Article 9(2)(d) — not-for-profit bodies with a religious aim. Hazrat Sultan Bahu Trust (UK) is a not-for-profit organisation with a religious aim. We process this data in the course of our legitimate activities, with appropriate safeguards, and only in relation to our members, former members, and people who are in regular contact with us in connection with our purposes. We do not disclose this data outside the organisation without your consent — class registers and registration records are seen only by our own staff and teachers — other than to the service providers listed in section 8 who act on our instructions, or where we are required to do so by law. Article 9(2)(a) — explicit consent. When you first register for a class or course, or book a nikah with us, we ask for your explicit consent (or, in the case of someone under 18, the explicit consent of a parent or guardian). You can withdraw this consent at any time by contacting us at alhira.edu@outlook.com. Withdrawing your consent does not affect the lawfulness of any processing we carried out before you withdrew it. We do not use special category data for marketing, and we do not share it with any third party for their own purposes.

5. Children's Privacy We collect personal data relating to children through our Quran class registrations (ages 5–16) and our Alim course registrations (ages 14 and over).

For Quran classes, registration must be completed by a parent or guardian, who provides consent on behalf of their child. For the Alim course, applicants aged 18 or over may apply themselves. Where an applicant is under 18, a parent or guardian must complete the registration and provide consent. We do not rely on a child's own consent. We do not knowingly collect personal information directly from children without parental consent. Because registration for our classes reveals a child's religious upbringing, this is special category data, and we ask the parent or guardian to give explicit consent for it at the point of registration. The conditions we rely on are set out in section 4.

A parent or guardian may ask to see, correct, or delete their child's data at any time by contacting alhira.edu@outlook.com. If you believe a child has submitted data to us without parental consent, please contact us at the same address and we will remove it.

We follow the safeguarding policy of Hazrat Sultan Bahu Trust (UK), which is available on request. Where we have a serious concern about the safety or welfare of a child or an adult at risk, we may share information with the local authority, the police, or another agency. We will only do this where it is necessary to protect that person, or where we are required to do so by law.

6. Notices and Communications We will only send you community notices or other non-essential communications if you have asked us to. Every such message includes a way to unsubscribe, and you can also unsubscribe at any time by emailing alhira.edu@outlook.com.

Service-related messages — such as a registration confirmation, a change to a class, a nikah booking update, or an email about your account — are not marketing, and you will continue to receive these while you use the relevant service.

7. Cookies and Tracking Technologies Our Website uses cookies. Strictly necessary cookies — those needed to make the site work, keep you logged in, and remember your cookie choices — are set automatically, as the law allows.

All other cookies, including analytics cookies, are only set if you consent to them through our cookie banner. You can accept all, decline all, or choose which categories to allow, and you can change or withdraw your preferences at any time.

For full details, see our Cookie Policy.

8. Who We Share Your Data With We do not sell your personal data. We share limited data only with service providers who help us run the Website and our services, including:

Base44 — website hosting, infrastructure, file storage, and built-in analytics SumUp — donation and payment processing Microsoft (Outlook / Microsoft 365) — sending and managing emails These providers act on our instructions under data processing agreements.

Your data may also be accessed by staff at Hazrat Sultan Bahu Trust (UK), which operates Al-Hira Mosque & Education Centre, where they need it for their role.

We may also share data:

Where we are required to do so by law, or to establish, exercise, or defend legal claims With the local authority, the police, or another agency where we have a serious concern about the safety of a child or an adult at risk Where necessary to carry out a service you have requested 9. International Transfers Some of our service providers may store or process data outside the UK. Where this happens, we rely on appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses.

You can ask us for more detail about the safeguards that apply to a particular transfer by contacting alhira.edu@outlook.com.

10. How Long We Keep Your Data What How long we keep it Contact form and Q&A messages Deleted from the Website's storage once the enquiry has been resolved. Emails in our inbox are deleted after 30 days. Feedback submissions 1 year, then deleted Account data For as long as your account is active. Accounts that have been inactive for 6 months are deleted. You can delete your account and data at any time at al-hiramosque.com/delete-account, or by emailing us. Quran class and Alim course registrations Kept for as long as the student is enrolled with us, and deleted 30 days after they leave Nikah booking records, including witness details Kept permanently, as a record of a religious marriage that may be needed as evidence in future Registrar confirmation documents uploaded to the nikah form Deleted once the nikah has taken place Photo ID shown before a nikah Not retained — checked in person only, no copy taken Funeral and janazah arrangements No written record retained after the service Donation records 6 years after the end of the accounting period in which the donation was made, as required by charity and tax law Analytics data In line with our provider's retention settings Cookie preferences For as long as needed to remember your choices
11. How We Protect Your Data We take reasonable technical and organisational measures to prevent unauthorised access, loss, or misuse of your data. These include hashing of passwords, encryption of data in transit, restricted administrator access, and limiting access to personal data to those who need it for their role.

No online system is 100% secure. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours, and will tell you directly where the law requires it.

12. Automated Decision-Making We do not use your personal data to make automated decisions about you, and we do not carry out profiling.

13. Your Data Protection Rights (UK GDPR) You have the right to:

Access the personal data we hold about you Correct data that is inaccurate or incomplete Delete your data ("right to erasure") Restrict how we process your data Object to processing based on our legitimate interests, and to direct marketing at any time Data portability — receive your data in a portable format, or have it transferred to another organisation Withdraw consent at any time, where we rely on consent Some of these rights are conditional and may not apply in every case — for example, where we are legally required to keep certain records, or where we keep a permanent record of a religious marriage.

To exercise any of these rights, contact alhira.edu@outlook.com. We will respond within one month, and there is no charge. We may ask you to confirm your identity before we act on a request.

You can also delete your account and associated data yourself at al-hiramosque.com/delete-account.

14. Complaints If you have a concern about how we have handled your data, we would ask you to contact us first at alhira.edu@outlook.com so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO):

Website: https://ico.org.uk/make-a-complaint/ Helpline: 0303 123 1113 15. Links to Other Websites Our Website may contain links to other websites. We are not responsible for the content or privacy practices of those sites. Please read their privacy policies before submitting any personal information to them.

16. Changes to This Privacy Policy We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Where the change is significant, we will tell you directly.

17. Contact Us Email: alhira.edu@outlook.com Telephone: 020 8552 7681 Website: al-hiramosque.com Address: 241 Plashet Rd, London E13 0QU Al-Hira Mosque & Education Centre is operated by Hazrat Sultan Bahu Trust (UK), registered charity number 292697.