Privacy Policy

My Sadaqah is a charity registered in England and Wales (charity number 1217602), at 128 City Road, London, United Kingdom, EC1V 2NX. We are the “controller” of the personal information described here, which means we decide how it is used and are responsible for looking after it under UK data protection law (the UK GDPR and the Data Protection Act 2018).

If you have any question about your information, email us at info@mysadaqah.org.uk.

When you donate, we ask for:

• your first and last name and email address;
• your phone number, so we can contact you about your donation if we need to;
• your home address and country;
• what you gave: the appeal or project, whether it was Sadaqah or Zakat, the amount and any item you chose;
• for a water project, the name you choose for its plaque, which is displayed on the project and appears in the photos and videos we send you;
• whether you added Gift Aid, and when you made the declaration.

Your card details are entered on Stripe’s secure payment page, not on our website. We never see or store your card number. Stripe tells us whether the payment succeeded and gives us a payment reference.

When you email us, we keep your message and the details you include so we can reply.

Your donation basket is kept only in your own browser while you browse. Nothing in it reaches us until you go to checkout.

Like every website, the servers that host ours record technical details such as IP addresses and browser types, which are used to keep the site running and secure.

We use your information only for the purposes below. The law requires us to have a lawful basis for each one, which is shown beside it.

We don’t sell, rent or swap your details, and we don’t use them for marketing without your permission.

If you add Gift Aid, we use your name, home address and declaration to claim 25p for every £1 you give from HM Revenue & Customs. HMRC may ask to see these records to check our claims, and we must keep them for as long as HMRC requires.

Please tell us if you want to cancel your declaration, change your name or address, or no longer pay enough Income Tax or Capital Gains Tax to cover the Gift Aid on your donations.

We share your information only where we need to, with:

• Stripe, which processes card payments for us. Stripe also uses payment information to prevent fraud and meet its own legal duties, as described in Stripe’s privacy policy;
• HM Revenue & Customs, when we claim Gift Aid you’ve declared;
• the companies that host our website and database (including DigitalOcean), which store information for us and may use it only on our instructions;
• our accountants, auditors and the Charity Commission, where needed to check our accounts;
• the police or other authorities, if the law requires it.

Some of our providers, such as Stripe and DigitalOcean, are based in or may process information in other countries, including the United States. When information leaves the UK, it is protected by the safeguards UK law requires, such as the UK’s adequacy regulations or approved data transfer agreements.

• Donation and Gift Aid records: at least six years after the end of the financial year of your last donation, as HMRC and charity accounting rules require.
• Your online receipt: the link shown after you pay works for 30 days. We keep the donation itself as above.
• Emails: for as long as we need them to deal with your enquiry.

When we no longer need information, we delete it securely.

Our website uses an encrypted (HTTPS) connection, and so does the link between our website and its database. Only authorised members of our team can see donor records, through a password-protected admin area. No method of storage is completely secure, but we take care to protect your information and to limit who can see it.

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information, or to stop or limit how we use it (we may need to keep some records, such as Gift Aid declarations, where the law requires);
• object to us using your information on the basis of our legitimate interests;
• ask for your information in a format you can take to another organisation.

To use any of these rights, email info@mysadaqah.org.uk. There’s no charge, and we’ll reply within one month.

We don’t use advertising or analytics cookies, and we don’t track you across other websites.

• Your basket is saved in your browser’s local storage so it’s still there as you move between pages. It stays on your device and is cleared when you empty your basket.
• Our admin area uses one essential cookie to keep our staff signed in. It isn’t set for visitors.
• Stripe sets its own cookies on its payment page to keep payments secure and prevent fraud.
• The map on our Contact page is provided by Google, which may set its own cookies when the map loads.

You can clear cookies and stored data, or block them, in your browser’s settings.

If you’re unhappy with how we’ve handled your information, please tell us first at info@mysadaqah.org.uk so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

We may update this policy when what we do changes. The latest version will always be on this page, with the date it was last updated.