Al-Hussain Masjid
Charity No. 519577
Legal
Privacy Notice
Last updated: April 2025 ยท Applies to alhussainmasjid.co.uk
โ ๏ธ Operational note for administrators
No obituary notice, funeral detail, dua request, or bereavement announcement may be published without verified permission from the family or an authorised person. Do not include health details beyond the minimum necessary. Do not publish names or details of children without explicit and specific approval.
1. Who controls your data
The data controller is:
Shia Welfare Association (Al-Hussain Masjid)
54 Bellott Street, Cheetham Hill, Manchester, M8 7PG
Registered Charity No. 519577
Contact: Imtiaz Kazmi ยท 07866 636907
Contact for privacy questions: submit a data rights request
2. What personal data we collect and why
Website visits and technical logs
Our hosting provider (HawkHost) may log standard server access information including IP addresses, browser type, and pages visited. This is retained for up to 30 days for security and operational purposes. Lawful basis: legitimate interests (maintaining a secure and functioning website).
Donation processing
When you make a donation via SumUp, your payment details are processed by SumUp directly. We receive a record of the donation amount, date, and payment reference. We do not receive or store your full card number. Lawful basis: contract (to process your donation).
Gift Aid information
If you indicate Gift Aid eligibility, we may collect your name and home address to submit a Gift Aid claim to HMRC. This information is shared with HMRC as required by law. We retain Gift Aid declarations for six years as required by HMRC. Lawful basis: legal obligation.
Direct contact enquiries (phone and in person)
If you contact the masjid by phone or in person, any personal details you provide (such as your name and contact number) are used only to respond to your enquiry, and are not stored beyond what is operationally necessary. Lawful basis: legitimate interests.
Events and programme announcements
Events listed on this website are sourced from masjid administration and community WhatsApp communications. Speaker names and programme details are included. If you wish to have your details removed from an event listing, contact us. Lawful basis: legitimate interests (community information).
Obituary notices, funeral details, and condolence announcements
This is sensitive personal data. We treat it with additional care.
Names of deceased individuals and funeral information are published only with the knowledge and agreement of the family or an authorised representative. Health details are not published unless strictly necessary. Lawful basis: explicit consent from the family (or legitimate interests where public religious duty is the purpose). Retention: obituary notices are removed from the website at the request of the family, or after a reasonable time.
Dua requests
Dua requests submitted to the masjid may involve illness, personal difficulties, or religious beliefs โ all of which are special category data. We do not publish personal dua requests on the public website. Where names are mentioned in congregational duas, this is done with permission. Lawful basis: explicit consent.
Livestream, photography, and media
Events at the masjid may be livestreamed on YouTube or recorded. People present in congregation areas may appear incidentally in recordings. The livestream is a public broadcast in a public religious setting. We make reasonable efforts to avoid focusing on individuals who indicate they do not wish to appear. If you have concerns about a recording, contact us. Lawful basis: legitimate interests (community access to religious programmes).
YouTube embeds on this website use privacy-enhanced mode (youtube-nocookie.com) to reduce YouTube tracking.
Volunteer and committee data
Names and contact details of committee members and volunteers are held for organisational purposes and are not published without consent. Lawful basis: legitimate interests.
3. Who we share your data with
- SumUp โ payment processing. SumUp Privacy Policy โ
- HMRC โ Gift Aid claims only
- HawkHost โ website hosting (UK/US servers). Server access logs may be retained by the host.
- YouTube / Google โ livestream hosting. Google Privacy Policy โ
- We do not sell personal data. We do not share personal data with third parties for marketing.
4. International transfers
SumUp and YouTube/Google may process data outside the UK. Both maintain appropriate safeguards under UK GDPR. Hosting may involve servers in the United States. Standard data protection clauses apply.
5. Retention
- Gift Aid declarations: 6 years (HMRC requirement)
- Donation records: up to 7 years (accounting and Gift Aid)
- Server logs: up to 30 days
- Obituary and condolence notices: removed on family request or after reasonable time
- Contact enquiries: retained only as long as operationally necessary
6. Your rights
Under UK GDPR, you have the right to:
- Access personal data we hold about you
- Correct inaccurate information
- Request deletion of your personal data (subject to legal obligations)
- Object to certain types of processing
- Restrict processing in certain circumstances
- Complain to the Information Commissioner's Office (ICO)
To exercise your rights: submit a data rights request โ
7. Complaining to the ICO
If you are not satisfied with how we have handled your personal data, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
8. Cookies
For full information on cookies used by this site, see our Cookie Policy โ