Privacy Policy

Last updated: July 2026. This policy is a working draft for the launch of masjidi.co.uk and should be reviewed by your legal adviser before going live.

1. Who we are

Masjidi (masjidi.co.uk) is operated by TRUSTCOVE LIMITED, a company registered in England & Wales (Company No. 17293276). For any privacy matter, contact us at hello@masjidi.co.uk or on WhatsApp at +44 7398 090486.

2. What we collect

• Donation data — amount, fund, date and time, and the masjid donated to.
• Gift Aid data — where a donor opts in: name, home address and declaration, as required by HMRC.
• Contact data — details submitted when a masjid registers or contacts us.
• Technical data — basic device and usage information needed to keep the service secure.

Card details are collected and processed by Stripe, our payment processor, and never stored on Masjidi systems.

3. How we use it

We use personal data solely to process donations, administer Gift Aid claims, provide masjids with their reporting, respond to enquiries, and meet legal obligations. We do not sell personal data or use it for third-party marketing.

4. Legal bases

We process data on the bases of contract (delivering the donation service), legal obligation (Gift Aid and accounting rules), and legitimate interests (service security and improvement) under UK GDPR.

5. Retention

Gift Aid declarations and related records are retained for the period required by HMRC (currently six years after the last claimed donation). Other data is kept only as long as needed for the purposes above.

6. Sharing

Data is shared only with: Stripe (payment processing), HMRC (Gift Aid claims, via the recipient masjid), the masjid you donate to (donation and Gift Aid records), and service providers bound by data-processing agreements.

7. Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. Contact hello@masjidi.co.uk to exercise any right. You may also complain to the ICO (ico.org.uk).

8. Security

Data is encrypted in transit and at rest. Access is restricted, logged and reviewed. See our Security page for details.