This Privacy Policy is meant to help you understand what information we collect, why we collect it and how you can update, manage, export and delete your information.

Information that Hasanah Trust collects

We want you to understand the types of information we may collect about you. Hasanah Trust collects information to better fulfil its charitable objectives – from giving you details on how your donations are being spent to keeping you informed about Hasanah Trust activities in your locality.

Donors

When you place a donation towards Hasanah Trust, you provide us with personal information that includes your name, email address and phone number.

Why Hasanah Trust collects data

Hasanah Trust may hold and process your personal data to fulfil a variety of legitimate interests, including:

• Keeping a record of your donations and any related communications
• Claiming gift aid on your donations
• Sending you marketing information about our projects, fundraising activities and appeals where you have consented for us to do so

We may also use your information to help improve the safety and reliability of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks and technical issues that could harm Hasanah Trust, our users or the public.

KEEPING YOUR DATA

We will hold your personal information on our systems for as long as is necessary to fulfil our service to you or to meet our legal and regulatory obligations; for example, we will keep a record of donations subject to Gift Aid for at least seven years in order to comply with HMRC rules.

YOUR ARE IN CONTROL

You have choices regarding the information we collect and how its used. If you would like to request, modify and delete the information we may hold about you then please email [email protected].

SHARING YOUR INFORMATION

When Hasanah Trust shares your information

We will only use your information within Hasanah Trust for the purposes for which it was obtained. Hasanah Trust will not, under any circumstances, share or sell your personal data with any third party for their own marketing purposes, and you will not receive marketing from any other companies, charities or other organisations as a result of giving your details to us.

Sharing data with suppliers and service providers

We may need to share your information with service providers who help us to deliver our projects, fundraising activities and appeals, for instance through handling responses to our emergency appeals. These ‘data processors will only act under our instruction and are subject to pre-contract scrutiny and contractual obligations requiring strict data protection and information security. We do not allow these organisations to use your data for their own purposes or disclose it to other third parties without our consent and we will take all reasonable care to ensure that they keep your data secure.

Where legally required

We will also comply with legal requests where disclosure is required or permitted by law.

We will share personal information outside of Hasanah Trust if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

• Meet any applicable law, regulation, legal process or enforceable governmental request.
• Detect, prevent or otherwise address fraud, security or technical issues.
• Protect against harm to the rights, property or safety of Hasanah Trust, our users or the public as required or permitted by law.

Your data is only processed outside the EU where Hasanah Trust has verified that appropriate security and privacy standards and safeguards are in place.

KEEPING YOUR INFORMATION SECURE

Hasanah Trust has a duty to ensure that we build in strong security controls to continuously protect your information.  We work hard to protect you and Hasanah Trust from unauthorised access, alteration, disclosure or destruction of information we hold, including:

• We use encryption to keep your data private while in transit
• We review our information collection, storage and processing practices, including physical security measures, to prevent unauthorised access to our systems
• We restrict access to personal information to Hasanah Trust employees, contractors and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

COMPLIANCE & COOPERATION WITH UK LAW AND GDPR

We regularly review this Privacy Policy and make sure that we process your information in ways that comply with UK and European regulation. As European Union (EU) data protection law applies to the processing of your information, we provide the facility described in this policy to exercise your right to request access to, update, remove, and restrict the processing of your information. You also have the right to object to the processing of your information.

We process your information for the purposes described in this policy, based on the following legal grounds:

• With your consent
• We ask for your agreement to process your information for specific purposes and you have the right to withdraw your consent at any time. For example, we ask for your consent to provide you with information about our charitable activities and appeals.

If you have questions, you can contact Hasanah Trust via [email protected]. You can contact the ICO if you have concerns regarding your rights under UK law.

Changes to this policy

We change this Privacy Policy from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We always indicate the date when the last changes were published and we offer access to archived versions for your review. If changes are significant, well provide a more prominent notice (including, for certain activities, email notification of Privacy Policy changes).