Privacy policy

This policy explains how Minara, a service of Kelvin Design Agency ("we", "us"), uses personal information. It covers this website and the accounts mosques use to run their sites.

Two roles

• We are the controller for information about the people who contact us, sign up, or log in to manage a mosque's site.
• We are a processor for information on each mosque's own website, such as donors, Gift Aid declarations and enquiries. The mosque is the controller for that information, and we handle it only on the mosque's instructions under our data processing terms. If your question is about a particular mosque's donations or enquiries, please contact that mosque.

What we collect as controller

• Your name, email, phone number and the mosque you represent, when you sign up or contact us.
• Your login details. Passwords are stored encrypted and we can never see them. Two-step login codes are stored encrypted.
• A record of actions taken in the admin (the activity log), including IP address, kept for 12 months for security.
• Short-lived technical logs from our hosting provider to keep the service secure.

Why we use it

• To provide and support the service you've signed up for (contract).
• To reply to your enquiry and to keep the service secure (legitimate interests).
• To keep financial records (legal obligation).

We don't sell personal information, and we don't use advertising or tracking cookies.

Who we share it with

• Our hosting provider, which stores the service and sends our emails.
• Stripe, which processes donations directly for each mosque, and will process subscription payments to us.

Where a provider processes data outside the UK, they use safeguards approved under UK law.

Cookies

We only use cookies that are strictly necessary: to keep you logged in and to protect forms from misuse. So we don't ask for cookie consent.

How long we keep it

Account information is kept while your mosque uses Minara and for up to 6 years afterwards for accounting purposes. Enquiries are kept for up to 2 years. Activity logs are kept for 12 months.

Your rights

You can ask to see, correct or delete your information, or object to how we use it. Contact us to make a request. You can also complain to the Information Commissioner's Office at ico.org.uk.