1. What we collect
It depends who you are.
If you register a masjid
The masjid's name, address, postcode and phone number; the name, role, phone number and email address of the person registering; and, if you choose to add one, a photograph of the building. The photograph is optional and is shown publicly.
If you apply to advertise a business
Your business name, category, description, phone number, email address and website; the name, phone number and email of your contact; and which masjid you applied through. Your listing is shown publicly once approved and paid.
If you buy from a masjid shop
Your name, email address and phone number, what you ordered, and — for delivery — your address. If you pay by bank transfer we also hold the amount, date, bank reference and any receipt you upload.
If you apply for a job
Your name, email address, phone number, years of experience, anything you write in support, and your CV.
If you create an account
Your name, email address, phone number, and a cryptographic hash of your password. We never store your actual password and cannot recover it.
2. Why, and on what basis
- To provide what you asked for — listing a business, taking an order, passing an application to an employer. This is necessary to perform our agreement with you.
- To verify masjids and businesses before they appear publicly, and to investigate suspected fraud. This is our legitimate interest in keeping the platform trustworthy, and it protects everyone using it.
- To take and reconcile payment, and to settle each masjid's share, including keeping the financial records the law requires.
- To contact you about something you have applied for, ordered or been asked to pay.
- Optional extras, such as a masjid photograph, rest on your consent. You can remove one at any time from your portal.
We do not use your information for advertising, and we do not sell it or share it with data brokers.
3. Who can see it
- The masjid you apply through sees your business application, including your contact details, so it can decide whether to approve you.
- The business advertising a role sees your job application and CV.
- The masjid you order from sees your name, contact details, what you ordered and — for delivery — your address, so it can prepare and hand over the order. A masjid only sees an order once its payment is accounted for.
- Our administrators can see what they need to verify registrations, reconcile payments and settle masjid shares. Significant actions are recorded in an audit log with the administrator responsible.
- Publicly: an approved business listing, a live job, a masjid's name, address and optional photograph, and shop products. Nothing else is published — customer and applicant details are never shown publicly.
We may disclose information where the law requires it, or to a bank, regulator or the police in connection with suspected fraud.
4. Payment information
We do not take card payments and never ask for card numbers, PINs or online banking passwords. Payment is by bank transfer to our published account.
What we hold is the amount, the date, the bank reference you quoted, and any receipt or screenshot you upload as evidence. We keep those records so a payment can be matched, disputed or audited.
Please do not upload a document showing more than the transfer in question — a receipt for that payment is enough, and a full statement reveals unrelated transactions.
5. Where it is kept
Information is held in the platform's database, and uploaded evidence is stored on the server hosting it. Access is limited to administrators who need it.
One thing to be aware of. A CV attached to a job application is currently held in the browser you applied from, and the employer receives your details and the file name rather than the file itself. If an employer needs the document, send it to them directly when they ask. We are changing this so the file is stored with the application.
6. How long we keep it
- Financial records — invoices, payments, settlements and the evidence behind them: six years, as UK tax law requires.
- Masjid and business records: for as long as the account is active, and then as needed to resolve any outstanding matter.
- Orders: kept with the financial records above.
- Job applications: kept while the role is open and for a reasonable period afterwards, then removed.
- Accounts you close: removed, except where a record must be kept for the reasons above.
7. Cookies and browser storage
We do not use advertising or tracking cookies, and there is no third-party analytics on the platform.
We do use your browser's own storage to make the site work: to keep you signed in for the session, to remember your shopping basket, to remember how many results you like to see per page, and to pre-fill your details when you apply again. This stays in your browser and you can clear it at any time through your browser settings.
8. Other services
- Google Fonts serves the typefaces used across the site. Your browser requests them from Google, which receives your IP address.
- QR code generation is used to produce a masjid's advertising poster. The masjid's public application link is sent to that service; no personal information is included.
- Email delivery is used to send activation, approval and notification messages to the address you gave us.
9. Your rights
You can ask us to give you a copy of what we hold about you, correct anything wrong, delete it, restrict what we do with it, or object to our using it. You can also ask for it in a portable form. Where we rely on your consent, you can withdraw it at any time.
Much of this you can do yourself: masjid and business details, contact information and photographs are editable in your portal, and your own details in your account.
We will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you came to us first.
10. Contact
For anything about this policy, or to exercise any of the rights above, contact us through the details on the platform. Please include the reference of the masjid, business, order or application you are asking about, so we can find the right record.
See also our terms and conditions, which explain how payment and approval work.