Privacy Policy

Last updated: 27 September 2026

Jamia Masjid Al-Madina ("the Mosque", "we", "us") respects your privacy. This policy explains what personal data this website collects, why, and how it is handled, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Jamia Masjid Al-Madina, 133a Waterloo Road, Middlesbrough, TS1 3JB — Registered Charity No. 1133547. For any data protection query, contact us at info@al-madina.org.uk or 01642 245855.

2. What information we collect

We only collect what is needed to provide the service you have asked for:

  • Booking forms (Nikah, hall bookings, events) — name, contact details, and details of your request.
  • Donations — given by direct bank transfer; we never collect or store your card or bank login details.
  • Committee sign-in — authorised committee members sign in with Google (via Auth.js). We only ever see your Google account email and name, checked against an internal allow-list, and this is used solely to manage noticeboard content and site administration.
  • Noticeboard posts — any name, contact detail, or message text a committee member chooses to publish is shown publicly on the noticeboard page.
  • Mizan Flow app suggestions — any feedback text you submit through the suggestion form.
  • AI chatbot — messages you type into the on-site assistant are sent to Google's Gemini API to generate a reply. Don't share personal or sensitive information in the chat.
  • Basic technical data — standard web server logs (IP address, browser type, pages visited) for security and performance, and a single cookie that remembers your chosen language.

3. How we use your information

  • To respond to bookings, enquiries, and service requests.
  • To provide our bank details for donations, event fees, and class fees you choose to pay.
  • To operate and moderate the community noticeboard.
  • To improve this website and the Mizan Flow app.
  • To meet our legal and charitable reporting obligations.

We do not sell or rent your personal data to third parties, and we do not use it for marketing without your explicit consent.

4. Third-party services

This site uses the following third-party processors, each governed by their own privacy policy:

  • Google — OAuth sign-in for committee members, and the Gemini API for the AI chatbot.
  • Formspree — delivers booking form submissions to us by email.
  • Facebook — embedded video/page content is only loaded if you choose to click and view it.
  • Vercel — hosting, and Vercel KV for shared noticeboard/announcement storage and Mizan Flow app suggestions.

5. How long we keep data

Booking and enquiry records are kept only as long as needed to deliver the service and meet our charity record-keeping obligations, then deleted. Noticeboard posts remain live until a committee member removes them. Chatbot conversations are not stored by us beyond the session.

6. Your rights

Under UK GDPR you have the right to:

  • Ask what personal data we hold about you and receive a copy.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data, where we are not required to keep it.
  • Object to or restrict certain processing.

To exercise any of these rights, contact info@al-madina.org.uk. If you remain unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO).

7. Children's data

Where children attend our classes or events, we collect only the minimum information needed (e.g. a parent/guardian's contact details) and handle it with the same care described above. See our Safeguarding Policy for how we protect children and vulnerable adults.

8. Cookies

This site uses only essential cookies/local storage: one to remember your chosen language, one to remember your light/dark theme preference, and (for signed-in committee members) a secure session cookie for authentication. We do not use advertising or third-party tracking cookies.

9. Changes to this policy

We may update this policy from time to time; the "Last updated" date above will always reflect the latest version.