Privacy Policy
Last updated: 27 September 2026
1. Who we are
Jamia Masjid Al-Madina, 133a Waterloo Road, Middlesbrough, TS1 3JB — Registered Charity No. 1133547. For any data protection query, contact us at info@al-madina.org.uk or 01642 245855.
2. What information we collect
We only collect what is needed to provide the service you have asked for:
- Booking forms (Nikah, hall bookings, events) — name, contact details, and details of your request.
- Donations — given by direct bank transfer; we never collect or store your card or bank login details.
- Committee sign-in — authorised committee members sign in with Google (via Auth.js). We only ever see your Google account email and name, checked against an internal allow-list, and this is used solely to manage noticeboard content and site administration.
- Noticeboard posts — any name, contact detail, or message text a committee member chooses to publish is shown publicly on the noticeboard page.
- Mizan Flow app suggestions — any feedback text you submit through the suggestion form.
- AI chatbot — messages you type into the on-site assistant are sent to Google's Gemini API to generate a reply. Don't share personal or sensitive information in the chat.
- Basic technical data — standard web server logs (IP address, browser type, pages visited) for security and performance, and a single cookie that remembers your chosen language.
3. How we use your information
- To respond to bookings, enquiries, and service requests.
- To provide our bank details for donations, event fees, and class fees you choose to pay.
- To operate and moderate the community noticeboard.
- To improve this website and the Mizan Flow app.
- To meet our legal and charitable reporting obligations.
We do not sell or rent your personal data to third parties, and we do not use it for marketing without your explicit consent.
4. Third-party services
This site uses the following third-party processors, each governed by their own privacy policy:
- Google — OAuth sign-in for committee members, and the Gemini API for the AI chatbot.
- Formspree — delivers booking form submissions to us by email.
- Facebook — embedded video/page content is only loaded if you choose to click and view it.
- Vercel — hosting, and Vercel KV for shared noticeboard/announcement storage and Mizan Flow app suggestions.
5. How long we keep data
Booking and enquiry records are kept only as long as needed to deliver the service and meet our charity record-keeping obligations, then deleted. Noticeboard posts remain live until a committee member removes them. Chatbot conversations are not stored by us beyond the session.
6. Your rights
Under UK GDPR you have the right to:
- Ask what personal data we hold about you and receive a copy.
- Ask us to correct inaccurate data.
- Ask us to delete your data, where we are not required to keep it.
- Object to or restrict certain processing.
To exercise any of these rights, contact info@al-madina.org.uk. If you remain unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO).
7. Children's data
Where children attend our classes or events, we collect only the minimum information needed (e.g. a parent/guardian's contact details) and handle it with the same care described above. See our Safeguarding Policy for how we protect children and vulnerable adults.
9. Changes to this policy
We may update this policy from time to time; the "Last updated" date above will always reflect the latest version.