At the Zakat foundation we believe your personal data is an ‘Amanah’ (Trust) – much like your donations – and are therefore committed to protecting it and being open and transparent about how we store and use your personal information.

This Privacy Policy outlines how we collect, manage, use and protect your personal information and has the following sections:

Who are we?
Lawful bases for collecting your data
How do we obtain your personal information?
Information from third parties
What information do we collect?
Sensitive Personal Information
How do we use your information?
Who do we share your information with?
How we keep your information up to date
How long will we keep your information?
How do we protect your information?
Children’s data
How do we use cookies?
Accessing and updating your personal information
Changes to the Zakat foundation Privacy Policy

Privacy Policy

We at the Zakat Foundation™ promote the principles of disclosure and informed consent. We want to demonstrate our commitment to your privacy and have detailed our information practices below.

1. Introduction

The purpose of this policy is to explain how we collect, protect, manage, and use personal data. MAB is committed to ensuring that any personal data supplied by our donors and supporters, or is otherwise generated by our activities is collected and processed fairly and lawfully.

2. What types of data do we collect?

We collect two types of data online and off-line:

• Personal data, which will generally include your name, address and email address
• Statistical data, which are anonymous data about how our website or social media presence is used

3. How do we obtain these data?

We collect data primarily through three methods:

• Directly from you, when you complete an online/off-line form (generally these will be Personal Data)
• By analysing the network utilised by our website (these will generally be Statistical Data)
• By analysing the number and frequency of our social media interactions (these will generally be Statistical Data)
• Through the use of cookies

3.1 Use of Cookies
On our website, we collect some data through the use of cookies. Cookies are also used to improve your browsing experience. Below are the types of cookies used by our website:

• Essential Cookies: These are required for the proper functioning of the website. These cookies do not collect any Personal Data, and cannot be opted-out of.
• Analytics Cookies: These help us analyse how visitors utilise our website, how often they visit the website and what pages of our website are popular. Some of these cookies are third-party cookies, but do not collect any Personal Data. You can opt-out from the use of these cookies by following the instructions here.
• Social Media Cookies: These cookies enable you to easily share our content on your online social media networks. These are all third-party cookies, but do not collect any Personal Data. These cookies are created/used when you select to share content from our website through the social media icons on the page. Please note that MAB does not have access to your login details of the social networks you use to share our content.
• Performance Cookies: These cookies perform a various set of performance related functions, primarily aimed at improving your experience of our site. While the data from these cookies are not themselves recorded by us, the cookies help remember your name and email address, for example, when using the Comments facility on our site.

4. How do we use the data we collect?

4.1 Personal Data
Personal data is used by us to deliver our service to you as members/supporters/donors – including and not limited to, sending you regular email updates, sending you letters or marketing materials, collecting payments, registering you for one of events and responding to your inquiry.

4.2 Statistical Data
Statistical data is used to help us improve our website and digital communications (social media, newsletter, etc), and to help us predict future trends.

5. Do we share Personal Data?

As a general rule, we do not disclose any personal data to unaffiliated third parties except where your consent has been obtained, where we may be under an obligation by law to disclose the data or where we have contracted with third parties to assist in providing our services such as for delivery (of your payment receipts), ticketing at events and other support services.
We do not share any data with third-party marketers to contact you on our behalf.

6. How do we protect the Personal Data we hold?

Here at MAB, we take confidentiality and security very seriously. We have implemented appropriate internal security procedures that restrict access to and disclosure of personal data within the organisation. These procedures will be reviewed from time to time to determine whether they are being complied with and are effective.
We will also actively investigate and, as required, cooperate with law enforcement agencies any allegations of abuse or violation of system or network security.

7. Your Rights

The law in certain jurisdictions (including countries within the European Economic Area) gives individuals whose personal data is held by us specific rights to access and rectify the data. These include the right to:

• obtain from us, for a prescribed fee (currently $10 per reasonable request), confirmation that personal data is held, as well as a written description of such personal data, the purpose(s) for which it is being used, the source(s) of the personal data and details of any third-party recipients;
• request the deletion or rectification of personal data which is inaccurate; and
• to object to any unsolicited information sent to you by us.

Sensitive Personal Data

Under GDPR and the Data Protection Act 1998 some elements of personal data are considered as being more sensitive. We do not collect "sensitive personal data" about our supporters (e.g. health status) unless there is a clear reason for doing so - such as participation in a marathon or similar fundraising event where we need this to ensure that we provide appropriate facilities or support to enable you to participate in the event. In such cases, clear notices will be provided on application forms to make clear what information we need and why we need it.

All sensitive personal data is stored on a secure database, to which only a limited number of relevant staff have access. It is deleted when no longer relevant, is never shared with third parties and is available to you at any point should you wish to see it.

How we use your information:

We collect this information in order to process your requests and keep you updated with our work. Examples Include:

• Dealing with your enquiries requests and complaints.
• Processing your donations.
• Provide you with the services, products or information you have requested such as child sponsorship feedback.
• Process Gift Aid donations.
• Confirm receipt of donations (unless you have asked us not to do this).
• Processing your donations.
• Providing you with information about our work activities events and services.
• Complying with our legal obligations policies and procedures.
• Providing and personalising our services.
• Administering membership records.
• Fundraising.

Third Parties and your data

Certain third party organisations collect data on our behalf as well as for their own use.

  These organisations will have their own data protection and privacy policies, which you should be aware of before signing up.

Who do we share information with?

We will not disclose any of your personally identifiable information, except when we have your permission or under special circumstances, such as when we believe in good faith that the law requires it. If you opt to share your personal information on the Gift Aid claim form, we will provide your data to HMRC (HM Revenue and Customs) for auditing purposes.  

We enter into contracts with all our data processors and regularly monitor their activities to ensure they are complying with our policies and procedures. We do not allow these organizations to use your data for their own purposes or disclose it to other third parties without our consent and we will take all reasonable care to ensure that they keep your data secure.

We will not sell your personal information to other organizations for use by them in any way, including in their own direct marketing activities.

We may disclose your personal information in the following circumstances:

• We may need to share your information with service providers who help us to deliver our projects, fund-raising activities and appeals (subject to your communication preferences and our internal policies and procedures). We require these third parties to comply strictly with our instructions and data protection laws and we will make sure that appropriate controls are in place.
• We may use other companies to provide services and process your personal data on our behalf, including delivering postal mail, sending emails, processing credit card payments and analysing supporter trends to help us offer you communications that are most appropriate to you and your interests. We will only provide those companies with the information they need to deliver the specific service and we ensure that your data is treated with the same level of care as if we were handling it directly.
• When you are using our secure online donation pages, you are going through to a secure payment provider approved by the banking industry, that is, Secure Trading Ltd.
• Where we are under a duty to disclose your personal information in order to comply with law; or the disclosure is ‘necessary’ for purposes of national security taxation and criminal investigation; or we have your written consent.
• Where we need to perform due diligence checks to ensure individuals are not utilization our services for criminal purposes such as money laundering or for fraud.

Keeping Your Information up to Date

We are obliged to ensure your data is as accurate and up-to-date as possible. We therefore consult alternative sources in order to ensure data quality e.g. Royal Mail address files, data cleansing services, websites and other publicly available sources.

How long will you keep personal information?

We will hold your personal information on our systems for as long as is necessary for the relevant activity.

If you request that we stop sending you marketing materials, we will keep a record of your contact details and the appropriate information that will enable us to comply with your request. 

Legacy income is vital to the running of the charity. We may keep the data you provide to us indefinitely to carry out legacy administration and communicate effectively with the families of people leaving us legacies. This also enables us to identify and analyses the source of legacy income we receive.

We are legally required to hold some personal information to fulfill statutory obligations, for example the collection of Gift Aid or to support certain financial transactions. 

How we use information collected from job applications?

We will only use the information you give in your job/volunteer application for the legitimate interest of processing your application and to monitor recruitment statistics.

If there are instances in which we need to disclose your details to persons outside our organization (for example, when conducting background checks such as references, professional qualifications or obtaining a disclosure from the Disclosure & Barring Service), we will ask for your consent before doing so, unless we are required to disclose this information by law.

All application details will be stored and retained on our system until the completion of the recruitment campaign. Details of all unsuccessful candidates will be deleted at the end of the interview process. Physical interview notes are kept for 6 months after which they are shredded. 

Applicants applying for telephonist appeal positions will be asked for consent to be retained in a pool for future emergency/television telephonist appeals. Please email us at help@zakat.com.co

 you have given your consent, wish to withdraw it at any time and thereby be removed from the pool.

We always keep anonymous statistical information about applicants to develop our recruitment processes and for equality and diversity monitoring. This will not contain any information that could identify individual job applicants.

Successful candidates will have a staff file created for them that will contain their recruitment information. This information will be kept secure on our HR system that you will have access to.

How we keep your data safe

We ensure that there are appropriate technical controls in place to protect your personal details. For example our online forms are always encrypted and our network is protected and routinely monitored. 

We undertake regular reviews of those who have access to the information we hold to ensure that your information is only accessible by appropriately trained staff and volunteers.

We perform comprehensive checks on external companies that collect or process personal data on our behalf before we work with them. We put contracts in place that sets out our expectations and requirements, especially regarding how they manage the personal data they collect on our behalf or have access to. We have a robust partner monitoring framework to ensure these contractual obligations are met.

How we use cookies

We use cookies in order to provide you with a more personalized web service.

Cookies are small text files placed on your computer by websites you visit.

They are widely used to make websites work more efficiently for visitors, and to provide information to the owners of the site. Some of the cookies we use are essential in order for parts of the website to operate. For further information please view our cookie policy

If you’re under 13 parental consent

We are committed to protecting the privacy of the young people that engage with us through our website and at fund raising events.

If you're aged 13 or under, you must get your parent/guardian’s permission before you provide any personal information on the Website

Accessing and updating personal info

The accuracy of your individual identifying information is important to us. We are working on ways to make it easier for you to review and correct the information that we maintain about you. In the meantime, if you change email address or any of the other information we hold is inaccurate or out of date, please email us at help@zakat.com.co