Mimbar360 CIC ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website https://www.mimbar360.org/ ("the Site"), subscribe to our newsletter, contact us, or engage with our services.

By using our Site, you agree to the terms of this Privacy Policy.

1. Who We Are

Mimbar360 CIC is a UK-based Community Interest Company (Company No. 16423627). We are committed to inclusive, human-centred design inspired by Islamic values. We collect and use personal data in line with UK General Data Protection Regulation (UK GDPR).

For any queries or data concerns, contact us at: Email: info@mimbar360.org
Address: 5 Brayford Square, London E1 0SG, United Kingdom

2. What Data We Collect

We collect the following types of data:

• Contact Information: When you use our contact forms, we collect your name, email address, and message content.
• Newsletter Subscription: When you subscribe to our newsletter, we collect your email address.
• Donor Information: If you donate via bank transfer, we may receive your name and contact details included in the transfer reference.
• Automatically Collected Data: Our site may collect anonymised data such as browser type, pages visited, and IP address through essential cookies and/or CDN services.

3. How We Use Your Data

We use your data to:

• Respond to your messages and enquiries
• Send periodic newsletters and updates (only with your consent)
• Process donations and send receipts
• Improve our Site, services, and outreach
• Comply with legal and funding obligations

We do not sell, trade, or rent your personal data.

4. Lawful Bases for Processing

We process your personal data based on:

• Consent – for sending newsletters or updates
• Legitimate Interest – responding to contact requests or general inquiries
• Legal Obligation – maintaining records for regulatory or funding requirements

You can withdraw consent at any time by emailing us or unsubscribing from newsletters.

5. Data Sharing

We may share your data with trusted third parties who help us operate our services:

• Email Marketing: Newsletter subscriptions may be managed through third-party platforms (e.g. Mailchimp).
• CDN/Hosting Services: Content (e.g. PDFs, images) is served via secure cloud platforms (e.g. Sanity.io).
• Analytics: We currently do not use Google Analytics or tracking cookies.

We ensure all third-party services comply with UK GDPR and only access data necessary to perform their function.

6. Cookies

We do not use non-essential cookies or trackers. If we introduce analytics or tracking, we will update this policy and provide a cookie banner for consent.

7. Data Retention

We retain personal data only for as long as necessary:

• Contact and newsletter details: Up to 12 months after last interaction or until you unsubscribe
• Donation records: Retained as required by law (typically 6 years)

8. Your Rights (UK GDPR)

You have the right to:

• Access your personal data
• Correct inaccuracies
• Request deletion
• Withdraw consent
• Object to or restrict processing

To exercise your rights, contact us at info@mimbar360.org or use our data request form (if available on the site).

9. Data Security

We implement reasonable security measures to protect your data. However, no transmission over the internet is 100% secure. You are responsible for securing your device and internet connection.

10. Children’s Privacy

Our services are not directed at children under 18. We do not knowingly collect data from children. If we learn we have collected such data, we will delete it promptly.

11. Third-Party Links

Our Site contains links to social media platforms (e.g. Instagram, LinkedIn, X). These are governed by their own privacy policies. We are not responsible for their data handling practices.

12. Changes to This Policy

We may update this policy occasionally. The "Last updated" date will reflect changes. Major changes may be communicated via email or a notice on the website.

13. Contact

If you have questions about this policy or your data, contact:
Data Protection Lead
Email: info@mimbar360.org
Post: Mimbar360 CIC, 5 Brayford Square, London E1 0SG

14. Accessibility

We aim to make our privacy practices transparent and easy to understand. If you require this policy in an alternative format, please contact us.