Your privacy
Privacy Notice
This notice explains what personal data Al-Rahmah Faith Centre (the charity that runs Al-Rahmah Masjid, 6 Sheepscar Way, Leeds LS7 3JB) collects through this website, why, who it is shared with and your rights. We are the data controller. We never sell your information.
For cookies and similar storage in your browser, see our cookie policy.
When you donate
We collect your name, email address, phone number, postal address, country, whether you give as an individual or for an organisation, the amount, cause and how often you give. We use these to take your donation, send your receipt, look after regular gifts (for example if a payment fails or you ask to cancel) and keep the financial records a charity must keep.
Your card or bank details go straight to Stripe, our payment provider. We never see or store them.
Lawful basis: taking and recording your donation is necessary for the donation you asked us to process (contract), and keeping financial records is a legal obligation.
Gift Aid
If you add Gift Aid, we keep your declaration (its exact wording and the date you made it) with your name, home address and donations, and send the details HMRC needs to claim the tax back.
Lawful basis: legal obligation. HMRC requires charities to keep Gift Aid records, so we keep them for at least six years after the claim.
Email updates
If you tick "Keep me updated" when you donate, we add your name, email address, town and country to our mailing list, with a record of when and how you agreed, and email you about Al-Rahmah Masjid news, events and appeals.
Lawful basis: your consent. You can unsubscribe at any time by replying to one of our emails or writing to us, and we keep a record that you did.
Contact forms
When you send a message through the website (general enquiries, funerals, Quran Academy), we keep your name, email address and message, and email it to the right team so they can reply.
Lawful basis: our legitimate interest in answering you.
How you found us
When you donate, we record how you reached the site: the campaign tags in the link you arrived with (for example from one of our adverts, newsletters or WhatsApp messages), the website you came from and the first page you visited. This is saved with your donation, so we know which appeals reach people. Without your consent to "Donation source" cookies nothing is stored in your browser; the tags are only read from the page you arrive on.
Lawful basis: our legitimate interest in knowing which appeals work.
Measuring our adverts
We tell Meta (Facebook, Instagram) when a donation is started and made, with the amount and cause, so we can see whether our adverts lead to donations. If you accept Marketing cookies, this includes your email address, phone number, name, town, postcode and country, scrambled (hashed) before they are sent, and Meta’s cookie identifiers, so Meta can match the donation to an advert. If you decline, only your IP address and browser type go with it.
Google Analytics and Google Ads run only with your consent (see our cookie policy).
Lawful basis: your consent for the identifying details and cookies; our legitimate interest in measuring our adverts for the rest.
Keeping the site secure
To stop automated attacks on the donation form, we use Cloudflare Turnstile at the payment step and limit how many payment attempts can be made. We also limit how many messages can be sent through the contact forms. For these limits we keep a scrambled (hashed) version of your IP address, never the address itself: payment attempts for seven days.
Lawful basis: our legitimate interest in protecting donors and the charity from fraud.
Who we share it with
These organisations receive personal data from the website, only for the purposes below. Some of them may process it outside the UK; where they do, they use the safeguards UK data protection law requires.
| Service | Provider | What it does | Personal data |
|---|---|---|---|
| Payments | Stripe | Takes donations and regular payments, and checks payments for fraud. | Name, email, address, card or bank details, amount, IP address and device details. |
| CAPTCHA (bot check) | Cloudflare (Turnstile) | Checks you are a person, not an automated attack, at the payment step of the donation form. Sets no tracking cookies and is not used for advertising. | IP address and information about your browser and device. |
| Database | Supabase | Stores donation records, Gift Aid declarations, the mailing list and contact messages. | The details you give us on the donation and contact forms. |
| Website hosting | Vercel | Runs the website. | IP address and browser details, in short-lived server logs. |
| Resend | Sends donation receipts and delivers contact form messages to our inbox. | Name, email address and the content of the email. | |
| Advert measurement | Meta | Shows whether our adverts lead to donations. | Amount and cause; with your consent, hashed contact details and cookie identifiers; without, only IP address and browser type. |
| Analytics and ads | Counts visits and measures our adverts, only with your consent. | Cookie identifiers, pages visited, IP address. | |
| Video and map | Google (YouTube, Maps) | Plays the weekly khutbah and shows our location on the contact page. | IP address and browser details when the player or map loads. |
| Gift Aid claims | HMRC | Pays the Gift Aid we claim on your donations. | Name, house name or number, postcode, donation dates and amounts. |
How long we keep it
Donation and Gift Aid records: at least six years, as HMRC requires. The mailing list: until you unsubscribe (we keep a record that you did). Contact messages: as long as we need them to deal with your enquiry. Payment attempt records: seven days.
Your rights
Under UK data protection law you can:
- see the personal data we hold about you and get a copy of it;
- have it corrected if it is wrong;
- have it deleted, unless we must keep it (for example Gift Aid records);
- object to, or ask us to limit, how we use it;
- withdraw your consent at any time, for email updates or cookies;
- receive the data you gave us in a format you can pass on.
To use any of these rights, or with any question about your data, email info@alrahmahmasjid.co.uk. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Last updated 4 November 2026.