Privacy Policy

MAAHIR is a UK registered charity (Charity No. 1193120). We are committed to protecting your personal data and being transparent about how we use it. This Privacy Policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We may collect the following personal information when you interact with our website or services: • Name and contact details (email address, phone number, postal address) • Donation and financial information (processed securely via Zeffy, PayPal, or GoFundMe — we do not store card details) • Volunteer application information (skills, availability, occupation) • WhatsApp group enquiry details (name, WhatsApp number, city, postcode) • Newsletter subscription details • Messages you send us via our contact form • Technical data (IP address, browser type, pages visited) via cookies and analytics

We use your personal information to: • Process donations and send donation receipts • Communicate with you about our programmes, events, and fundraising campaigns • Manage your volunteer application and keep you informed about opportunities • Add you to our WhatsApp community group (with your consent) • Send newsletters and updates (only if you have subscribed) • Respond to enquiries submitted through our contact form • Improve our website and services • Comply with legal and regulatory obligations

We process your personal data on the following legal bases: • Consent — where you have given us clear consent (e.g., newsletter sign-up, WhatsApp group opt-in) • Legitimate interests — to operate and improve our charitable activities • Legal obligation — where we must process data to comply with the law • Contractual necessity — where processing is needed to fulfil a service you have requested

We retain your personal data only for as long as necessary: • Donor records: 7 years (for accounting and legal compliance) • Volunteer records: for the duration of your engagement, then up to 2 years • Newsletter subscriptions: until you unsubscribe • Contact form messages: up to 2 years • WhatsApp group records: until you request removal After these periods, your data will be securely deleted or anonymised.

We do not sell your personal data. We may share it with: • Trusted service providers who help us operate our website and services (e.g., Supabase for database hosting, email service providers) • Payment processors (Zeffy, PayPal, GoFundMe) — subject to their own privacy policies • Regulatory bodies or authorities where required by law All third parties are required to keep your data secure and use it only for the purposes we specify.

Under UK GDPR, you have the right to: • Access — request a copy of the personal data we hold about you • Rectification — ask us to correct inaccurate data • Erasure — ask us to delete your personal data ('right to be forgotten') • Restriction — ask us to limit how we use your data • Portability — receive your data in a portable format • Objection — object to certain types of processing • Withdraw consent — at any time, where processing is based on consent To exercise any of these rights, please contact us at contact@maahiruk.org.

Our website uses cookies and similar technologies to improve your browsing experience and analyse how our site is used. These include essential cookies (required for the site to function), analytical cookies (to understand visitor behaviour), and preference cookies (to remember your language choice). You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the website.

We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date at the bottom of this page. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: MAHIR UK Email: contact@maahiruk.org