MASJID AID
Privacy Policy & Terms and Conditions
Operated by Mercy to Humanity (Registered Charity No. 1195998)
Effective Date: 26 May 2025 | Last Updated: 3 June 2025
Introduction
This document sets out the Privacy Policy and Terms and Conditions governing the use of the Peace Giving application ("App"), operated by Mercy to Humanity through its Masjid Aid programme.
Peace Giving is a specialised donation collection platform designed for use by authorised masjids, Islamic educational institutions, and community organisations that have entered into a partnership or service agreement with Masjid Aid. The App is not intended for general public use and is deployed exclusively on approved devices managed by participating organisations.
The App is distributed through the Google Play Store to facilitate secure installation, software updates, maintenance, and security enhancements. Certain deployments may operate in kiosk mode using Android Device Owner capabilities to provide a dedicated donation terminal experience and to prevent unauthorised access to device functions unrelated to donation services.
By downloading, installing, accessing, or using the App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and these Terms and Conditions. If you do not agree, you must not use the App.
These Terms apply in addition to any separate agreement entered into between Masjid Aid and a participating organisation, including agreements established under the Makatib 4 Orphans (M4O) programme or any other partnership arrangement. In the event of a conflict between these Terms and a separately executed service agreement, the terms of the service agreement shall prevail to the extent of that conflict.
1.1 Who We Are
Peace Giving is a digital fundraising platform created to support participating masjids, Islamic charities, and community organisations in collecting secure, cashless donations.
The Peace Giving application is developed, operated, and maintained by Mercy to Humanity, a UK-registered charitable organisation registered with the Charity Commission for England and Wales under charity number 1195998.
Registered Address:
Unit 16 Skylines Business Village
London, E14 9TS
United Kingdom
Mercy to Humanity operates and administers the Peace Giving platform and is responsible for determining how personal data relating to the operation, security, maintenance, and administration of the platform is processed in accordance with applicable data protection laws.
Where participating organisations use Peace Giving to create fundraising campaigns and receive donations, those organisations are responsible for determining the purposes for which donor information is collected and used. Further details regarding these responsibilities are set out in Part Two of this document.
The platform is provided through Masjid Aid, a programme of Mercy to Humanity that offers digital fundraising tools, operational support, and related services to participating masjids and Islamic community organisations.
For any questions regarding this Privacy Policy, your personal data, or your rights under applicable data protection laws, please contact us at:
Email: [email protected]
1.2 Our Commitment to Your Privacy
Mercy to Humanity is committed to protecting the privacy, security, and confidentiality of personal data processed through the Peace Giving platform. This commitment applies to all users of the App, including participating masjid representatives and administrators ("Fundraisers"), donors, volunteers, and other users of our services.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you access or use the Peace Giving application and related services.
We implement appropriate technical and organisational measures to safeguard personal data and to ensure compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, operational requirements, or security practices. Any updates will be published within the App, on our website, or through other appropriate communication channels. Where required by law, we will provide additional notice of material changes.
We encourage users to review this Privacy Policy periodically to remain informed about how we collect, use, and protect personal data.
1.3 What Data We Collect and Why
We collect only the personal data necessary to provide our services, process donations, support participating organisations, maintain platform security, comply with legal obligations, and respond to user enquiries.
All personal data is provided directly by users when registering for an account, creating fundraising campaigns, making donations, contacting support, or otherwise interacting with the Peace Giving platform.
Masjid Administrators (Fundraisers)
We may collect:
Full name
Position or role within the organisation
Email address
Contact telephone number
Organisation name and address
Campaign information, descriptions, and related content submitted through the platform
Authentication credentials, including securely stored account passwords and security-related information
This information is used to create and manage accounts, administer fundraising campaigns, communicate with authorised representatives, and provide technical support.
Donors
We may collect:
Name
Email address
Donation amount
Transaction reference information
Date and time of donations
Donation status and receipt information
Where a donor elects to claim Gift Aid, we additionally collect:
First name and last name
First line of address
Postcode
Email address
UK taxpayer declaration
This information is required to comply with HM Revenue & Customs (HMRC) Gift Aid requirements and to enable eligible claims to be submitted.
Payment Information
Peace Giving does not collect, process, or store full payment card numbers, card security codes (CVV), bank account details, or other sensitive payment credentials.
All payments are processed securely by Stripe, our authorised payment service provider. Payment information is entered directly into Stripe's secure payment systems. Mercy to Humanity and Peace Giving receive only limited transaction information necessary to confirm payment status, issue receipts, support donation reporting, investigate payment issues, and maintain financial records.
For further information about how Stripe processes personal data, please refer to Stripe's privacy documentation.
1.4 Legal Basis for Processing
We process personal data only where we have a lawful basis to do so under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on the circumstances, we rely on one or more of the following legal bases:
ConsentWhere you have freely given your consent for a specific purpose, such as submitting a Gift Aid declaration, receiving marketing communications, or participating in optional features. Where processing is based on consent, you may withdraw that consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.
Contractual Necessity
Where processing is necessary to provide services requested by you or your organisation, including creating and managing accounts, administering fundraising campaigns, processing donations, issuing receipts, and providing technical support.
Legal Obligation
Where processing is necessary to comply with legal and regulatory requirements, including maintaining financial records, responding to lawful requests from regulatory authorities, retaining Gift Aid declarations for HM Revenue & Customs (HMRC), and meeting charity governance obligations.
Legitimate Interests
Where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests include maintaining platform security, preventing fraud and misuse, supporting authorised users, improving platform performance, managing kiosk and managed-device deployments, investigating technical issues, and ensuring the effective operation of our services.
1.5 How We Share Personal Information
We work with carefully selected service providers to operate the Peace Giving platform and deliver our services securely and reliably. Where personal data is shared with third-party providers, we ensure that appropriate contractual and security measures are in place to protect that information.
Our current service providers include:
Stripe: Secure payment processing and transaction management. Stripe processes payment information directly and is responsible for the secure handling of payment card data. Peace Giving does not receive or store full payment card details. Privacy Policy: https://stripe.com/gb/privacy
Amazon Web Services (AWS): Secure cloud hosting, database services, backups, platform infrastructure, and transactional email delivery through Amazon Simple Email Service (SES). Peace Giving systems are hosted within the AWS Europe (Ireland) Region (eu-west-1). Data is protected using industry-standard security controls, including encryption in transit and at rest. Privacy Information: https://aws.amazon.com/compliance/data-privacy-faq/
We do not sell personal data, and we do not share personal information with third parties for advertising or direct marketing purposes.
We may disclose personal information where required by law, regulation, court order, legal process, HMRC requirements, or other lawful requests from competent authorities. We may also disclose information where necessary to protect the security, integrity, and lawful operation of the Peace Giving platform.
1.6 Data Security
Mercy to Humanity takes the security of personal data seriously and implements appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction.
Personal data processed through the Peace Giving platform is protected using industry-standard security controls, including encryption in transit and encryption at rest where applicable. Data is hosted within the Amazon Web Services (AWS) Europe (Ireland) Region (eu-west-1).
Access to Peace Giving accounts is restricted through individual user credentials and role-based access controls. Users are responsible for maintaining the confidentiality of their login credentials and should not share account access with any third party.
While we take reasonable steps to protect personal data, no method of electronic storage or transmission can be guaranteed to be completely secure. We therefore encourage users to take appropriate precautions when accessing and using the platform.
1.7 Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing our services, complying with legal obligations, resolving disputes, maintaining financial records, and protecting the security and integrity of the Peace Giving platform.
Certain records may be retained for longer periods where required by applicable laws and regulations, including charity accounting requirements, audit obligations, and HM Revenue & Customs (HMRC) requirements relating to Gift Aid claims and financial reporting.
When personal data is no longer required, and where there is no legal obligation to retain it, we will securely delete, anonymise, or otherwise dispose of that information in accordance with our data retention procedures.
You may request the deletion of your personal data at any time. Where we are legally permitted to do so, we will honour such requests. However, we may be required to retain certain information where necessary to comply with legal, regulatory, accounting, fraud prevention, or record-keeping obligations.
1.8 Your Rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have a number of rights in relation to your personal data, including the right to:
Request access to the personal data we hold about you
Request correction of inaccurate or incomplete personal data
Request the deletion of your personal data in certain circumstances
Request restriction of processing in certain circumstances
Object to the processing of your personal data, including processing for direct marketing purposes
Request the transfer of your personal data to another organisation where applicable (data portability)
Withdraw consent at any time where processing is based on your consent
To exercise any of these rights, please contact us at: Email: [email protected]
We will respond to your request in accordance with applicable data protection laws.
If you are dissatisfied with how we handle your personal data or your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113
Contact Information
Masjid Aid (a programme of Mercy to Humanity)
Unit 16 Skylines Business Village, London, E14 9TS
Email: [email protected] | [email protected]
Telephone: 020 3422 0786
Website: www.masjid-aid.com | www.peace-giving.com
Mercy to Humanity - Registered Charity No. 1195998
This document was prepared by Masjid Aid on behalf of Mercy to Humanity.
Effective Date: 26 May 2025 | Version: 1.1 | For use with Google Play Store submission.