THE SHAMAAZI PROJECT LTD (“we”, “us” or “Shamaazi”) takes the privacy of your information very seriously.
This Privacy Notice explains how we collect, use, store and disclose personal information when you interact with any websites, applications, digital platforms, products or services operated by us (together, the “Services”). Personal information may be collected in person, via our Services, or through other means such as online forms, messaging platforms, email communications or other digital interactions.
This Privacy Notice applies to all personal data processed by Shamaazi in connection with any current or future Services we operate, unless a more specific privacy notice is provided.
This notice applies to the charitable donation and related services we provide and relates to any personal information provided by our users, customers and contacts (including donors, supporters, partners and other individuals whose data we process).
In this notice, “you” refers to any individual whose personal data we hold or process. This Privacy Notice is governed by the UK General Data Protection Regulation and the EU General Data Protection Regulation (together referred to as the “GDPR”).
Our Services are not directed at children and we do not knowingly collect personal data from individuals under the age of 18.
Below we set out the categories of personal data we collect, how we use that data, and the legal bases we rely on.
Contact information for donors who donate through the Services, as well as any individuals who sign up to our mailing lists or otherwise ask or agree to receive communications or information relating to our products and services, and users who contact us. This information may include names, email addresses, telephone numbers (including mobile numbers used for WhatsApp, SMS or similar messaging services), postal addresses, and communication or service preferences (“Contact Information”).
We process this information when we communicate with you or provide Services to you on the basis of the performance of a contract with you, or, where no contract exists, on the basis of our legitimate interests in providing and operating the Services, subject to your communication preferences and applicable law.
Information relating to donations made through the Services, which may include donation amounts, dates and times, recipient charities or organisations, and records of total donations (“Donation Information”).
We process this information to process and manage donations on the basis of the performance of a contract with you, or, where no contract exists, on the basis of our legitimate interests in providing and operating the Services.
Information provided in relation to comments or reviews submitted through the Services (“Comment Information”).
We process this information on the basis of our legitimate interests in operating the Services and displaying such content.
Information provided in relation to payment for donations, such as credit or debit card details (“Payment Information”). Payment Information may be supplied directly to third-party payment processors, who will process the data in accordance with their own privacy notices.
We process this information on the basis of the performance of a contract with you in providing the Services.
Records of correspondence or communications between you and us (“Communication Information”).
We process this information on the basis of the performance of a contract with you or, where no contract exists, on the basis of our legitimate interests in managing relationships with users and operating the Services.
Marketing information we may hold to provide information about our Services, which may include names, email addresses, postal addresses, telephone numbers and preference data (“Marketing Information”).
We process this information on the basis of our legitimate interests in communicating with you about our Services or, where required by law, on the basis of your consent. You will not receive electronic marketing communications via email, WhatsApp or SMS unless you have consented to receive them or we are otherwise permitted to do so under applicable law.
We may collect the above information directly from you or, in some cases, from third parties. Your rights under this Privacy Notice apply regardless of how we obtain your data.
Where you choose to receive messages from us, or otherwise communicate with us via messaging services such as WhatsApp, SMS or similar platforms, we may collect and process your telephone number, profile name, profile image, and the content of messages you send or receive (“Messaging Information”).
We process Messaging Information for the purposes of:
We process Messaging Information on the basis of:
This Privacy Notice also applies to personal data provided by our partner charities, their staff, and third-party suppliers whose data we process. We process such data on the basis of the performance of a contract with the relevant organisation or, where no contract exists, on the basis of our legitimate interests in operating the Services.
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
For any personal data not specifically listed above, the default retention period is 7 years from receipt, unless otherwise required by law. Retention periods may be extended where legal proceedings or investigations apply.
We use cookies and similar technologies to improve your experience across our Services.
We will only load Performance, Functionality and Targeting cookies after you have provided consent via our cookie banner.
We may use third-party cookies provided by services such as Facebook, Google and Stripe. These providers process data in accordance with their own privacy policies.
You can manage or withdraw cookie consent at any time through your browser settings or our cookie preference tools.
Except for essential cookies, cookies will expire after a maximum of two years.
We use tools such as Facebook Pixel and Google Analytics to understand how our Services are used and to deliver and measure targeted advertising. In some circumstances, we and relevant platforms (such as Meta) may act as joint controllers in relation to such data processing, in accordance with their data processing terms.
You can opt out of analytics and targeted advertising through our cookie controls and relevant third-party tools.
We may process IP addresses to diagnose server issues, analyse aggregate usage, administer and improve the Services.
We may share personal data:
We rely on legitimate interests as the default legal basis for sharing data, subject to your consents, preferences and applicable law.
Your personal data may be transferred outside the UK or EEA, including to the United States, where we use third-party service providers such as WhatsApp or advertising platforms. Where such transfers occur, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the UK ICO and/or the European Commission.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or damage.
You have the right to:
You may withdraw consent for messaging communications by using any opt-out mechanism provided, adjusting your communication preferences, or contacting us directly.
We will respond to rights requests within one month, unless an extension is permitted by law.
We will notify the Information Commissioner’s Office (ICO) and affected individuals where required by law in the event of a personal data breach.
Address:
6-8 Great Eastern Street
London, EC2A 3NT
United Kingdom
Email:
contact@shamaazi.com
If you are not satisfied with our response, you may complain to the Information Commissioner’s Office at www.ico.org.uk.
