Privacy Policy

Who we are

This website is run by Ihya Publications, a project of The CMA Welfare Trust ("CMA"). Ihya Publications is not a separate legal entity, so The CMA Welfare Trust is the data controller for the information collected through this site — it decides how your information is used and is legally responsible for looking after it.

The CMA Welfare Trust is a registered charity in England and Wales (1099574) and a company limited by guarantee in England (04730509), at 377 Wilmslow Road, Heald Green, Cheadle, SK8 3NP. It is registered with the UK Information Commissioner's Office as a data controller under reference Z8200764.

For anything to do with this website, email salaam@ihyapublications.org. For a formal data protection request you can also write to admin@cmatrust.org or to the address above.

The Qalam Prize has its own privacy notice covering competition entries, because entries are shared with judging partners and kept to a different timetable. CMA's wider charitable work is covered by its main policy at https://cheadlemasjid.org/privacy-policy/.

What information we collect, use, and why

We only collect what a particular form asks for. Depending on what you do on this site, that may include:

When you send us a message through the contact form:

• Your name and email address
• The content of your message

We use this to read and reply to you. Contact messages are emailed to us and are not stored on the website.

When you sign up for an event or activity:

• Your name and contact details
• Your age, where the event has an age range
• Anything else that form asks for, such as which session you want or how you heard about us

We use this to register you, to send you joining details, and to keep a record of who attended. Sign-ups are stored in our content system and emailed to the team running the event.

When you subscribe to our newsletter or updates:

• Your name and email address

We use this to send you news about our work and upcoming events. You can unsubscribe from any email we send.

When you donate or support our fundraising:

• Your name and contact details

When you submit any form, we also record:

• The date and time of your submission
• Your browser and device type
• A scrambled, one-way version of your IP address

We use those last three only to stop spam and abuse of our forms. The IP address is put through a one-way scramble before it is stored, so we cannot recover the original address from it and cannot use it to identify or locate you.

We do not collect special category data — information about health, race, political views, trade union membership, or genetic or biometric data. Please do not send us that kind of information through a form on this site.

We do not sell your information, we do not share it with advertisers, and we do not use it to train artificial intelligence models.

Our lawful bases for using your information

Under UK data protection law we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR, and you can read more about them on the ICO's website.

Our lawful basis for newsletter subscriptions, donations and fundraising is:

• Consent — you gave us permission after we explained what we would do with your information. All of your data protection rights apply, except the right to object. You can withdraw your consent at any time.

Our lawful bases for replying to your messages and administering event sign-ups are:

• Consent — you chose to contact us or to sign up.
• Legitimate interests — it is reasonably necessary for us to keep a record of who has contacted us or registered, so we can run the activity properly, avoid duplicate registrations and answer questions afterwards.

Our lawful basis for the spam and abuse prevention data described above is:

• Legitimate interests — we need to keep our forms usable and protect the site from automated abuse. We use the least identifying form of the data that will do the job, which is why IP addresses are scrambled rather than stored.

Where we are required to keep records or respond to a lawful request, our basis is compliance with a legal obligation.

Where we get personal information from

Directly from you, when you fill in a form on this website. We do not buy contact lists or build profiles of visitors from other sources.

How long we keep information

• Contact messages — kept for 12 months, unless your message becomes part of an ongoing matter we need to keep a record of.
• Event sign-up records — kept for 12 months after the event, then deleted.
• Newsletter subscriptions — kept until you unsubscribe. We also refresh consent after 4 years, in line with CMA's marketing policy, so you are not on a list indefinitely because of something you agreed to once.
• Spam and abuse prevention data — deleted together with the submission it belongs to.
• Competition entries — covered by the Qalam Prize privacy notice.

When deciding how long to keep anything else, we consider why we hold it, how long it stays accurate and useful, whether it might be relevant to a future legal claim, and any legal or accounting requirement that sets a minimum period.

You can ask us to delete your information sooner — see your rights below.

Who we share information with

We use a small number of service providers to run this website. They process your information on our instructions and cannot use it for their own purposes:

• Sanity — Our content management system. Stores event sign-ups, competition entries and any files uploaded with them.
• Vercel Inc. — Hosts this website and runs the code that receives form submissions. Handles submissions in transit; does not retain them.
• Resend — Delivers the emails our forms generate — the notification to our team and the confirmation to you.
• Kit, Inc. — Email marketing and automation. Stores subscriber email addresses and sends notifications of new events.

We may also disclose information where we are under a legal or regulatory duty to do so, for example to a regulator, the police, or our legal advisers.

Entries to the Qalam Prize are also shared with our judging partners. That is explained separately in the Qalam Prize privacy notice, because it works differently from everything else on this site.

Sharing information outside the UK

Where necessary we transfer personal information outside the UK. When we do, we comply with the UK GDPR and make sure appropriate safeguards are in place. To obtain a copy of the safeguard for any transfer below, contact us using the details at the top of this notice.

• Sanity — Our content management system. Sent to: [confirm region with provider]. Safeguard: Standard Contractual Clauses with the UK Addendum.
• Vercel Inc. — Hosts this website and runs the code that receives form submissions. Sent to: USA. Safeguard: Standard Contractual Clauses with the UK Addendum.
• Resend — Delivers the emails our forms generate — the notification to our team and the confirmation to you. Sent to: USA. Safeguard: Standard Contractual Clauses with the UK Addendum.
• Kit, Inc. — Email marketing and automation. Sent to: USA. Safeguard: The International Data Transfer Agreement (IDTA).

Cookies and information stored on your device

We do not use any analytics, advertising or tracking cookies. We do not use Google Analytics, advertising pixels, or any third-party service that follows you between websites. There is nothing to consent to, which is why you will not see a cookie banner here.

We do store a small amount of information in your own browser to make the site work the way you would expect:

• Whether you prefer the light or dark version of the site
• Whether you have dismissed a notice or pop-up, so we do not show it again straight away
• Answers you have part-typed into one of our forms, so you do not lose them if you navigate away

All of this stays on your device and is never sent to us. Part-typed form answers are deleted when you submit the form, or automatically after seven days, and any form that saves them gives you a button to clear them immediately. You can also clear all of it at any time through your browser settings.

Children and young people

Some of our activities are open to under-18s, and the Qalam Prize is open to entrants from the age of 14. Where a form is aimed at young people we ask only for what we genuinely need, and where an entrant is under 16 we ask for a parent or guardian's email address and their agreement before we accept the entry.

If you are a parent or guardian and you want to see, correct or delete information we hold about your child, email salaam@ihyapublications.org and we will deal with it.

Your data protection rights

Which lawful basis we rely on may affect your rights. You can read more about your rights, and the exemptions that may apply, on the ICO's website.

• Your right of access — you can ask us for copies of your personal information, and for details such as where we got it and who we share it with. Some exemptions apply, so you may not receive everything you ask for.
• Your right to rectification — you can ask us to correct information you think is inaccurate, or complete information you think is incomplete.
• Your right to erasure — you can ask us to delete your personal information.
• Your right to restriction of processing — you can ask us to limit how we use your personal information.
• Your right to object to processing — you can object to our processing of your personal data.
• Your right to data portability — you can ask us to transfer the information you gave us to you or to another organisation.
• Your right to withdraw consent — where we rely on consent, you can withdraw it at any time.

To make a request, email salaam@ihyapublications.org or write to The CMA Welfare Trust at admin@cmatrust.org or 377 Wilmslow Road, Heald Green, Cheadle, SK8 3NP. We will respond without undue delay and within one month. There is no charge. We may need to check who you are first, so that nobody else can access or delete your information.

How to complain

If you have concerns about how we have used your personal information, please tell us first at salaam@ihyapublications.org — we would like the chance to put it right.

If you remain unhappy, you can complain to the Information Commissioner's Office:

• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
• Helpline: 0303 123 1113
• Website: ico.org.uk/make-a-complaint

Changes to this policy

We may update this policy from time to time. If we make a significant change to how we use your information, we will say so on this page and update the date shown at the top.