Who is responsible for your information
The data controller is Touba Tawfeex Birmingham Charity (registered charity number 1193576), which operates the Touba Tawfeex Dahira Birmingham community register.
Address: 117 Pershore Road, Birmingham B5 7NX, United Kingdom
Email: Toubatawfeex@gmail.com
Telephone: +44 7877 580263
The register is for the Dahira community.
Adiya — £25 monthly voluntary donation
The Dahira has a £25 monthly voluntary donation called Adiya. This registration form does not collect Adiya payments.
Who may be registered
Adults and children may be included in the Dahira community register.
- An adult aged 18 or over may submit their own registration.
- For anyone under 18, a parent or legal guardian must submit the form. We collect the child’s name, but the contact mobile number and email must belong to the parent or guardian.
- Optional community messages about a child are sent only to the parent or guardian, not directly to the child.
- We do not ask for a child’s date of birth through this form.
Children have the same data-protection rights as adults. We take their best interests into account when using their information.
Information we collect
For an adult registration, we collect:
- full name;
- UK mobile number;
- email address, if provided;
- whether the adult chooses optional community emails;
- whether the adult chooses optional community SMS or WhatsApp messages;
- confirmation that the privacy notice has been read;
- registration date, time and source.
For a child registration, we collect:
- the child’s full name and the fact that they are under 18;
- the parent or guardian’s full name;
- the parent or guardian’s UK mobile number;
- the parent or guardian’s email address, if provided;
- the parent or guardian’s separate optional messaging choices;
- confirmation that the person submitting the form has parental responsibility or legal authority to register the child;
- registration date, time and source.
Mobile numbers are accepted in UK format and stored in international format. We do not collect payment-card details through this form.
Why we use the information and our lawful bases
We use register information to:
- maintain and administer the Dahira community register;
- keep contact information accurate;
- communicate essential administrative information;
- protect the register and keep an accountable audit trail; and
- send optional community information only through each channel selected by the adult or parent/guardian.
For register administration and security, we rely on our legitimate interests under Article 6(1)(f) UK GDPR: operating a secure, accurate and accountable register for our Dahira community. When the information concerns a child, we give additional weight to the child’s rights, freedoms and best interests.
Being included in a religious Dahira register may reveal or strongly suggest religious beliefs. This is special-category data. For this processing, we rely on Article 9(2)(d) UK GDPR, which permits a not-for-profit religious body to use this information in its legitimate activities with appropriate safeguards for its members, former members and people in regular contact with it. We do not disclose information revealing religious association outside the organisation without explicit consent unless another legal condition permits or requires the disclosure.
For optional community emails and optional SMS/WhatsApp messages, we rely on consent under Article 6(1)(a). Each communication channel has a separate, unticked choice. Saying no does not prevent anyone from joining. Consent can be withdrawn at any time.
Essential administration and optional messages
We may contact the adult or parent/guardian about essential register administration without using the optional-message choices. These are service or administrative messages, not promotional messages.
Optional community emails and optional SMS/WhatsApp messages are separate. We record which channels were selected, when and how the choice was made. To stop either type of optional message, contact us using the details above. We will action the request and retain only the information needed to respect the preference.
Who can access or receive the information
Access is limited to authorised Touba Tawfeex officers using individual accounts and only where required for their role. Their access and important actions are recorded.
We also use trusted service providers to host the website, process the registration securely, store the private database and deliver email or other communications. These providers act under our instructions and are not permitted to use the information for their own purposes.
We may disclose information if required by law, to protect someone from serious harm, or to establish, exercise or defend legal claims. We do not sell the register, publish it online or share it for unrelated advertising.
International transfers
We use UK or European hosting regions where reasonably available. Some service providers or their support systems may process information outside the United Kingdom. Where this happens, we use an applicable UK adequacy regulation or appropriate contractual safeguards recognised under UK data-protection law. You may contact us for more information about the safeguards used.
How long we keep information
We keep a person’s register record while they remain part of the Dahira community register. After they leave, we normally delete or anonymise their personal details within 12 months, unless a longer period is reasonably required for legal obligations, safeguarding, dispute resolution or another necessary administrative purpose.
Security and audit records are retained only for as long as reasonably necessary for accountability, investigation and protection of the register. Retention is reviewed at least annually.
Security
The register is held in a separate private database and not in public website files or the Touba Tawfeex Kids database. We use access controls, individual officer accounts, authentication, audit records and other technical and organisational safeguards. No internet-based service can be guaranteed completely secure, but we take proportionate steps to reduce risk.
Your rights
Depending on the circumstances, adults and children have the right to:
- request a copy of their personal information;
- have inaccurate or incomplete information corrected;
- request deletion or restriction of use;
- object to processing based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent for optional messages at any time, without affecting earlier lawful processing.
Right to object: You may object at any time to the use of your information for direct marketing. We will stop that use. You may also object to register processing based on legitimate interests; we will consider the request and stop unless we have compelling lawful reasons to continue.
For a child, the child or a person acting on the child’s behalf may exercise these rights where appropriate. We may need to confirm identity or parental responsibility before responding.
Contact Toubatawfeex@gmail.com or write to the address above. We normally respond within one month.
Complaints
Please contact us first so we can try to resolve any concern. You also have the right to complain to the Information Commissioner’s Office:
- Website: https://ico.org.uk/make-a-complaint/
- Telephone: 0303 123 1113
Automated decisions
We do not use this register for automated decision-making or profiling that produces legal or similarly significant effects.
Changes to this notice
We will review this notice regularly. If we make a material change, we will update the version on the website and bring the change to affected people’s attention where appropriate.