Privacy Policy

Last Updated: 31-12-2025

1. Introduction

Rumi’s Relief (“we”, “us”, or “our”) is committed to protecting your privacy. We are a Charitable Incorporated Organisation (CIO) registered in England and Wales (Charity No: 1213810). This policy explains how we collect, use, and store your personal data when you interact with us via our website, donations, or services.

2. The Data We Collect

We may collect and process the following types of information:

  • Identity Data: Name, title, and date of birth.

  • Contact Data: Email address, telephone number, and postal address.

  • Financial Data: Payment card details and billing address (processed securely via third-party providers).

  • Donation History: Records of your contributions and Gift Aid status.

  • Technical Data: IP address and browser type (via cookies) when you visit our website.

  • Sensitive (Special Category) Data: In limited cases, we may collect information regarding health or religious beliefs if necessary for providing aid or ensuring safeguarding.

3. How We Use Your Data

We will only use your data for the purpose it was collected, including:

  • Donation Processing: To process your one-off or regular gifts and claim Gift Aid.

  • Direct Marketing: To send updates about our work and appeals (only with your explicit consent).

  • Service Delivery: To manage and deliver aid to beneficiaries in the UK and overseas.

  • Compliance: To meet legal, audit, and regulatory requirements (e.g., Charity Commission or HMRC).

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

  • Consent: For sending marketing emails or SMS.

  • Contract: To fulfill a transaction (like a donation or purchase).

  • Legal Obligation: Where we are required by law to keep records (e.g., Gift Aid).

  • Legitimate Interests: For administrative purposes or sending postal mailings, where it does not outweigh your rights.

5. International Data Transfers

As Rumi’s Relief operates in countries like Pakistan and Saudi Arabia, we may occasionally need to transfer data outside the UK. When we do, we ensure:

  • The country has an “adequacy decision” from the UK government, OR

  • We use Standard Contractual Clauses (SCCs) to ensure your data remains protected to UK standards.

6. Data Retention

We keep your information only as long as necessary.

  • Financial Records: Usually kept for 6 years to comply with HMRC.

  • Marketing Data: Kept until you withdraw consent or after a period of prolonged inactivity (e.g., 24 months).

7. Your Legal Rights

You have the right to:

  1. Access: Request a copy of the data we hold about you.

  2. Rectification: Correct inaccurate information.

  3. Erasure: Ask us to delete your data (the “right to be forgotten”).

  4. Object: Opt-out of direct marketing at any time.

To exercise these rights, contact us at info@rumisrelief.org.uk

8. Contact & Complaints

If you have questions about this policy, please contact our Data Protection Lead:

  • Email: info@rumisrelief.org.uk

  • Address: 172 Derby Road, Nottingham NG7 7LR

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.