Last updated 05/07/2026. This policy covers data collected through The Shadhili Foundation app.
This privacy policy explains how The Shadhili Foundation (“we”, “us”) collects and uses your personal data when you use The Shadhili Foundation app.
1. Who we are
The Shadhili Foundation is a UK registered charity (No. 1206976) and is the data controller for personal data collected through this app.
2. What data we collect
Currently, the app collects personal data through the Support the Tour form only:
• Full name
• Email address
• Phone number
To provide certain core features of the app, including the Qibla direction finder, we may access device orientation data (accelerometer, magnetometer, and gyroscope sensors) and device location (if enabled by the user).
This data is used only to calculate accurate Qibla direction.
We do not store, save, or transmit this sensor or location data to our servers.
We also use device rotation (compass heading) to determine the correct Qibla direction in real time.
We do not currently collect data through account sign-up, push notifications, or any other part of the app. If that changes, this notice will be updated.
3. Why we collect it and our lawful basis
Purpose: so a member of our team can contact you by phone or email to support you.
Lawful basis: processing necessary to take steps you've requested (Article 6(1)(b) UK GDPR) and/or our legitimate interest in responding to your enquiry (Article 6(1)(f)). No separate consent is needed for this core purpose, since you are actively asking us to get in touch.
4. Who sees this data
Access to your personal data is restricted to authorised staff and volunteers of The Shadhili Foundation who require it to administer events, registrations, communications and related charitable activities.
Where necessary, we may share limited personal data with trusted service providers and event partners strictly for the purpose of delivering, managing, or supporting our charitable activities and events. Any third parties we work with will be required to process data securely and in accordance with UK GDPR and only use it for the agreed purpose.
For example, where an event, programme or tour is supported by a sponsor or partner organisation, we may share attendee contact details with that organisation where this is necessary for the administration, delivery, support or follow-up of the event. Where required by law, we will provide attendees with appropriate notice and any relevant choices regarding such sharing.
We do not sell personal data.
5. How long we keep it
We retain personal data collected through the app for up to 24 months from your last interaction with The Shadhili Foundation, after which it will be securely deleted or anonymised unless we are required to retain it for longer to comply with legal, financial, audit, safeguarding, regulatory or other statutory obligations.
Where you have chosen to receive ongoing updates, communications or information about future events, programmes or charitable activities, we may retain your contact details until you unsubscribe, withdraw your consent, or request that your information be deleted.
We regularly review the personal data we hold and will securely delete information that is no longer required for the purposes for which it was collected.
6. Where your data is stored
Your personal data is stored using Supabase (EU region, Frankfurt) and Google services. Some processing may occur outside the UK/EEA, and we rely on appropriate safeguards to protect your data.
7. Changes to this notice
As the app adds new features that collect personal data (e.g. accounts, notifications, other forms), we will update this notice to cover them.
8. Your rights
Under UK GDPR you have the right to access, correct, erase, or restrict your data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, contact: info@theshadhilifoundation.co.uk . You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.