How we look after your information

Nikah Connect ([Registered company name], company number [Company registration no.]) is the data controller for the personal information described here. We are registered with the Information Commissioner’s Office under number [ICO registration no.].

You can contact us about anything in this policy at [hello@your-domain]. [Name or role of Data Protection Officer / privacy lead, if appointed.]

We collect only what is needed to review biodatas and arrange introductions:

• Account details — your email address and the name on your Google account, used to sign you in and to greet you. We do not store your Google profile photo.
• Biodata — the details you write in the seven-step form: background, education, family, practice of faith, what you are looking for.
• Private details — legal name, date of birth, phone number, and your wali or family contact. These are never shown on the portal.
• Activity — expressions of interest, shortlisted profiles, and notes our team records while arranging introductions.
• Payments — handled by Stripe. We receive confirmation of your membership but never your card details.

Your religion and your ethnicity are special category data under the UK GDPR. We process them only with your explicit consent (Article 9(2)(a)), which you give with a separate checkbox before submitting your biodata.

You can withdraw consent at any time by pausing or deleting your profile. Withdrawing consent does not affect processing that took place before you withdrew it.

• To review and publish your biodata — to provide the service you asked for (contract).
• To arrange introductions, including contacting the wali or family member you name — contract, and your explicit consent for special category data.
• To keep members safe and prevent misuse — our legitimate interests in safeguarding.
• To manage memberships and keep financial records — contract and legal obligation.

Other logged-in members see your profile code and emblem, your age (never your date of birth), town or city, ethnicity, and the parts of your biodata you wrote for them to read.

They never see your name, email address, phone number, exact date of birth, employer or your wali’s details. There is no messaging between members; our team handles every introduction. Visitors who are not logged in see only a code, age, city and background.

• Legal name, date of birth, phone number and wali details are encrypted at rest (AES-256-GCM).
• Every biodata is read by a person before it can appear on the portal.
• Our team can view private details only when needed, and every such view is recorded in an audit log.
• Data is hosted in the United Kingdom ([hosting provider and region to confirm]).

We share contact details with another family only with your consent, as part of an introduction. We do not sell your data.

We use a small number of processors under contract: [hosting provider], [database provider], Stripe (payments), and Google (sign-in). [Email provider, once confirmed.]

We keep your biodata while your account is open. When you delete your account, we erase your personal information [within X days], except records we must keep by law (for example payment records for [six] years). [Retention periods to be confirmed.]

You can, at any time:

• download a copy of your data (JSON) from your dashboard;
• correct your biodata — edits go back to review before they appear;
• pause your profile so it no longer appears on the portal;
• permanently delete your account;
• object to, or ask us to restrict, how we use your data.

If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

We use only strictly necessary cookies: one to keep you signed in, and security cookies that protect forms. We do not use advertising or tracking cookies, so there is nothing to opt in to. [Update this section if analytics are added.]