Privacy Policy

Last updated: [4 September 2025]

1) Who we are (Data Controller)

This website is operated by [Aylesbury Muslim Professionals / Mohammed Amjad] (“we”, “us”, “our”).

2) What personal data we collect

We keep data collection to a minimum. We only collect the following information:

  • Form submissions (via Formspree): your name (if provided), your email address, and the content of your message.
  • Hosting/server logs (Vercel): limited request information (e.g., IP address and user-agent) captured to operate and secure the site.

We do not use cookies or similar tracking technologies and we do not run analytics.

3) Why we collect it (purposes)

  • To respond to enquiries you send us via the contact form and to keep a record of our communications.
  • To operate, secure, and troubleshoot the website (server logs).

4) Our legal bases

  • Consent — when you voluntarily submit the contact form. You can withdraw consent at any time (see Section 9).
  • Legitimate interests — to run and secure our website (e.g., basic server logging).

5) Who we share your data with (recipients)

  • Formspree, Inc. — processes and delivers form submissions to us as our data processor. Your information may be processed outside the UK/EEA. Appropriate safeguards, such as Standard Contractual Clauses (and the UK Addendum), are used.
  • Vercel, Inc. — our hosting provider. Vercel may process limited request-level data in logs as part of providing hosting. International transfers are safeguarded (e.g., Standard Contractual Clauses and related UK mechanisms).

We do not sell your personal data.

6) International transfers

Where our providers process data outside the UK (for example, in the United States), we rely on appropriate safeguards such as Standard Contractual Clauses (with the UK Addendum) and other lawful transfer mechanisms.

7) How long we keep your data (retention)

  • Form submissions: retained for up to 12 months after we close your enquiry (unless the law requires longer).
  • Server logs: retained for a limited period necessary for security and troubleshooting by our hosting provider.

UK GDPR allows either specific periods or clear criteria. The periods/criteria above reflect our practice.

8) Is providing data mandatory?

Providing your details is optional, but without them we won’t be able to reply to your enquiry.

9) Your rights

Under UK GDPR, you have the right to access, rectify, erase, restrict or object to processing, and to data portability where applicable. Where we rely on consent, you can withdraw it at any time (this won’t affect processing already carried out). To exercise any rights, contact us using the details in Section 1.

10) How to contact us about privacy

mohammed@legalrightspartnership.co.uk

11) Complaints

You can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/ or 0303 123 1113 (Wycliffe House, Water Lane, Wilmslow, SK9 5AF).

12) Children

Our site is not intended for children and we do not knowingly collect children’s data.

13) Automated decision-making

We do not use automated decision-making or profiling.

14) Changes to this notice

If we change this notice, we’ll update the “Last updated” date at the top of this page.