Privacy Policy

Last updated: [4 September 2025]

1) Who we are (Data Controller)

This website is operated by [Aylesbury Muslim Professionals / Mohammed Amjad] (“we”, “us”, “our”).

2) What personal data we collect

We keep data collection to a minimum. We only collect the following information:

  • Directory registration forms (via Formspree): For individuals: your name, email address, contact number, profession category, profession title, specialisation, and optional secondary profession details. For businesses: business name, business type, address, email, contact number, website URL, and services description.
  • Newsletter mailing list (via Mailchimp): Your name, email address, and any other information you provide through our registration forms may be manually added to our Mailchimp mailing list to send you newsletters, updates, and community information.
  • Hosting/server logs (Vercel): limited request information (e.g., IP address and user-agent) captured to operate and secure the site.

We do not use cookies or similar tracking technologies and we do not run analytics.

3) Why we collect it (purposes)

  • To respond to enquiries and registration submissions you send us via our forms.
  • To maintain a directory of professionals and businesses within our community network.
  • To send you newsletters, community updates, event information, and other relevant communications via Mailchimp.
  • To operate, secure, and troubleshoot the website (server logs).

4) Our legal bases

  • Consent — when you voluntarily submit the contact form. You can withdraw consent at any time (see Section 9).
  • Legitimate interests — to run and secure our website (e.g., basic server logging).

5) Who we share your data with (recipients)

  • Formspree, Inc. — processes and delivers form submissions to us as our data processor. Your information may be processed outside the UK/EEA. Appropriate safeguards, such as Standard Contractual Clauses (and the UK Addendum), are used.
  • The Rocket Science Group LLC (Mailchimp) — we use Mailchimp to manage our mailing list and send newsletters. Your name, email address, and other registration information may be manually added to our Mailchimp audience. Your information may be processed in the United States. Mailchimp participates in the EU-U.S. Data Privacy Framework and appropriate safeguards are in place. You can unsubscribe from our mailing list at any time using the unsubscribe link in any email we send.
  • Vercel, Inc. — our hosting provider. Vercel may process limited request-level data in logs as part of providing hosting. International transfers are safeguarded (e.g., Standard Contractual Clauses and related UK mechanisms).

We do not sell your personal data.

6) International transfers

Where our providers process data outside the UK (for example, in the United States), we rely on appropriate safeguards such as Standard Contractual Clauses (with the UK Addendum) and other lawful transfer mechanisms.

7) How long we keep your data (retention)

  • Form submissions: retained for up to 12 months after we close your enquiry (unless the law requires longer).
  • Mailing list data: retained in Mailchimp until you unsubscribe or request deletion. You can unsubscribe at any time using the link in any of our emails.
  • Server logs: retained for a limited period necessary for security and troubleshooting by our hosting provider.

UK GDPR allows either specific periods or clear criteria. The periods/criteria above reflect our practice.

8) Is providing data mandatory?

Providing your details is optional, but without them we won’t be able to reply to your enquiry.

9) Your rights

Under UK GDPR, you have the right to access, rectify, erase, restrict or object to processing, and to data portability where applicable. Where we rely on consent, you can withdraw it at any time (this won’t affect processing already carried out). To exercise any rights, contact us using the details in Section 1.

10) How to contact us about privacy

mohammed@legalrightspartnership.co.uk

11) Complaints

You can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/ or 0303 123 1113 (Wycliffe House, Water Lane, Wilmslow, SK9 5AF).

12) Children

Our site is not intended for children and we do not knowingly collect children’s data.

13) Automated decision-making

We do not use automated decision-making or profiling.

14) Changes to this notice

If we change this notice, we’ll update the “Last updated” date at the top of this page.