Your information

Privacy Policy

How ASM handles information across our website, iPhone app and the services connected to them.

No member accountNo advertisingNo cross-app tracking

Who we are

The Association of Scottish Muslims (ASM) is a Scottish charity, charity number SC031858. This policy explains how we handle personal information when you use asmuk.org, the ASM iPhone app, or services linked from them.

  • Email: info@asmuk.org
  • Telephone: +44 131 343 3802
  • Address: 80 Main Street, Davidson's Mains, Edinburgh EH4 5AB

Information handled by the ASM app

The app does not require an account. ASM does not use it to collect your name, email address, telephone number, payment details, precise location or a server-side history of the announcements you read.

The following information is stored on your iPhone:

  • Your selected mosque and appearance.
  • Prayer-alert and announcement preferences.
  • Cached prayer times, events and donation information.
  • Announcements saved in the Notification Centre, including their read state.
  • Information used by the ASM home-screen widget.
  • Whether you have completed onboarding and the guided tour.

This information stays on your device and is not synchronised to an ASM member account. You can clear saved announcements in the app. Removing the app removes its locally stored information, subject to normal iPhone backup behaviour.

The app connects to ASM services hosted by Cloudflare to retrieve public prayer times, events and donation information. Cloudflare receives the IP address and basic request information needed to deliver and protect those services. The requests do not contain an ASM account or member profile.

Firebase Cloud MessagingFirebase associates the Apple push token with an app installation identifier and processes technical information such as device model, language, time zone, operating-system version, app identifier and app version. ASM sends to mosque or maintenance topics and does not keep a database linking an installation to a named member.
Firebase CrashlyticsCrashlytics receives crash traces, relevant app state, installation identifiers, app version, device model and operating-system information when a release build crashes. The app does not attach a name, email address or other ASM user ID, and it does not include Google Analytics. Firebase states that Crashlytics crash data and associated identifiers are retained for 90 days before removal begins.

You can stop announcements through the app's Notifications settings or iOS Settings. Firebase service records are retained and deleted under Google's Firebase retention rules. The app contains no advertising SDK, and ASM does not use app information for advertising, cross-app tracking or profiling.

Information handled by the website

The website is hosted by Framer. Framer and its infrastructure providers process technical request and usage information needed to load, secure and operate the site. This can include IP address, browser and device details, requested pages, referring page, timestamps, and cookies or similar technologies. The website does not use this information to build an ASM member account.

If you enter your email address in the newsletter form, ASM and Framer process it so ASM can send the updates you requested. We rely on your consent. You can withdraw consent through an unsubscribe link or by contacting info@asmuk.org. We retain your address until you unsubscribe or the newsletter ends, plus the minimum information needed to honour an unsubscribe request.

If you contact ASM by email, telephone or another enquiry channel, we process the information you choose to provide so we can respond and manage the enquiry.

Donations, bookings and linked services

The website and app link to services operated by other organisations:

  • Fundraise Up and its payment providers process online donations. They may collect identity, contact, payment, donation and Gift Aid information. ASM may receive donor and transaction records, but ASM does not store your full card details.
  • Cal.eu processes bookings for ASM services and may provide relevant booking and contact details to ASM.
  • Raziil operates the linked Edinburgh Islamic Academy service and processes information under its own terms and privacy notice.
  • Maps, social networks and other external links process information under their own privacy notices when you choose to visit them.

Please review the privacy information shown by those services before submitting personal information to them.

Why we use personal information

Depending on the service, ASM relies on one or more of these lawful bases:

  • Consent: to send the newsletter or where you make another optional choice that relies on consent. You may withdraw consent at any time.
  • Contract or steps at your request: to arrange a booking, process a donation or provide a service you requested.
  • Legitimate interests: to operate and secure the website and app, deliver requested community information, respond to enquiries, maintain accurate records, and diagnose technical faults. We use this basis only where those interests are not overridden by your rights and interests.
  • Legal obligation: to keep records or disclose information where charity, tax, safeguarding or other law requires us to do so.

ASM does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Who we share information with

We share information only where needed for the purposes described above. This may include Framer, Google Firebase, Cloudflare, Fundraise Up and payment providers, Cal.eu, Raziil, professional advisers, regulators, law-enforcement authorities, or another organisation where disclosure is required by law.

We do not sell or rent personal information.

Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we rely on the provider's lawful transfer arrangements, such as an adequacy regulation or approved contractual safeguards.

How long we keep information

We keep personal information only for as long as it is needed for the purpose for which it was collected and to meet legal, accounting, charity, tax, safeguarding or dispute-resolution requirements.

  • App preferences and saved announcements remain on the device until you clear them or remove the app.
  • Newsletter information is retained until you unsubscribe or the newsletter ends, apart from the minimum needed to honour an unsubscribe request.
  • Firebase states that Crashlytics crash data and associated identifiers are retained for 90 days before removal begins.
  • Enquiry and booking information is retained for as long as needed to answer the enquiry, provide the service and handle follow-up.
  • Donation and Gift Aid records are retained for the period required by charity, tax and accounting law.

Service providers may retain their own technical and transaction records under their published retention policies.

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

  • Ask for a copy of your personal information.
  • Ask us to correct inaccurate information.
  • Ask us to erase or restrict information.
  • Object to processing based on legitimate interests or direct marketing.
  • Receive information you provided in a portable format.
  • Withdraw consent at any time where processing relies on consent.

These rights are not absolute and may depend on the lawful basis and the reason we hold the information. Contact info@asmuk.org to make a request. Because the app has no named member account, ASM may be unable to connect an app installation identifier to a particular person.

If you are unhappy with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

Security

ASM and its service providers use proportionate technical and organisational measures intended to protect personal information. No internet or storage system can be guaranteed completely secure.

Changes to this policy

We may update this policy when our services or legal obligations change. We will publish the updated policy on this page and change the effective date.