Aisha Mosque Marriage Introductions (AMMI) (“AMMI”, “we”, “us”) is the data controller for personal data processed through this marriage introduction platform. We facilitate marriage introductions for verified members.

• Identity and contact details — name, email address, and account credentials (password stored in hashed form only)
• Profile information — personal background, faith and lifestyle details, marriage preferences, and location
• Verification documents — proof of identity, proof of address, profile photograph, and supporting documents (e.g. divorce certificate) submitted for admin review
• Guardian details — Mehram or wali contact information where voluntarily provided
• Consent records — timestamps, policy versions, and technical metadata when you accept our Terms, Privacy Policy, or special-category data processing
• Platform activity — meeting requests, photo-access decisions, shortlists, and in-app notifications relating to your account
• Technical data — IP address, browser type, and device information collected when you sign in or accept legal policies, for security and audit purposes

Certain profile fields — including religion, ethnic background, and related information for marriage introductions — constitute special-category personal data under UK GDPR. We process these only where you have given explicit consent during registration or when re-accepting an updated policy.

• Performance of a contract — to register your application, review your membership, and provide marriage introductions you have requested
• Explicit consent — for processing special-category personal data and, where applicable, for optional communications
• Legitimate interests — to maintain platform security, prevent fraud, moderate content, and protect members, balanced against your rights
• Legal obligation — to comply with applicable law, respond to lawful requests, and meet regulatory or accounting requirements

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal, and may limit your ability to use the platform where the data is essential to the service.

• Review and verify member applications before granting access (dual-admin verification — two authorised administrators)
• Display anonymized profiles to approved members within the platform
• Facilitate structured meeting requests, photo-access flows, and admin-mediated introductions
• Send notifications about your application status, requests, and account activity
• Maintain audit logs for security, moderation, and regulatory compliance
• Respond to your enquiries and data subject requests

• Authorised AMMI administrators — for dual-admin application verification, moderation, and introduction coordination
• Approved platform members — limited profile information you choose to make visible within the service; photos and contact details are never publicly displayed
• Service providers — hosting, database, payment processing, and email delivery providers acting under contract and only on our instructions
• Law enforcement or regulators — where required by law or to protect the rights and safety of members

We do not sell, rent, or trade your personal data. Any third-party processor is required to implement appropriate security measures and process data only for the purposes we specify.

• Access controls limiting administrative access to authorised personnel only
• Encrypted transmission (HTTPS) for data sent between your browser and our servers
• Secure storage of credentials and restricted access to verification documents
• Session management using httpOnly cookies and short-lived access tokens
• Audit logging of significant account and administrative actions

• Active account — we keep your profile, photos, and related service data for as long as your account remains open and you use the platform
• Verification identity documents — deleted from our systems when your application is approved (profile photos remain with your account until the account is closed)
• Membership ends without renewal — you have about 30 days after membership ends to renew. Matching access may be turned off during or after that grace period. If you do not renew, we close your account about 30 days after membership ends and delete your personal details, photos, and uploaded files promptly
• You close your account — we close the account and delete your personal details, photos, and uploaded files promptly
• Records we may keep longer where the law or good practice requires — payment and accounting records; security audit logs (removed after at least 12 months); consent records to demonstrate compliance with UK GDPR; and any information subject to a legal hold or other legal obligation

These practices follow the UK GDPR storage-limitation principle: we keep personal data only as long as needed for the purposes in this policy. When an account is closed — by you, or automatically after the membership grace period — we delete personal profile data promptly, subject only to the limited records described above. You may also request deletion under UK GDPR; we will respond subject to any overriding legal requirements.

We use strictly necessary cookies and local storage to operate the platform securely. We do not use advertising, analytics, or social-media tracking cookies.

• Authentication — httpOnly refresh-token cookie and access token stored to keep you signed in
• Cookie preference — local storage record of your essential cookie consent choice
• Registration draft — local storage autosave while you complete your application (removed when you submit or clear browser data)

Disabling essential cookies or storage will prevent you from remaining signed in or completing registration. You can manage browser settings at any time; see also our cookie banner on first visit.

Subject to applicable law, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data where there is no compelling reason to continue processing
• Right to restrict processing — ask us to limit how we use your data in certain circumstances
• Right to data portability — receive certain data in a structured, commonly used format where applicable
• Right to object — object to processing based on legitimate interests where your circumstances apply
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, Contact the AMMI administration team via our Contact Us page, through the details on your application status page, or in person at Aisha Mosque, Birmingham by appointment. We aim to respond within one month, as required under UK GDPR.

If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

We may revise this Privacy Policy to reflect changes in law, our practices, or platform features. Material updates may require you to re-accept the policy before continuing to use your account. The “Last updated” date at the top of this page indicates when it was last revised.

For account conduct, fees, and service terms, please refer to our Terms & Conditions.