Privacy Policy

Sadaqah Syndicate ("we", "us", "our") is the data controller responsible for your personal data when you use our website and app. This policy explains what we collect, why, and the rights you have under the UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, you can reach our team at privacy@sadaqahsyndicate.com.

Account information: your name, email address and password (stored only as a salted hash).

Pledge and payment information: your chosen monthly amount, how you spread it across syndicates, and the limited payment metadata returned by our payment processor. We never see or store your full card number.

Gift Aid information: if you make a Gift Aid declaration, the home address and postcode HMRC requires us to hold in order to reclaim tax on your eligible donations.

Usage information: how you interact with the platform, which syndicates you support, and basic device and analytics data used to improve the service.

We use your data to operate your monthly pledge, send you the receipts and impact updates that make our proof guarantee possible, provide customer support, and meet our legal and regulatory obligations as a platform handling charitable giving.

We will only ever send you marketing communications where you have opted in, and you can withdraw that consent at any time from your account settings.

We rely on the performance of our contract with you to process pledges, on our legitimate interests to keep the platform secure and improve it, on your consent for optional marketing, and on legal obligation where we are required to retain records.

We share the minimum necessary data with our payment processor, our email delivery provider and our infrastructure hosts, each bound by data-processing agreements. We do not sell your personal data to anyone, ever.

Aggregate, anonymised figures (for example, the total pooled this month) may be shared publicly, but these never identify you individually.

You have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these directly in the app, or by contacting us. You also have the right to complain to the Information Commissioner's Office (ICO).

We keep your account data for as long as you have an active account, and for a limited period afterwards to meet financial and legal record-keeping requirements, after which it is securely deleted or anonymised.