Privacy Policy

1. Introduction

Welcome to Sunni Speakers. We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, and safeguard your data when you register and interact with our platform.

2. Information We Collect

We collect personal information that you voluntarily provide to us when registering on the website, expressing an interest in obtaining information about us, or booking speakers. This includes:

• Account Data: Real names, email addresses, phone numbers, and physical addresses (required for mosque location services).
• Profile Details: Optional speaker biography details, languages, specialties, and profile pictures.
• Log Data: IP addresses, browser user agent, and system events recorded in our audit logs for security, platform stability, and fraud prevention purposes.

3. Legal Bases for Processing (GDPR Compliance)

If you are located in the UK or the European Economic Area (EEA), we process your personal data under the following legal bases established by the General Data Protection Regulation (GDPR):

• Performance of a Contract: To manage registration, enable bookings between mosques and speakers, maintain schedule calendars, and facilitate communications.
• Consent: For processing optional data such as uploaded profile pictures, biography fields, and toggling search visibility. You can withdraw your consent at any time by editing or deleting these fields.
• Legitimate Interests: To protect platform integrity, audit actions for security purposes, prevent fraud, and maintain stable server logs.
• Legal Obligation: To comply with financial regulations, enforce platform abuse policies, or satisfy requests from law enforcement agencies.

4. Cookies and Tracking Technologies

Sunni Speakers does not use any marketing, tracking, or analytical cookies (such as Google Analytics or advertising pixels). We only use cookies that are strictly necessary for security and core functionality:

• laravel_session: A necessary cookie used to securely store and maintain your active login session as you navigate the dashboard.
• XSRF-TOKEN: A security-critical cookie used to verify authenticity and protect our forms from Cross-Site Request Forgery (CSRF) exploits.
• Turnstile/CAPTCHA Cookies: Set by Cloudflare Turnstile during registration to protect the platform from spam, malicious bot traffic, and bulk automation.

Since these cookies are strictly necessary for core functionality and safety, prior consent is not legally required under UK/EU ePrivacy regulations.

5. How We Use Your Information

We process your personal information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent. Specifically, we use your data to:

• Enable mosques to search for available speakers based on proximity, city, and dates.
• Facilitate booking requests, calendar scheduling, and status updates.
• Send automated platform emails and system notifications (e.g., new request, acceptance, cancellation).
• Ensure security and audit user actions via log files to prevent misuse of the platform.

6. Sharing & Visibility

Your privacy is important to us. We only share information with your consent or to provide services:

• Speakers: Speaker profiles, including optional profile pictures and details, are visible to authenticated Mosque accounts only if the speaker has explicitly toggled their profile visibility setting to "Visible". Hidden speakers are not discoverable.
• Mosques: Mosque profile details (name, city, address) are visible to speakers when a mosque sends them a booking request.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Information: Retained for the lifetime of your account. If you choose to close your account, we will erase or anonymize your data within 30 days.
• Audit & Security Logs: We retain system logs and IP address records for a period of up to 12 months for security auditing, after which they are deleted.

8. Data Security & International Transfers

We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process. Profile pictures and files are stored securely on local storage servers. Some of our infrastructure and third-party service providers (such as Cloudflare Turnstile) may process data internationally. Where transfers occur, we ensure standard contractual clauses or equivalent safeguards are maintained.

9. Children's Privacy

Our services are strictly intended for adults representing Islamic institutions (Mosques) or adult public speakers. We do not knowingly collect or solicit personal information from children under the age of 16. If we learn that we have collected personal data from a child without parental consent, we will delete it immediately.

10. Your Rights

Depending on your location, you have rights under data protection laws (such as the UK/EU GDPR). These include the right to:

• Request access to the personal data we hold about you (Subject Access Request).
• Request rectification of incorrect or incomplete data (which you can also do directly in your profile settings).
• Request erasure of your data ("Right to be forgotten").
• Withdraw consent at any time for optional profile fields (by removing your biography, specialties, or profile pictures, or toggling your visibility off).
• Object to or restrict the processing of your data under specific conditions.
• Lodge a complaint with a supervisory authority if you believe we are violating privacy laws. In the UK, this is the Information Commissioner's Office (ICO).

11. Contact Us

If you have questions or comments about this policy, or wish to exercise any of your rights, you may contact us at au.ahmed.dev@gmail.com.