Portal privacy policy
Last updated: 2 November 2026
Who is responsible
THE UNITED KINGDOM TURKISH ISLAMIC CULTURAL CENTRE, registered charity in England and Wales number 287349, is responsible for personal information used for the Suleymaniye Cenaze Fonu donor portal.
212–216 Kingsland Road, London E2 8AX · info@cenaze.uk
Information and sources
We use information you or an authorised family representative provide: names, dates of birth, family relationships, address, email, telephone, donor reference, applications, requests, consents and notes. Existing records may come from our application forms and QuickBooks. Where connected, QuickBooks supplies donor contact details and balances; GoCardless supplies customer and mandate identifiers, mandate status, limited bank details and recent payment status. Bank account details are entered with GoCardless, not into our portal database. We also process login, security and technical information such as IP addresses and essential session cookies. Only features that are enabled collect or retrieve their associated information.
Why we use information
Our legitimate interests are administering the charitable fund, maintaining accurate donor and family records, responding to requests, showing account information and protecting accounts. We use information where necessary for legal accounting and recordkeeping obligations, and consent where requested for optional communications. Required identity and contact details let us verify access and assess requests; without them we may be unable to provide those features. We do not sell donor information or use QuickBooks data for unrelated advertising.
Sensitive and family information
Fund records may reveal religious beliefs. Relevant member and regular-contact records are processed within our legitimate religious charitable activities under the not-for-profit condition in Article 9(2)(d) UK GDPR, subject to its safeguards. Where an application requests health details, separate explicit consent is required before portal collection is enabled; accepting these terms alone is not health consent. Health details are restricted to authorised reviewers and are not sent to QuickBooks, GoCardless or SMS providers. Give another adult’s information only with appropriate authority and make this notice available to them. Provide children’s details only if you have parental responsibility or appropriate authority.
Service providers and transfers
Authorised staff and providers receive only information needed for their role. We use Wix for hosting, Supabase for database and authentication, ClickSend for SMS, Cloudflare Turnstile for abuse prevention, Intuit QuickBooks for accounting and GoCardless for Direct Debit. Existing application processes also use Jotform, Zapier and Textlocal. Providers may process information outside the UK, including Ireland and the United States, under applicable adequacy arrangements or approved contractual safeguards. Contact us for details or copies of relevant transfer safeguards. We may also disclose information where required by law or necessary to establish or defend legal claims.
Retention and security
We keep information only as long as needed for fund administration, accounting duties, resolving disputes and legal claims. Retention depends on account status, record type and applicable obligations; sensitive details are reviewed separately and removed when no longer necessary. Essential cookies support secure sessions; Turnstile and hosting providers also process technical data for security. Closing portal access or disconnecting QuickBooks stops future access or retrieval as applicable but does not automatically delete records that must be retained. Application and assistance decisions receive staff review; the portal does not make solely automated eligibility decisions.
Your rights and complaints
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your information. You have the right to object to processing based on legitimate interests. You can withdraw consent at any time by contacting info@cenaze.uk; this does not affect earlier lawful processing. We may need to verify your identity. You can complain to us or to the UK Information Commissioner’s Office at ico.org.uk. We will update this notice when our use of information materially changes.