Privacy policy

The categories of personal data the council collects, and the point at which each is collected, are set out in the clause.

The lawful basis for each category of processing, including the operation of the certification register and the answering of enquiries.

What is retained when a Tayyib ID is scanned, including the masked identifier, the approximate location and the time, and how long it is held.

The cookies the Website sets, what each is for, and how consent is recorded and withdrawn.

Google Analytics measures how the Website is used and sets cookies to do so. It is not loaded until you accept it. A notice appears on your first visit with an Accept and a Decline, and nothing is requested from Google unless you accept. Your choice is stored in your browser’s local storage under idcc-consent, not in a cookie, so declining leaves nothing on your device. To withdraw consent, clear this site’s data in your browser and the notice will be shown again.

Vercel Web Analytics records page views for the council. It is provided by Vercel Inc., which also hosts the Website. It is cookieless, sets no identifier on your device and does not track you between sites, so it runs without consent and continues to run if you decline Google Analytics.

Google Maps. The Contact page embeds a Google Maps frame showing the correspondence address; Google may set cookies when that frame loads.

No cookie is used for advertising, profiling or resale, and the Website sets no cookie of its own beyond what is needed to remember your theme choice and the consent decision above.

Where data is shared with a processor, including the hosting and analytics providers, and the safeguards in place.

The Website is hosted by Vercel Inc., which processes request data including your IP address in order to serve pages and to provide Vercel Web Analytics. Google LLC processes analytics data where you have accepted Google Analytics, and serves the Google Maps frame on the Contact page. The certification register and the rate feed are operated by the council on its own infrastructure.

Where data leaves the United Kingdom, the mechanism relied on for the transfer.

How long each category is kept, and why. Register entries are kept indefinitely so a certificate remains verifiable.

Access, rectification, erasure, restriction, objection and portability, and how to exercise each with the council.

How to complain to the council, and the right to complain to the Information Commissioner.

Who at the council is responsible for data protection, and how to reach them.

If you have any questions about this privacy policy, write to the council at the registered office or by email.

Islamic Monetary Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Company number 15262221.