Privacy

What UmmahCauses collects

• Your donation record - the amount, which charity and campaign it went to, the name, email and country you gave with, whether you marked it as zakat, and any dedication message you wrote. Stripe handles the card; we never see or store a card number, only Stripe's reference for the payment.
• Recurring giving - if you set up a monthly or weekly gift, we keep the schedule and its Stripe subscription reference so we can charge it and so you can pause or cancel it.
• Tax receipts - generated from those records and kept so you can download them later.
• Charity admin accounts - if you manage a charity here, we store which charity you're attached to, and administrative actions taken in the charity dashboard are written to an audit log.
• Newsletter - only if you sign up in the site footer, and only what that form collects: your email address, how you asked to hear from us, and where on the site you signed up. Confirmation is double opt-in - we send one link, and nothing else goes out until you click it. Every email after that carries an unsubscribe link; an unsubscribed address is kept only to make sure we do not email it again, and you can ask us to delete it entirely (contact below). This list is never built from your donation history - donating does not add you to it, and signing up for it tells us nothing about whether or what you have given (see "The commitment that matters most here," below).
• Ramadan giving reminder - if you use "Remind me when Ramadan giving opens", we keep your email address and the date you asked, and nothing else. We keep it only to send you that reminder and to confirm it was you: one confirmation link first, and nothing else goes out until you click it. Every email has a link to leave. When you leave, we keep the address only so we do not email it again, and you can ask us to delete it entirely (contact below). It is never built from your donations and is never shared.

Bank details that charities give us

This section is for charity administrators. It applies only if you choose Wise or a bank transfer on the payout setup page. Read it before you fill in the form.

• What we collect: the bank name, the address on the bank account, the country of the bank, and the account numbers that country uses (account number or IBAN, and codes such as routing number, sort code, institution or transit number, BSB and SWIFT/BIC). We also keep who saved them (the charity, or a UmmahCauses team member typing in what the charity sent) and when.
• Why: so a person on our team can pay your organization by bank transfer or Wise. We use them for nothing else.
• How they are stored: encrypted in our database. Our screens show a team member only the last 4 digits of the account number. The full numbers are read only by the payout steps themselves, such as creating a Wise recipient or preparing a transfer that a person approves.
• Who sees them: the UmmahCauses team members who check bank details and approve payouts. If you choose Wise, the details are also sent to Wise to create your recipient. If you choose Stripe Connect, you give your bank details to Stripe and we do not receive them.
• Backups and removal: our database backups hold the details in the same encrypted form. To have your details removed, email salaam@ummahcauses.org and a person deletes them.

What the charity sees

When your donation completes, the receiving charity is given your name and email so it can thank you and issue its own acknowledgement. If you tick anonymous, your name is withheld from the charity's dashboard and from every public surface on this site - donor walls, campaign pages, the transparency page.

One honest exception. Anonymous means anonymous to the charity and to the public - not absent from our records. Your name and email stay on the donation row, because a payment we cannot identify is a payment we cannot refund, receipt, or reconcile with our processor.

Activity tracking on this site

UmmahCauses loads UMG's own first-party behavioral system, which links your activity here to your UmmahPass profile across our sites and is used today to improve the product. It is on by default, fully disclosed, and you can turn it off - which deletes the profile, not just future collection - in your UmmahPass privacy settings. Aggregate traffic measurement uses Matomo on our own servers. No Google Analytics and no Meta pixel run on this site. EPOM, our ad server, does run here and can set a cookie. Some paid ads it serves carry a Google ad tag. Our full privacy policy explains what that tag does.

The commitment that matters most here

"We never sell donor data, and donor identity - who you give to - is walled off from every commercial use, permanently."

Quoted from section 2 of the ecosystem privacy policy, where it applies to every UMG property.

The rest of the policy

If you are not signed in, this site does not record your browsing in UmmahPass’s activity system. A signed-in member who turned the activity switch on is recorded; everyone else’s event is dropped by our server.

Contact

Questions, or a request to see or delete what we hold: support@ummahcauses.org, or our contact form.