Privacy Policy

This Privacy Policy describes how UMMAH1, including the UMMAHX project ("UMMAHX", "we", "us"), collects, uses, discloses, and protects personal information when you visit our website, sign up for updates, or otherwise interact with us. We are committed to the tightest available privacy protections and to the principles of data minimization, purpose limitation, and transparency.

1. Information we collect

• Information you provide: name, email, organization, and any messages you send.
• Technical data: IP address, device, browser, pages viewed, referrer.
• Cookies and similar technologies: see our Cookie Policy.

2. How we use information

• To operate and improve the UMMAHX website and community.
• To send updates you have requested (with your consent, where required).
• To comply with legal obligations and protect our rights.

3. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we process personal data on the basis of your consent, the performance of a contract, our legitimate interests (such as security and analytics), or compliance with a legal obligation.

4. Sharing

We do not sell personal information. We share data only with trusted service providers (hosting, analytics, email) under written agreements, and only as needed to operate the service or comply with law.

5. Retention

We keep personal data only as long as necessary for the purposes described, or as required by law, then delete or anonymize it.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, object to processing, and withdraw consent. EU/UK residents may lodge a complaint with their supervisory authority. California residents (CCPA/CPRA) may request access, deletion, correction, and opt-out of "sale" or "sharing" of personal information; we do not sell personal information.

7. Email (CAN-SPAM)

Marketing emails identify the sender, include our postal address, and provide a one-click unsubscribe. Honoring opt-out requests is processed within 10 business days, consistent with the CAN-SPAM Act.

8. International transfers

Where personal data is transferred outside your region, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

9. Security

We use industry-standard administrative, technical, and physical safeguards. No system is perfectly secure; please use strong, unique passwords and report concerns promptly.

10. Children

UMMAHX is not directed to children under 16, and we do not knowingly collect their personal data.

11. Contact

Questions or rights requests: privacy@ummah1.com.