Privacy Policy

Last updated: 27 June 2026

This Privacy Policy explains how The Abdul Majid Foundation ("we", "us", "our" or "the Foundation") handles personal information when you use our website and services. We are committed to protecting your privacy and handling your data openly and in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

The Foundation is currently completing the charity registration process in England & Wales. It is not yet a registered charity and no charity number has been issued. This policy will be reviewed and updated as registration progresses.

We are also completing our registration with the Information Commissioner's Office (ICO); our ICO registration is pending.

Who we are

For the purposes of data protection law, the Foundation is the data controller for the personal information described in this policy. If you have any questions about this policy or how we use your data, you can contact us at tamf@skylite.group.

The information we collect

Information you give us directly, including when you:

• Contact us — your name, email address, subject and the contents of your message.
• Create an account or sign in — your name and email address. If you sign in with Google, we receive your name, email address and profile picture from Google. Passwords are handled securely by our authentication provider; we never see or store your password in plain text.
• Make a pledge — the amount, the fund or project, the frequency, any optional message, and your optional preferred way to give. A pledge is an intention to give; no payment is taken at this stage.
• Suggest a project — the details you submit and your contact information.
• Use the charity companion — the messages you send. If you are signed in, your conversation is saved to your account so you can revisit it; if you are not signed in, it is stored only in your own browser.

We also collect a limited amount of technical information automatically (such as essential cookies and local storage used to keep you signed in, and basic data needed to keep the service secure and working). We do not use advertising or third-party tracking cookies. For full details, see our Cookies Policy.

How we use your information

• To create and manage your account and record your pledges.
• To respond to your enquiries and project suggestions.
• To operate, maintain, secure and improve the website.
• To provide the charity companion's responses and, where you are signed in, to save your chat history for you.
• To claim Gift Aid on eligible donations, where you have given your consent and once the Foundation is registered with HMRC.
• To comply with our legal and regulatory obligations.

Our lawful bases for processing are typically your consent, the performance of a contract or steps you ask us to take, our legitimate interests in running the Foundation, and compliance with legal obligations.

The charity companion (AI)

The messages you send to the companion are processed by our AI provider to generate a response. Please do not share sensitive personal or financial details you would not want processed by a third-party AI service. The companion provides general information and guidance only.

Who we share your information with

We do not sell your personal information. We share it only with trusted service providers who process data on our behalf, under appropriate agreements, including:

• Supabase — secure database, authentication and storage of account, pledge and related data.
• Vercel — hosting and delivery of the website.
• Anthropic — processing of charity companion messages to generate responses.
• Google — where you choose to sign in with Google.
• Stripe and PayPal — payment processing, which will apply once online giving opens.

We may also disclose information where required by law or to protect the rights, safety and property of the Foundation or others.

International transfers

Some of our providers may process data outside the United Kingdom. Where that happens, we take steps to ensure your data is protected by appropriate safeguards, such as adequacy decisions or standard contractual clauses.

How long we keep your information

We keep personal information only for as long as necessary for the purposes set out in this policy, to meet legal or regulatory requirements (for example, Gift Aid records), or to resolve disputes. When it is no longer needed, we delete or anonymise it. You can ask us to delete your data at any time, subject to any legal retention requirements.

Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Under UK data protection law, you have the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete your information in certain circumstances;
• ask us to restrict or object to certain processing;
• request your information in a portable format; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at tamf@skylite.group. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, though we would welcome the chance to address your concerns first.

Children

Our website is not directed at children, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to remove it.

Other websites

Our website may link to other sites. This policy applies only to our website, and we are not responsible for the privacy practices of other sites.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown above.

Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at tamf@skylite.group.