MosqueFees Privacy Notice

Who is responsible for your data?

Ribblesoft Ltd is responsible for data used to operate the MosqueFees website and business, including enquiries, accounts, subscriptions, billing, support, security, and service communications.

A mosque is normally responsible for the student, parent, attendance, educational, messaging, incident, and related records it manages through MosqueFees. We process those records for the mosque under our Data Processing Terms. Questions about those records should usually be sent to the mosque first.

Information we handle

• names, email addresses, telephone numbers, account roles, and mosque relationships;
• mosque registration, customer, subscription, and support information;
• student details, classes, attendance, reports, Hifz progress, merits, and incidents;
• messages, notifications, enquiries, and email delivery records;
• payment amounts, status, dates, and transaction references, but not full card details;
• device tokens, IP addresses, security logs, and crash or diagnostic information; and
• cookie choices, website analytics where permitted, and newsletter preferences.

This information may come from you, your mosque, a parent or guardian, authorised users, payment and authentication providers, or automatically from the device and service being used.

How we use information

We use personal data to:

• provide, administer, support, and secure MosqueFees;
• create accounts and manage mosque applications and subscriptions;
• process payments and maintain financial records;
• send service messages, emails, and app notifications;
• respond to enquiries, investigate problems, and prevent misuse;
• send newsletters where consent has been given or the law otherwise permits; and
• meet legal obligations and protect our legal rights.

Where Ribblesoft Ltd is responsible for the processing, we rely as appropriate on contract, legal obligation, legitimate interests, or consent. Our legitimate interests include operating and securing the service, supporting customers, preventing fraud, and administering our business. A mosque determines the lawful basis for the records it controls.

Children and sensitive information

MosqueFees is used by authorised mosque staff and parents or guardians to manage student records. Students do not need their own MosqueFees account. Records may concern children and may include religious, health, safeguarding, behavioural, or incident information. Mosques are responsible for collecting this data lawfully and only where necessary. We restrict access according to the user's role and the mosque they belong to.

Payments, cookies, and service providers

Stripe processes card payments, so MosqueFees does not store full payment-card details. We use service providers including DigitalOcean, Google Firebase, Amazon SES, Stripe, Expo, Apple, Google, and Sentry to host and operate the service, authenticate users, send emails and notifications, process payments, and diagnose errors. Microsoft Clarity is used for website analytics only after analytics consent is given.

We do not sell personal data. Some providers may process data outside the UK. Where required, we use an applicable adequacy decision, the UK International Data Transfer Agreement, the UK Addendum, or another lawful safeguard. Contact us if you would like information about a relevant transfer safeguard.

More information about website storage and analytics is available in our Cookie Policy.

How long we keep information

We keep data only for as long as needed for the service, accounting and legal requirements, security, disputes, and the mosque's instructions. Financial records are normally retained for six years where required. Customer-controlled data is returned or deleted at the end of the service in accordance with our Data Processing Terms, although protected backup copies may remain until they are overwritten in the ordinary backup cycle.

Newsletter details are used until you unsubscribe or object. We may retain limited suppression information so that we continue to respect that choice. See our Account Deletion page for request options.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to, or receive a portable copy of your personal data. You may withdraw consent where processing relies on consent. You can always object to direct marketing.

Rights are not absolute and exemptions may apply. If a mosque controls the data, please contact it first where practical. We will assist the mosque with your request where required.

Contact and complaints

For privacy questions or requests, email [email protected]. You may also complain to the Information Commissioner's Office.

We may update this notice when our services, providers, or legal obligations change. The current version and effective date will always be shown here.