Privacy policy

What we collect, and why

We collect only what a feature needs in order to work. Most of this website can be read without an account at all.

Your name and email address

To create your account and to contact you about what you book, enrol in or request. Your password is stored only as a cryptographic hash, so nobody can read it, including us.

A phone number

So the centre can reach you about something you have booked, enrolled in or requested. It is used for nothing else. Giving it to us is not agreement to be added to any group chat or messaging list: that would disclose your number to everyone else in the group, and it would need your separate consent.

Your household name

Subscriptions and enrolments belong to a household rather than to one person, so we record which household you belong to and who owns it.

Which events you have signed up for

To hold your place, to tell you if an event is cancelled, and to know how many people to expect.

Class and children's enrolments

To hold a place in a class, to manage waiting lists, and to keep a record of what was paid for.

Hall booking requests

The date and times you want, a category for the booking, and an optional short note. We ask you not to put personal details in that note, and its length is limited for the same reason.

Funeral and nikah requests

What you tell us so the centre can arrange the service, together with a contact phone number. These are the most sensitive records on this site and are visible only to centre administrators.

Community survey answers

Every question is optional. Ages are recorded as brackets and children as counts, never as individual records, and the answers are read together rather than one by one, to understand what the community needs.

Suggestions and votes

A suggestion appears on the public board without your name: the board shows the text and a vote count, not who posted it. Centre administrators can see who wrote one. If you mark a suggestion private, it does not appear on the board at all.

Payment records

The amount, the date, and a reference from our payment provider. We never see or store your card number.

Children's information

When a household enrols a child, we record the child's first name and their age at the time of enrolment. Nothing else: no surname, no date of birth, no photograph, no medical or dietary notes, and no free text. A child never uses this website and we never ask a child for anything — the adult enrolling supplies their own details.

A child's details are visible only to the household that enrolled them and to centre administrators, and every administrator view of them is recorded.

They are permanently deleted twelve months after the enrolled term ends.

How long we keep it

The centre's board decided in August 2026 that records of the services it provides are kept for seven years, matching the period the centre keeps its charity and financial records. Funeral and nikah requests are included in that decision. Children's details are the deliberate exception, below.

The funeral, nikah and children's periods above are enforced by a job that runs every night and permanently deletes those records once the period has passed. It is not a manual clean-up that someone might forget.

Account, enrolment and payment records are part of the centre's financial and charity records and are removed by hand rather than by that job. You can ask us to delete yours at any time, and we will, unless we are required to keep it.

Note what the clock runs from for a funeral or a nikah: the date of the occasion itself, not the date you asked. A request made months in advance is never deleted before the occasion it was made for.

Who else sees it

A small number of services help run this website. Each receives only what it needs to do its part.

• Payments are processed by Stripe. Your card details go directly to Stripe and never reach us.
• Email is delivered by SMTP2GO, which handles the messages this site sends you.
• The website and its database are hosted on Railway.
• Prayer times are calculated using the Aladhan service, which receives no personal information at all.

We do not sell personal information, and we do not share it for advertising.

Where it is stored

The website and its database are hosted in Singapore, so your personal information is stored outside Australia.

Getting a copy, a correction, or deletion

You can ask what personal information we hold about you or your household, ask us to correct it, or ask us to delete it. We may need to confirm who you are before acting on a request, and some records have to be kept for the periods set out above.

Email admin@ahlulbaytcommunity.org and tell us what you would like us to do.

How it is protected

Personal information is reachable only through an account, and the checks that enforce it run on our server rather than in your browser. Administrator views of funeral requests, nikah requests and children's enrolments are recorded in an audit log.

One thing worth stating plainly: administrator access is not divided by area. An administrator who can see one kind of record can see all of them.

If you are unhappy with how we handled your information

Tell us first, using the email address above, and we will look into it.

If you are not satisfied with our response, you can raise the matter with the Office of the Australian Information Commissioner.

Donations and tax

The centre is not endorsed as a deductible gift recipient, so a donation to it is not tax deductible. It is a registered charity with an income tax exemption, an FBT rebate and a GST concession, and donations are GST-free — but none of those lets a donor claim a deduction.

Changes to this policy

If this policy changes, we will update this page and the date shown at the top of it.