Legal
Privacy Policy
Last updated: June 2025
1. Who We Are
This website is operated by Abul Noor Publications, a UK-based Islamic publisher. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For all privacy enquiries, please contact us at: info@abulnoor.co.uk
2. What Information We Collect
We collect personal information when you place an order or contact us. This may include:
- Your full name
- Email address
- Telephone number (if provided)
- Billing and delivery address
- Order details (items purchased, quantities, prices)
- GDPR consent records (date and time of your agreement to our terms)
- Marketing preferences (only if you explicitly opt in)
We do not collect or store payment card details. All payment processing is handled securely by Stripe (see Section 5).
3. Why We Collect This Information
We use your personal data for the following purposes:
- Fulfilment: To process and deliver your order
- Communication: To send order confirmations and delivery updates
- Legal compliance: To maintain financial and consent records as required by law
- Customer service: To respond to enquiries or resolve issues
- Marketing: Only if you have explicitly consented, to send updates about new publications
Our lawful basis for processing is contract performance (fulfilment), legal obligation (record keeping), and consent (marketing communications).
4. How We Store Your Data
Your data is stored securely on Base44's infrastructure, hosted within the European Economic Area (EEA). Access is restricted to authorised staff only.
We retain order and customer records for a minimum of 6 years in line with HMRC financial record-keeping requirements. Marketing consent records are retained for as long as the consent is active, plus a reasonable period thereafter for audit purposes.
We do not sell, rent or share your personal data with third parties for their own marketing purposes.
5. Stripe Payment Processing
All payments on this website are processed by Stripe, Inc., a PCI DSS Level 1 certified payment processor. When you proceed to checkout, you are redirected to Stripe's secure hosted payment page.
Stripe collects and processes your payment card details directly. We never see or store your card number, CVV or expiry date. Stripe may retain transaction records in accordance with their own Privacy Policy, available at stripe.com/gb/privacy.
Stripe acts as an independent data controller for payment processing purposes.
6. Cookies
This website uses only essential cookies required for the website to function correctly (e.g. session management and shopping basket state). We do not use advertising cookies, third-party tracking cookies, or analytics cookies.
Stripe may set cookies as part of the payment process. These are essential to the checkout flow and cannot be disabled without breaking payment functionality. They are governed by Stripe's cookie policy.
Because we use only essential and functional cookies, a consent banner is not legally required under UK PECR (Privacy and Electronic Communications Regulations).
7. Your Rights Under UK GDPR
Under UK data protection law, you have the following rights:
- Right of access: Request a copy of all personal data we hold about you
- Right to rectification: Ask us to correct inaccurate data
- Right to erasure: Request deletion or anonymisation of your personal data (subject to legal retention obligations)
- Right to restriction: Ask us to limit how we use your data
- Right to data portability: Receive your data in a machine-readable format
- Right to object: Object to processing based on legitimate interests or for marketing
- Right to withdraw consent: Withdraw marketing consent at any time
To exercise any of these rights, please email info@abulnoor.co.uk with the subject line "Data Rights Request". We will respond within 30 days.
8. Marketing Communications
We only send marketing emails if you have explicitly ticked the marketing consent box during checkout. You may withdraw this consent at any time by emailing us or by clicking unsubscribe in any marketing email we send.
Order confirmation emails are transactional and are not affected by marketing consent.
9. Third-Party Links
Our website may contain links to third-party websites (e.g. Google Forms for quizzes). We are not responsible for the privacy practices of those sites and recommend you review their policies independently.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.
11. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.
