Funeral Support Privacy Notice

1. Who controls your information

DARUL FALAH CIC, company number 14867627, is the controller for the Funeral Support Scheme. Centre address: Darul Falah Centre, Town Road, Hanley, Stoke-on-Trent, ST1 1QE. Privacy enquiries: info@darulfalah.org.

2. Information we may collect

• Identity, age, contact, address, membership and Family information.
• Trusted-contact, next-of-kin, payer and authority information.
• Contribution, provider notification, refund and reconciliation records.
• Death, health, religious-belief, relationship, bereavement, funeral and repatriation information where necessary.
• Identity documents, death certificates, official reports, quotations, invoices and receipts.
• Support decisions, reasons, conflicts, fraud indicators, complaints and audit history.
• Technical security information such as login, access, device and abuse-prevention logs.

3. Why we use it

• To take steps requested during registration and administer participation.
• To collect and reconcile authorised contributions.
• To verify and decide support requests and pay approved grants.
• To prevent duplicate records, deception, payment misuse and conflicts.
• To communicate essential service information and handle complaints or rights requests.
• To meet company, accounting, tax, sanctions, safeguarding, legal and security obligations where applicable.
• To monitor fund sustainability and improve the service using appropriately limited information.

4. Lawful bases and sensitive information

Darul Falah uses information where necessary to take requested registration steps and administer participation, meet legal obligations, and pursue legitimate interests in operating the community fund safely, preventing misuse and handling support requests fairly. Where explicit consent is the appropriate condition for religious-belief, health or other special-category information, it will be requested separately and may be withdrawn; another lawful condition will be recorded where applicable.

• Darul Falah will not collect health details at initial registration merely to predict death risk.
• Sensitive information will be collected only where targeted, proportionate and necessary for a request or legal duty.
• Discretionary support decisions receive meaningful human review.

5. Who we may share it with

Darul Falah will not sell membership or bereavement information. Optional marketing is separate from essential service communication.

• Authorised Darul Falah operators with role-based access.
• Hosted payment, email, SMS, document-storage, security and support providers under appropriate terms.
• Funeral directors, repatriation providers, hospitals, registrars, coroners, authorities or professional advisers where verification or service delivery requires it.
• Banks, payment providers, auditors, accountants, insurers or authorities where necessary for payment, fraud, legal or reporting purposes.

6. International information

Repatriation or overseas providers may require information outside the UK. Darul Falah will minimise the information and use an appropriate transfer mechanism where UK data-protection law requires one.

7. Retention

Darul Falah keeps incomplete registration data only for the short period needed to resume or secure the application; membership, contribution, support-case and accounting records are normally kept for up to six years after the relationship or case closes where needed for accounting, disputes and fraud prevention; security logs and backups are kept for shorter operational periods. A legal hold, safeguarding need or active dispute may require longer retention. Information is securely deleted or anonymised when it is no longer needed.

8. Security

• Private encrypted transport and restricted document storage.
• Separate staff accounts, MFA, minimum permissions and access reviews.
• Malware scanning, backups, audit logging, incident response and tested recovery.
• No full payment-card storage by Darul Falah.
• Two-person controls for grant and bank-detail changes.

9. Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may complain to the Information Commissioner's Office. A request will not disadvantage a person, although some information may need to be retained for legal, accounting, fraud or dispute purposes.

• Contact info@darulfalah.org and provide enough detail to locate the relevant record.
• Darul Falah may verify identity before disclosing information.
• You can change optional marketing preferences without stopping essential service messages.

10. Children and information supplied about others

A Family applicant must have proper authority to provide information about children and other adults. Darul Falah will use child information only for Family administration and support purposes, apply stricter access controls and communicate with an appropriate adult unless law or safeguarding requires otherwise.

11. Changes and contact

Material changes will be notified in a durable form. The current Notice and its version are displayed before acceptance. Contact info@darulfalah.org or write to the centre address above.