Funeral Support Privacy Notice

1. Who controls your information

DARUL FALAH CIC, company number 14867627, is the controller for the Funeral Support Scheme. Centre address: Darul Falah Centre, Town Road, Hanley, Stoke-on-Trent, ST1 1QE. Privacy enquiries: info@darulfalah.org.

2. Information we may collect

Identity, age, country of birth, contact, address, membership and Family information.
Trusted-contact, next-of-kin, payer and authority information.
Contribution, provider notification, refund and reconciliation records.
Death, health, religious-belief, relationship, bereavement, funeral and repatriation information where necessary.
Identity documents, death certificates, official reports, quotations, invoices and receipts.
Support decisions, reasons, conflicts, fraud indicators, complaints and audit history.
Technical security information such as login, access, device and abuse-prevention logs.

3. Why we use it

Country of birth is required for the primary member and for each Family member included in a new website registration. It is used to plan burial-site capacity and to produce appropriately aggregated, privacy-protected community statistics. Country of birth is not the same as ethnicity. Darul Falah does not use it as a proxy for ethnicity or to decide eligibility, contributions or support. Access to person-level information is restricted; routine reporting groups results and suppresses small categories where someone could otherwise be identified.

To take steps requested during registration and administer participation.
To collect and reconcile authorised contributions.
To verify and decide support requests and pay approved grants.
To plan burial-site capacity and produce appropriately aggregated, privacy-protected community statistics from country-of-birth information.
To prevent duplicate records, deception, payment misuse and conflicts.
To communicate essential service information and handle complaints or rights requests.
To meet company, accounting, tax, sanctions, safeguarding, legal and security obligations where applicable.
To monitor fund sustainability and improve the service using appropriately limited information.

4. Lawful bases and sensitive information

Darul Falah uses information where necessary to take requested registration steps and administer participation, meet legal obligations, and pursue legitimate interests in operating the community fund safely, preventing misuse and handling support requests fairly. Where explicit consent is the appropriate condition for religious-belief, health or other special-category information, it will be requested separately and may be withdrawn; another lawful condition will be recorded where applicable.

Darul Falah will not collect health details at initial registration merely to predict death risk.
Sensitive information will be collected only where targeted, proportionate and necessary for a request or legal duty.
Discretionary support decisions receive meaningful team review.

5. Who we may share it with

Darul Falah will not sell membership or bereavement information. Optional marketing is separate from essential service communication.

Authorised Darul Falah operators with role-based access.
Hosted payment, email, SMS, document-storage, security and support providers under appropriate terms.
Funeral directors, repatriation providers, hospitals, registrars, coroners, authorities or professional advisers where verification or service delivery requires it.
Banks, payment providers, auditors, accountants, insurers or authorities where necessary for payment, fraud, legal or reporting purposes.

6. International information

Repatriation or overseas providers may require information outside the UK. Darul Falah will minimise the information and use an appropriate transfer mechanism where UK data-protection law requires one.

7. Retention

Darul Falah keeps incomplete registration data only for the short period needed to resume or secure the application; membership, contribution, support-case and accounting records are normally kept for up to six years after the relationship or case closes where needed for accounting, disputes and fraud prevention; security logs and backups are kept for shorter operational periods. A legal hold, safeguarding need or active dispute may require longer retention. Information is securely deleted or anonymised when it is no longer needed.

8. Security

Private encrypted transport and restricted document storage.
Separate staff accounts, MFA, minimum permissions and access reviews.
Malware scanning, backups, audit logging, incident response and tested recovery.
No full payment-card storage by Darul Falah.
Two-person controls for grant and bank-detail changes.

9. Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or objection, and may complain to the Information Commissioner's Office. A request will not disadvantage a person, although some information may need to be retained for legal, accounting, fraud or dispute purposes.

Contact info@darulfalah.org and provide enough detail to locate the relevant record.
Darul Falah may verify identity before disclosing information.
You can change optional marketing preferences without stopping essential service messages.

10. Children and information supplied about others

A Family applicant must have proper authority to provide information about children and other adults. Darul Falah will use child information for Family administration and support purposes and, in the aggregated, privacy-protected form described in section 3, for burial-site capacity and community planning statistics. Child information is not used for public individual-level reporting, profiling or advertising. Darul Falah will apply stricter access controls and communicate with an appropriate adult unless law or safeguarding requires otherwise.

11. Changes and contact

Material changes will be notified in a durable form. The current Notice and its version are displayed before acceptance. Contact info@darulfalah.org or write to the centre address above.

Version 2026-09-13-v6 records that country of birth is a required field in the website registration journey. Records of acceptance of earlier versions are not rewritten.