Our website: https://halalmed.org
Email: [email protected]

This privacy notice explains how and why HalalMed Ltd (also referred to as “HalalMed”, “we”, “our” and “us”) uses personal data about users of our website (https://halalmed.org (our “Website”) and other individuals that interact with us (referred to as “you”).

“Personal data” is any information that relates to an identifiable natural person. Your name, address and contact details are all examples of your personal data, if they identify you. 

The term “process” means any activity relating to personal data, including, by way of example, collection, storage, use, consultation and transmission.
Halalmed is a “controller” of your personal data. This is a legal term – it means that we make decisions about how and why we process some of your personal data and, because of this, we are responsible for making sure it is used in accordance with data protection laws.

This privacy notice tells you what to expect us to do with your personal information.

• Contact details
• What information we collect, use, and why
• Lawful bases and data protection rights
• Our Purposes and Lawful Bases for the Processing of Your Data
• Where we get personal information from
• How long we keep information
• Who we share information with
• International transfers of personal data
• Duty of confidentiality
• Updates to this notice
• Where can I find out more?

We collect or use the following personal information:

Respond to enquiries

• Name and contact details (including e-mail address, phone number(s), job title and details of employer if relevant)
• Correspondence history
• Any information you choose to provide to us
• Subscription preferences

Comments

When you leave a comment on our site, we collect the information you provide in the comment form, along with your IP address and browser details. This helps us detect and prevent spam.

Cookies

We use cookies to make your experience more convenient. Here’s how:

• If you comment, you can choose to save your name, email, and website in a cookie on your device, so you don’t have to enter them again. These last for one year.
• Visiting our login page sets a temporary cookie to check if your browser accepts cookies. It doesn’t store any personal data and is deleted when you close your browser.
• When you log in, we set cookies to remember your login and display settings.
  • Login cookies last 2 days (or 2 weeks if you select “Remember Me”).
  • Display setting cookies last 1 year.
  • If you log out, these cookies are removed.
• If you publish or edit a post, a cookie will be saved in your browser. It doesn’t store personal data and expires after one day.
  

For further information on how we use cookies on our Website, please see our Cookies Policy here: https://halalmed.org/cookie-policy-uk/

Embedded Content

Some pages on our site include content from other websites (like videos or articles). These work just like if you visited the other site directly. They may collect data about you, use cookies, or track how you interact with the content—especially if you’re logged in to that other site.

Special category personal data

Special category personal data includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and genetic data, biometric data for the purpose of uniquely identifying someone, data concerning health or data concerning a natural person’s sex life or sexual orientation (we also treat criminal data and criminal allegation data as special category personal data).

We will not ask you for special category personal data, and we ask that you do not provide us with special category personal data when you interact with us.

Lawful Bases and Data Protection Rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for.
• Your right to rectification – Subject to certain conditions, you have the right to ask us to correct or complete personal information you think is inaccurate or incomplete. We encourage you to notify us of any changes regarding your personal data as soon as they occur.
• Your right to erasure – Subject to certain conditions, you have the right to ask us to delete your personal information.
• Your right to restriction of processing – Subject to certain conditions, you have the right to ask us to limit how we can use your personal information.
• Your right to object to processing – Subject to certain conditions, you have the right to object to the processing of your personal data.
• Your right to data portability – Subject to certain conditions, you have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
• Your right to withdraw consent – When we use your consent as our lawful basis for the processing of your personal data, you have the right to withdraw that consent at any time. If you do decide to withdraw your consent we will stop processing your personal data for that purpose, unless there is another lawful basis we can rely on – in which case, we will let you know. Your withdrawal of your consent won’t impact any of our processing up to that point.

 To make a data protection rights request, please contact us using the contact details at the end of this privacy notice. 

You have a right to submit a complaint to us, and we will acknowledge receipt of the complaint within 30 days from when we receive a complaint, and take appropriate steps to respond to that complaint. If you would like to raise a complaint, please contact us using the details at the end of this privacy notice. You also have a right to lodge a complaint with the Information Commission, which is the UK data protection regulator. More information can be found on the Information Commission’s website at https://ico.org.uk/.

Our Purposes and Lawful Bases for the Processing of Your Data

We use your personal data to respond to correspondence and/or queries received, and to maintain and monitor the performance of our website. 

Our lawful bases for collecting or using personal information to respond to enquiries are:

• [Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.]
• Legitimate interests: we are pursuing the legitimate interests of:
  • responding to queries and correspondence received, which furthers the objective of our organisation to provide information on halal medicines, and is beneficial to the interests of those contacting us as we are assisting them with information they are looking for; and 
  • maintaining and monitoring the performance of the Website, to ensure a good service is provided to those using the Website and to ensure we can provide information to individuals in an efficient and easy to use manner.

We may also convert your personal data into statistical or aggregated form to better protect your privacy, or so that you are not identified or identifiable from it. Anonymised data cannot be linked back to you. We may use it to conduct research and analysis, including to produce statistical research and reports. For example, to help us maintain and improve the functionality of our Website. 

Where We Get Personal Information From

Most of the personal information we process is provided to us directly by you because you have made an enquiry to us, and/or you visit our Website. We might also receive your information from a third party, for example from one of your colleagues, from your employer, from your device, from publicly available directories and online resources, and we might also create our own information about you for example to keep a record of our correspondence with you. 

How Long We Keep Information

We will only retain your personal data for a limited period of time. This will depend on a number of factors, including:

• any laws or regulations that we are required to follow;
• whether we are in a legal or other type of dispute with each other or any third party;
• the type of information that we hold about you; and
• whether we are asked by you or a regulatory authority to keep your personal data for a valid reason.
• If you register on our site, we store the personal information you provide in your profile. You can view, edit, or delete your personal info anytime—except for your username. Site admins can also manage this information.
• Unless a longer retention period is required or permitted by law, HalalMed will retain your data only for as long as necessary to fulfil the purposes outlined in this privacy policy.

Who We Share Information With

Data Processors

• Cloudflare – Hosts website securely and manages DNS, ensuring safe delivery of your web content and protecting user data.
• WordPress (and related plugins) – Collects form submissions (name, email) via website.
• IT support providers
• Data hosting providers

If you request a password reset, your IP address will be included in the reset email for security reasons.
Visitor comments may be checked by an automated system to help detect spam.

Data Controllers

If we transfer, purchase, reorganise, merge or sell any part of our organisation or the business of a third party, and we disclose or transfer your personal data to the prospective seller, buyer or other third party involved in a transfer, reorganisation or merger arrangement (and their advisors).

If we need to disclose your personal data in order to comply with a legal obligation, to enforce a contract or to protect the rights, property or safety of our employees, staff, volunteers, contacts or others.

We may also share your personal data with the following recipients:

• consultants and professional advisors including legal advisors and accountants;
• courts, court-appointed persons/entities, receivers and liquidators;
• charitable/business partners and joint ventures;
• trade associations and professional bodies;
• insurers; 
• governmental departments, statutory and regulatory bodies including the Department for Work & Pensions, Information Commissioner’s Office, the police, His Majesty’s Revenue and Customs, the Medicines and Healthcare products Regulatory Agency and the General Medical Council; and 
• any third parties you direct us to share your personal data with. 

International transfers of personal data

If any of our processing activities require your personal data to be transferred outside the UK, we will only make that transfer if:

• the country to which the personal data is to be transferred ensures an adequate level of protection for personal data;
• we have put in place appropriate safeguards to protect your personal data, such as an appropriate contract with the recipient (please contact [email protected] if you wish to obtain a copy of these);
• the transfer is necessary for one of the reasons specified in data protection legislation, such as the performance of a contract between us and you; or
• you explicitly consent to the transfer.

Duty of Confidentiality

We are subject to a common law duty of confidentiality. However, there are circumstances where we will share relevant health and care information. These are where:

• You’ve provided us with your consent;
• We have a legal requirement (including court orders) to collect, share or use the data;
• On a case-by-case basis, the public interest to collect, share and use the data overrides the public interest served by protecting the duty of confidentiality (for example sharing information with the police to support the detection or prevention of serious crime);
• If in England or Wales – the requirements of The Health Service (Control of Patient Information) Regulations 2002 are satisfied; or
• If in Scotland – we have the authority to share provided by the Chief Medical Officer for Scotland, the Chief Executive of NHS Scotland, the Public Benefit and Privacy Panel for Health and Social Care or other similar governance and scrutiny process.

Updates to this notice

We may update this notice from time to time to reflect changes to the type of personal data that we process and/or the way in which it is processed. We encourage you to check this notice on a regular basis.

Where can I find out more?

If you want more information about any of the subjects covered in this privacy notice or if you would like to discuss any issues or concerns with us, you can contact us in any of the following ways:

By email at: [email protected]