Privacy Policy
Last updated: 9 June 2026
MuslimNest ("we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, why, and your rights under UK GDPR.
Who We Are
Data controller: KAPITAL IT LTD, trading as MuslimNest, United Kingdom.
Contact: hello@muslimnest.co.uk
What Data We Collect
MuslimNest is a read-only community directory. At MVP there are no user accounts, logins, or forms that collect personal data directly.
We collect the following data automatically:
| Data | Purpose | Lawful basis |
|---|---|---|
| IP address (truncated to /24 before storage) | Error monitoring, abuse prevention | Legitimate interests |
| Page views and interaction events (anonymised, consent required) | Analytics to improve the service | Consent |
| Search queries (no linkage to any individual) | Service improvement | Legitimate interests |
| Error reports including stack traces (no PII fields) | Debugging via Sentry | Legitimate interests |
Retention Periods
| Data | Retention |
|---|---|
| Server error logs (Sentry) | 30 days, then deleted |
| Analytics data (PostHog, consent-gated) | 12 months from collection, then aggregated anonymously |
| Uptime monitoring logs (Better Stack) | Per Better Stack default retention (not under our control) |
Data Processors
We use the following processors who handle data on our behalf:
| Processor | Purpose | Location |
|---|---|---|
| Vercel Inc. | Web hosting and CDN | USA (UK IDTA / SCCs applied) |
| Supabase Inc. | Managed Postgres database | EU / USA (SCCs applied) |
| Sentry (Functional Software Inc.) | Error and performance monitoring | USA (SCCs applied) |
| PostHog Inc. | Product analytics (consent-gated) | USA and EU regions available |
| Better Stack | Uptime and status monitoring | EU |
| Cloudflare Inc. | DNS and CDN | USA (UK IDTA / SCCs applied) |
| Anthropic PBC | AI-assisted data enrichment (backend, not user-facing) | USA (SCCs applied) |
We do not sell personal data or share it with third parties for marketing.
International Transfers
Several processors are based outside the UK. Transfers to the USA are protected by Standard Contractual Clauses (SCCs) approved by the ICO or the UK International Data Transfer Agreement (IDTA) as noted above.
Your Rights Under UK GDPR
You have the right to:
- Access - request a copy of the personal data we hold about you
- Rectification - ask us to correct inaccurate data
- Erasure - ask us to delete your personal data (we will act within 30 days of a valid request)
- Restriction - ask us to limit how we use your data while a dispute is resolved
- Portability - receive your data in a machine-readable format
- Object - object to processing based on legitimate interests
To exercise any right, email hello@muslimnest.co.uk with the subject line [PRIVACY REQUEST]. We will respond within 30 days.
Complaints
You have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would prefer you contact us first so we can address your concern directly.
Changes to This Policy
We will post any changes on this page and update the "Last updated" date. Significant changes will be noted clearly.