Privacy Policy

Your data is safe with us

We believe in transparency and giving you control over your information. This policy explains what data we collect and how we use it.

Last updated: March 2026

Information We Collect

We collect information you provide directly to us, such as when you create an account, contact us, or use our services. This includes:

  • Account Information: Name, email address, mosque details, and authentication credentials
  • Usage Data: Prayer times, notices, display settings, and configuration preferences
  • Technical Data: IP address, browser type, device information, and usage patterns
  • Communication: Support tickets, feedback, and correspondence with our team

How We Use Your Data

We use your information to:

  • Provide and maintain the PrayDisplay service
  • Process prayer times and display configurations
  • Send important service notifications
  • Respond to support requests and feedback
  • Improve our services and develop new features
  • Ensure security and prevent abuse
  • Comply with legal obligations

Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption: All data is encrypted in transit using TLS 1.3 and at rest using industry-standard encryption
  • Access Control: Strict role-based access with multi-factor authentication for our team
  • Regular Audits: Security audits and penetration testing to identify and fix vulnerabilities
  • Data Minimisation: We only collect data that is necessary for our services

Data Retention

We retain your data only as long as necessary to provide our services and comply with legal obligations:

  • Active Accounts: Data is retained while your account is active
  • Deleted Accounts: Personal data is deleted within 30 days of account deletion, except where required by law
  • Legal Requirements: Some data may be retained longer to comply with legal, accounting, or reporting requirements

Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate or incomplete information
  • Deletion: Request deletion of your personal data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing of your data
  • Restriction: Limit how we use your data

To exercise these rights, please contact us at privacy@praydisplay.co.uk

Third-Party Services

We use carefully selected third-party services to operate our platform:

  • Payment Processing: Stripe for secure payment processing
  • Email Delivery: Resend for transactional emails
  • Analytics: Plausible for privacy-focused website analytics
  • Infrastructure: Vercel for hosting and deployment

All third-party services are selected based on their privacy practices and compliance with applicable data protection laws.

Children's Privacy

PrayDisplay is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses and adherence to GDPR requirements.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date at the top of this policy.

Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us:

Address: PrayDisplay, United Kingdom