Last updated
Who we are
Muslim Entrepreneurs Space (“we”, “us”) runs muslimentrepreneurs.space and is the controller of the personal data described here. You can reach us about anything in this policy at hello@muslimentrepreneurs.space.
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Account: email address, password (stored hashed), sign-in method, two-factor settings | To let you sign in and keep your account secure | Contract |
| Profile: name, photo, headline, bio, city, links, languages, expertise | To show your profile to the people you choose | Your explicit consent when you publish it; you control visibility |
| Business listings: details about your business and the people on its team page | To publish the listing in the directory | Contract, and explicit consent for anything you make public |
| What you send when you add or suggest a business, plus the IP address, country and network of your device, your browser details and how you found the form | To check the business is real and to stop spam and fake listings | Legitimate interests |
| Photos and documents you upload | To display them, or (for claim evidence) to confirm you run a business | Contract; claim evidence is seen only by our moderators |
| Search logs: what was searched, filters, results clicked | To improve search. No user ID and no IP address, only a code that changes every day | Legitimate interests |
| Reports you send about a page | To review the page. We never tell the owner who reported it | Legitimate interests |
| Security records: a log of moderation and account actions | To keep the platform safe and to investigate misuse | Legitimate interests |
| Email preferences | To send you our newsletter, only if you opted in | Consent, which you can withdraw at any time |
What is public, and what isn’t
Profiles start as members only and are left out of people search until you finish your profile and choose otherwise in Settings → Privacy. A private profile is visible only to you.
Business listings are public once approved, because that is their purpose. If you run a business from home, we show your town or city, not your street address, unless you turn the full address on.
Never public: your login email, phone numbers you haven’t added to a listing, claim documents, reports and search history.
When you add or suggest a business
When you add your business, or suggest one you know, we keep what you type in the form. We also record a few details about the request itself: your IP address, the country and network it comes from, your browser and language settings, the page that sent you to the form and how long the form took.
We use these details to spot spam, fake listings and one person sending many suggestions. Our moderators see the country and network. Only a few staff can see the full IP address, and every time they do it is recorded.
We keep these details for as long as we keep the submission. You can ask us to delete a suggestion you sent by emailing hello@muslimentrepreneurs.space. If you have an account, deleting it deletes everything you sent through these forms too.
If someone else suggests your business and we list it, we email the business once at its public address. That email has a link to remove the listing straight away, without an account. After that we won’t list it again or email it again.
Cookies and analytics
We set only the cookies the site needs:
- sessionid: keeps you signed in.
- csrftoken: protects forms against cross-site attacks.
- theme: remembers whether you chose the light or dark look.
For visitor statistics we use privacy-friendly analytics that don’t set cookies, don’t collect personal data and don’t follow you to other sites. We have no advertising or social-media trackers.
When you report a page or suggest a business, Cloudflare Turnstile checks that you’re a person. Cloudflare processes technical information about your browser for that check only.
Photos and location data
Photos can carry hidden information, including the GPS location where they were taken. We remove this (EXIF data) from every image you upload and re-save the image before anyone else can see it.
Who we share data with
We don’t sell or rent personal data, and we don’t share it with advertisers. We use a small number of service providers who process data only on our instructions:
- hosting and database providers, which run the site;
- file storage and a content delivery network, which serve images;
- an email delivery service, which sends account and listing emails;
- an error-monitoring service, which receives technical error reports with personal details removed;
- Cloudflare, for security, Turnstile and delivery.
Some of these providers may process data outside the UK or EEA. When they do, we rely on adequacy decisions or standard contractual clauses. We will disclose data to authorities only when the law requires it.
How long we keep it
- Account and profile data: for as long as you have an account.
- When you delete your account, we wait 30 days in case you change your mind, then permanently erase it. Business listings you own are archived, or passed to a co-owner if there is one.
- Search logs: up to 13 months, without any link to you.
- Claim evidence: until the claim is decided, then up to 90 days.
- Moderation and security records: up to 2 years.
- Data export files: available to download for 7 days.
- Business suggestions and listing forms, with the IP address and other request details: for as long as we keep the submission. Suggestions that are never confirmed by email are deleted after 7 days.
- Web server logs (IP address, browser, page requested): 30 days, for security and troubleshooting.
Your rights
You have the right to:
- see the personal data we hold about you, and get a copy (Settings → Privacy → Download your data);
- correct it (most of it you can edit yourself);
- delete it (Settings → Privacy → Delete account);
- withdraw consent, for example by making your profile private or unsubscribing;
- object to or restrict processing based on our legitimate interests;
- move your data to another service (the export is machine-readable JSON).
Email hello@muslimentrepreneurs.space for anything you can’t do from your settings. We reply within one month. If you’re unhappy with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
How we protect it
Everything is sent over encrypted connections. Passwords are stored with a slow, salted hash (Argon2). Staff accounts require two-factor authentication, staff actions are logged, and only the moderators who need claim documents can open them. Code that business owners add to their pages runs on a separate, sandboxed domain so it can’t read your session.
Children
The site is not meant for children under 16, and we don’t knowingly collect their data.
Changes to this policy
If we change how we use personal data, we will update this page and the date at the top. For important changes, we’ll also email account holders before they take effect.