Privacy Policy

1. Who We Are

British Halal Authority (“BHA”, “we”, “us”, “our”) is a non-profit halal certification body registered in England & Wales. We are the data controller for personal data collected through our website and certification services.

• Registered Address: 89 Brown Lane, Cheadle, Manchester, SK8 3SF
• Email: privacy@britishhalalauthority.org.uk
• Phone: 07884 528599
• ICO Registration Number: ZB000001 (example)

2. What Data We Collect

We collect personal data only where it is necessary for our certification services and business operations. The categories of data we may collect include:

2.1 Data You Provide Directly

• Full name, job title, and business name
• Email address and telephone number
• Business address and registered company number
• Certificate application details and audit information
• Payment information (processed securely via third-party providers — we do not store card details)
• Correspondence and enquiries submitted via our contact form

2.2 Data Collected Automatically

• IP address and browser type
• Pages visited, time spent, and navigation patterns (via cookies)
• Device type and operating system
• Referring URL

3. How We Use Your Data

We process personal data for the following purposes and legal bases:

4. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share data with:

• Standards bodies: ISO/IEC 17065 and relevant international halal bodies for audit and certification purposes
• IT service providers: Hosting, email, and CRM systems operating under data processing agreements
• Payment processors: Stripe or similar services for secure payment processing
• Legal/regulatory authorities: When required by law or court order

All third-party processors are subject to contractual obligations to protect your data in line with UK GDPR.

5. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

• Certification records: 7 years after the last certification (legal/regulatory requirement)
• Enquiry/contact data: 2 years from last contact
• Website analytics: 26 months (anonymised)
• Marketing consent records: Until consent is withdrawn

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@britishhalalauthority.org.uk. You also have the right to complain to the Information Commissioner’s Office (ICO).

7. Cookies

Our website uses cookies to enhance user experience and analyse traffic. We use:

• Essential cookies: Required for the website to function (e.g., session management)
• Analytics cookies: Google Analytics to understand how visitors use our site (anonymised)
• Preference cookies: Remember your settings and choices

You can manage or disable cookies via your browser settings. Disabling essential cookies may affect website functionality.

8. International Transfers

Some of our service providers may transfer data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions recognised by the UK government.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These include SSL/TLS encryption, access controls, and regular security assessments.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically.