Privacy Policy

How True Nikkah collects, uses, protects and safeguards the personal, identity and religious information of couples across the UK

At True Nikkah, the information couples share with us is treated with the same seriousness we bring to the ceremony itself. Arranging a marriage involves information that is personal in the fullest sense of the word. It identifies you. It identifies your partner. It reveals your religious belief. For a great many of the couples we work with across the UK, it concerns a decision their family does not yet know about. We regard the protection of that information as a core responsibility of the service, not an administrative formality bolted on afterwards.

This Privacy Policy sets out how True Nikkah collects, uses, stores, shares, transfers and protects personal data in connection with our UK online nikah ceremony and Islamic marriage services. It applies to couples in England, Wales, Scotland and Northern Ireland who book, enquire about or otherwise use our UK services.

Our data protection practices are built around the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, together with the Privacy and Electronic Communications Regulations 2003 (PECR) where these apply to our website and communications. We follow the guidance published by the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection, and we apply the standards expected of any UK organisation handling information that reveals religious belief.

Data protection at True Nikkah operates within the wider governance framework described in our Code of Practice, under the oversight of our Director, Dr Mahmoud Abdelrahman.

Effective Date: 1 July 2023
Last Reviewed: August 2026
Next Scheduled Review: August 2027
Data Protection Officer (DPO): Dr Mahmoud Abdelrahman, Director, True Nikkah
Contact: dpo@truenikkah.co.uk

1. Introduction

True Nikkah is committed to protecting the privacy, confidentiality, integrity and security of the personal information entrusted to us by the couples we serve throughout the UK.

This Privacy Policy explains what we collect, why we collect it, how long we keep it, who else sees it, and what rights you hold over it. It covers the arranging and conducting of nikah ceremonies, the appointment of a wali, the provision of practising Muslim witnesses, and the issuing of nikah certificates. It also explains how you may exercise your rights and where you may complain if you are unhappy with how we have acted.

True Nikkah processes personal data only where doing so is necessary and proportionate to deliver the service you have asked for, and we apply safeguards matched to the sensitivity of the information involved. Because arranging a nikah inevitably reveals religious belief, much of what we hold attracts enhanced protection under UK law, and it is handled on that footing throughout.

This Policy applies to every visitor to the True Nikkah UK website, every couple who books or enquires about our UK services, and all communications with our team, wherever in the UK you are based.

It should be read alongside our Terms of Service, Code of Practice, Cookie Policy and Disclaimer.

2. Data Controller, Accountability and Responsibility

For the purposes of the UK GDPR and the Data Protection Act 2018, True Nikkah acts as the Data Controller in respect of all personal data processed in connection with our UK services.

As Data Controller, True Nikkah determines both the purposes for which personal data is processed and the means by which that processing is carried out, and is accountable under UK law for compliance with the obligations that follow.

Data Controller: True Nikkah
Data Protection Lead: Dr Mahmoud Abdelrahman, Director
Privacy contact: dpo@truenikkah.co.uk
General enquiries: info@truenikkah.co.uk

Our Data Protection Lead carries overall responsibility for compliance with UK data protection legislation, for the confidentiality obligations that attach to a service handling information revealing religious belief, and for the internal information governance standards applied across the organisation. Data protection oversight forms part of the wider organisational governance framework set out in our Code of Practice, and is subject to scheduled review.

2.1 Accountability Measures

The accountability principle under Article 5(2) of the UK GDPR requires us not only to comply, but to be able to demonstrate compliance. True Nikkah maintains organisational accountability measures directed at exactly that, including:

  • Documented processing purposes and a defined lawful basis recorded against each
  • Records of processing activities, as contemplated by Article 30 of the UK GDPR
  • Documented retention schedules for each category of information we hold
  • Role-based access controls, reviewed periodically
  • Data protection impact assessments where a new or changed processing activity is likely to result in a high risk to individuals, in line with Article 35
  • Internal briefing of team members, Imams, witnesses and any wali on their confidentiality and data protection obligations
  • Scheduled governance review of this Policy, our processes and our supplier arrangements

Where our processing of special category data relies on a condition in Schedule 1 of the Data Protection Act 2018 that requires one, we maintain an Appropriate Policy Document describing our compliance and retention arrangements.

3. The Data Protection Principles We Work To

Article 5 of the UK GDPR sets out six principles that govern all processing of personal data, together with the overarching principle of accountability. We describe them here because they shape every decision we take about the information you give us.

  • Lawfulness, fairness and transparency. We process personal data only where a lawful basis exists, in a way you would reasonably expect, and we explain what we do rather than leaving it to be inferred.
  • Purpose limitation. Information given to us in order to arrange a nikah is used to arrange that nikah. It is not repurposed for something unrelated.
  • Data minimisation. We ask for what the ceremony and our obligations actually require, and no more.
  • Accuracy. We take reasonable steps to keep the information we hold accurate, and to correct it promptly where it is not.
  • Storage limitation. Information is kept only as long as there is a proper reason to keep it, in line with the retention arrangements in section 12.
  • Integrity and confidentiality. Information is protected by appropriate technical and organisational security measures, described in section 9.
  • Accountability. We take responsibility for the above and maintain the records needed to demonstrate it.

4. Categories of Personal Data We Collect

True Nikkah applies data minimisation in practice, not merely as a statement of intent. We collect only what is necessary and proportionate to arrange and conduct your ceremony, issue your certificate, and satisfy our legal and record-keeping obligations in the UK.

4.1 Identity and Contact Information

  • The full names of both parties
  • Date of birth
  • Email addresses and telephone numbers
  • Town, city or region of residence within the UK, and the country of residence where one party is overseas
  • Preferred language for correspondence
  • Photographic identification documents where identity or age verification is required
  • The details of any wali or witnesses you are arranging yourself

This information is used to verify identity and age, confirm eligibility to marry, prepare your certificate, and communicate with you about your booking.

4.2 Information Revealing Religious Belief (Special Category Data)

By its very nature, approaching us for a nikah reveals that you are Muslim. Where it is relevant to the conduct of your ceremony, we may also process:

  • Confirmation of religious status, including where either party has reverted to Islam
  • The religious affiliation of a non-Muslim spouse, where an interfaith ceremony is being arranged and the permissibility of the marriage must be assessed
  • The school of thought followed, where this bears on how your ceremony is conducted or which scholarly position applies
  • Information about the availability of a wali, where this affects the religious arrangements required

Information revealing religious or philosophical belief is special category personal data under Article 9 of the UK GDPR. It is subject to the enhanced safeguards described in section 7.

4.3 Marriage and Ceremony Information

  • The mahr agreed between the parties
  • The details of the wali, where one acts
  • The details of the witnesses present
  • Confirmation of eligibility to marry and of free and informed consent
  • The date, time and record of your ceremony
  • The identity of the Imam who conducted it
  • Your nikah certificate and the particulars recorded on it

4.4 Payment Information

Payments are handled by our third-party payment providers, currently Stripe, PayPal and supported digital wallet services including Apple Pay and Google Pay. True Nikkah does not store or directly process full payment card details. We retain a record of the transaction, the amount paid in pounds sterling, the services purchased and the date of payment, as required for UK accounting, tax and record-keeping purposes.

4.5 Communications

  • Correspondence with our support team by email
  • Messages exchanged with us through WhatsApp or the chat function on our website
  • Notes recorded by our team regarding your booking and any questions raised

4.6 Technical and Usage Information

  • IP address
  • Browser type, device type and operating system
  • Pages visited and interactions with the website
  • Referring source

This information is used for security, performance monitoring, fraud prevention and operational integrity only. True Nikkah does not use technical data for advertising, behavioural profiling, cross-site tracking or the building of marketing audiences.

Further information is set out in our Cookie Policy.

5. How We Use Personal Data

True Nikkah uses personal data for defined and limited purposes connected to delivering the service you have asked for:

  • Arranging your ceremony. Assigning a suitable and verified Imam, scheduling across your respective locations and time zones, and coordinating a wali or witnesses where these have been requested.
  • Verifying identity, age and eligibility. Confirming that both parties are who they say they are, are aged eighteen or over, and are free to marry, in accordance with the standards set out in our Code of Practice.
  • Confirming consent. Recording that both parties have entered the marriage freely and without coercion.
  • Conducting the ceremony. Enabling your Imam to verify that every condition of a valid nikah has been met before the marriage is concluded.
  • Issuing your certificate. Preparing, issuing and where requested posting your nikah certificate.
  • Communicating with you. Responding to enquiries, confirming arrangements, answering questions before and after your ceremony, and handling any complaint.
  • Record keeping and verification. Maintaining secure records so that a certificate can be verified, reissued or confirmed at a later date.
  • Quality assurance and governance. Internal review of ceremonies and certificates as part of the quality monitoring processes described in our Code of Practice.
  • Safeguarding. Identifying and responding to concerns regarding coercion, age, or risk of harm.
  • Meeting legal obligations. Complying with applicable law, accounting and tax requirements, and lawful requests from competent authorities.
  • Protecting our systems. Maintaining the security, availability and integrity of our website and internal systems.

True Nikkah does not use personal data for:

  • Advertising, behavioural profiling or marketing analytics
  • Automated decision-making producing legal or similarly significant effects
  • The sale, rental, licensing or commercial exploitation of personal data in any form
  • Publishing, promotional or testimonial purposes, unless you have given explicit written consent
  • Any purpose incompatible with the reason for which it was collected

6. Lawful Bases for Processing

True Nikkah processes personal data only where a lawful basis under the UK GDPR exists. Depending on the information and the purpose, we rely on the following:

  • Performance of a contract, Article 6(1)(b). Where processing is necessary to arrange and conduct the ceremony you have booked, provide any additional service purchased, and issue your certificate.
  • Explicit consent, Article 6(1)(a) together with Article 9(2)(a). For the processing of information revealing religious belief, and for any use of your information going beyond the delivery of your ceremony. This consent is obtained separately and may be withdrawn at any time.
  • Legal obligation, Article 6(1)(c). Where processing is required to comply with UK law, including accounting, tax and record-keeping duties, and lawful requests from competent authorities.
  • Legitimate interests, Article 6(1)(f). For maintaining the security and integrity of our systems and records, preventing fraud and misuse of our services, and carrying out internal quality assurance. We conduct a balancing assessment to satisfy ourselves that such processing is not overridden by your interests, rights and freedoms.
  • Vital interests, Article 6(1)(d) together with Article 9(2)(c). In the limited circumstances where processing is necessary to protect someone's vital interests, including where a safeguarding concern arises about coercion or risk of harm.
  • Establishment, exercise or defence of legal claims, Article 9(2)(f). Where retention or disclosure is necessary in connection with a legal claim or regulatory process.

Where our lawful basis is consent, you are under no obligation to give it, and declining will simply mean we are unable to arrange the ceremony. Where our lawful basis is legitimate interests, you have the right to object, as described in section 14.

7. Religious Belief and Special Category Data

This section is central to how True Nikkah operates, because the information we hold is inherently sensitive in a way that most UK service providers’ information is not.

The simple fact that you have contacted True Nikkah reveals your religious belief. Under Article 9 of the UK GDPR, information revealing religious or philosophical belief is special category personal data, and it may not lawfully be processed at all unless a specific additional condition is satisfied on top of an ordinary Article 6 basis.

7.1 Our Condition for Processing

True Nikkah relies on explicit consent under Article 9(2)(a), obtained at the point of booking through a clear, specific and separately presented declaration.

That consent is:

  • Specific. Confined to arranging and conducting your ceremony and issuing your certificate.
  • Unbundled. Presented on its own, and never rolled into acceptance of our general terms.
  • Informed. Accompanied by a plain explanation of what we process and why.
  • Freely given. You are under no obligation to provide information beyond what is genuinely necessary.
  • Withdrawable. Consent may be withdrawn at any point, subject only to the record-keeping obligations explained in section 13.

7.2 Interfaith Ceremonies and Third-Party Data

Where an interfaith ceremony is being considered, information about a non-Muslim spouse’s religious affiliation is special category data belonging to that individual in their own right. We collect it only where it is necessary in order to assess whether the marriage may properly be conducted, we require that individual’s own consent, and we apply identical safeguards to it.

7.3 Enhanced Safeguards

The safeguards we apply to special category data include:

  • Access restricted to the specific team members and the Imam involved in your ceremony
  • Access logging, so that every interaction with sensitive records is traceable
  • No use of this data for any purpose other than the delivery of your ceremony
  • No disclosure to any third party without your explicit consent, except where legally required
  • Encrypted storage and encrypted transmission
  • Contractual confidentiality obligations binding on every person with access, including Imams, witnesses and any wali appointed by us
  • Periodic review of access rights as part of our governance cycle

True Nikkah maintains organisational controls designed to ensure that special category data is handled in a manner proportionate to its sensitivity and consistent with recognised international data protection standards.

8. Confidentiality and Discretion

A significant proportion of the couples we work with in the UK arrange their nikah privately. Some have not told their families. Some are marrying across a family objection. We do not ask why, and we design our processes on the assumption that your booking is private.

In practice that means:

  • We do not disclose that you have contacted or used True Nikkah to anyone outside those directly involved in arranging and conducting your ceremony
  • Imams, witnesses and any wali appointed by us are briefed on their obligation of discretion before taking part, and are bound by confidentiality obligations
  • We do not publish, share or refer to identifying details in marketing, case studies, testimonials or social media without your explicit written consent
  • Booking with us does not place you on any marketing list
  • Correspondence is sent only to the contact details you have given us, and only through the channels you have used

We cannot control the security of a device or an email account shared with other people. Where discretion matters to you, we would suggest giving us a contact address or number that only you can access, and telling us if there are times at which it is not appropriate to contact you. We will follow your instructions.

This commitment forms part of the ethical standards set out in our Code of Practice.

9. Information Security

True Nikkah implements technical and organisational security measures appropriate to the nature and sensitivity of the information we hold, taking account of the state of the art, the cost of implementation, and the risk to the rights and freedoms of the people concerned.

Our controls include:

  • Encryption in transit. All information submitted through our website is protected using TLS encryption.
  • Encryption at rest. Certificates, ceremony records, identity documentation and correspondence are stored in encrypted systems.
  • Role-based access control. Access to personal data is restricted to those team members whose role requires it, applying the principle of least privilege.
  • Access logging and audit trails. System activity involving personal data is logged to support accountability, traceability and incident investigation.
  • Secure internal systems. Communication between our team, our Imams and our witnesses takes place within secure, access-controlled systems rather than open or unmanaged channels.
  • Secure data lifecycle management. Defined processes governing retention, archiving, secure deletion and anonymisation.
  • Data minimisation. Only information necessary for the delivery of your ceremony is collected and retained.
  • Periodic review. Security controls are reviewed as part of our scheduled governance cycle.

10. Data Sharing and Third Parties

True Nikkah shares personal data only where necessary for the delivery of your ceremony, on a need-to-know basis, and subject to appropriate contractual and confidentiality safeguards.

Personal data may be shared with:

  • The Imam conducting your ceremony, who requires the information necessary to verify the conditions of a valid nikah and to conduct the ceremony
  • Witnesses provided by True Nikkah, who are told only what is required for their role and are bound by confidentiality obligations
  • Any wali provided by True Nikkah, on the same basis
  • Our video conferencing provider, used to host the ceremony
  • Postal and courier services, where a printed certificate has been purchased
  • Our payment providers, being Stripe, PayPal and supported digital wallet services, operating under PCI DSS standards
  • Our IT, hosting and communications providers, under written data processing agreements
  • Professional advisers, where necessary in connection with a legal or regulatory matter
  • Competent authorities, where disclosure is required by law or is necessary to discharge a safeguarding responsibility

True Nikkah does not sell personal data, and does not permit any third party to use your information for marketing, profiling, advertising or any purpose unrelated to the delivery of your ceremony.

Where processors are engaged, True Nikkah ensures that written data processing agreements are in place, that access is limited to the minimum necessary, that appropriate security standards are maintained, and that processors act only on documented instructions. True Nikkah remains accountable as Data Controller throughout.

Processor arrangements are reviewed periodically as part of our governance cycle.

11. International Data Transfers

Because True Nikkah serves couples worldwide and works with Imams located in more than one country, personal data may be transferred outside the United Kingdom or the European Economic Area.

Where such transfers occur, we ensure an appropriate transfer mechanism is in place, relying on:

  • Adequacy decisions issued by the UK Government or the European Commission, where the destination country has been recognised as providing an adequate level of protection
  • UK International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses, where no adequacy decision applies
  • EU Standard Contractual Clauses, where personal data is transferred out of the European Economic Area
  • Supplementary technical and organisational measures, including encryption, pseudonymisation and access restriction, where a transfer risk assessment identifies the need for them

For couples in Australia, cross-border disclosure is conducted in accordance with APP 8. For couples in Canada, transfers are conducted in accordance with PIPEDA, and you are informed that information may be processed outside Canada and may accordingly be subject to the laws of the jurisdiction concerned.

Transfers are limited to what is necessary for the delivery of your ceremony. True Nikkah does not transfer personal data internationally for marketing or any unrelated commercial purpose.

12. Data Retention

True Nikkah retains personal data only for as long as necessary for the purposes for which it was collected, and in accordance with defined internal retention schedules.

Nikah certificates and ceremony records are retained on a long-term basis. This is a deliberate policy decision. Couples request copies of their certificate years after their ceremony, sometimes in connection with an immigration matter, sometimes because the original has been lost, and sometimes for their own records. A marriage record deleted after a short period is of little use to the people who rely on it.

Identity and age verification documentation is retained only for as long as necessary to confirm eligibility and to satisfy our verification obligations, and is then securely deleted.

Enquiry correspondence from individuals who do not proceed to book is retained for a limited period and then deleted.

Payment and transaction records are retained for the period required by applicable accounting and tax legislation.

Complaint records are retained for a defined period to support governance, quality monitoring and the defence of any claim.

When a retention period expires, data is securely deleted or irreversibly anonymised using methods designed to prevent recovery or reconstruction.

You may request deletion of your personal data at any time. Where a ceremony has taken place and a certificate has been issued, we will explain clearly what we are able to delete, what we must retain as a record of the ceremony, and the basis on which we retain it.

13. Your Rights

Wherever in the world you live, True Nikkah extends the following rights to you. We do not distinguish between couples on the basis of whether local law compels us to provide them.

  • Right of access. Confirmation of whether we process your personal data, and a copy of that data together with information about how it is used.
  • Right to rectification. Correction of inaccurate personal data and completion of incomplete data.
  • Right to erasure. Deletion of your personal data where legally permitted and where no overriding retention obligation applies.
  • Right to restriction of processing. Restriction of processing in defined circumstances, including where accuracy is contested.
  • Right to object. Objection to processing carried out on the basis of legitimate interests.
  • Right to data portability. Receipt of your personal data in a structured, commonly used and machine-readable format, and transmission to another controller where technically feasible.
  • Right to withdraw consent. Withdrawal at any time, without affecting the lawfulness of processing carried out before withdrawal.
  • Right not to be subject to automated decision-making. True Nikkah does not carry out automated decision-making producing legal or similarly significant effects.
  • Right to non-discrimination. You will not receive different treatment or a different level of service for exercising a privacy right.
  • Right to complain. The right to lodge a complaint with your supervisory authority, as set out in section 15.

Requests may be submitted to dpo@truenikkah.co.uk or through our Contact page.

We respond to requests within one month, as required under the UK and EU GDPR, and apply that timeframe to all requests regardless of the requester’s location. Where a request is complex or where several requests have been received, this period may be extended by up to two further months, and we will inform you within the first month if that applies.

We will verify your identity before disclosing personal data or acting on a request. This is a protective measure and applies to all requests.

Certain rights are subject to limitation, in particular where True Nikkah is required to retain a record that a ceremony took place.

14. Cookies and Website Analytics

Our website uses essential cookies necessary for secure access, session integrity, load balancing and protection against fraudulent activity. These cookies are required for the website to function and cannot be disabled.

Where analytics cookies are used, their purpose is limited to understanding how visitors use the site so that we can improve it. True Nikkah does not use cookies for advertising, behavioural profiling, retargeting or cross-site tracking.

Non-essential cookies are set only with your consent, in accordance with the UK GDPR, the EU GDPR and the ePrivacy Directive as implemented in applicable jurisdictions. Consent may be withdrawn at any time through the cookie settings on our website.

Full detail is set out in our Cookie Policy.

15. Complaints and Regulatory Oversight

If you have a concern about how True Nikkah has handled your personal information, please contact us first at dpo@truenikkah.co.uk so that we have the opportunity to address it. Complaints are logged securely and reviewed under the oversight of our Data Protection Lead.

You also have the right to lodge a complaint directly with a supervisory authority:

  • United Kingdom: Information Commissioner's Office (ico.org.uk)
  • European Union and EEA: The data protection supervisory authority in your country of residence
  • Canada: Office of the Privacy Commissioner of Canada (priv.gc.ca)
  • Quebec: Commission d'accès à l'information du Québec
  • Australia: Office of the Australian Information Commissioner (oaic.gov.au)
  • California: California Privacy Protection Agency, and the Office of the Attorney General

Complaints concerning the conduct of a ceremony, rather than the handling of your personal data, are dealt with under our Code of Practice and our Terms of Service.

16. Children

True Nikkah does not provide services to persons under the age of eighteen, under any circumstances, and does not knowingly collect personal data relating to children.

Our Code of Practice sets an absolute minimum age of eighteen for both parties to any ceremony, verified as part of the booking process. Where we become aware that information relating to a person under eighteen has been submitted, the booking is cancelled, the payment refunded, and the information handled in accordance with our safeguarding responsibilities.

17. Contact Details

For all privacy and data protection enquiries, including the exercise of any right described in section 13:

Privacy enquiries: privacy@truenikkah.co.uk
General enquiries: info@truenikkah.co.uk
Contact form: Contact Us

This contact point is overseen by Dr Mahmoud Abdelrahman, Director of True Nikkah, who holds responsibility for data protection compliance and information governance across the service.

18. Changes to This Privacy Policy

True Nikkah reviews this Privacy Policy at least once every twelve months, and sooner where legislation, our services, our processing arrangements or our supplier relationships change.

Where material updates are made, the revised policy is published on this page together with a revised effective date, and where appropriate we will take reasonable steps to notify affected individuals.

We encourage you to review this Policy periodically to ensure you remain familiar with the current version.

Last updated: August 2026