Privacy Policy
Last updated: June 6, 2026
1. Who we are
Halal Finance Summit ("HFS", "we", "us") is an event presented by UMMAH1 in Toronto, Canada. For privacy questions, contact salaam@ummah1.com.
2. Data we collect
When you register interest, sponsor or contact us, we collect:
- Identity: name, role/title, company, gender
- Contact: email address, mobile number (normalized to E.164)
- Preferences: attendee type, summit themes of interest, referral source
- Consent record: marketing channels you opted into (email, SMS, WhatsApp), timestamp, IP-derived metadata
- Analytics: page views and aggregate site usage
3. Why we use it (legal basis)
- Consent (GDPR Art. 6(1)(a)): sending you event updates, marketing emails, SMS and WhatsApp messages.
- Legitimate interest: preventing duplicate registrations, securing the platform, basic analytics.
- Legal obligation: tax, accounting and lawful requests by authorities.
4. CAN-SPAM, CASL and SMS compliance
Every marketing email includes a working unsubscribe link and our physical address. SMS and WhatsApp messages include opt-out instructions (reply STOP). We honour opt-outs within 10 business days. We never sell your contact information.
5. Your rights (GDPR / PIPEDA)
You can ask us at any time to:
- Access a copy of your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Withdraw consent for marketing
- Port your data to another provider
- Object to processing
Email salaam@ummah1.com and we will respond within 30 days.
6. Data sharing
We share data only with processors that help us run the summit (hosting, email delivery, SMS/WhatsApp gateway, analytics). All processors are bound by data processing agreements. We do not sell personal data.
7. Retention
Registration data is kept until 24 months after the event, or until you ask us to delete it — whichever comes first. Consent records are retained as long as required to demonstrate compliance.
8. Cookies
We use strictly necessary cookies for site operation and privacy-respecting analytics. No advertising cookies are set without consent.
9. Security
Data is stored on encrypted infrastructure with row-level access controls. Access is limited to authorized organizers.
10. Changes
We may update this policy. Material changes will be announced via email to registered attendees.