Introduction
Welcome to HalalSpark. We built HalalSpark to be different — ethical, transparent, and trustworthy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our advertising platform.
HalalSpark Ltd is registered in England and Wales under company number 16533046. Our registered office is at 83 Ruskin Avenue, Southend-on-Sea, SS2 5HB, United Kingdom. You can reach us at [email protected].
We are committed to protecting your data in accordance with UK GDPR and the Data Protection Act 2018. Beyond legal compliance, we operate under Islamic principles of Amanah (trustworthiness) and Sidq (truthfulness), ensuring honesty and integrity in all our data practices.
This policy is governed by the laws of England and Wales.
What Information We Collect
HalalSpark only collects information necessary to provide and improve our advertising services. We collect the following types of data:
a. Account Information
- Name, email address, and hashed password
- Profile information and preferences
- Account role (advertiser, publisher, or admin)
b. Publisher Data
- Website URLs and categories
- Verification documents and compliance data
- Analytics data including impressions, clicks, and earnings
c. Advertiser Data
- Campaign creatives (images, text, links)
- Budget allocations and campaign schedules
- Targeting preferences and audience settings
d. Payment Information
- Payment transactions are processed securely by Stripe
- HalalSpark never stores full payment card details
- We retain transaction IDs, amounts, and payment status for accounting purposes
e. Technical & Analytics Data
- IP addresses (hashed for privacy)
- Browser type and device information
- Error logs and performance metrics (retained for 90 days)
f. Communication Data
- Support messages and email correspondence
- Platform notifications and announcements
- Communication data is retained for 90 days
How We Use Your Data
We use your personal information for the following purposes:
- To create and manage your user account
- To deliver advertisements and measure campaign performance
- To process payments, payouts, and financial transactions
- To verify websites and validate advertising campaigns
- To detect and prevent fraud, with logs retained for 30 days
- To comply with UK legal, accounting, and tax obligations
- To provide customer support and respond to enquiries
- To improve platform reliability, performance, and user experience
Our Legal Bases for Processing
Under UK GDPR, we process your personal data based on the following legal grounds:
- Contractual necessity: Processing is required to provide our advertising services and fulfil our contract with you
- Legitimate interest: We process data for fraud prevention, security monitoring, and platform analytics
- Consent: For marketing emails and non-essential cookies (you can withdraw consent at any time)
- Legal obligation: To comply with financial record retention requirements and other legal duties
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy. Our retention periods are as follows:
| Data Type | Retention Period |
|---|---|
| Financial records | 6 years (UK tax requirement) |
| Campaign data | Duration of campaign + 90 days |
| Ad serving logs | 7 days |
| Fraud detection logs | 30 days |
| Authentication logs | 30 days |
| Communications & support | 90 days |
| Account data | Until deletion request |
| Deleted accounts | Fully purged after 60 days |
All retention periods are reviewed periodically to ensure they remain necessary and proportionate.
Data Sharing & Third Parties
We share data with essential service providers who help us deliver our services and, only if you agree, with Meta to measure our own ads. We never sell your personal data to third parties.
| Third Party | Purpose |
|---|---|
| Stripe | Payment processing & fraud prevention |
| Supabase | Authentication, database, and secure storage |
| Vercel | Website hosting and performance optimisation |
| Resend | Email verification & transactional messages |
| Meta Platforms Ireland Ltd | Only with your consent: measuring which of our Facebook and Instagram ads lead to sign-ups. Meta receives the pages you view on our ad landing and sign-up pages, the fact that an account was created, and the device, browser and IP address details its Pixel collects. |
All service providers comply with UK GDPR and industry-leading security standards. Data sharing is governed by appropriate data processing agreements.
International Data Transfers
Your data is primarily hosted in London, United Kingdom, using Amazon Web Services (AWS) infrastructure.
In cases where data must be transferred outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the UK government or European Commission
- Standard Contractual Clauses (SCCs) approved by regulatory authorities
- Additional security measures to protect your data
If you allow the optional Meta cookie, Meta may transfer the data its Pixel collects to the United States under its own safeguards, as described in Meta's privacy policy.
Data Security
We take the security of your personal data seriously and implement industry-standard measures to protect it:
- Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
- Encryption at rest: Data stored in our Supabase database is encrypted at rest
- Access controls: Limited staff access based on the principle of least privilege
- Fraud monitoring: Ongoing monitoring for suspicious activity and fraudulent traffic
- Regular backups: Automated backups with integrity checks to prevent data loss
- Security audits: Regular review of our security practices and infrastructure
While we implement robust security measures, no system is completely secure. We encourage you to use strong passwords and keep your login credentials confidential.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you (Subject Access Request)
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data (where legally permissible)
- Right to restrict processing: Request that we limit how we use your data
- Right to data portability: Request your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent for cookies or marketing emails at any time
To exercise any of these rights, please email us at [email protected] or [email protected].
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately. Visit ico.org.uk for more information.
Children's Privacy
HalalSpark's advertising platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.
If we discover that a child under 16 has created an account or provided personal information, we will promptly delete that account and all associated data.
If you believe a child has provided us with personal information, please contact us immediately at [email protected].
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make significant changes, we will notify you by:
- Sending an email to your registered email address
- Displaying a prominent notice on your dashboard
- Updating the "Effective Date" and "Last Updated" dates at the top of this policy
Previous versions of this policy are archived for transparency and are available upon request.
We encourage you to review this policy periodically to stay informed about how we protect your data.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
HalalSpark Ltd
83 Ruskin Avenue
Southend-on-Sea, SS2 5HB
United Kingdom
Email: [email protected]
Support: [email protected]
"We appreciate your trust — protecting your data is part of our Amanah to you."