Privacy Policy

The organisation responsible for your personal data — the “controller” — is MyQurban Limited, a company incorporated in the Hong Kong Special Administrative Region, whose registered office is at the foot of this page. You can reach us about your data at info@myqurban.org.

When you reserve. Your first and last name, your email address, the name you give for each Qurbani (which may be another person’s name), the currency, quantity and amount, the date and time, and — if you arrived through a partner’s link or on a partner’s site — which partner that was.

When you pay. Payment is taken on a page operated by our payment processor — Stripe or Airwallex; the reservation page names the one in use. The processor collects your card details; we never see or store them. It sends us confirmation that the payment succeeded, together with identifiers of the payment that let us find it again to refund it. It processes your card data under its own privacy policy, as an independent controller.

When you cancel or write to us. How many Qurbani you cancelled, the reason if you chose to give one, and the content of any email or message you send us.

When you use the site. Your IP address and basic technical details of your browser, kept briefly in server logs and used to protect the site against abuse (for instance, limiting how many reservations one address can attempt in a minute). The public site sets no cookies for buyers; see section 9.

If you apply to become a partner on the partners page, we collect what the form asks for: your organisation, your name, email, phone number, country and town, what you tell us about your community, who introduced you, and the time you accepted the partner terms.

• To perform your reservation — issue your placard number, print and film the placard, carry out the Qurbani, match the video to your reservation, send your confirmation, cancellation and video emails, and process refunds. Legal basis: performance of a contract with you.
• To keep the records the law requires — accounting and tax records of each sale and refund. Legal basis: legal obligation.
• To keep the service safe — preventing fraud and abuse, defending claims, and investigating a disputed payment. Legal basis: our legitimate interests, which we have balanced against yours.
• Analytics, if you accept them in the consent banner. Legal basis: your consent, which you can withdraw at any time.

We do not use your data for marketing unless you have asked us to, and we do not make decisions about you by automated means that have legal or similarly significant effects.

Your data is shared only with the people and services needed to deliver what you reserved:

• Stripe or Airwallex — payment processing on its own secure page, and refunds. One of the two takes payment on this site at any time; the reservation page names it.
• Infomaniak, Switzerland — hosting of the site, the database and the videos, and the sending of our emails.
• The field team in Kenya — receives the list of placard numbers and the names to be printed on them, prints and films the placards, and carries out the Qurbani under the supervision of qualified scholars. The people who match each video to its reservation and send the links also work with your name, the placard names and your email address.
• Automated placard reading — to match thousands of videos to reservations reliably, we may use software that reads the placard number in a frame of your video. A person checks any match the software is unsure of.
• Partners — a mosque or association whose link you used is told how many reservations came through its link and what it is owed. It is never told who reserved: no names, no email addresses.
• Professional advisers and authorities — our accountants, lawyers and insurers where needed, and public authorities where the law requires it.

We never sell personal data and never share it with advertisers.

Your video shows the placard with your placard number and the name you gave, held to the camera with your animal. It is stored in private storage that is not publicly listed, and it is delivered to you as a private link by email. We do not publish videos, use them in advertising, or share them with anyone but you. Anyone you give the link to can watch it, so share it with care.

Because of how this service works, your data crosses borders. In plain terms:

• It is stored in Switzerland, where the site is hosted. Switzerland is recognised by the UK and the European Union as providing adequate data protection.
• It is accessed from Hong Kong, where MyQurban Limited is incorporated, and from wherever the people who run the service are working.
• The placard names and numbers, and the details needed to deliver your video, are sent to Kenya, where the Qurbani is carried out and filmed.
• Our payment processor (Stripe or Airwallex) processes payments in the country of its own establishment for your region, under its own safeguards.

Hong Kong and Kenya are not covered by a UK or EU adequacy decision. For buyers in the United Kingdom and the European Economic Area, we rely on the transfer being necessary to perform the contract you asked for — the placard cannot be filmed in Kenya without the name travelling there — and, for our field team and contractors, on written contractual safeguards that bind them to protect your data as this policy describes. For buyers in Canada and the United States, we ensure by contract that your data receives a comparable level of protection wherever it is processed. You may ask us for more information about these safeguards at the address in section 13.

• Reservation, payment and refund records — seven years after the end of the campaign, which is the period Hong Kong company law requires accounting records to be kept.
• Your video — at least twelve months after Eid al-Adha. After that we may delete it; download it if you want to keep it longer. The private link in your email works for thirty days; a fresh one can be requested from the “Find your reservation” page.
• Messages you send us — two years after the last exchange, unless they are part of a dispute.
• Server logs — up to thirty days. The rate-limiting record of your IP address exists for one minute.
• Partner applications that are not approved — twelve months, then deleted.

Wherever you live, you can ask MyQurban Limited to tell you what data it holds about you, to correct it, to delete it, to stop using it for a particular purpose, to give it to you in a portable form, and to withdraw any consent you gave. Some of these rights have limits — for example, we must keep the accounting record of a sale even after you ask us to delete the rest — and we will explain any limit that applies.

In particular:

• United Kingdom and European Economic Area (UK GDPR and GDPR): the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to the Information Commissioner’s Office (UK) or your national supervisory authority.
• Canada (PIPEDA and provincial laws): the right to access and correct your personal information, to withdraw consent, and to complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.
• United States (California CCPA/CPRA and similar state laws): the right to know what personal information is collected and how it is used, to delete it, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for advertising, so there is nothing to opt out of.
• Hong Kong (PDPO): the rights of access and correction, and the right to complain to the Privacy Commissioner for Personal Data.

To exercise any of these rights, write to the address in section 13. We may ask you to confirm your identity — usually by writing from the email address you reserved with — and we answer within one month.

No cookies for buyers. The public pages of this site — the reservation page, the confirmation page, this page — set no cookies. The payment processor’s page sets its own cookies for fraud prevention, under its own policy. Only the sign-in areas used by partners and by our own team set a session cookie, and only after signing in.

Analytics only with your consent. If we use an analytics tool to understand how the site is used, it is loaded only after you accept it in the consent banner. Nothing is loaded if you decline or ignore the banner, and you can change your choice at any time from the link in the site footer. We use no advertising trackers.

Card payments happen entirely on the payment processor’s page, so no card details ever touch our servers. The site is served over HTTPS only. Access to reservation data is limited to the people who need it to deliver the service, each with their own sign-in, and administrative actions such as refunds are logged. Videos are stored privately and delivered by links that are not publicly listed.

This site is for adults: you must be at least 18 to reserve. A placard may carry a child’s name, given by the adult who reserves; we process that name only to print and film the placard.

We may update this policy as the service or the law changes. The date at the top shows the current version. If a change affects a reservation you have already made in a way that matters, we will tell you by email.

Write to info@myqurban.org, or by post to the registered office at the foot of this page. A person reads that inbox.