Privacy Policy

Kebijakan Privasi • Last updated: [03-09-2026]

Yayasan Masjid An Nahl The Icon (“the Masjid,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data you share with us through this website, masjidannahlbsd.com. This policy explains what we collect, why, how we protect it, and the rights you hold under Indonesia’s Personal Data Protection Law (UU No. 27 of 2022).

1. Who We Are

This website is operated by Yayasan Masjid An Nahl The Icon, located at Ruko Horizon Broadway M5, The Icon, BSD City, Jl. Horizon Broadway No. 3, Sampora, Kec. Cisauk, Kabupaten Tangerang, Banten 15345. For any question about this policy or your personal data, you may contact us using the details in Section 10.

2. What Personal Data We Collect

We collect only what we need to respond to you and to serve the jamaah. This may include:
  • Information you give us through the contact form — such as your name, WhatsApp number or email address, and the message you send.
  • Information you provide when donating or asking about donations — such as your name and contact details, if you choose to share them. Payments made via QRIS or bank transfer are processed by your own bank or e-wallet; we do not collect or store your card, account, or wallet credentials.
  • Basic technical information your browser sends automatically — such as your device type and general location — which may be collected through standard website analytics, if enabled.

3. Why We Use Your Data (Lawful Basis)

Under the PDP Law, we process your personal data on these bases:

  • With your consent — for example, when you submit the contact form or subscribe to updates.
  • To fulfil a legitimate purpose of the Masjid — such as responding to your enquiry, acknowledging a donation, or informing you about programs and events you asked about.
  • To comply with applicable Indonesian law and regulation.

We do not sell your personal data, and we do not use it for commercial advertising.

4. How Long We Keep Your Data

We keep your personal data only for as long as needed for the purpose it was collected, or as required by law. Contact-form messages are retained while we assist you and for a reasonable period afterward, then deleted. When data is no longer needed, we remove it securely.

5. Who We Share Data With

We treat your data as an amanah (trust). We do not share it with third parties for their own use. We may share limited data only:

  • With trusted service providers who help us run the website (for example, our hosting provider), and only to the extent needed to operate the site.
  • Where required by law, court order, or a valid request from a lawful authority.

Where any provider stores data outside Indonesia, we take reasonable steps for it to be protected consistent with the PDP Law’s requirements on cross-border transfers.

6. Cookies & Analytics

This website may use cookies or similar technologies to help the site function and to understand, in aggregate, how visitors use it. You can control or disable cookies through your browser settings. If non-essential cookies are used, we will ask for your agreement first.

7. How We Protect Your Data

The website runs over a secure (HTTPS) connection, and we apply reasonable technical and organisational measures to protect your data against loss, misuse, or unauthorised access. No method of transmission over the internet is completely secure, but we take our responsibility to safeguard your trust seriously.

8. Your Rights

Under the PDP Law, you have the right to:

  • Access the personal data we hold about you.
  • Correct or update inaccurate or incomplete data.
  • Request deletion of your data.
  • Withdraw your consent at any time.
  • Object to or restrict certain processing of your data.

To exercise any of these rights, contact us using Section 10. We will respond within a reasonable time, in line with the law.

9. Children’s Privacy

This website is not directed at collecting personal data from children. Where a child’s data would be involved (for example, in program registration), we will seek the consent of a parent or guardian, as required by the PDP Law.

10. Contact Us

For any question about this policy or your personal data, or to exercise your rights, please reach us:

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review it periodically.