Privacy policy

Draft for legal review. This states our actual practice, but it must be reviewed by a qualified data protection adviser before launch, and the Article 27 representatives below must be appointed and named.

Who we are

NikkahDesk is the data controller for the information described here. Contact us at support@nikkahdesk.com, quoting your ticket number.

To be appointed before any EU or UK client is accepted: an Article 27 representative in the European Union and a separate representative in the United Kingdom. Their names and addresses will be published here.

What we collect

• Identity and contact details: name, WhatsApp number, email.
• Profile information: date of birth, city, country, family district of origin, mother tongue, height, marital status, children, education, occupation, employer.
• Special category information: your sect, your level of religious practice, whether you wear hijab or niqab, and any disability or health matter you choose to disclose.
• Photographs and a short verification video.
• Your stated preferences, hard limits and free-text answers.
• Whether you are willing to relocate or to sponsor a spouse, and your immigration status where you tell us.
• Records of dossiers sent to you, when they were opened, and the feedback you gave.

Our lawful basis

For most information: performance of our contract with you. For the special category information listed above, including your sect: your explicit consent under Article 9(2)(a) of the UK and EU GDPR. That consent is asked for separately, it is not bundled into these terms, and you can withdraw it at any time by messaging us — after which we stop using it and delete it.

Who we disclose your information to

This is the clause that matters most, so it is written plainly. Your profile and photographs are disclosed to individual prospective matches and their families — real people, not "partners" or "service providers". This only happens after you have agreed to that specific introduction. Every dossier carries a mark identifying who received it. We do not sell, rent or share your information with advertisers or for anyone else's purposes.

Where your information is held

Profiles, photographs and messages are stored in the European Union (Frankfurt), encrypted at field level. Our operations team in Pakistan accesses this through a restricted connection with no ability to download it locally.

Pakistan has no adequacy decision from the European Commission or the UK government. That access is therefore a restricted international transfer, made under Standard Contractual Clauses supported by a documented Transfer Impact Assessment, which we will provide on request.

Automated processing

We use an automated system to score and rank possible matches. A person reviews every dossier before it is sent to you. You can ask for human review of any decision, contest it, and ask us to reconsider.

How long we keep it

Twelve months after your last activity, or thirty days after you ask us to delete you — whichever comes first. Deletion removes your profile, photographs, messages and your entry in our matching index. Encrypted backups roll off within thirty-five days.

Your rights

You can ask for a copy of everything we hold, correct it, delete it, restrict how we use it, object to it, or withdraw consent. We answer within thirty days. You can also complain to your national data protection authority.

Cookies

We use no advertising or analytics cookies on this site. Your saved brief is stored in your own browser and never leaves your device until you press send.