Data processing terms
How Local Scot Digital processes personal data on behalf of each mosque, as required by Article 28 of the UK GDPR.
Last updated 4 October 2026
1.Roles
Each mosque is the controller of the personal data it collects through Local Scot Digital, including worshippers’ contact details, donor and Gift Aid records, and funeral-scheme member and family information. Local Scot Digital is its processor.
2.Instructions
We process that data only to provide the service and on the mosque’s documented instructions, which are these terms and the settings the mosque chooses in Local Scot Digital.
3.Confidentiality and security
Everyone at Local Scot Digital with access to mosque data is bound by confidentiality. Each mosque’s records are separated by access rules so one mosque cannot see another’s. Data is encrypted in transit.
4.Sub-processors
We use hosting, database and email-delivery providers to run Local Scot Digital. We will tell mosques before adding or replacing a sub-processor, and each one is bound by data-protection terms at least as strict as these.
5.Helping the mosque
We help mosques answer requests from individuals exercising their rights, and with security, breach notification and data-protection impact assessments, as far as we reasonably can.
6.Breaches
We will tell the mosque without undue delay, and within 48 hours of becoming aware, of any personal data breach affecting its data.
7.End of service
When a mosque leaves, we delete its personal data within 90 days unless the law requires us to keep it, and can provide an export beforehand on request.
8.Audits
We will make available the information needed to show we comply with these terms and allow reasonable audits, on notice.
Questions about this page? Contact us.