Privacy statement
How Hisaab handles your personal data.
Hisaab (hisaab.nl), based in the Netherlands and run by Bilal Arif, provides Islamic matchmaking and relationship coaching. This statement describes which personal data we process and why.
What data
the details you enter when registering. These are your name, contact details, date of birth, background, your partner preferences and, for sisters, your Mahram's details or your explanation of why you do not have a Mahram. Optionally a photo. If you share your Mahram's details, please let him know that you are sharing his contact details with us for the matchmaking process.
Intake conversation
during the personal intake conversation we may discuss additional information relevant to the matchmaking, for example about health or financial situation. We only record this with your consent and use it solely for your guidance.
Purpose and basis
we process this data solely to guide you towards a suitable introduction. The basis is your consent, given at registration via a checkbox whose text also explicitly covers the processing of your ethnic background and religious practice. Consent to showing your anonymised profile on the site is asked separately, at the moment we agree the profile summary with you, before publication. You can withdraw any consent at any time via info@hisaab.nl.
Login sessions
if you are registered with us, you can log in with a code we send to your email address, for example to respond to a profile or view your details. We then set a functional cookie (hisaab_lid) that keeps you logged in; this cookie is necessary for that function, so we do not ask separate consent for it. Your session is valid for 30 days and is extended while you stay active, with a maximum of 90 days; after that you log in again with a new code.
Responding to a profile
if you respond to a profile of the other gender via the website, this happens from your logged-in session (see above) and we store your message with your own registration. You can respond to each profile once. If you are not registered yet, we first refer you to the registration form; if you have unsubscribed, you can still log in and view your details, but no longer respond.
Data check via personal link
if you are registered with us, you may receive an email with a personal link to review your details and propose changes. That link is valid for 30 days and can be used once. Proposed changes are only applied after Hisaab has reviewed and approved them.
Requesting your own data
via "My details" you can request a full overview of your own data. You then receive an email with a secure download link that is valid for 15 minutes. The overview includes your registration, your linked profile, your change requests and the profiles you have responded to.
Events
for events (such as a masterclass) the site only shows practical information. Registration is handled by the external organiser; we do not process any personal data for this ourselves.
Academy account
if you sign up for the Academy (individual video masterclasses), we create an account with your name, email address and subscription status. You log in with the same code as under Login sessions above. The basis is your consent when signing up and, for the ongoing subscription, performance of the contract. You can cancel at any time by emailing info@hisaab.nl. For the Academy we do not process any special category data such as health, religious practice or ethnic background.
Gifts and donations
you can pay for someone else's matchmaking in advance with a gift code, or donate towards a specific goal. From the buyer we keep the email address and optionally the name; from a donor we keep only the email address, and donating may also be anonymous. If you choose to have us send the gift email, you give us the recipient's name and email address, details that you have provided yourself. That gift email informs the recipient of this and is sent once, without further reminders. If the code expires after twelve months without being redeemed, we erase the recipient's details. If the recipient redeems the code, they become a registrant themselves and go through the registration form with the consent checkbox; the gift details are then anonymised along with any later erasure of that file.
Storage and security
your data is stored within the EU (database in Frankfurt). An uploaded photo is strictly private, kept in shielded EU storage and accessible only to Hisaab, never public.
Public profiles
profiles on the website are always anonymised (no names, no photos). Your personal registration is never shown publicly. With your consent, the same anonymised profile may also be posted on our Facebook and Instagram pages.
Comments on our social media channels
if you comment on a post on our Facebook or Instagram page, we collect the number of likes and comments, and the text of the comments, so we can see which posts resonate. We do not store who wrote the comment: no name, no profile name and no link to your account. The basis is our legitimate interest in knowing how our posts are received. If you delete your comment on Facebook or Instagram, it disappears here too. You can object via info@hisaab.nl.
Sharing with third parties
we do not sell your data and do not share it with third parties, except where necessary for the matchmaking or legally required.
Processors
a small number of service providers process data on our behalf, namely Vercel (website hosting, Frankfurt), Neon (database, Frankfurt), Bunny (photo storage via Bunny Storage and, for the Academy, video hosting via Bunny Stream, both Frankfurt), Postmark (email delivery, US; the data processing agreement with EU standard contractual clauses is still being finalised before go-live) and Upstash (protection of the admin login, EU). They see no more than is needed to provide their service. For ongoing partner suggestions we use Anthropic (US) as a processor of pseudonymised match profiles, under a data processing agreement with EU standard contractual clauses; this data is not used for training. To check whether a submitted email address exists, we send that address to ZeroBounce (US); the data processing agreement with this provider is still being finalised before go-live. Stripe Payments Europe Ltd. (Ireland) processes the payment for the Hisaab Academy subscription (name, e-mail address and payment details). Transfers outside the EEA are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
Cookies
we use no tracking or advertising cookies, so there is no cookie banner. We do set a few functional cookies: the login cookie hisaab_lid (see Login sessions), a secured login cookie for site administrators, a cookie that remembers your display preference on the experiences page (valid for one year) and a cookie with your language preference. Your light/dark preference is stored only locally on your own device.
Your rights
you have the right to access, correct and delete your data, and additionally to restriction of processing, objection to processing, data portability and withdrawal of previously given consent. Email info@hisaab.nl to exercise these rights; via "My details" you can also arrange access, correction and an export yourself.
Filing a complaint
if you are unhappy with how we handle your data, we would like to hear it first via info@hisaab.nl. You also always have the right to file a complaint with the supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Retention periods
a registration that does not lead to a published profile is erased one year after it was recorded in our system (for a sign-up via the website that is the moment of sign-up). If you are in the matchmaking process, we keep your data for as long as you are registered; upon deregistration or a reported marriage we erase your entire file immediately and irreversibly (only an anonymised fact about the reason is kept for statistics). Login sessions expire after 30 days without use (90 days maximum), a data-check link after 30 days and a download link for your data export after 15 minutes.
Contact
questions about your privacy? Email info@hisaab.nl.