{"id":1803,"date":"2023-08-08T15:52:28","date_gmt":"2023-08-08T15:52:28","guid":{"rendered":"http:\/\/ifg.local\/?page_id=1803"},"modified":"2024-03-14T10:11:06","modified_gmt":"2024-03-14T10:11:06","slug":"security-policy","status":"publish","type":"page","link":"https:\/\/www.islamicfinanceguru.com\/security-policy","title":{"rendered":"IFG Security & Privacy Policy"},"content":{"rendered":"\n \n
\n
\n
\n\n

IFG Security & Privacy Policy<\/h1>\n\n<\/div>\n <\/div>\n <\/section>\n\n\n\n\n
\n
\n
\n\n
\n\n
\n
\n
\n Go to section<\/span>\n \n \n <\/svg>\n <\/div>\n
<\/div>\n <\/div>\n\n
\n
\n \n Is my data encrypted? <\/a>\n \n Do you store card details? <\/a>\n \n Can IFG employees see my data? <\/a>\n \n Does IFG sell my data? <\/a>\n \n Can I permanently delete my data? <\/a>\n <\/div>\n \n
<\/div>\n <\/div>\n <\/div>\n\n
\n
\n
\n
\n\n
\n
\n\n

We know that you are entrusting us with sensitive data at IFG and protecting that and making sure we are treating it truly confidentially is something that is front of mind for us.<\/p>\n\n\n\n

To give you a sense of the steps we are proactively taking:<\/p>\n\n\n\n

In 2022 we have commissioned a top City law firm to do a full data protection review of all of our work to make sure our operations are world class and in line with GDPR best practises.<\/p>\n\n\n\n

Additionally, we do annual penetration tests of our software. This means we pay an expert cybersecurity company to try to hack our systems and identify any technical weaknesses we have and flag those to us so we can stay ahead of the curve.<\/p>\n\n\n\n

Below we have answered some key other questions that might come to mind when you explore our website. If you have any other questions at all, just drop us a line via our contact <\/a>page.<\/p>\n\n<\/div>\n<\/div>\n\n\n

\n
\n\n

Is my data encrypted?<\/h2>\n\n\n\n

The data in IFG is encrypted at-rest and in-transit.<\/p>\n\n\n\n

What this means is that all of our databases and storage happens within the best-in-class server systems globally including Amazon (AWS) servers, Digital Ocean, and Hubspot.<\/p>\n\n\n\n

When your data is sat in the server it is encrypted and cannot be accessed unless someone authorised accesses it.<\/p>\n\n\n\n

When you data is retrieved (e.g. when you login) your data is seen as \u201cin transit\u201d and our website requires HTTPS on all pages so that the data can only ever be transmitted and displayed over a secure connection.<\/p>\n\n<\/div>\n<\/div>\n\n\n

\n
\n\n

Do you store card details?<\/h2>\n\n\n\n

We do not store your card details. All of our payment systems are handled via Stripe \u2013 the world leader in payment services \u2013 and any information retained (by your permission only) is within the Stripe platform. We do not ever have access to the unencrypted form of the card information.<\/p>\n\n<\/div>\n<\/div>\n\n\n

\n
\n\n

Can IFG employees see my data?<\/h2>\n\n\n\n

The Muslim community is a small community and we know we would hate the idea of someone looking at our personal data without our permission. This also applies to our own team.<\/p>\n\n\n\n

Here\u2019s how we approach it.<\/p>\n\n\n\n

For certain of our services our employees need to look at your data. For example, our Wills team need access to your submitted data to draft your Islamic will, or our VC team need to look at your data in order to keep your portfolio up-to-date and to be able to assist with your queries.<\/p>\n\n\n\n

However, we strictly control access so that only those who need access have it. For example, our content team does not have access to our individual customer data as they don\u2019t need access to it.<\/p>\n\n\n\n

We have also made sure that our entire team \u2013 including the co-founders, engineering and product teams \u2013 have signed up, as part of their legally binding employment agreement, to:<\/p>\n\n\n\n