ICOSAC Polices
ICOSAC Privacy Policy Sacramento Islamic Center
Building a Faith Community for Greater Sacramento | Islamic Center of Sacramento
Effective Date: February 1, 2026
Last Updated: February 1, 2026
The Islamic Center of Sacramento (ICOSAC), a 501(c)(3) nonprofit organization (EIN: [INSERT EIN]), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard data when you visit www.icosac.com, make donations, register for events, join membership, or interact with our Sacramento mosque services.
We comply with California Consumer Privacy Act (CCPA/CPRA), Children’s Online Privacy Protection Act (COPPA), and Islamic data protection principles. Questions? Contact privacy@icosac.com.
1. Information We Collect
1.1 Personal Information (Provided by You)
When you donate, register, or contact us:
| Data Type | Examples | Purpose |
|---|---|---|
| Contact Info | Name, email, phone, address | Receipts, updates, events |
| Payment Data | Card number, expiration (via processor) | Process donations |
| Donation Details | Amount, zakat type, designation | Tax reporting, allocation |
| Event Registration | Guests, dietary needs, allergies | Event coordination |
| Membership | Birthdate (age verification), preferences | Benefits delivery |
1.2 Automatically Collected Data
• IP address, browser type, device
• Pages visited, time spent
• Referral source (Google, Facebook)
• Cookies (preferences, analytics)No facial recognition or biometric data collected.
2. How We Use Your Information
We use data solely for mission delivery:
Process donations (zakat, sadaqah, membership)
Issue tax receipts and annual summaries
Manage events/programs (RSVP, seating)
Send updates (newsletters, Phase 1 progress)
Improve services (analytics, feedback)
Legal compliance (IRS audits, California Registry)
Shariah Compliance: Donor intentions respected per Islamic principles.
3. How We Share Your Information
3.1 No Selling or Renting
ICOSAC NEVER sells, rents, or trades donor data for profit.
3.2 Service Providers (Processors)
Data shared with contracted vendors under strict agreements:
• GiveWP/Stripe (payments) - PCI compliant
• WPForms/Google Workspace (forms/email)
• Mailchimp (newsletters) - Opt-out compliant
• The Events Calendar (scheduling)
All processors CCPA compliant with data minimization.
3.3 Legal Requirements
Data disclosed only if required by:
IRS/Charity regulators
Court order/subpoena
Fraud prevention/law enforcement
3.4 Aggregated Data
Anonymous statistics shared publicly (e.g., “1,247 donors this month”).
4. Data Security
Multi-layered protection:
✓ SSL encryption (https://)
✓ PCI-DSS payment compliance
✓ Regular security audits
✓ Employee training (limited access)
✓ Password protection (dashboard)
✓ Backup encryptionIncident Response: Notify affected users within 72 hours per CPRA.
5. Your Privacy Rights (CCPA/CPRA)
California Residents have these rights:
5.1 Access & Disclosure
Request data collected (2x/12 months, free)
Categories: Contact, payment, donation history
5.2 Deletion (“Right to be Forgotten”)
Delete personal data (subject to legal retention)
Exceptions: Tax records (7 years IRS requirement)
5.3 Correction
Update inaccurate information via dashboard/email
5.4 Opt-Out (“Do Not Sell/Share”)
No selling occurs
Newsletter opt-out (one-click unsubscribe)
5.5 Non-Discrimination
No penalties for exercising rights
Submit Requests: privacy@icosac.com or 1-800-ICOSAC1
Verification: Email + last donation amount/date
Response Time: 45 days (extendable 45 days)
6. Children’s Privacy (COPPA)
No knowing collection from children under 13.
Parents/Guardians:
Event registrations: Adult provides child data
Review/delete: privacy@icosac.com
No child-targeted marketing
7. Cookies & Tracking Technologies
7.1 Cookie Types
| Type | Purpose | Duration |
|---|---|---|
| Essential | Site functionality | Session |
| Analytics | Google Analytics (anonymous) | 2 years |
| Preferences | Dashboard login | 30 days |
7.2 Cookie Controls
Browser settings (delete/disable)
Do Not Track (DNT) respected
Cookie banner (EU/CA visitors)
8. International Data Transfers
US-based servers (Hostinger). International donors:
Data processed in USA
Adequate protections via Standard Contractual Clauses
GDPR compliance for EU visitors
9. Data Retention Periods
| Data Type | Retention | Reason |
|---|---|---|
| Donation Records | 7 years | IRS audit |
| Event Registration | 2 years | Liability |
| Membership | Duration + 2 years | Benefits |
| Newsletter | Until unsubscribe | Communications |
Secure deletion post-retention.
10. Third-Party Links
Links to external sites (processors, partners) not controlled by ICOSAC. Review their privacy policies.
11. Changes to This Privacy Policy
Material changes posted here with 30-day notice. Continued use = acceptance.
Minor updates (e.g., contact info) effective immediately.
12. Contact Information
Data Protection Officer:
Islamic Center of Sacramento
Rancho Cordova, CA 95670
Privacy Email: privacy@icosac.com
Phone: +1 (999) 999-99-99
Donation Privacy: support@icosac.com
CPRA Authorized Agent: privacy@icosac.com
Acknowledgment: By using www.icosac.com or donating to ICOSAC Sacramento, you consent to our data practices as described.
JazakAllah khair for your trust and support of Baitul Mukarram Masjid Phase 1.
Hadith of the Prophet ﷺ, narrated by Muslim
“When a person dies, all their deeds end except three: a continuing charity, beneficial knowledge and a child who prays for them.”