Privacy Policy and Data Protection
Last updated: September 29, 2026
At WALIDA, we take the privacy and protection of our users’ personal data seriously.
This Privacy Policy explains what information we may collect when you use WALIDA, including when you sign in using your Google account, how we use that information, how it may be stored or shared, and the rights available to you.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable data protection laws.
1. Data Controller
The controller responsible for personal data processed through WALIDA is:
Project: WALIDA
Website: walida.org
Email: info@walida.org
Responsible person: Youssef Sahli El Mersali
Tax ID: [ADD NIF]
Registered/Fiscal Address: [ADD FISCAL ADDRESS]
For questions regarding this Privacy Policy or the processing of your personal data, you can contact us at info@walida.org.
2. Personal Data We May Collect
Depending on how you use WALIDA, we may process different categories of personal data.
Account registration information
When you create a WALIDA account, we may collect:
- Name or username.
- Email address.
- Password, when you register directly with WALIDA. Passwords are protected using the security and hashing mechanisms provided by our authentication system.
- Information you voluntarily add to your profile.
Profile and community information
WALIDA includes community and social features for Muslims.
Users may voluntarily create a profile, publish content, interact with other users, participate in groups or discussions, and use other community features available on the platform.
Information that you choose to publish in public or community areas of WALIDA may be visible to other users.
We recommend that users do not publish sensitive personal information that is unnecessary for using the service.
3. Google Sign-In and Google User Data
WALIDA allows users to create an account or sign in using Google Sign-In.
When you choose to sign in with Google, Google may provide WALIDA with basic information associated with your Google account, depending on the permissions you authorize.
This information may include:
- Your email address.
- Your name.
- Your Google account identifier.
- Your profile picture, when available and authorized.
How WALIDA uses Google user data
WALIDA uses information received from Google only for purposes related to authentication and account functionality, including:
- Authenticating your identity.
- Creating your WALIDA account.
- Signing you into your existing WALIDA account.
- Associating your Google identity with your WALIDA account.
- Displaying basic account or profile information where applicable.
- Maintaining the security and integrity of the authentication process.
WALIDA does not receive or store your Google account password.
WALIDA does not use Google user data for advertising purposes.
WALIDA does not sell Google user data.
WALIDA does not use Google user data for purposes unrelated to providing or securing the WALIDA service.
Storage and sharing of Google user data
Information obtained through Google Sign-In may be stored as part of your WALIDA account where necessary to maintain your account and provide the service.
Google user data is not sold to third parties.
It may only be processed by service providers where technically necessary to operate, host, secure, maintain, or provide WALIDA, subject to applicable data protection requirements.
Information may also be disclosed where required by applicable law or a valid request from a competent public, judicial, or administrative authority.
Managing Google permissions
You can review or revoke permissions granted to WALIDA through your Google Account settings.
Revoking Google access does not necessarily delete an existing WALIDA account. You may separately request deletion of your WALIDA account and associated personal data as described in Section 9.
4. Purposes of Processing
Personal data may be processed to:
- Create and manage user accounts.
- Authenticate users and provide login functionality.
- Provide WALIDA’s features and services.
- Create and manage user profiles.
- Enable community publications and interactions.
- Enable groups and other social features.
- Provide Islamic tools and resources available through WALIDA.
- Maintain platform security.
- Detect and prevent fraudulent, abusive, or unauthorized activity.
- Respond to support requests.
- Process privacy and data protection requests.
- Comply with applicable legal obligations.
- Improve the technical operation and user experience of WALIDA.
5. Legal Basis for Processing
Depending on the purpose, processing may be based on:
Performance of a contract or provision of the requested service: where processing is necessary to create and maintain your account or provide WALIDA functionality.
Consent: where you expressly authorize optional processing or third-party services.
Legitimate interests: where necessary to protect WALIDA, maintain security, prevent abuse, resolve technical problems, and protect users, provided that those interests do not override your fundamental rights and freedoms.
Legal obligations: where processing or retention is required by applicable law.
6. Sharing of Data and Service Providers
WALIDA does not sell users’ personal data.
Certain technology providers may process information when necessary to provide services used by WALIDA.
These may include providers of:
- Web hosting and infrastructure.
- Email services.
- Security and maintenance services.
- Analytics and technical services.
- Authentication systems.
When you use Google Sign-In, Google’s authentication services are involved in the authentication process.
Personal information may also be disclosed when required by applicable law or pursuant to a legitimate request from a competent authority.
7. International Data Transfers
Some technology providers used by WALIDA may operate or maintain infrastructure outside the European Economic Area.
Where an international transfer of personal data occurs, WALIDA will seek to rely on appropriate safeguards and mechanisms recognized under applicable data protection law.
8. Data Retention
Personal data associated with your WALIDA account will generally be retained while your account remains active or for as long as necessary to provide the requested services.
If you request deletion of your account, associated personal data will be deleted or anonymized where appropriate, except where certain information must temporarily be retained to:
- Comply with legal obligations.
- Resolve disputes.
- Prevent fraud or abuse.
- Establish, exercise, or defend legal claims.
Data retained for these purposes will be deleted when the applicable retention period expires.
9. Account and Data Deletion
You may request deletion of your WALIDA account and associated personal data at any time.
Send your request to:
Use the subject:
“Account Deletion”
We may request information reasonably necessary to verify that you are the owner of the account before processing the deletion request.
Deletion is subject to information that WALIDA may be legally required to retain for a specified period.
If you used Google Sign-In, deleting your WALIDA account will also result in deletion or anonymization, where applicable, of Google account information stored as part of your WALIDA account, except where retention is legally required.
10. Your Data Protection Rights
Subject to applicable law, you may have the right to:
- Access personal data we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your personal data.
- Object to certain processing.
- Request restriction of processing.
- Receive certain personal data in a structured, commonly used and machine-readable format where applicable.
- Withdraw previously provided consent.
To exercise these rights, contact:
We may request additional information when reasonably necessary to verify your identity.
11. Complaints to a Data Protection Authority
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) or another competent supervisory authority.
You may also contact us first at info@walida.org so that we can try to resolve your concern.
12. Cookies and Similar Technologies
WALIDA may use cookies and similar technologies necessary to operate the website, maintain user sessions, provide functionality, improve security, and, where applicable, obtain statistical information about use of the platform.
Where applicable law requires consent for non-essential cookies, those cookies should not be activated until the user has provided the required consent.
Additional information may be provided through WALIDA’s Cookie Policy or cookie settings.
13. Security
WALIDA implements technical and organizational measures intended to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.
However, no Internet-based system can guarantee absolute security.
Users are responsible for maintaining the confidentiality of their account credentials and should notify WALIDA if they become aware of unauthorized use of their account.
14. User-Generated Content
WALIDA includes social and community functionality.
Information voluntarily published in profiles, posts, groups, comments, discussions, or other community areas may be visible to other users depending on the applicable privacy settings.
Users are responsible for deciding what personal information they choose to publish and for respecting the privacy and rights of others.
15. Children and Minors
WALIDA does not knowingly seek to collect personal data from children who are not legally able to consent to the processing of their personal data under applicable law.
Where required, use of certain WALIDA features by minors must be authorized by their parent, guardian, or legal representative.
If we become aware that personal data relating to a minor has been provided without the required authorization, appropriate steps may be taken to delete that information.
16. Third-Party Links and Services
WALIDA may contain links, embedded content, or integrations provided by third parties.
Those third parties may have their own privacy policies and terms of service. WALIDA does not control the processing of personal data performed directly by independent third-party services.
Users should review the privacy policies of those services before providing personal information to them.
17. Changes to This Privacy Policy
WALIDA may update this Privacy Policy when necessary to reflect changes to the platform, services, technology providers, or applicable law.
When material changes are made, the “Last updated” date at the beginning of this policy will be revised and, where appropriate, users will be informed through suitable means.
18. Contact
For questions regarding this Privacy Policy, Google Sign-In, your WALIDA account, or the processing of your personal data:
WALIDA
Email: info@walida.org
Website: walida.org