Privacy Policy

Last updated: August 2, 2026

Taybah Foundation For Development respects the privacy of visitors to its website, beneficiaries, volunteers, job applicants, partners, and everyone who communicates with it.

This policy explains the types of data we may collect, the purposes for which we use it, how we protect it, the parties with whom we may share it, and the rights available to data subjects.

1. Scope of This Policy

This policy applies to data collected through:

  • The Taybah Foundation For Development website.
  • Contact and inquiry forms.
  • Complaints and suggestions forms.
  • Job applications and volunteer opportunities.
  • Requests to contribute, partner, or donate.
  • Subscriptions to newsletters and updates.
  • Registration of beneficiaries in programs and projects when the website is used for this purpose.
  • Any other electronic forms or services operated by the Foundation.

Some programs and projects may include additional privacy notices depending on the nature of the project and the data required.

2. Data We May Collect

The Foundation may collect the following data, depending on the service or form used:

Identification and Contact Data

  • Name.
  • Phone number.
  • Email address.
  • Governorate or region.
  • Name of the entity or organization represented by the user.
  • Preferred method of communication.

Employment and Volunteer Data

  • Curriculum vitae.
  • Academic qualifications.
  • Experience and skills.
  • Employment and volunteer history.
  • Professional references, if requested.
  • Documents voluntarily submitted by the applicant.

Complaints and Suggestions Data

  • Details of the complaint or suggestion.
  • The program or project related to the report.
  • Contact details required for follow-up.
  • Attached documents or evidence.
  • Information relating to persons or entities mentioned in the report.

Some complaints may be submitted anonymously where the form permits.

Beneficiary and Humanitarian Program Data

Depending on the nature of the program, data may include:

  • Age, gender, and place of residence.
  • Social or economic status.
  • Family information.
  • Humanitarian or development needs.
  • Health or nutrition information when needed to provide the service.
  • Eligibility assessment, follow-up, and project impact measurement data.

The Foundation collects sensitive data only when necessary to implement a program or provide a service, and only to the extent required.

Photos, Recordings, and Success Stories

The Foundation may collect photographs, video or audio recordings, testimonials, and success stories related to its activities after obtaining appropriate consent, while respecting individuals’ dignity and safety and avoiding harm.

Technical Data

When using the website, some technical data may be collected automatically, such as:

  • Internet Protocol (IP) address.
  • Device type, browser, and operating system.
  • Pages visited and browsing duration.
  • Source of the visit.
  • Cookies and similar data.
  • Crash logs and technical error records.

3. Purposes for Using Data

The Foundation uses data for the following purposes:

  • Responding to inquiries and contact requests.
  • Receiving, verifying, and following up on complaints and suggestions.
  • Evaluating job and volunteer applications and communicating with applicants.
  • Registering beneficiaries and assessing needs and eligibility.
  • Implementing programs and projects and monitoring the services provided.
  • Measuring project impact and preparing statistics and reports.
  • Communicating with donors, partners, and relevant entities.
  • Managing contributions and donations when these services are available.
  • Sending news and updates to those who choose to subscribe.
  • Developing the website and improving the user experience.
  • Protecting the website and preventing fraud or misuse.
  • Complying with contractual and regulatory requirements and donor requirements.
  • Protecting beneficiaries, staff, and volunteers and safeguarding programs.

When preparing public reports, the Foundation seeks to use aggregated or anonymized data whenever possible.

4. Legal Bases for Processing Data

Data is processed on one or more of the following bases:

  • The data subject’s consent.
  • The necessity of processing to provide a requested service or implement a requested program.
  • Performance of contractual obligations with the applicant, partner, or supplier.
  • Compliance with regulatory or legal requirements.
  • Protection of individuals’ vital interests in humanitarian or emergency situations.
  • The Foundation’s legitimate interest in managing its programs, improving its services, and protecting its systems, provided that this does not conflict with individuals’ rights and privacy.

Where processing is based on consent, consent may be withdrawn without affecting the lawfulness of processing carried out before its withdrawal.

5. Children’s Data and Vulnerable Groups

The Foundation handles the data of children and vulnerable groups with particular care.

When collecting a child’s data, the Foundation seeks to obtain the consent of the parent or legal guardian whenever required and possible, applies safeguarding measures, and does not publish the child’s name, image, or story in a way that could reveal their identity or expose them to harm.

The Foundation does not use children’s data for advertising or commercial purposes.

6. Complaints and Sensitive Reports

The Foundation treats data relating to complaints and reports confidentially and makes it available only to persons authorized to receive, verify, and take appropriate action on it.

Information may be shared with a competent authority when necessary to protect a person from a genuine risk, investigate a violation, or comply with a legal or regulatory obligation, while adhering to the principle of minimum necessary disclosure.

7. Data Sharing

Taybah Foundation For Development does not sell, rent, or trade personal data.

Data may be shared, to the extent necessary, with:

  • Authorized Foundation staff and contractors.
  • Donors and implementing partners.
  • Hosting, technical support, and email service providers.
  • Providers of form, storage, or analytics services.
  • Auditors and professional advisers.
  • Competent government or regulatory authorities.
  • Other humanitarian organizations when necessary to coordinate services and prevent duplication, subject to appropriate safeguards.
  • Competent authorities when disclosure is necessary to protect individuals or investigate a violation.

The Foundation seeks to require parties that process data on its behalf to maintain its confidentiality and use it only for specified purposes.

8. Payment and Donation Services

When an online donation service is available, payments may be processed by a bank or third-party payment provider.

The Foundation generally does not retain full payment card details. The payment process is also subject to the privacy policy and terms of the service provider used.

The Foundation may retain essential transaction data, such as the donor’s name, donation amount and date, and transaction number, for financial and administrative purposes and to issue receipts.

9. Cookies

The website may use cookies to improve performance, remember preferences, analyze website usage, and protect the website.

Types of cookies that may be used include:

  • Cookies necessary for the operation of the website.
  • Cookies used to remember user preferences.
  • Cookies used to measure performance and compile statistics.
  • Cookies associated with embedded third-party services, such as maps or videos.

Users can manage cookies through their browser settings; however, disabling necessary cookies may affect the operation of some website features.

10. External Links and Services

The website may contain links to or embedded content from external websites and services, such as maps, social media platforms, and video services.

The Foundation does not control the privacy practices of those parties. Users are advised to review their policies before providing them with any data.

11. Data Protection

The Foundation takes appropriate administrative, technical, and organizational measures to protect data from:

  • Unauthorized access.
  • Unlawful use or disclosure.
  • Loss or destruction.
  • Unauthorized alteration.
  • Misuse.

These measures include restricting access permissions, protecting accounts and systems, updating the website, maintaining backups, and raising awareness among persons who handle data.

However, no electronic storage or transmission method can guarantee absolute protection against all risks.

12. Data Retention

The Foundation retains data for the period necessary to fulfill the purposes for which it was collected, or for the period required by contractual and regulatory obligations and donor requirements.

Retention periods vary depending on the type of data. Examples include:

  • Retaining job and volunteer applications for an appropriate period to consider applicants for current or future opportunities.
  • Retaining project and beneficiary records in accordance with project and donor requirements.
  • Retaining complaints for the period necessary for investigation, follow-up, and documentation.
  • Deleting newsletter subscription data when a user unsubscribes, unless it is necessary to retain a record of the unsubscribe request.

Once the data is no longer needed, it is securely deleted or destroyed, or anonymized.

13. Rights of the Data Subject

Subject to applicable circumstances and regulations, a data subject may request:

  • Information about the data the Foundation holds about them.
  • A copy of their data.
  • Correction of inaccurate or incomplete data.
  • Deletion of data where there is no legitimate need to retain it.
  • Objection to certain types of processing.
  • Withdrawal of consent.
  • Cessation of non-essential messages and newsletters.
  • Submission of a complaint regarding the use of their data.

To protect data from unauthorized access, the Foundation may request appropriate information to verify the identity of the person making the request before responding.

Some requests may not be fulfilled in whole or in part where retaining the data is necessary to protect the rights of others, complete an investigation, or comply with a contractual or regulatory obligation.

14. Data Accuracy

Users are responsible for providing the Foundation with accurate and up-to-date data and may contact us to request correction when their data changes or an error is discovered.

15. Communications and Newsletters

The Foundation sends news and marketing updates only to people who have chosen to subscribe or with whom it has an existing relationship that justifies such communication.

Users may unsubscribe at any time using the link in the message or by contacting the Foundation.

Unsubscribe requests do not apply to essential notifications relating to an existing request, complaint, or program.

16. Data Transfers and Storage

The Foundation may use service providers or systems whose servers are located outside the user’s country of residence.

When this occurs, the Foundation seeks to apply appropriate safeguards to protect the data and ensure that it is used in accordance with the purposes set out in this policy.

17. Updates to This Privacy Policy

The Foundation may update this policy when the website is developed, new services are added, or data processing practices change.

The updated version will be published on this page with a revised “Last Updated” date. Users are advised to review it periodically.

18. Contact Us

For inquiries about this Privacy Policy or to exercise data-related rights, contact Taybah Foundation For Development via:

Email: info@taybahye.org
Suggested subject line: Privacy and Personal Data Request

Please explain the nature of your request and the data or service concerned. Do not send health information or sensitive documents by email unless the Foundation asks you to use a secure method.