Privacy Policy

1. Who We Are

SADAF Foundation (Sustainable AI for Development Across Frontiers) is a not-for-profit organisation registered under Section 42 of the Companies Act 2017, Securities and Exchange Commission of Pakistan (SECP). Our website is sadaffoundation.com. Our registered email is info@sadaffoundation.com.

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights over it.

2. Data We Collect

• Contact information: name, email address, phone number — when you contact us or subscribe to updates
• Donation information: name, email, donation amount, payment method — when you donate. We never store your card details — these are processed by our PCI-DSS certified payment processor.
• Volunteer and CSR inquiry information: name, organisation, contact details — when you apply to volunteer or partner
• Usage data: IP address, browser type, pages visited, time on site — collected automatically via analytics tools
• Cookie data: see our Cookie Policy

3. How We Use Your Data

• To process and acknowledge your donation
• To respond to your enquiry
• To send program updates and impact reports (only if you opted in)
• To improve our website and user experience
• To comply with our legal and regulatory obligations as a Section 42 company under SECP

4. Legal Basis for Processing (GDPR)

• Consent — when you submit a form or opt into communications
• Legitimate interest — for website analytics and security
• Legal obligation — for donation records and financial reporting required by SECP and FBR

5. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with: (a) our payment processor to process donations; (b) analytics providers to analyse website usage; (c) regulatory authorities (SECP, FBR) as required by Pakistani law. All third-party processors are bound by data processing agreements.

6. Data Retention

Donation records: 7 years (required by SECP/FBR). Contact data: 2 years. Analytics data: 26 months. You may request deletion at any time by emailing info@sadaffoundation.com.

7. Your Rights

• Right to access — request a copy of your personal data
• Right to correction — request correction of inaccurate data
• Right to deletion (“right to be forgotten”)
• Right to object to processing
• Right to data portability

To exercise any right, email info@sadaffoundation.com. We will respond within 30 days.

8. International Transfers

If you are located outside Pakistan (UAE, UK, USA, etc.), your data may be processed on servers outside your country. We ensure adequate protection through standard contractual clauses and data processor agreements compliant with GDPR Article 46.

9. Cookies

We use cookies for website functionality and analytics. See our full Cookie Policy. You may withdraw cookie consent at any time.

10. Children’s Privacy

Our website is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact info@sadaffoundation.com immediately.

11. Contact & Complaints

Data Protection Contact: info@sadaffoundation.com. If you have a complaint about how we handle your data, you may contact the relevant supervisory authority in your country of residence.

12. Changes to This Policy

We review this policy annually and when significant changes occur. The “Last Updated” date above always reflects the current version. Continued use of the website after changes constitutes acceptance.