We ask that you read this privacy notice carefully as it contains important information on how, when and why we would collect, store, use and share your personal information, your rights in relation to your personal information and on how to contact us and approach supervisory authorities in the event you have a complaint. We collect, use and are responsible for certain personal information about you. When we do so we are regulated under the General Data Protection Regulation which applies in Pakistan and we are responsible as ‘controller’ of that personal information for the purposes of those laws.

Personal Information we collect about you

We only collect personal data relevant to the type of interaction you have with us. Whatever is the scope of the interaction, the information collected will be minimal and will be linked to the purpose for which we need it. For example, when you become a volunteer, make a donation, or subscribe to one of our services we may ask for and retain your personal information. Under these circumstances we are likely to process details such as your name, postal address, email address, telephone or mobile number, and bank account details to process donations. If you participate in an event we may (with your consent) take your photograph, video you or interview you and share them through our various publication channels. If we gather information about you which is publicly available and may include your name, contact details, views and positions you have expressed.

How your personal information is collected

We may collect your personal data in the following circumstances: When you give it to us directly, by submitting a duly filled form either on paper or electronically or share your existing profile in order to register as a volunteer, or to make a donation, or to subscribe to one of our services, or to communicate with us; When you give it to us indirectly, such as when you participate in a campaigning action with one of Baitussalam’s partner who have already published you the disclaimer of sharing of personal information with their partner(s). They will pass your data to us where you have indicated that you wish to support us and have given your consent; When you access our social media via Twitter, Instagram and Facebook. We may also obtain your personal data through your use of social media depending on your settings or the privacy policies of these social media and messaging services. When the information is publicly available. We may gather information if your activities relate to our work such as if you represent an organisation which we may want to work with or you are a public figure.

How and why we use your personal information

We hold and process personal data for a number of reasons: To keep a record of donations made and actions taken by you and our communications with you. To send marketing information about our projects, fundraising activities and appeals where we have your consent or are otherwise allowed to. To support volunteers in fundraising events. To record campaigning actions. To fulfil contractual obligations entered into with you. To comply with legal obligations. To manage our organisation. To ensure we do not send unwanted information to you if you have informed us that you do not wish to be contacted. These reasons are underpinned by a "legal basis" under General Data Protection Regulations.

Explaining the legal bases we rely on

The law on data protection sets out a number of different reasons for organisations to collect and process your personal data. When collecting your personal data, we will always make clear to you which data is necessary for a particular purpose. We rely on the following legal bases in our marketing activities: Consent Wherever possible, we will ask for your consent to send you marketing information. We will do this through a clear statement of what you will receive and allow you to select only those channels that you wish to hear from us by. For example, if you donate online to one of our emergency appeals, you will be asked whether you would like us to keep in touch about our projects, and fundraising activities. You will also be asked which channel(s) of communication you would like us to use (with a choice of email, SMS, post and telephone being offered).

How long your personal information will be kept

We will hold your personal information on our systems for as long as is necessary for the relevant activity. If you request that we stop sending you marketing materials we will keep a record of your contact details and appropriate information to enable us to comply with your request not to be contacted by us.

Your rights

Under the General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:

• fair processing of information and transparency over how we use your use personal information
• access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address
• require us to correct any mistakes in your information which we hold
• require the erasure of personal information concerning you in certain situations
• receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
• object at any time to processing of personal information concerning you for direct marketing
• object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
• object in certain other situations to our continued processing of your personal information
• otherwise restrict our processing of your personal information in certain circumstances.

• email us on info@baitussalam.org or call us at UAN 021-111-298-111
• let us know the information to which your request relates.

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who need to know it in order to have a genuine business . Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How to complain

Email us on info@baitussalam.org or call us at UAN 021-111-298-111,

Changes to this privacy notice

This privacy notice was published on June 2020. We may change this privacy notice from time to time; when we do, we will inform you via website notification pop up.

Our Disclosure of Your Personal Data and Other Information

Baitussalam is not in the business of selling your information. We consider this information to be a vital part of our relationship with you. There are, however, certain circumstances in which we may share your Personal Data with certain third parties without further seeking your prior consent or issuing any notice to you, as set forth below: Business Transfers: As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets. Related Companies: We may also share your Personal Data with our Related Companies for purposes consistent with this Privacy Policy. Agents, Consultants and Related Third Parties: Baitussalam, like many businesses, sometimes hires other companies to perform certain business-related functions. Examples of such functions include mailing information, maintaining databases and processing payments. When we employ another company to perform a functions of this nature, we only provide them with the information that they need to perform their specific function. Legal Requirements: Baitussalam may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Baitussalam, (iii) act in urgent circumstances to protect the personal safety of users of the Services or the public, or (iv) protect against legal liability.

Children

For information specific to privacy of the Personal Data of children under 13 years of age, please read the “Children’s Privacy Policy” below. Links to Other Web Sites: This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by Baitussalam (the “Third Party Sites”). The policies and procedures we described here do not apply to the Third Party Sites. The links from the Services do not imply that Baitussalam endorses or has reviewed the Third Party Sites. We suggest contacting those sites directly for information on their privacy policies.