Privacy Policy

1. Information We Collect

We collect the information you voluntarily provide through our contact form: your name, email address, subject, and message. To understand how an enquiry reached us, we may also store its landing page, referring page, campaign parameters (such as UTM source and campaign), an anonymous session identifier, device category, page URL, and analytics-consent status. Our server may keep standard technical logs (such as IP address and browser type) for security purposes. We do not collect or store payment-card or bank-account details on this website — donations are made directly through your own bank or mobile-wallet app.

2. How We Use Your Information

We use your details to respond to your enquiry, acknowledge your support, understand which outreach channels are effective, improve the website, and maintain records required for transparency, audit, and regulatory compliance. We never sell, rent, or trade your information, and we do not use it for third-party advertising.

3. Legal Basis & Consent

By submitting information through this website, you consent to its processing as described in this policy. We process personal data in accordance with the applicable laws of the Islamic Republic of Pakistan, including the Prevention of Electronic Crimes Act, 2016 (PECA), and we will align with Pakistan’s data-protection legislation as and when it comes into force.

4. Cookies & Third-Party Services

This site uses Google Analytics 4 to measure visits and important actions, and Microsoft Clarity to understand aggregated interaction patterns such as heatmaps and session recordings. Analytics storage is denied by default and is enabled only when you allow analytics through our privacy banner; advertising storage remains disabled. Form fields and other sensitive input content are not intentionally sent as analytics event parameters, and Clarity masks sensitive form content by default. You may decline analytics and continue using the website, or change your choice later through the Analytics preferences link in the footer.

Our Urdu pages are written by us and served from this website at warisalishah.org/ur/. We no longer use Google Translate, so switching language sets no third-party cookie and sends no page content to any translation service. Analytics data is handled under Google’s Privacy Policy and Microsoft’s Privacy Statement. Your theme, language, analytics choice, and a short-lived attribution record may be stored locally in your browser.

5. Data Storage & Security

Submissions are stored on secured hosting and access is restricted to authorised Foundation administrators. We apply reasonable technical and organisational safeguards to protect your data against unauthorised access, loss, or misuse. While no online transmission can be guaranteed 100% secure, we take its protection seriously.

6. Data Retention

We keep enquiry records only for as long as necessary for the purpose for which they were collected. Certain records (such as donation or financial records) may be retained longer where required by law for transparency and audit under the Sindh Charities Act, 2019 and applicable financial regulations.

7. Your Rights

You may request access to, correction of, or deletion of the personal data we hold about you. To delete your data, follow the steps on our Data Deletion page. We aim to respond to reasonable requests within 30 days.

8. Children’s Privacy

This website is not directed at children, and we do not knowingly collect personal data from minors. If you believe a child has provided us information, please contact us and we will remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any material change will be reflected by the “Last updated” date shown at the top of this page.

10. Contact

For any privacy questions or to exercise your rights, email us at info@warisalishah.org or call +92 308 2966680. See our Data Deletion page for the full removal process.