Privacy policy

1. Who is responsible for your data

Al Mabarrah International Charitable Association, a public benefit association licensed by the Department of Community Development, Abu Dhabi, Licence no. NPO-A-M-104, with its registered office at: 116 Khadim Bin Butti Al Hamed Street, The Landmark Building, 34th floor, Abu Dhabi, United Arab Emirates.

For any request concerning your personal data, write to us at info@almabarrah.ae and write "Data protection" in the subject line.

2. The data we collect

• When you donate: your name, e-mail address or phone number, the amount and type of the donation, the project chosen, and the transaction number and date.
• Card details: these do not pass through the Association's servers and are not stored by it; they are entered on the secure payment page provided by Abu Dhabi Islamic Bank through the Mastercard gateway.
• When you apply for assistance: the data and documents the applicant submits so that their eligibility can be assessed.
• When you volunteer, contact us or subscribe to the newsletter: your name, contact details and the content of your message.
• When you sign in to the Donor space: your e-mail address or phone number, the verification code sent to you, and your donation history with the Association.
• Limited technical data: what is necessary to operate and protect the website, such as the IP address and browser type in server logs.

3. Why we use it

• To process the donation and to issue the receipt and send it to you.
• To assess applications for assistance and verify eligibility.
• To respond to your messages, enquiries and requests.
• To meet the Association's financial, regulatory and audit obligations.
• To protect the website from fraud and misuse.
• To send the newsletter, only to those who have subscribed to it.
• To prepare aggregated internal reports that do not reveal the identity of individuals.

4. The basis on which we process data

We process your data to carry out what you have asked of us (your donation, application or message), to comply with a legal obligation to which the Association is subject as a licensed association, or with your consent where the matter is optional, such as the newsletter. You may withdraw your consent at any time.

5. Privacy of beneficiaries

The Association does not publish the names, data, images or documents of beneficiaries except with explicit and approved consent, and in a manner that preserves their dignity and privacy. Nothing that may reveal the identity of a beneficiary is displayed, such as:

• their full name, identity number, phone number or detailed address.
• medical or financial documents.
• images of children, patients or families without the clear consent of the person concerned or their guardian.

6. With whom we share data

The Association does not sell anyone's data, and shares it only to the extent necessary with:

• Abu Dhabi Islamic Bank and the Mastercard gateway, to complete payments.
• the cloud hosting provider Microsoft Azure, which hosts the website and its data in data centres within the UAE.
• the e-mail and messaging service providers through which we send receipts, replies and verification codes.
• the partners implementing projects, only as necessary for implementation and without the donor's data unless the donor permits.
• auditors and legal and financial advisers who are bound by confidentiality.
• the competent regulatory and government authorities, where there is a legal obligation or an official request.

7. Data protection

We protect data through technical and organisational measures, including: encrypting the connection to the website, restricting access rights to the staff concerned, not storing card details, keeping documents securely, and reviewing these measures periodically.

8. Retention period

• Donation records and receipts: for the period required of the Association by financial and regulatory rules.
• Applications for assistance: for as long as the application is being assessed and assistance is being provided, and thereafter as required by the applicable rules.
• Contact messages: for the period necessary to handle and follow them up.
• Newsletter subscription: until you unsubscribe.

9. Your rights

Under the Personal Data Protection Law, you are entitled to request:

• access to the data we hold about you and information on how it is used.
• the correction or updating of your data.
• the deletion of your data or the restriction of its processing, unless a rule obliges us to retain it.
• to object to the processing of your data, or to withdraw your consent.
• to lodge a complaint through the page Complaints and reports.

Send your request to info@almabarrah.ae. We will respond within 15 working days at most, and we may ask for proof of your identity before acting on it.

10. Cookies

The website uses a limited number of cookies and storage technologies that are necessary for it to function, and does not use advertising tools to track visitors. Details are in the Cookie policy.

11. Updates to this policy

We may update this policy when our services or the applicable rules change, and we will publish the updated version here with the date of the last update.

12. The Al Mabarrah mobile app

This policy also applies to the "Al Mabarrah" app on Android and iOS. The app processes only the following data:

• When you donate: your name and e-mail address, and your phone number if you enter it, to issue the receipt and send it to you.
• When you sign in: your e-mail address and the verification code sent to it, and then your donation history, receipts and annual statement.
• Notifications: if you allow them, your device's notification token is registered with the Association through Google's Firebase Cloud Messaging service, to send notifications about campaigns and your donations. You may turn them off in your phone settings at any time.
• Card details: the app neither sees nor stores them; they are entered on the secure payment page of the Mastercard gateway.
• On your device: the app stores your sign-in session in encrypted form and your chosen language. It does not use advertising tools or cross-app tracking, and does not request access to your location, camera or contacts.
• Deleting your account: go to "My account", then "Privacy and settings", then "Delete account". Your name, e-mail address, phone number and device tokens are deleted. The donation amounts remain in the Association's records without your identity, because financial rules require it to keep them. You may also request deletion by writing to info@almabarrah.ae.