Privacy policy

Last reviewed: date this privacy policy was reviewed and approved

Who we are

Abul Khair Welfare Organization, registered with the Ministry of Social Welfare, Government of Bangladesh, Reg No. Brahman 615/24. Our address is Baishmouja River Bank, Birgaon, Nabinagar, Brahmanbaria 3410, Bangladesh. This website is abulkhairwelfare.org. For anything in this policy, write to contact@abulkhairwelfare.org or call +88 01768 003 747.

What we collect and why

Contact, volunteer, partnership and report request forms. When you complete a form we collect the fields you fill in, which may include your name, email address, phone number, location, organization, skills, availability and your message. We collect this to answer you and to keep a record of the request. Each form also records the time of submission, the page you sent it from, any campaign parameters in the link you followed, and a one-way hashed version of your IP address which we use only to stop automated abuse. The hash is salted daily and cannot be reversed to identify you.

Newsletter signups. If you ask for our reports by email we store your email address and the date you asked. We do not use a third-party email marketing service, and your address is not shared with one.

Donations. Donations are handled by GiveWP running on this website, together with the payment gateway you choose. The donation record includes your name, email address, phone number, address, amount, currency, date, payment method and any comment or program designation you add. We need this to process the gift, issue your receipt, and report to you on what your money did. We never see or store your full card number; that is handled by the payment gateway.

Analytics. We run Google Tag Manager, container GTM-P429KJQ7, which loads analytics only after you accept analytics cookies. If you decline, no analytics cookie is set and no analytics event is sent. Analytics tells us which pages are read and where visitors come from; it does not tell us who you are.

Server logs. Our host records standard web server logs, including IP address, browser and requested page, for security and troubleshooting.

We do not run comments on this website, so we collect no comment data and use no avatar service.

Cookies

A cookie records your choice about analytics so that we do not ask you on every page. Analytics cookies are set only if you accept. GiveWP sets a session cookie during a donation so that your form does not lose its contents. If you log in as a donor or an administrator, WordPress sets login and screen preference cookies. No advertising or profiling cookies are used on this website.

Embedded content

Some pages embed a map and, where relevant, content from our Facebook page. Embedded content from another website behaves as if you had visited that website, and the provider may set its own cookies and track your interaction with the embed. We keep embeds to a minimum for this reason.

Who we share data with

Our website host, which stores the site and its database. GiveWP and the payment gateway you use, to take your donation and send your receipt. Google, for tag management and analytics, only where you have accepted analytics. We do not sell, rent, swap or lend personal data to anybody, and we do not publish donor names without asking first.

How long we keep it

Form submissions and volunteer applications are kept in our leads log for two years from your last contact with us, then deleted. Newsletter addresses are kept until you unsubscribe. Donation records are kept for as long as our accounting and reporting obligations require, and after that only in the aggregate figures we publish. Server logs are kept for the period set by our host.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to erase it. Write to contact@abulkhairwelfare.org and we will respond within thirty days. We may need to keep a minimum record of a donation for accounting purposes even after an erasure request, and we will tell you if that applies.

You can withdraw your consent to analytics at any time by clearing this site's cookies and choosing again, and you can unsubscribe from our emails from the link in any of them.

Children

This website is not aimed at children and we do not knowingly collect personal data from children through it. Where a child appears in a photograph on this site, a parent or guardian has agreed to it, and we remove any image on request from the family.

Security and breaches

The website runs over HTTPS. Access to the leads log and donation records is limited to named administrators. If a breach occurs that affects your personal data we will tell you and the relevant authority as quickly as we are able, and we will say plainly what was affected.

Changes to this policy

If we change how this website handles personal data we will update this page and change the review date at the top. This policy is being reviewed by counsel before it is treated as final: legal review and approval of the privacy policy, terms and donation refund policy