Privacy Policy

i Introduction

This privacy policy governs how we collect, use, store and share the personal data we obtain through our website, our applications and our programme registration forms.

By using our services or registering for our programs, you confirm that you have read this policy and agree to it.

This policy applies to: The association's website, the programme registration forms, the volunteering forms, the contact forms, and any digital service the association provides.

1 The data we collect

We collect only the personal data needed to deliver the services requested, namely:

a. Programme registration data:

• Full name and mobile number
• National ID or residency number (to verify eligibility)
• Gender and age (for programs with specific conditions)
• Level of education or qualification (for some training programs)

b. Contact data:

• Name, mobile number and email address
• The subject and content of your message

c. Volunteering data:

• Identity and contact data
• Level of education and field of specialisation
• Availability and volunteering preferences

d. Usage data (technical):

• IP address, browser type and operating system
• Pages visited and time spent browsing (via Google Analytics)
• Cookies needed for the site to function

2 How do we use your data?

We use the data we collect for the following purposes only:

• Processing registration applications in the association's programs and initiatives
• Contacting you about your application, your enquiry, or when the programme begins
• Issuing completion certificates and participation records
• Improving our services and our programs, on the basis of aggregate data analysis
• Meeting legal requirements and governance reporting to the supervising body (NCNP)
• Sending notifications and updates about the association and its programs (you can unsubscribe at any time)

3 Do we share your data?

We do not sell or rent your personal data to any third party. We may share data in the following limited cases:

• Partners delivering the programs: such as the Ministry of Human Resources or accredited training providers, solely for the defined purposes of the programme and with the participant's knowledge.
• National Center for Non-Profit Sector Development (NCNP): Aggregate, non-identifying statistical data for governance reporting.
• Technical service providers: such as our hosting provider and our analytics tools (Google Analytics), under their own privacy policies.
• Judicial or regulatory authorities: Where the law requires it, and under duly issued official orders.

4 How do we protect your data?

We take appropriate technical and organisational measures to protect your data, including:

• SSL/TLS encryption for all traffic between your browser and the site's servers
• Restricted access to personal data, limited to authorised staff and volunteers
• Secure storage of data on trusted platforms (Supabase) with recognised security safeguards
• Regular review of our security and privacy procedures
• Deletion of data no longer needed once the purpose for holding it has ended

How long we keep data: We keep personal data for as long as is needed to fulfil the stated purposes or to meet legal governance requirements, after which it is deleted or anonymised.

5 Your rights

Under Saudi legislation and the principles of data protection, you have the right to:

To exercise any of these rights, contact us by email or through the contact form and we will respond within 10 working days.

6 Cookies

Our site uses cookies to improve the browsing experience and to analyse usage. They are:

• Essential cookies: to make the site work properly (sign-in, sessions)
• Analytics cookies: Google Analytics, to understand usage patterns and improve the content

You can control cookies through your browser settings. Disabling some of them may affect your experience of the site.