We ask that you read this Privacy Notice carefully, as it contains important information about who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information, and how to contact us and the relevant supervisory authorities if you have a complaint.
We collect, use and are responsible for certain personal information about you. When we do so, we are regulated under applicable data protection legislation, including the General Data Protection Regulation (GDPR), and we are responsible as the “controller” of that personal information for the purposes of those laws.
Who We Are
Al Mustafa Canada® is a registered charity in Canada, Registration No. 744029711 RR 0001.
Our registered office is:
Unit 303-55 City Centre Dr
Mississauga, ON L5B 1M3
Canada
This Privacy Policy applies to the above entity and relates to information obtained by us for which we are the Data Controller.
Our Purpose
We work to provide an extensive range of essential services to people in need across Pakistan. From healthcare and education to food, water and emergency relief, our strong network enables us to support vulnerable communities across the country.
Worldwide poverty remains an ongoing issue, which is why we are committed to providing sustainable, long-term solutions. With your generous support, our aid reaches vulnerable communities in Africa, Sri Lanka, Kashmir, Bangladesh and Gaza.
Over the last 35 years, we are proud to have provided humanitarian relief and development projects to individuals, families and communities in some of the poorest regions of the world. Thanks to the continued support of our generous donors, we have been able to highlight and respond to the suffering, injustice and inequality faced by many of these communities.
Personal Information We Collect About You
We only collect personal data that is relevant to the type of interaction you have with us. Regardless of how you interact with us, the information we collect will be limited to what is necessary for the purpose for which we require it.
For example, when you become a member, make a donation or subscribe to one of our services, we may collect and retain your personal information.
Under these circumstances, we may process details such as:
Your name
Postal address
Email address
Telephone or mobile number
Bank account or payment details where required to process donations
Whether you are a taxpayer, where necessary to claim Gift Aid
If you participate in an event, we may, with your permission, take your photograph, record video footage or conduct an interview with you.
We may also gather information about you that is publicly available. This may include your name, contact details, views or positions you have publicly expressed.
Sensitive Personal Data
If you apply for a role with us, we may collect “sensitive personal data” for the purposes of equality and diversity monitoring, where permitted by applicable law.
How Your Personal Information Is Collected
We may collect your personal data in the following circumstances:
When you give it to us directly
For example, when you become a member, make a donation, subscribe to one of our services or communicate with us.
When you give it to us indirectly
For example, when you participate in a campaigning activity with a partner organisation. The partner may pass your data to us where you have indicated that you wish to support us and have provided the appropriate consent.
When you use social media
When you interact with us through social media platforms such as Twitter, LinkedIn and Facebook, we may obtain personal data depending on your settings and the privacy policies of those social media and messaging services.
When information is publicly available
We may gather publicly available information where your activities are relevant to our work, such as where you represent an organisation that we may wish to work with or where you are a public figure.
How and Why We Use Your Personal Information
We hold and process personal data for a number of reasons, including:
To maintain records of donations made, actions taken by you and communications with you.
To send marketing information about our projects, fundraising activities and appeals where we have your consent or are otherwise permitted to do so.
To support volunteers involved in fundraising events.
To record campaigning activities.
To claim Gift Aid on eligible donations.
To fulfil contractual obligations entered into with you.
To comply with our legal and regulatory obligations.
To manage and administer our organisation.
To ensure that we do not send unwanted communications where you have informed us that you do not wish to be contacted.
These purposes are underpinned by a “legal basis” under applicable data protection legislation.
Explaining the Legal Bases We Rely On
Data protection law provides a number of different legal bases that organisations can rely upon when collecting and processing personal data. When collecting your personal data, we will make clear, where appropriate, which information is necessary for a particular purpose.
We rely on the following legal bases in our marketing activities.
Consent
Wherever possible, we will ask for your consent before sending you marketing information.
We will provide a clear explanation of what you will receive and allow you to select the communication channels through which you wish to hear from us.
For example, if you donate online to one of our emergency appeals, you may be asked whether you would like us to keep in touch about our projects, fundraising activities and appeals. You may also be asked which communication channels you would like us to use, such as email, SMS, post or telephone.
Legitimate Interest
In specific situations, we may process your data to pursue our legitimate interests where this would reasonably be expected and would not materially impact your rights, freedoms or interests.
Our use of legitimate interests may include:
Sending direct marketing information by post to keep our supporters updated about our projects, fundraising activities and appeals. We will only do this where we have reason to believe the information may be of interest to you.
Making it easy for you to opt out of communications or request that we update your personal information.
Analysing your previous support for us to offer relevant ways for you to support our work in the future.
If you do not select any communication consent options but have previously provided consent, your previous preferences may continue to apply. If you subsequently change your preferences, we will treat your new choices as your updated preferences.
Legal Compliance
For activities other than marketing, we may rely on different legal bases.
Where the law requires us to collect and process your data, we will do so to comply with our legal obligations.
For example, where you participate in the Gift Aid scheme, we may process your information for the purposes of submitting a Gift Aid claim to HMRC.
Consent
In certain circumstances, we may ask for your consent before collecting or processing your personal data.
Legitimate Interest
In many situations, we need personal data to carry out tasks, administer our organisation, plan and run campaigning activities and otherwise operate effectively.
Public Interest
In limited circumstances, we may process data where this is necessary for reasons of public interest.
This may include collecting and processing data to help prevent crime or dishonesty, ensure fairness in our practices through equality and diversity monitoring, or safeguard the wellbeing of people with whom we work.
Who We Share Your Personal Information With
We may share personal information with:
Non-governmental organisations that help us deliver some of our projects.
Contractors and service providers that manage or support our website and other services.
We only allow our service providers to handle your personal information where we are satisfied that they have appropriate measures in place to protect it. We also impose contractual obligations on service providers to ensure that they only use your personal information to provide services to us or on our behalf.
We may disclose and exchange information with law enforcement agencies and regulatory bodies where necessary to comply with our legal and regulatory obligations.
How Long Your Personal Information Will Be Kept
We will retain your personal information on our systems for as long as is necessary for the relevant activity or purpose.
For example, we may retain records relating to donations subject to Gift Aid for at least seven years in order to comply with HMRC requirements.
If you ask us to stop sending you marketing materials, we may retain a record of your contact details and relevant information to ensure that we comply with your request not to be contacted.
Transferring Your Personal Information Outside the EEA
To deliver certain services, it may sometimes be necessary for us to share your personal information outside the European Economic Area (EEA), for example, with non-governmental organisations that help us deliver some of our projects.
Where this occurs, we will take appropriate steps to ensure that your personal information is protected in accordance with applicable data protection legislation. This may include the use of the European Commission's Standard Contractual Clauses or other appropriate safeguards where applicable.
Your Rights
Under applicable data protection legislation, you may have a number of important rights in relation to your personal information.
These may include the right to:
Receive fair and transparent information about how we use your personal information.
Access your personal information and certain supplementary information.
Ask us to correct inaccurate or incomplete personal information.
Request the erasure of your personal information in certain circumstances.
Receive personal information that you have provided to us in a structured, commonly used and machine-readable format and, in certain circumstances, transmit it to another organisation.
Object at any time to the processing of your personal information for direct marketing purposes.
Object to certain decisions being made solely by automated means where they produce legal or similarly significant effects.
Object, in certain circumstances, to our continued processing of your personal information.
Request that we restrict the processing of your personal information in certain circumstances.
For further information about these rights, including the circumstances in which they apply, please refer to the guidance published by the relevant data protection supervisory authority.
Exercising Your Rights
If you would like to exercise any of your rights, please:
Email, call or write to us.
Provide appropriate proof of your identity and address where reasonably required, such as a copy of your driving licence or passport and a recent utility or credit card bill.
Clearly identify the information or processing to which your request relates.
Keeping Your Personal Information Secure
We have appropriate security measures in place to help prevent personal information from being accidentally lost, misused, accessed without authorisation, altered or disclosed improperly.
We limit access to your personal information to those who have a genuine business need to access it. Anyone processing your information will do so only in an authorised manner and is subject to a duty of confidentiality.
We also have procedures in place to deal with suspected data security breaches. Where legally required, we will notify you and the applicable regulator of a suspected data security breach.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time.
Where we make changes, we will notify you through a website notification or pop-up and publish the updated Privacy Notice on our website:
How to Contact Us
Please contact us if you have any questions about this Privacy Notice or the personal information we hold about you.
