Privacy Policy

Last updated: 19 September 2026

This policy explains how personal information obtained through sulaimaniyyah.org, operated by Sulaimaniyyah Humanitarian Relief Association, is collected, used, shared, stored and protected.

This general policy does not replace any specific privacy notice that may need to be provided during a donation, volunteer application, communication request or another particular activity.

Data Controller

Sulaimaniyyah Humanitarian Relief Association is responsible for the processing of personal information.

Information We Collect

Depending on the nature of the interaction, the following information may be collected during communication, volunteer application and donation processes on the website:

• full name,
• email address,
• form and message content,
• donation records such as the donation date, amount and transaction reference,
• technical information such as IP address, browser information, access time and security logs.

Only information necessary to carry out the relevant process is requested. Full card numbers, CVV codes, PINs, online banking passwords and one-time verification codes are not requested by email or through general contact forms.

Purposes for Using Information

Depending on the nature of the interaction and applicable law, personal information may be processed for the following purposes:

• responding to communication requests,
• evaluating volunteer applications and contacting applicants,
• processing, verifying and recording donations,
• reviewing donation cancellation or refund requests,
• meeting financial, administrative and legal obligations,
• maintaining the operation and security of the website and protecting it against misuse.

Processing is based, where appropriate, on the individual’s consent, the establishment or performance of a transaction, legal obligations, or legitimate purposes that respect the rights of the Association and the individuals concerned.

Sharing of Information

Personal information is not sold for commercial purposes. It may be shared, only to the extent necessary to carry out the relevant process and subject to appropriate safeguards, with the following categories of recipients:

• banks and payment service providers for processing donations,
• website hosting, maintenance and security service providers,
• email and communication service providers,
• accountants and auditors for financial records and audits,
• competent public authorities where there is a legal request or obligation.

Retention and Security

Personal information is retained for as long as necessary for the purpose for which it was obtained and for any statutory retention periods that apply to the Association. When the relevant period ends, the information is deleted, destroyed or anonymised in accordance with applicable rules.

Appropriate technical and administrative measures are used to reduce the risks of unauthorised access, loss, alteration and unlawful disclosure. Access is limited to authorised persons who need the information for their duties. Absolute security cannot be guaranteed for any transmission over the internet.

Cookies and Technical Data

Essential cookies and similar technical tools may be used to keep the website secure and functioning properly. If non-essential analytics or functional tools are used, visitors are informed and given a choice to the extent required by applicable law.

Cookies may be deleted or blocked through browser settings. Blocking essential cookies may prevent certain parts of the website from functioning as expected.

Information About Children

The website is not intended to knowingly collect personal information from persons under the age of 18. If such information is found to have been submitted, appropriate deletion measures will be taken unless there is a legal obligation to retain it. If information is required as part of an activity involving children, appropriate information and any necessary parent or legal guardian procedures will be applied separately.

Rights of Individuals

Under applicable data protection law, individuals may:

• ask whether their personal information is being processed,
• request information about the information processed and the purposes for which it is used,
• request correction of inaccurate or incomplete information,
• request deletion or restriction of processing where the relevant conditions are met,
• request information about the categories of recipients with whom the information has been shared,
• withdraw consent where processing is based on consent and object to processing where applicable.

Requests may be sent to [email protected]. Necessary and proportionate additional information may be requested to verify the applicant’s identity and handle the request securely.

Other Websites

The website may contain links to pages operated by other organisations. The privacy policies of those websites apply when they are visited. The Association is not responsible for the data processing practices of websites outside its control.

Changes to This Policy

This policy may be updated when the website’s practices or applicable law change. The current version is published on this page and the last updated date is revised. If the purpose for using personal information or the scope of sharing changes materially, the necessary information will be provided before the new processing begins and separate consent will be obtained where required.

Contact

For questions about this Privacy Policy or the processing of your personal information, contact us at [email protected] or write to Plot 92 F C D A, Owner Occupier, Kubwa, Abuja, Nigeria.