Privacy Policy

Jahlal Foundation ("we", "us", "our") respects your privacy. This policy explains what personal information we collect through this website, how we use it, and the rights you have under UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Who we are

Jahlal Foundation is based in London, United Kingdom, and is the organisation responsible for the personal information collected through this website. You can contact us at info@jahlalfoundation.com or on 07368 219 648.

2. Information we collect

We collect only the information you choose to give us:

• Contact and enquiry forms: your first and last name, email address, telephone number, the subject of your enquiry and your message.
• Telephone and email: any details you share when you contact us directly.
• Technical information: like most websites, our web server may record your IP address, browser type and the pages requested, for security and to keep the site running.

Please do not include sensitive information, such as health details, in a message unless it is needed for your enquiry. If you do choose to share it, we will treat it with particular care.

3. How we use your information

• To respond to your enquiry and provide the information or support you ask for.
• To keep a record of our communications with you.
• To keep the website secure and working properly.
• To meet our legal and regulatory obligations.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

4. Our lawful basis

We process your information because:

• you have given your consent, by ticking the privacy box when you send a form;
• it is in our legitimate interests to respond to enquiries and keep our website secure; and
• in some cases we are required to do so by law.

Where we rely on consent, you can withdraw it at any time by contacting us.

5. Who we share it with

We only share personal information where necessary, and only with:

• service providers who help us run the website and our email, who act on our instructions; and
• public authorities or advisers, where the law requires it or where we need to protect our legal rights.

Donations. If you donate through our online payment link, your payment is handled by our payment provider, SumUp, on its own website. We do not see or store your card details. Please read SumUp's privacy notice for how it uses your information.

6. International transfers

Some of our service providers may process information outside the UK. Where that happens, we take steps to make sure your information receives an appropriate level of protection, as the law requires.

7. How long we keep it

We keep personal information only for as long as we need it for the purposes above, including any legal, accounting or reporting requirements. When it is no longer needed, we delete it or anonymise it.

8. Keeping it secure

We use reasonable technical and organisational measures to protect your information from loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. Your rights

Under UK data protection law you have the right to:

• be told how your information is used and ask for a copy of it;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information in certain circumstances;
• ask us to restrict, or object to, our use of your information in certain circumstances;
• ask for your information in a portable format, where this applies; and
• withdraw your consent at any time, where we rely on it.

To use any of these rights, email info@jahlalfoundation.com. We will respond within one month.

10. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Links to other websites

Our website may link to other websites, such as social media and our payment provider. We are not responsible for their content or privacy practices, so please read their policies.

12. Cookies

This website uses only essential cookies: a session cookie and a security token (XSRF-TOKEN) that keep your visit together and protect our forms from misuse. They last up to 2 hours of inactivity and do not track you across other websites, so the law does not require your consent for them. We do not use analytics or advertising cookies. You can control or delete cookies in your browser settings, but blocking essential cookies may stop forms such as the contact form from working.

To load quickly, the website also fetches fonts, icons and code libraries from Google Fonts and the jsDelivr content delivery network, and some images from Unsplash. Those providers receive your IP address and basic browser details when your browser requests the files, and we do not control how they use it.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.