Last updated: [31 March 2025]

Palestine Aid (“we”, “us”, “our”) is committed to protecting the privacy and personal data of all visitors, donors, beneficiaries, partners, volunteers, and stakeholders who interact with our website and services.

This policy explains how we collect, use, store, share, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and best practice guidelines from the Charity Commission.

By using our website or providing your information to us, you agree to the practices described in this policy.

1. Who We Are

Palestine Aid

Registered Name: Filastin Aid

Email: info@palestineaid.org

Website: www.palestineaid.org

Palestine Aid (Filastin Aid) acts as the Data Controller, meaning we determine how and why your personal data is used.

2. What Personal Data We Collect

We collect and process different types of information depending on your interaction with us.

a. Information You Provide Directly

• Name, address, telephone number, and email address

• Donation information (amount, method, Gift Aid status)

• Payment information (processed securely via third-party providers such as Stripe or PayPal — we do not store card details)

• Identification documents, such as passport details, national ID, or proof of address (for verification, travel, deployment, safeguarding, or compliance requirements)

• Volunteer and deployment applications

• Programme registrations

• Safeguarding-related information where required

• Photos, videos, or consent forms (for campaigns, events, or programmes)

b. Information Collected Automatically

• IP address

• Device type and browser

• Cookies and tracking data

• Website usage analytics (Google Analytics, Facebook Pixel, etc.)

c. Special Category (Sensitive) Data

We only collect sensitive information where absolutely necessary for:

• Safeguarding

• Welfare assessments

• Vulnerability scoring

• Programme eligibility

• Incident reporting

This information is collected with strict consent and used only for legitimate charitable purposes.

3. How We Use Your Personal Data

We use your information to:

a. Deliver Our Charitable Work

• Process donations and Gift Aid

• Provide support to beneficiaries

• Manage programmes in the UK, Egypt, Gaza, and other regions

• Verify identity for safeguarding and compliance

• Communicate project updates, reports, and impact summaries

b. Manage Operations

• Respond to queries and requests

• Register volunteers, team members, and deployment applicants

• Maintain internal records and audit trails

• Ensure compliance with UK charity law, OFSI, HMRC, and other regulatory frameworks

c. Marketing & Communications

• Send newsletters, appeals, and updates (only with your consent)

• Share project impact stories

• Improve website functionality and user experience

You may opt out of marketing communications at any time.

4. Lawful Basis for Processing

We process data under the following lawful bases:

• Consent – for newsletters, photos/videos, and some programme forms

• Contract – where you sign up for a service, volunteer role, or deployment

• Legal Obligation – Gift Aid, financial audits, safeguarding, and regulatory compliance

• Legitimate Interests – fundraising, donor engagement, website improvement

• Vital Interests – in cases of safeguarding or immediate welfare concerns

5. How We Store and Protect Your Information

We take data security seriously.

Your information is stored on secure systems such as:

• Encrypted cloud platforms (Microsoft, Google Workspace, Airtable)

• Secure CRM and fundraising systems (e.g., Stripe, PayPal, MuslimGiving, FundraiseUp)

• Restricted-access folders for sensitive files

Security measures include:

• Strong access controls and role-based permissions

• Encryption of data in transit and at rest

• Regular audits and compliance checks

• Mandatory safeguarding and confidentiality rules for staff

6. Sharing Your Data

We only share personal data when necessary and lawful, including with:

• Payment processors (e.g., Stripe, PayPal)

• Regulatory bodies (Charity Commission, HMRC, OFSI)

• Approved partners delivering aid on our behalf

• IT service providers such as cloud storage and CRM systems

• Emergency safeguarding authorities (where legally required)

We do not sell, trade, or rent your data to any third party.

Where data is transferred outside the UK/EU (e.g., to Egypt or Gaza for beneficiary work), it is done with strict safeguards, secure systems, and only where necessary for project delivery.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate information

• Request erasure (“right to be forgotten”)

• Restrict or object to processing

• Withdraw consent at any time

• Request a copy of your data

• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact:

info@palestineaid.org

8. Cookies

We use cookies to improve your experience, analyse website traffic, and personalise content.

You may disable cookies via your browser settings at any time.

A full Cookie Policy can be provided on request.

9. Retention of Data

We only keep personal data for as long as necessary:

• Donation and finance records: 6 years

• Safeguarding records: in line with statutory requirements

• Beneficiary and welfare case files: as required for programme and audit purposes

• Volunteer records: for the duration of involvement + 3 years

• Photos/videos: until consent is withdrawn

After this period, data is securely deleted or anonymised.

10. Changes to This Policy

We may update this policy to reflect legal or operational changes.

The “Last updated” date will always be shown at the top.

11. Contact Us

If you have questions about this policy or how your data is used, please contact:

Data Protection Lead

Palestine Aid (Filastin Aid)

Email: info@palestineaid.org

Website: www.palestineaid.org