1. Who is responsible for your data

For the purposes of PDPL, Al Jisr Foundation is the data controller for personal data collected through this website and related application forms. If you have questions about this policy or how we handle your data, you can contact us at info@aljisrfoundation.org.

2. Personal data we collect

We collect personal data that you provide directly to us when you use our website or submit forms, including:

• Contact details such as name, email address and phone number when you use the contact form.
• Volunteer information such as date of birth, nationality, residence, education, employment status, skills, languages, availability and your previous volunteering experience.
• Partner request information such as project brief, objectives, risks, budget and funding ranges, legal status of the organisation, and contact details.
• Aid application information such as identity data (for example civil ID or passport number), contact and location details, marital and housing situation, household composition, work and income details, and supporting documents (for example bills, official letters, health or legal documents) that you choose to upload.
• Technical data such as your language preference (via a simple cookie) and basic device and browser information collected when you access the site.

3. How we use your data

We use the personal data we collect for the following purposes:

• Assessing and responding to aid applications, including reviewing eligibility, contacting applicants, and managing follow-up.
• Managing volunteer registrations, including assessing suitability, matching volunteers to activities, and staying in contact with volunteers.
• Reviewing partnership proposals and communicating with potential partners about projects and collaboration opportunities.
• Responding to general enquiries sent via the contact form.
• Operating and improving our website, including understanding how it is used and ensuring it functions correctly in Arabic and English.

4. Legal basis and consent under Oman PDPL

In most cases we rely on your express consent when you submit our forms to collect and process your personal data for the purposes described above. On certain forms we ask you to tick a consent box before submitting. By doing so, you confirm that you understand how your data will be used and agree to that processing.

Some of the information you provide, particularly in aid applications, may be considered sensitive personal data under PDPL (for example health, financial hardship or legal circumstances). We only ask for this information when it is necessary to assess your situation and provide support, and we process it based on your explicit consent and in accordance with our mandate as a registered charity NGO.

You may withdraw your consent at any time by contacting us using the details below. If you withdraw consent, this will not affect processing that has already taken place, but it may affect our ability to continue providing certain services or assessing your request.

5. International transfers

To operate our website and manage forms efficiently, we use reputable cloud service providers that may store or process your data outside the Sultanate of Oman, for example in the European Union. We also use secure email services to send notifications and confirmations.

We take reasonable steps to ensure that your personal data is protected with appropriate technical and organisational measures and that service providers are bound by confidentiality and data protection obligations.

6. Cookies and preferences

Our website uses a small number of cookies. At present we use:

• Language preference cookie (`lang`): remembers whether you prefer to view the site in Arabic or English. This cookie is stored for up to one year and is not used for advertising, analytics, or tracking across other websites.

You can delete or block cookies through your browser settings at any time. If you do so, the site will simply fall back to choosing a language based on your browser settings and our default language.

7. Data security and retention

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These measures include access controls, encrypted connections, and limiting access to staff and volunteers who need the information to perform their roles.

We keep personal data only for as long as necessary to fulfil the purposes described in this policy and to meet legal or reporting requirements. After that, we delete or anonymise it where appropriate.

8. Your rights

Under the Oman PDPL you may have rights to:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete personal data about you.
• Request deletion of your personal data where it is no longer needed, or object to certain types of processing.
• Withdraw your consent to processing where we rely on consent.

To exercise these rights, please contact us at info@aljisrfoundation.org. We will review and respond to your request in line with applicable legal timeframes and requirements.

9. Changes to this policy

We may update this privacy policy from time to time, for example to reflect changes in our services or legal obligations. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.