Effective Date: August 15, 2025

We ask that you read this privacy notice carefully as it contains important information on how, when, and why we collect, store, use, and share your personal information; your rights in relation to your personal information; and how to contact us or approach supervisory authorities in the event you have a complaint.

We collect, use, and are responsible for certain personal information about you. When we do so, we are regulated under the General Data Protection Regulation (GDPR), which applies in Pakistan, and we are responsible as the “controller” of that personal information for the purposes of those laws.

Personal Information We Collect About You

We only collect personal data relevant to the type of interaction you have with us. Whatever the scope of the interaction, the information collected will be minimal and directly linked to the purpose for which we need it.

for example:

  • When you become a volunteer, make a donation, or subscribe to one of our services, we may ask for and retain your personal information.

  • Under these circumstances, we are likely to process details such as your name, postal address, email address, telephone or mobile number, and bank account details to process donations.

  • If you participate in an event, we may (with your consent) take your photograph, video you, or interview you and share the content through our publications, website, and social media channels.

  • We may also gather publicly available information about you, including your name, contact details, and professional affiliations if relevant to our work.

How Your Personal Information Is Collected

We may collect your personal data in the following circumstances:

  1. Directly from you – When you submit a form (paper or electronic) to register as a volunteer, make a donation, subscribe to our updates, or communicate with us.
  2. Indirectly from partners – For example, if you participate in an activity or campaign organized in collaboration with our partner organizations who, with your consent, share your information with us.
  3. Via social media – If you interact with us on platforms like Facebook, Instagram, or Twitter, we may obtain personal data depending on your privacy settings and the platform’s policies.
  4. Publicly available sources – Such as news articles, public directories, or organizational websites relevant to our mission.

How and Why We Use Your Personal Information

We hold and process personal data for reasons including:

  • To keep a record of donations made and actions taken by you.

  • To send marketing or informational updates about our projects, appeals, and fundraising activities (with your consent or as permitted by law).

  • To support and coordinate volunteer activities.

  • To maintain records of events and campaigns.

  • To fulfill contractual or legal obligations.

  • To manage and improve our operations and services.

  • To ensure we respect your communication preferences if you opt out of certain types of contact.

These activities are underpinned by a “legal basis” under GDPR.

Legal Bases We Rely On

The law provides several grounds for collecting and processing personal data. When collecting your personal data, we will make clear which data is necessary for a specific purpose.

We rely primarily on:

  • Consent – For example, before sending you marketing materials or newsletters, we will ask for your consent and allow you to choose your preferred communication channels (email, SMS, post, or phone).

  • Legal obligation – To comply with laws related to donations, accounting, and reporting.

  • Legitimate interests – For activities necessary to achieve our charitable objectives without unduly impacting your rights.

Legal Bases We Rely On

The law provides several grounds for collecting and processing personal data. When collecting your personal data, we will make clear which data is necessary for a specific purpose.

We rely primarily on:

  • Consent – For example, before sending you marketing materials or newsletters, we will ask for your consent and allow you to choose your preferred communication channels (email, SMS, post, or phone).

  • Legal obligation – To comply with laws related to donations, accounting, and reporting.

  • Legitimate interests – For activities necessary to achieve our charitable objectives without unduly impacting your rights.

How Long We Keep Your Information

We will retain your personal data for as long as necessary to fulfill the purpose for which it was collected. If you request to stop receiving marketing communications, we will retain only the minimal information required to ensure we respect your preference.

Your Rights

Under GDPR, you have the right to:

  • Request access to your personal information.

  • Ask us to correct inaccuracies.

  • Request deletion of your information in certain situations.

  • Receive your personal data in a structured, machine-readable format.

  • Object to processing for direct marketing.

  • Restrict processing in specific circumstances.

To exercise your rights, contact us at:
📧 info@niyat.org | 📞 0331-6664928

Keeping Your Information Secure

We implement security measures to protect personal data from unauthorized access, loss, or misuse. Access to your personal information is restricted to authorized personnel only, all of whom are bound by confidentiality obligations.

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant regulator where legally required.

How to Complain

If you have a concern about our use of your personal information, you can contact us at info@niyat.org or call 0331-6664928. You may also lodge a complaint with the relevant data protection authority in Pakistan.

Changes to This Policy

This Privacy Policy was last updated on August 15, 2025. We may revise it from time to time and will post any updates on this page with a new effective date.

Our Disclosure of Your Personal Data

We do not sell your personal information. We may share it in the following circumstances:

  • Business transfers – In the event of a merger, restructuring, or transfer of activities.

  • Service providers – With third-party vendors (e.g., payment processors, email services) strictly for fulfilling our functions.

  • Legal requirements – To comply with applicable laws or to protect the rights, safety, and property of Niyat Foundation, our staff, volunteers, or the public.

Children’s Privacy

We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected such data, please contact us immediately.