Privacy Policy

Last updated on 17/10/2024

Overview

This policy outlines how we collect, use and disclose the personal information of individuals enrolled in our programs ('beneficiaries') and our grant partners.

As an organisation, we commit to always:

  • Requesting consent: Requesting consent: This will be sought verbally or via writing, explaining the purpose for which the data is being collected and what it will be used for.

  • Remaining within the purpose: The data will only be used for the purpose that consent was given for. For example, if an individual has provided data to be used for one program, it will not be used for marketing another program to them - unless they have specifically consented to receiving marketing material.

Collection and Use of Information

Program: Ishk only collects personal data from an individual to make decisions about whether they are fit to participate in a program and to maintain contact during and after the program to assess its impact. Where this is done by a third party i.e. a vendor, they should abide by these guidelines and have a clear data collection process in place.

The type of information we collect includes:

  • Personal Identification Information: Full name, date of birth, gender, photos and other identifying details

  • Contact Information: Email address, phone number, and mailing address

  • Educational Background: Highest level of education, institutions attended, and certifications obtained

  • Employment Information: Current employer, job title, work experience, and professional references

Grant: Ishk only collects personal data from our partner organisation to assess whether the grant deliverables are being met.

Ishk will also request the following from a partner organisation to facilitate the grant process:

  • Name, phone number and email address of a coordinating team member 

  • Bank details to make payments through the grant

  • Financial information as part of due diligence of a grant 

Ishk collects personal data using the following media:

  • Physical forms (e.g. for Ishk Limb Centre)

  • Digital forms (e.g. for Ishk Skills Hub)

  • Reports (e.g. from grant partners) 

  • Email (e.g. for employee’s bank details and identification number) 

At any point in time, should an individual not consent to their data being collected or used, this policy requires that this be respected.

Disclosure of Information

Ishk may share personal data with a third party under the following circumstances only:

  • Service Providers: We may engage trusted third-party service providers to assist with program operations, such as payment processing, data storage, and analytics. These providers are contractually obligated to protect your information and can only use it for the purposes specified by us.

  • Legal Requirements: We may disclose your personal information if required by law, regulation, or legal process or if we believe such action is necessary to protect the rights, property, or safety of Ishk Tolaram Foundation, our users, or others.

Data Security

Ishk implements a variety of security measures to protect personal data from unauthorized access, use, or disclosure. These measures include encryption, secure servers, and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and Ishk cannot guarantee absolute security.

Access Rights

At any time, individuals have the right to:

  • Access: Request a copy of personal data held

  • Rectification: Request correction of any inaccurate or incomplete information

  • Deletion: Request the deletion of personal data, subject to legal and contractual obligations

  • Withdraw Consent: Withdraw consent to collect, use or disclose personal data

  • Opt Out: Opt out of receiving marketing communications from Ishk