Privacy & Data Protection Policy

1. Our Foundational Commitment

At Ghais Jhuggi Taleem Foundation (GJTF), established in 2014 to bring education to children in nomadic settlements (“Jhuggi Nasheen”), we treat the trust of our donors, volunteers, and beneficiaries with the highest level of responsibility and transparency.

We operate on a Zero-Trust Data Isolation Architecture: nobody can see anyone else’s donation records, pledges, receipts, or contact information. Every donor is isolated to their own verified session, and public lists never display donor financial contributions.

2. Information We Collect

• Donors: Name (optional for anonymous gifts), email address (for official donation receipts), phone/WhatsApp number (for doorstep cash collection or wire confirmation), country, and pledged amount. We never store bank login details, card numbers, or CVVs.
• Volunteers: Full name, verified email, mobile phone number, city, university affiliation, and message.
• Subscribers: Email address for our occasional mission newsletter.

3. Strict Data Isolation & Zero Public Exposure

To protect the dignity and privacy of all supporters and beneficiaries:

• No Public Donor Walls: We do not publish public rankings or feeds of donor names and amounts.
• Anonymous Support: Donors who select the “Anonymous” option will have their names omitted even from internal thank-you remarks, addressed only as “Generous Donor”.
• Redacted Email Logs: One-time password reset links, OTP codes, and activation tokens are permanently redacted (masked as [secure-link-hidden]) before being saved to database audit logs, preventing unauthorized inspection.

4. Data Retention & Automatic Log Cleanup

Transactional email records and communication logs are subject to automated scheduled retention policies (7, 15, 30, or 90 days), after which logs are deleted from our servers.

5. Your Rights: Export & Account Deletion (GDPR)

Through your personal Supporter Portal Profile, you can:

• Export Your Data: Download a machine-readable JSON copy of all personal records, pledges, and receipt metadata.
• Right to be Forgotten: Request permanent anonymization of your profile. Financial pledge totals remain anonymized for charity regulatory compliance.