Privacy Policy

By visiting the Website, you are accepting the policies described in this Privacy Policy.

The Aga Khan Foundation (AKF, our, us or we) takes your privacy very seriously. This notice describes AKF’s privacy policy as it relates to the website at www.akf.org (known as the Website). By visiting the Website, or using any of the services offered via the Website (the Services), you are accepting the policies described in this Privacy Policy. If you do not agree with this Privacy Policy, you are not permitted to use the Website. AKF may revise this privacy policy from time to time. We will post any changes here, so please check back periodically.

Collection of Information

AKF may collect and process the following data about you:

• Information that you provide to us. When using the Services, you will be asked to provide us with your information when you:
  • fill in forms on our Website, or correspond with us by phone, email or otherwise;
  • register to use our Services or at any subsequent point using our Services;
  • report a problem with our Website; or
  • complete any surveys we ask you to fill in that we use for research purposes (although you do not have to respond to these if you do not want to).

Depending on the information and/or services you request, you may be asked to provide your name, email address, address, phone number, payment details and similar information.

• Information we collect about you. With regard to each of your visits to our Website we may automatically collect the following information:
  • device-specific information, such as your hardware model, operating system version, unique device identifiers, and mobile network information;
  • technical information about your computer, including where available, your IP address, operating system and browser type, for system administration and analytical purposes; and
  • details of your visits to our website, including the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time), length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs).
• Information we receive from other sources. When using our Services, we may be in contact with third parties who may provide us with certain information about you in order to enable your use of the Services.

Our Website also collects information as you use the Website, regarding the pages that you visit and the clicks that you make. We do not, however, seek to link this information to your name and other identifying details if you provide them.

Credit Card information

We employ a third-party company, Blackbaud, to process credit and debit card payments. AKF neither stores nor has access to any credit or debit card information, and therefore doesn’t use your credit or debit card information for any reason. To view Blackbaud’s privacy policy please visit www.blackbaud.com

How we use your information and justification of use.

Use of personal information under EU data protection laws must be justified under one of a number of legal “grounds” and we are required to set out the ground in respect of each use in this policy. These are the principal grounds that justify our use of your information:

• Consent: where you have consented to our use of your information (you are providing explicit, informed, freely given consent, in relation to any such use and may withdraw your consent in the circumstance detailed below by notifying us);

• Contract performance: where your information is necessary to enter into or perform our contract with you;

• Legal obligation: where we need to use your information to comply with our legal obligations;

• Vital interests: where we need to use your information to protect your vital interests;

• Legitimate interests: where we use your information to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights; and

• Legal claims: where your information if necessary for us to defend, prosecute or make a claim against you or a third party.

We use information held about you (and information about others that you have provided us with) in the following ways:

• to provide you with access to our Website and any other information which you request from us;
• to provide you with the Services and specifically for the processing of any enquiries made via our Website;
• to ensure you receive information relevant to you;
• for marketing, provided always that we: (i) only use aggregated and anonymised data; or (ii) only engage in direct marketing relating to the Services and/or events and initiatives organised by AKF and its parent organisation, the Aga Khan Development Network (AKDN) that we believe will be of interest to you and only where you have explicitly consented to this (Please see ‘Marketing’ below);
• to ensure the content on our Website is presented in the most effective manner for you and your computer or mobile device;
• to administer our Website and for internal operations, including research, data analysis and data statistics; and
• to notify you about changes to our Services.

We will not sell your personal data (or any other data you provide us with) to third-parties, unless such data has been anonymised and/or aggregated.

Marketing

We may use information for marketing our own services/events and those of AKDN to you such as by regularly sending you newsletters by email and, where required by law, we will ask for your consent at the time we collect your data to conduct any of these types of marketing.

We may also use your information to send you details about services which are being provided by our selected partners, and, where required by law, we will ask your consent at the time we collect your data to conduct any of these types of marketing.

We will provide an option to unsubscribe or opt-out of further communication on any electronic marketing communication sent to you or you may opt out by contacting us.

Disclosure of your information

We may disclose your personal information (i) to organisations who work with us in providing the Website and the Services (such as analytics providers and Website developers), and/or members of our group (including AKDN), which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006 (ii) to complete your request to access the Services or (iii) to outsource the hosting, administration or support of the Website or one or more of the other functions described herein (including to Blackbaud).

We may also disclose your personal information to third parties in the following circumstances:

• if we sell or buy any business or assets, we may disclose your personal information to the prospective seller or buyer of such business or assets;
• if we or substantially all of our assets are acquired by a third party, personal information about our users will be one of the transferred assets;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or to protect the rights, property, or safety of AKF, our users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection;
• Fraud Prevention and other checks. We and other organisations may also access and use your personal information to conduct credit checks and checks to prevent fraud. If false or accurate information is provided and fraud is identified or suspected, details may be passed to fraud prevent agencies.

We may disclose your personal information to third parties, the court service and/or regulators or law enforcement agencies in connection with proceedings or investigations anywhere in the world where compelled to do so. Where permitted, we will direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime.

Where we store your personal information

Personal information provided through the Website is stored in a cloud-based database which resides at a third-party vendor’s premises (and so may be transferred to and stored at a destination outside of the European Economic Area (“EEA”), including the USA). Access to the database is limited to AKF’s staff and volunteers. The data can only be accessed through a secure firewall by an individual with a username and password, and who has been given access to the database.

No data transmission over the internet or website can be guaranteed to be secure from intrusion. However, we maintain commercially reasonable physical, electronic and procedural safeguards to protect your personal information in accordance with data protection legislative requirements.

How long we retain your personal data

We will hold the above information for as long as is necessary in order to provide you with the Services, deal with any specific issues that may raise, or otherwise as is required by law or any relevant regulatory body. Once your account is terminated or deactivated, we shall delete the personal data relating to your account within 1 month.

Some personal data may need to be retained for longer than this to ensure AKF can comply with applicable laws and internal compliance procedures, including retaining your email address for marketing communication suppression if you have opted not to receive any further marketing.

If information is used for two purposes, we will retain it until the purpose with the latest period expires but we will stop using it for the purpose with a shorter period when that period expires.

We restrict access to your personal information to those persons who need to use it for the relevant purpose(s). Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymised (and the anonymised information may be retained) or securely destroyed.

Your rights

Under the General Data Protection Regulation (EU) 2017/676, you have various rights in relation to your personal data. All of these rights can be exercised by contacting us at front.office@akdn.org.

You have the following rights in relation to your personal data:

• We will use reasonable endeavours to ensure that your personal information is accurate. In order to assist us with this, you should notify us of any changes to the personal information that you have provided to us by sending us a request to rectify your personal data where you believe the personal data we have is inaccurate or incomplete;
• To ask us to delete all of your personal data. Doing so will result in AKF deleting your personal data without undue delay (unless there is a legitimate and legal reason why AKF is unable to delete certain of your personal data, in which case we will inform you of this in writing);
• To ask us to stop processing your personal data at any time;
• To request that AKF provides you with a copy of all of your personal data and to transmit your personal data to another data controller in a structured, commonly used and machine-readable format, where it is technically feasible for us to do so; and
• To lodge a complaint to a supervisory authority such as the Information Commissioner’s Office in the UK (see ico.org.uk), although we encourage you to engage with us in the event they have any concerns or complaints.

AKF will not ordinarily charge you in respect of any requests we receive to exercise any of your rights detailed above; however, if you make excessive, repetitive or manifestly unfounded requests, we may charge you an administration fee in order to process such requests or refuse to act on such requests. Where we are required to provide a copy of the personal data undergoing processing this will be free of charge; however, any further copies requested may be subject to reasonable fees based on administrative costs.

Asking us to stop processing your personal data or deleting your personal data will likely mean that you are no longer able to use our Services, or at least those aspects of the Services which require the processing of the types of personal data you have asked us to delete.

Where you request AKF to rectify or erase your personal data or restrict any processing of such personal data, AKF may notify third parties to whom such personal data has been disclosed of such request. However, such third party may have the right to retain and continue to process such personal data in its own right or on other lawful grounds without your consent.

Changes to this policy

Any changes we make to our privacy policy in the future will be posted on this page, and where appropriate, notified to you by email.

Contact

Questions, comments and requests regarding this privacy policy are welcome and handled by our UK office. Please call our office on +44 (0)20 7383 9090, email us at front.office@akdn.org, or write us at:

Aga Khan Foundation UK

10 Handyside Street

London N1C 4DN

For the purpose of the relevant data protection legislation, the data controller is Aga Khan Foundation (United Kingdom) (registration number Z989237X), with its address at 10 Handyside Street, London, N1C 4DN.

Cookies

Our website uses cookies to distinguish you from the other users of the Website. This allows us to provide you with a good experience when you browse our website and also allows us to improve our website. For detailed information on the cookies we use and the purposes for which we us them, please see our Cookie Policy.

Privacy policy changes

AKF may amend this privacy policy from time to time. We will post the revised policy on our Website so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it. Your continued use of our Website after the date that such notices are posted will be deemed to be your agreement to the changed terms.

Jan 2020