Privacy Policy

Welcome to the Privacy Policy of Yayasan Al Aaafiyah Indonesia ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a donation, or interact with us.

This policy applies to all personal information collected through our website, donation platforms, and any other interactions you may have with us.

We may collect the following types of personal information:

• Personal Identification Information: Full name, date of birth, gender, and identification number (KTP/Pasport).
• Contact Information: Email address, phone number, mailing address, and WhatsApp number.
• Donation Information: Donation amount, payment method, transaction history, and donation preferences.
• Technical Information: IP address, browser type, device information, and cookies.
• Usage Data: Pages visited, time spent on pages, and interaction with our content.

Note: We do not collect sensitive personal information such as financial account passwords, bank PINs, or health information unless explicitly provided by you for a specific purpose.

Your personal information is used for the following purposes:

• Donation Processing: To process and manage your donations, issue receipts, and provide donation confirmations.
• Communication: To send you updates about our programs, newsletters, and important notifications.
• Program Implementation: To allocate funds to the intended programs and beneficiaries.
• Account Management: To create and manage your donor account, track donation history, and provide personalized support.
• Legal Compliance: To comply with legal obligations, including tax reporting and regulatory requirements.
• Improvement: To analyze website usage and improve our services, user experience, and program effectiveness.

Under the Personal Data Protection Law (UU PDP) No. 27 of 2022, we process your personal data based on the following legal grounds:

• Consent: You have given us explicit consent to process your data for specific purposes (e.g., receiving newsletters).
• Contractual Necessity: Processing is necessary for the performance of a contract (e.g., processing your donation).
• Legal Obligation: Processing is required to comply with legal obligations (e.g., tax reporting).
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our services), provided your rights and interests are not overridden.

We do not sell, rent, or trade your personal information to third parties. However, we may share your information in the following situations:

• Third-Party Service Providers: We may share your data with trusted service providers (payment gateways, hosting providers, email services) who assist us in operating our website and processing donations. These providers are contractually obligated to protect your data and use it only for the services they provide.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation (e.g., tax audit, criminal investigation).
• Protection of Rights: We may share information to protect the rights, property, or safety of our organization, donors, or others.
• With Your Consent: We may share your information with your explicit consent for specific purposes.

We take the security of your personal information seriously and implement a variety of security measures to protect your data:

• Encryption: All sensitive data (payment information) is transmitted using 256-bit SSL/TLS encryption.
• Access Control: Access to your personal data is restricted to authorized personnel on a need-to-know basis.
• Firewall Protection: Our servers are protected by firewalls and intrusion detection systems.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Training: Our staff are trained on data protection and privacy best practices.

Despite our best efforts, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements:

• Donation Records: Donation records are retained for a minimum of 5 years to comply with tax and audit requirements.
• Account Data: Donor account information is retained as long as your account remains active or as needed to provide services to you.
• Communication Data: Communication history may be retained for reference and service improvement.
• Legal Requirements: Data may be retained longer if required by law or for the establishment, exercise, or defense of legal claims.

When data is no longer needed, we will securely delete or anonymize it.

Under the Personal Data Protection Law (UU PDP) No. 27 of 2022, you have the following rights regarding your personal information:

• Right to Access: You have the right to request access to the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to legal obligations.
• Right to Restriction: You have the right to request restriction of processing your data.
• Right to Object: You have the right to object to the processing of your data for certain purposes.
• Right to Data Portability: You have the right to request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: You have the right to withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

We use cookies and similar tracking technologies to improve your browsing experience, analyze website traffic, and understand user behavior.

Types of Cookies We Use:

• Essential Cookies: Necessary for the website to function properly (e.g., session management).
• Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Functionality Cookies: Remember your preferences and enhance your user experience.

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of our website.

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete that information as soon as possible.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory obligations. When we make changes, we will update the "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Material changes to this policy will be communicated through our website, email, or other appropriate channels.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

Data Protection Officer: Muhammad Iqbal, S.Kom.
Available Monday to Friday, 9:00 AM — 5:00 PM WIB