Privacy Policy

1. Who We Are

Disabled Children Fund BD is a community-led charitable initiative based in Sylhet, Bangladesh, founded in 2017. We are dedicated to supporting disabled children and their families through education, healthcare, and community integration programmes.

This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and applicable data protection laws.

2. What Personal Data We Collect

We collect and process the following types of personal data:

2.1 Information You Provide Directly

• Donation information: Name, email address, donation amount, payment details (processed securely through Donorbox)
• Contact form submissions: Name, email address, message content (submitted via Formspree)
• Newsletter subscriptions: Email address and consent preferences (if you opt in to receive updates)
• Correspondence: Any information you provide when you email us directly

2.2 Information Collected Automatically

• Website analytics: IP address, browser type, device information, pages visited, time spent on site (collected via Cloudflare Pages)
• Cookies: See our Cookie Policy for detailed information

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• Processing donations: To process and acknowledge your charitable contributions securely
• Responding to enquiries: To answer questions and provide information about our work
• Sending updates: To send newsletters and impact reports if you have opted in (you can unsubscribe at any time)
• Improving our website: To understand how visitors use our site and improve user experience
• Compliance: To meet legal and regulatory requirements, including financial record-keeping
• Protecting our rights: To prevent fraud and protect the security of our systems

4. Lawful Basis for Processing

Under UK GDPR, we process your personal data based on the following lawful grounds:

• Consent: When you voluntarily provide your information (e.g., making a donation, submitting a contact form, subscribing to updates)
• Legitimate interests: To operate our charity effectively, respond to enquiries, and improve our services, while ensuring your rights and interests are protected
• Legal obligation: To comply with financial regulations and record-keeping requirements for charitable organisations

5. How We Store and Protect Your Data

5.1 Data Storage

Your personal data is stored as follows:

• Donation data: Securely stored by Donorbox (our payment processor) with encryption and industry-standard security measures
• Contact form data: Processed and stored by Formspree, delivered to our email inbox
• Email communications: Stored in our Gmail account with Google's security protections
• Website hosting: Our website is hosted on Cloudflare Pages with secure infrastructure

5.2 Data Retention

We retain your personal data only for as long as necessary:

• Donation records: Retained for 7 years to meet financial and legal obligations
• Contact enquiries: Retained for 2 years unless ongoing correspondence requires longer retention
• Newsletter subscriptions: Retained until you unsubscribe
• Website analytics: Anonymised and retained for statistical purposes

5.3 Security Measures

We implement appropriate technical and organisational measures to protect your data, including:

• Secure HTTPS encryption for all website communications
• Access controls limiting who can view personal data
• Regular security updates and monitoring
• Secure password policies and two-factor authentication where available

6. Third-Party Data Processors

We work with trusted third-party service providers who process personal data on our behalf:

6.1 Donorbox (Payment Processing)

Donorbox processes all donation payments securely. They are PCI DSS compliant and handle credit card information according to strict security standards. Your payment details are never stored on our servers. View Donorbox Privacy Policy

6.2 Formspree (Contact Forms)

Formspree processes contact form submissions and forwards them to our email. They act as a data processor under GDPR. View Formspree Privacy Policy

6.3 YouTube (Video Embeds)

We embed YouTube videos using privacy-enhanced mode. YouTube may set cookies when you interact with embedded videos. View Google Privacy Policy

6.4 Cloudflare Pages (Website Hosting)

Our website is hosted on Cloudflare Pages. Cloudflare may collect technical information for security and performance purposes. View Cloudflare Privacy Policy

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

7.1 Right of Access

You can request a copy of the personal data we hold about you.

7.2 Right to Rectification

You can ask us to correct inaccurate or incomplete personal data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal obligations (e.g., financial records we must retain).

7.4 Right to Restriction of Processing

You can ask us to limit how we use your data in certain circumstances.

7.5 Right to Data Portability

You can request your data in a structured, machine-readable format to transfer to another organisation.

7.6 Right to Object

You can object to processing based on legitimate interests, including direct marketing communications.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time (e.g., unsubscribe from newsletters).

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. For detailed information about what cookies we use and how to manage them, please see our Cookie Policy.

9. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you are under 16, please ask your parent or guardian before providing any personal information to us.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows when the policy was last revised. We encourage you to review this policy periodically.

If we make significant changes, we will notify visitors through a notice on our website.

11. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us:

12. Right to Complain

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):