General Donations: 7.5% of donations are allocated toward administration, operations, compliance, and project management expenses, while 5% supports marketing, donor outreach, and fundraising activities. | Zakat Donations: Only 7.5% administrative charges are applied under the account heads approved by the Shariah Board. |

Privacy Policy – EHRDF

1. Introduction

EHRDF handles sensitive personal data, including that of students and their families. This policy establishes how such data is collected, used, and protected.

2. Purpose

  • Protect the privacy and personal data of beneficiaries, staff, and partners.
  • Establish lawful, fair, and transparent data handling practices.
  • Prevent unauthorized access, loss, or misuse of personal data.
  • Meet donor and international data protection expectations.

3. Scope

This policy applies to all personal data collected, processed, or stored by EHRDF, in any format, across all programmes and offices.

4. Data Protection Principles

  • Lawfulness and Fairness: Data collected only for legitimate purposes with informed consent where required.
  • Data Minimization: Only data necessary for the stated purpose is collected.
  • Accuracy: Personal data is kept accurate and up to date.
  • Storage Limitation: Data is retained only as long as necessary.
  • Security: Appropriate technical and organizational measures protect data from breach.

5. Consent and Beneficiary Data

  • Informed consent obtained from students and/or guardians before collecting personal data.
  • Special care taken with data on minors, in line with the Child Protection Policy.
  • Beneficiary data is never shared with third parties without consent, except where legally required.

6. Data Security Measures

  • Access to personal data restricted to authorized personnel on a need-to-know basis.
  • Password-protected systems and encrypted storage for sensitive records.
  • Secure disposal of physical and electronic records at the end of the retention period.

7. Data Breach Response

  • Suspected breaches reported immediately to the Compliance Focal Point.
  • Assessment of impact and, where required, notification to affected individuals and donors.
  • Corrective action taken to prevent recurrence.

8. Roles and Responsibilities

  • Board of Directors: Overall accountability for data protection compliance.
  • Compliance Focal Point: Manage data protection procedures and breach response.
  • All Personnel: Handle personal data responsibly and report concerns.

9. Monitoring and Review

This policy is reviewed annually and updated in line with evolving data protection expectations and Pakistani law.

Policy Approval

This policy was formally reviewed and approved by the Board of Directors of Education Hunar Relief Development Foundation (EHRDF) and takes effect from May 2026. It will remain in force until superseded by a revised version.