PRIVACY POLICY

1. Introduction

NORA Foundation respects the privacy and dignity of every individual who visits our website, contacts us, makes a donation, participates in our programmes or accesses our services.

This Privacy Policy explains how NORA Foundation collects, uses, stores, processes and protects personal information obtained through its website and related communication channels.

By using our website or voluntarily providing personal information, you acknowledge that you have read this Privacy Policy.

2. Information We May Collect

Depending on how you interact with us, we may collect the following information:

• Personal Information: Name, email address, phone number, postal address and other contact details.

• Donation Information: Donor name, contact details, donation amount, transaction reference and payment confirmation details.

• Enquiry Information: Information submitted through contact forms, admission enquiries, volunteer applications and other website forms.

• Child and Parent Information: Where necessary for programme enquiries or service coordination, we may collect a child's name, age, parent or guardian contact details and relevant developmental or educational information.

• Technical Information: IP address, browser type, device information, website usage data and cookie-related information.

We aim to collect only the information reasonably necessary for the relevant purpose.

3. How We Use Information

Information collected may be used to:

• Respond to enquiries and requests.

• Provide information about NORA Foundation's programmes and services.

• Process and acknowledge donations.

• Maintain organisational, financial and administrative records.

• Communicate with parents, guardians, donors and volunteers.

• Improve our website and services.

• Meet applicable legal, regulatory and reporting requirements.

• Protect the safety and interests of children and other beneficiaries.

We do not use personal information for unrelated purposes without an appropriate lawful basis or consent, where required.

4. Children's Information and Privacy

NORA Foundation works with children, including children with disabilities and developmental support needs.

We take particular care when handling children's information.

• Information about a child is collected only when reasonably necessary for a legitimate organisational purpose.

• Parent or legal guardian consent will be obtained wherever required.

• Children's assessment records, photographs, videos and personal details will be handled confidentially.

• We will not knowingly publish identifiable information about a child without appropriate parent or guardian permission.

• Sensitive information will be shared only with authorised persons where necessary and permitted by law.

Parents and legal guardians may contact us regarding the correction or withdrawal of permissions relating to their child's information, subject to applicable legal and record-retention requirements.

5. Sharing of Information

NORA Foundation does not sell or rent personal information to third parties.

Information may be shared only when reasonably necessary with:

• Authorised staff and professionals involved in providing services.

• Payment gateways and financial service providers for donation processing.

• Website hosting, maintenance and technology service providers.

• Government authorities, regulators or law-enforcement agencies when legally required.

• Other authorised parties where the individual has provided appropriate consent or another lawful basis applies.

Third-party service providers are expected to handle information responsibly and securely.

6. Data Storage and Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

Access to personal information is restricted to authorised individuals who require it for legitimate organisational purposes.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

7. Data Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, or as required under applicable laws, financial regulations and organisational record-retention requirements.

Information that is no longer required will be securely deleted, anonymised or disposed of, where legally permissible.

8. Your Privacy Rights

Subject to applicable law, individuals or their authorised representatives may request:

• Information about personal data being processed.

• Correction or updating of inaccurate information.

• Erasure of personal information where legally permissible.

• Withdrawal of consent where processing is based on consent.

• Assistance regarding privacy-related concerns.

Requests may be submitted using the contact details provided below.

9. Third-Party Websites

Our website may contain links to external websites or third-party services. NORA Foundation is not responsible for the privacy practices or content of those websites.

Visitors are encouraged to review the privacy policies of external websites before sharing personal information.

10. Changes to This Policy

NORA Foundation may update this Privacy Policy from time to time to reflect changes in our practices, website features or applicable laws.