Privacy Policy

Privacy Policy

1. Scope

This Policy explains how Tasharuky collects, uses, shares and protects personal data when you visit the website, contact us, support a project or otherwise use the platform.

2. Entities responsible for personal data

Tasharuky operates through separate legal entities identified on the Legal Entities page. Responsibility for personal data is determined by each entity’s actual role in deciding the purposes and means of processing for the relevant activity.

For transaction data, the legal entity responsible for the project is identified before payment is completed. Some website, communications or administrative processing may involve more than one Tasharuky entity depending on the actual operating arrangement and applicable law.

You may contact us about privacy at [email protected].

3. Data we may collect

  • Contact data: name, email address, phone number and country.

  • Transaction data: amount, currency, date, selected project and transaction reference.

  • Technical data: IP address, browser and device type, and pages visited.

  • Referral data: the page you arrived from, and the campaign identifiers and measurement tags attached to the link.

  • Voluntary submissions: any information you provide through our contact or support forms.

4. Payment data

Tasharuky does not receive or store your card details. Card details are entered into secure fields provided and operated by the payment service provider on its own systems, or on the provider’s own payment page to which you are redirected. In either case the card number, its expiry date and the security code (CVV) never pass through Tasharuky’s servers, and none of them is recorded in our databases, our system logs or our backups.

What we retain after payment is transaction data only: the transaction reference and the provider’s transaction identifier, the payment gateway and method, the transaction status, the amount, the selected project, and the contact details you entered.

5. Why we use data and our legal bases

  • Performance of our relationship with you: processing contributions, issuing receipts and managing the relationship associated with a project.

  • Legal obligation: retaining records and meeting applicable legal, regulatory and financial obligations, including financial-crime requirements where applicable.

  • Legitimate interests: operating and securing the website, preventing fraud and misuse, and improving the website and services within the limits of applicable law.

  • Responding to enquiries and complaints.

  • Consent: marketing messages and updates, or another lawful basis where one applies; consent may be withdrawn at any time.

6. Who we may share data with

We may share personal data, only to the extent necessary, with:

  • payment service providers and financial institutions, to complete a transaction;

  • hosting, email, technical and analytics providers;

  • implementing partners, where specific data is necessary to deliver a project;

  • public, regulatory or legal authorities, where there is a legal obligation or other lawful basis.

We do not sell or rent personal data to third parties.

7. International transfers

Because the platform operates through entities and service providers in more than one country, some personal data may be processed outside the country where the user is located. Where this constitutes an international transfer subject to specific legal requirements, we apply the transfer mechanism and safeguards required by applicable law before or when the transfer takes place.

8. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax, payment-provider, dispute-resolution, security and compliance requirements, taking into account the type of data, the relevant entity and applicable law. Once there is no longer a lawful need to retain it, data is deleted or appropriately anonymised.

We do not retain marketing data held on the basis of consent after consent is withdrawn, except to the extent necessary to record the opt-out or meet a legal obligation.

9. Cookies and measurement technologies

The website uses two kinds of cookies and similar technologies.

Necessary for the operation and security of the website and for completing payment, including the payment providers’ cookies required to process a transaction. These cannot be switched off.

Non-essential, meaning measurement, analytics, marketing and retargeting tools. Those in use today are Google Tag Manager, Google Analytics 4, Google Ads measurement, the Meta Pixel and the TikTok Pixel.

You can control the non-essential tools at any time: through your browser settings, by blocking or deleting cookies, or through the opt-out tools made available by the providers of those tools. Doing so does not affect your ability to donate or to use the website.

10. Your rights

Data-protection rights vary depending on applicable law. Depending on the circumstances, these may include rights to access and correct personal data, request deletion or restriction, object to certain processing, request data portability, and withdraw consent where processing is based on consent.

We respond within the period required by applicable law. For requests subject to UK data-protection rules, the standard response period is generally one month, subject to extensions where permitted by law.

11. Data security

We use appropriate administrative, technical and organisational measures designed to protect personal data in a manner proportionate to the nature of the data and the risks of processing. However, no method of electronic transmission or storage can be guaranteed to be completely risk-free.

12. Complaints

You may first contact us with any privacy enquiry or complaint at [email protected]. Where processing is subject to UK data-protection rules, you may also have the right to complain to the UK Information Commissioner’s Office (ICO). This does not limit any right to complain to another competent authority under applicable law.

13. Changes to this Privacy Policy

This Policy may be updated to reflect changes in processing, law or technology. The updated version will be published on the website with its effective or last-updated date.

Last updated: 30 September 2026