Privacy Policy

Last updated: 20 October 2025

This policy outlines how we collect, use and disclose the personal information of individuals enrolled in our programs and our grant partners.

As an organization, we commit to:

Requesting consent: This will be sought verbally or via writing, explaining the purpose for which the data is being collected and what it will be used for;
Remaining within the purpose: The data will only be used for the purpose that consent was given for. For example, if an individual has provided data to be used for one program, it will not be used for marketing another program to them - unless they have specifically consented to receiving marketing material.

Collection and Use of Information

Amirrah only collects personal data from an individual to make decisions about whether they are fit to participate in a program and to maintain contact during and after the program to assess its impact. Where this is done by a third party i.e. a vendor, they should abide by these guidelines and have a clear data collection process in place.

The type of information we collect includes:

Personal Identification Information: Full name, date of birth, gender, photos and other identifying details;
Contact Information: Email address and phone number;
Health Background: History of medical diagnosis and treatments - including mental illnesses;
Healthcare Information: Previous healthcare advisors (if beneficiaries would want us to get in touch with him).

We collect personal data using the following media:

Physical forms (e.g. for Mental Health Support, Parent Trainings);
Digital forms (e.g. for Mental Health Support, Parent Trainings);
Email (e.g. for outreach and marketing)

At any point in time, should an individual not consent to their data being collected or used, this policy requires that this be respected.

Disclosure of Information

Amirrah may share personal data with a third party under the following circumstances only:

Service Providers: We may engage trusted third-party service providers to assist with program operations, such as data storage, and analytics. These providers are contractually obligated to protect your information and can only use it for the purposes specified by us.
Legal Requirements: We may disclose your personal information if required by law, regulation, or legal process or if we believe such action is necessary to protect the rights, property, or safety of Amirrah, our users, or others.

Data Security

Amirrah implements a variety of security measures to protect personal data from unauthorized access, use, or disclosure. These measures include encryption, secure servers, and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and Amirrah cannot guarantee absolute security.

Access Rights

At any time, individuals/ beneficiaries have the right to:

Access: Request a copy of personal data held;
Rectification: Request correction of any inaccurate or incomplete information;
Deletion: Request the deletion of personal data, subject to legal and contractual obligations;
Withdraw Consent: Withdraw consent to collect, use or disclose personal data;
Opt Out: Opt out of receiving marketing communications from Amirrah.