Privacy Policy
Table of Contents
1. Introduction
Welcome to Tadawy Foundation's Privacy Policy. At Tadawy Foundation, we deeply value your privacy and are committed to protecting your personal information with the utmost care and respect. We understand the sensitive nature of mental health information and take extra precautions to safeguard your data.
This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website (tadawy.foundation), use our services, or interact with us in any other way. By using our services, you agree to the practices described in this policy.
If you do not agree with these practices, please do not use our website or services. If you have any questions about this policy, please contact us using the information provided in Section 12.
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Book an appointment through our website
- Make a donation
- Subscribe to our newsletter or communications
- Register for an event or workshop
- Contact us through forms or email
- Create an account on our platform
This information may include:
- Full name
- Email address
- Phone number
- Address (if required for service delivery)
- Payment information (processed securely by third-party payment processors)
- Demographic information (age, gender, location)
- Mental health concerns or reasons for seeking support (only when voluntarily shared)
2.2 Information Collected Automatically
When you visit our website, we may automatically collect certain information through cookies and similar technologies, including:
- IP address
- Browser type and version
- Pages visited and time spent on each page
- Referring website
- Device information
- Geolocation data (with your consent)
2.3 Sensitive Information
We understand that mental health information is highly sensitive. We only collect such information when necessary for providing our services, and only with your explicit consent. This includes:
- Medical history related to mental health
- Symptoms and treatment preferences
- Notes from therapy sessions (stored securely in our clinical system)
Important: We never share your mental health information without your explicit consent, except as required by law or in emergencies where there is a serious risk of harm to yourself or others.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide our services: Process appointment bookings, deliver therapy sessions, provide mental health support, and manage your account.
- To communicate with you: Respond to inquiries, send appointment reminders, provide updates about our services, and share relevant mental health resources.
- To process donations: Process and acknowledge donations, provide tax receipts when applicable, and communicate about the impact of your contribution.
- To improve our services: Understand how users interact with our website and services to improve user experience, develop new features, and enhance our mental health programs.
- To ensure security: Protect against fraud, abuse, and unauthorized access to our systems and services.
- To comply with legal obligations: Meet our legal and regulatory requirements.
- For research and statistical purposes: Analyze anonymized data to improve mental health interventions and demonstrate the effectiveness of our programs (never with personally identifiable information without consent).
We will never sell your personal information to third parties or use it for marketing purposes without your explicit consent.
4. Sharing of Information
4.1 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing. For example, we may share your information with:
- Healthcare professionals involved in your care (with your permission)
- Insurance providers (if applicable and with your consent)
4.2 Service Providers
We work with trusted third-party service providers who help us operate our services. These providers only process your information on our instructions and are subject to strict confidentiality agreements. They include:
- Website hosting and maintenance providers (Odoo)
- Payment processors (PayMob)
- Email marketing platforms
- CRM and appointment management systems
- Analytics providers
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose information if we believe in good faith that such disclosure is necessary to:
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our users or others
- Prevent fraud or illegal activities
- Respond to emergencies involving potential harm to individuals
Mental Health Emergencies: In situations where there is an immediate risk of harm to yourself or others, we may need to contact emergency services or appropriate authorities. This is done to ensure safety and is in line with mental health professional ethics.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include:
- Encryption: We use industry-standard encryption (SSL/TLS) to protect data in transit and encryption at rest for sensitive information.
- Access controls: We limit access to personal information to authorized staff who need it to provide services. Access is granted based on role-based permissions.
- Regular security assessments: We conduct regular security reviews and vulnerability assessments of our systems.
- Staff training: Our staff receives regular training on data protection and confidentiality practices, with special emphasis on handling sensitive mental health information.
- Secure systems: We use Odoo's security infrastructure which includes regular security updates, backups, and monitoring.
While we take reasonable precautions to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we commit to responding promptly to any suspected data breaches and notifying affected individuals as required by law.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
6.1 Appointment and Clinical Records
Clinical records, including session notes, are retained for a minimum of 7 years after the last session, in accordance with mental health professional standards. After this period, records are securely destroyed.
6.2 Donor Information
Donor information is retained indefinitely for accounting and tax purposes, but contact details for marketing purposes are retained only while you remain an active donor or until you request to be removed from our communications.
6.3 Website and Marketing Data
Website usage data and marketing preferences are retained for 2 years after your last interaction with our website or communications, unless you request deletion sooner.
6.4 Legal Requirements
Certain information may need to be retained longer to comply with legal obligations, resolve disputes, or enforce our agreements.
7. Your Rights
Depending on your location and applicable laws, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information in certain circumstances.
- Restriction: Request restriction of processing of your personal information.
- Portability: Request transfer of your data to another organization in a structured, commonly used format.
- Objection: Object to processing of your personal information for direct marketing or based on legitimate interests.
- Withdrawal of consent: Withdraw your consent at any time where we are relying on consent to process your personal information.
To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request within 30 days or as otherwise required by law.
Mental Health Records: For clinical records, access and correction requests may be subject to professional standards and ethical guidelines. We will work with you to ensure appropriate access while maintaining clinical integrity.
8. Children's Privacy
We recognize the special sensitivity of children's mental health information. Our services are not directed to children under 13 years of age without parental consent. For children between 13 and 18, we require parental or guardian consent before providing services or collecting personal information.
If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as soon as possible.
For children's mental health services, we implement additional safeguards:
- Enhanced security measures for children's records
- Specialized training for staff working with children
- Clear consent mechanisms involving parents/guardians
- Age-appropriate communication about privacy
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and collect information about how you use our site.
9.1 Types of Cookies We Use
- Essential cookies: Required for basic website functionality (e.g., security, session management)
- Analytics cookies: Help us understand how visitors use our website
- Preference cookies: Remember your settings and preferences
- Marketing cookies: Used to deliver relevant advertisements (with your consent)
9.2 Managing Cookies
You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site, and some services and functionalities may not work.
9.3 Third-Party Tracking
We may use third-party analytics services like Google Analytics to help us understand how our visitors use our website. These services may use cookies and other tracking technologies to collect information about your use of our website. The information collected is anonymized and aggregated, and we do not link it to personally identifiable information without your consent.
10. International Data Transfers
While Tadawy Foundation is based in Egypt, some of our service providers may process your data in other countries. We ensure that any international transfers of personal data are protected by appropriate safeguards, such as:
- Standard contractual clauses approved by data protection authorities
- Binding corporate rules
- Certification under recognized frameworks (where applicable)
We take steps to ensure that your information receives the same level of protection regardless of where it is processed. If you would like more information about the safeguards we have in place for international transfers, please contact us using the information in Section 12.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last Updated" date at the top of this policy.
For significant changes that affect how we use your personal information, we will provide appropriate notice, which may include posting a notice on our website, sending an email notification, or obtaining your consent as required by law.
We encourage you to review this policy periodically to stay informed about how we are protecting your information.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, our data practices, or to exercise your privacy rights, please contact us:
Tadawy Foundation
Email: info@tadawyfoundation.org
Phone: +20 1555121622
Address: Dokki, Giza, Egypt
If you have concerns about our privacy practices that we cannot address satisfactorily, you may have the right to lodge a complaint with your local data protection authority.
Table of Contents
1. Introduction
Welcome to Tadawy Foundation's Privacy Policy. At Tadawy Foundation, we deeply value your privacy and are committed to protecting your personal information with the utmost care and respect. We understand the sensitive nature of mental health information and take extra precautions to safeguard your data.
This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website (tadawy.foundation), use our services, or interact with us in any other way. By using our services, you agree to the practices described in this policy.
If you do not agree with these practices, please do not use our website or services. If you have any questions about this policy, please contact us using the information provided in Section 12.
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Book an appointment through our website
- Make a donation
- Subscribe to our newsletter or communications
- Register for an event or workshop
- Contact us through forms or email
- Create an account on our platform
This information may include:
- Full name
- Email address
- Phone number
- Address (if required for service delivery)
- Payment information (processed securely by third-party payment processors)
- Demographic information (age, gender, location)
- Mental health concerns or reasons for seeking support (only when voluntarily shared)
2.2 Information Collected Automatically
When you visit our website, we may automatically collect certain information through cookies and similar technologies, including:
- IP address
- Browser type and version
- Pages visited and time spent on each page
- Referring website
- Device information
- Geolocation data (with your consent)
2.3 Sensitive Information
We understand that mental health information is highly sensitive. We only collect such information when necessary for providing our services, and only with your explicit consent. This includes:
- Medical history related to mental health
- Symptoms and treatment preferences
- Notes from therapy sessions (stored securely in our clinical system)
Important: We never share your mental health information without your explicit consent, except as required by law or in emergencies where there is a serious risk of harm to yourself or others.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide our services: Process appointment bookings, deliver therapy sessions, provide mental health support, and manage your account.
- To communicate with you: Respond to inquiries, send appointment reminders, provide updates about our services, and share relevant mental health resources.
- To process donations: Process and acknowledge donations, provide tax receipts when applicable, and communicate about the impact of your contribution.
- To improve our services: Understand how users interact with our website and services to improve user experience, develop new features, and enhance our mental health programs.
- To ensure security: Protect against fraud, abuse, and unauthorized access to our systems and services.
- To comply with legal obligations: Meet our legal and regulatory requirements.
- For research and statistical purposes: Analyze anonymized data to improve mental health interventions and demonstrate the effectiveness of our programs (never with personally identifiable information without consent).
We will never sell your personal information to third parties or use it for marketing purposes without your explicit consent.
4. Sharing of Information
4.1 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing. For example, we may share your information with:
- Healthcare professionals involved in your care (with your permission)
- Insurance providers (if applicable and with your consent)
4.2 Service Providers
We work with trusted third-party service providers who help us operate our services. These providers only process your information on our instructions and are subject to strict confidentiality agreements. They include:
- Website hosting and maintenance providers (Odoo)
- Payment processors (PayMob)
- Email marketing platforms
- CRM and appointment management systems
- Analytics providers
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose information if we believe in good faith that such disclosure is necessary to:
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our users or others
- Prevent fraud or illegal activities
- Respond to emergencies involving potential harm to individuals
Mental Health Emergencies: In situations where there is an immediate risk of harm to yourself or others, we may need to contact emergency services or appropriate authorities. This is done to ensure safety and is in line with mental health professional ethics.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include:
- Encryption: We use industry-standard encryption (SSL/TLS) to protect data in transit and encryption at rest for sensitive information.
- Access controls: We limit access to personal information to authorized staff who need it to provide services. Access is granted based on role-based permissions.
- Regular security assessments: We conduct regular security reviews and vulnerability assessments of our systems.
- Staff training: Our staff receives regular training on data protection and confidentiality practices, with special emphasis on handling sensitive mental health information.
- Secure systems: We use Odoo's security infrastructure which includes regular security updates, backups, and monitoring.
While we take reasonable precautions to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we commit to responding promptly to any suspected data breaches and notifying affected individuals as required by law.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
6.1 Appointment and Clinical Records
Clinical records, including session notes, are retained for a minimum of 7 years after the last session, in accordance with mental health professional standards. After this period, records are securely destroyed.
6.2 Donor Information
Donor information is retained indefinitely for accounting and tax purposes, but contact details for marketing purposes are retained only while you remain an active donor or until you request to be removed from our communications.
6.3 Website and Marketing Data
Website usage data and marketing preferences are retained for 2 years after your last interaction with our website or communications, unless you request deletion sooner.
6.4 Legal Requirements
Certain information may need to be retained longer to comply with legal obligations, resolve disputes, or enforce our agreements.
7. Your Rights
Depending on your location and applicable laws, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information in certain circumstances.
- Restriction: Request restriction of processing of your personal information.
- Portability: Request transfer of your data to another organization in a structured, commonly used format.
- Objection: Object to processing of your personal information for direct marketing or based on legitimate interests.
- Withdrawal of consent: Withdraw your consent at any time where we are relying on consent to process your personal information.
To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request within 30 days or as otherwise required by law.
Mental Health Records: For clinical records, access and correction requests may be subject to professional standards and ethical guidelines. We will work with you to ensure appropriate access while maintaining clinical integrity.
8. Children's Privacy
We recognize the special sensitivity of children's mental health information. Our services are not directed to children under 13 years of age without parental consent. For children between 13 and 18, we require parental or guardian consent before providing services or collecting personal information.
If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as soon as possible.
For children's mental health services, we implement additional safeguards:
- Enhanced security measures for children's records
- Specialized training for staff working with children
- Clear consent mechanisms involving parents/guardians
- Age-appropriate communication about privacy
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and collect information about how you use our site.
9.1 Types of Cookies We Use
- Essential cookies: Required for basic website functionality (e.g., security, session management)
- Analytics cookies: Help us understand how visitors use our website
- Preference cookies: Remember your settings and preferences
- Marketing cookies: Used to deliver relevant advertisements (with your consent)
9.2 Managing Cookies
You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site, and some services and functionalities may not work.
9.3 Third-Party Tracking
We may use third-party analytics services like Google Analytics to help us understand how our visitors use our website. These services may use cookies and other tracking technologies to collect information about your use of our website. The information collected is anonymized and aggregated, and we do not link it to personally identifiable information without your consent.
10. International Data Transfers
While Tadawy Foundation is based in Egypt, some of our service providers may process your data in other countries. We ensure that any international transfers of personal data are protected by appropriate safeguards, such as:
- Standard contractual clauses approved by data protection authorities
- Binding corporate rules
- Certification under recognized frameworks (where applicable)
We take steps to ensure that your information receives the same level of protection regardless of where it is processed. If you would like more information about the safeguards we have in place for international transfers, please contact us using the information in Section 12.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last Updated" date at the top of this policy.
For significant changes that affect how we use your personal information, we will provide appropriate notice, which may include posting a notice on our website, sending an email notification, or obtaining your consent as required by law.
We encourage you to review this policy periodically to stay informed about how we are protecting your information.
12. Contact Us
If you have any questions or concerns about this Privacy Policy, our data practices, or to exercise your privacy rights, please contact us:
Tadawy Foundation
Email: info@tadawyfoundation.org
Phone: +20 1555121622
Address: Dokki, Giza, Egypt
If you have concerns about our privacy practices that we cannot address satisfactorily, you may have the right to lodge a complaint with your local data protection authority.