Privacy Policy

Who we are

AlMabarrah AlKhalifia Foundation is a non-profit organisation based at Building 1685, Road 1328, Block 913, Riffa, Bahrain. For any privacy question or request, contact us at [email protected] or +973 1749 9909.

What we collect

• Donations: your full name, email address, the amount, the programme you choose, and a donation reference. Card details are entered only on our payment provider’s secure page (CrediMax / Mastercard Payment Gateway Services); this website never sees or stores them.
• Chat assistant: the questions you type into the MKF Assistant. We do not store conversations; they are sent to our AI provider only to generate a reply, and disappear when you close the page.
• Technical data: your IP address, browser type and the pages you request, recorded in server logs for security, abuse prevention (for example limiting repeated requests) and troubleshooting.
• News: we publish articles and photos about MKF’s programmes and events, which may show participants.

Why we use it

We do not sell your personal data, and we do not use it for advertising.

• To process your donation and send you a receipt (performing the donation you requested).
• To keep financial records and issue invoices, as required by law.
• To answer your questions through the chat assistant.
• To keep the website secure and working properly (our legitimate interest).

Who we share it with

Only with service providers who help us run this website, each for its specific purpose:

• CrediMax (Mastercard Payment Gateway Services) — card payment processing.
• Microsoft 365 — sending donation receipts and invoices by email.
• Anthropic — generating the chat assistant’s replies.
• Our website hosting and security providers (including Cloudflare, which protects the site against attacks and bots).
• Esri (ArcGIS) — the map in the website footer is loaded from Esri’s servers, which receive your IP address.

Transfers outside Bahrain

Some of these providers process data outside the Kingdom of Bahrain. We use reputable providers that apply appropriate safeguards to protect your data.

How long we keep it

• Donation records and invoices: for the period required by Bahraini accounting and tax law.
• Unfinished donation attempts: marked as abandoned after 24 hours and kept with the donation records.
• Server logs: for a limited period (up to 90 days), unless needed to investigate a security incident.
• Chat messages: not stored by us.

Cookies and similar technologies

We use only what the website needs to work: a cookie that remembers your language choice, and your browser’s session storage to remember small things during a visit (for example, that you have already seen the intro video, or which news page to return to). Our bot protection (Cloudflare Turnstile) may also use technical signals to tell people from automated traffic. We do not use advertising or tracking cookies.

Your rights

You may ask to access the personal data we hold about you, correct it, have it deleted (where we are not legally required to keep it), or object to its use. Send your request to [email protected]; we will reply within a reasonable time. If you are not satisfied with our answer, you may complain to the Personal Data Protection Authority in the Kingdom of Bahrain.

Security

We protect your data with encrypted connections (HTTPS), restricted access to our systems and databases, and regular security reviews. No method of transmission over the internet is completely secure, but we work to protect your information.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.