Quick Navigation
1. About KORT
KORT (Kashmir Orphan Relief Trust) is a registered charitable organization working to support vulnerable communities and children through charitable programs, including orphan support, education, healthcare, humanitarian assistance, emergency relief, and other social impact initiatives.
KORT acts as the data controller responsible for processing personal information described in this Privacy Policy in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
- Registered Charity No.: 1113836 (England & Wales)
- Website: https://kort.org.uk/
- General Enquiries Email: admin@kort.org.uk
- Postal Address: KORT, Leicester Business Centre, 111 Ross Walk, Leicester, LE4 5HH, United Kingdom
2. Information We Collect and How We Collect It
The information we collect depends on how you interact with the App.
2.1 Account & Identity Information
When you register or maintain an account on the KORT App, we collect:
- Full name
- Email address
- Phone number (optional or requested for verification)
- Hashed passwords and authentication credentials
- Profile preferences and language/regional settings
- Account notification preferences
2.2 Donation & Transaction Information
When you make a donation (including Zakat, Sadaqah, Lillah, or general emergency relief), we collect:
- Donor full name and contact information
- Donation amount and currency
- Selected appeal, campaign, or orphan project
- Gift Aid declaration status (where applicable for UK taxpayers)
- Payment transaction status, date, time, and unique reference ID
- Digital donation receipts and history logs
2.3 Payment Method & Card Data Processing
Payment processing is handled via secure, PCI-DSS compliant third-party payment gateways.
Payment Gateways Used: Stripe, Apple Pay, Google Pay, and direct banking partners.
Card Details: KORT does not collect, store, or process complete credit/debit card numbers or CVV security codes on its own servers. Card details are tokenized and processed directly by the respective payment providers subject to their own privacy policies.
2.4 Device Permissions & Hardware Data
Depending on your mobile device settings, the App may request access to:
- Camera / Photos: To allow you to upload profile images, scan card details for payment autofill, or submit documents to customer support.
- Push Notifications: To deliver transactional receipts, emergency relief alerts, and sponsorship updates.
- Technical & Diagnostic Identifiers: IP address, device model, operating system version, unique device tokens (e.g., Firebase Cloud Messaging token), app version, crash reports, and system performance logs.
2.5 Orphan Sponsorship & Beneficiary Data
When you sponsor an orphan or support child-focused projects:
- We collect sponsor details and track active recurring sponsorship payments.
- We provide sponsors with progress reports, academic updates, and general welfare updates.
Child Protection Standard: KORT strictly limits personal data regarding children. No direct contact information, precise geographic locations, or sensitive identifier records of children are disclosed to donors or stored unnecessarily.
3. How We Use Your Information
We process your data for the following essential operational and legal purposes:
- App Functionality: Account creation, secure authentication, and profile management.
- Processing Contributions: Processing one-off or recurring donations, executing Gift Aid claims with tax authorities (e.g., HMRC), and issuing formal tax receipts.
- Impact & Progress Updates: Sending sponsorship progress updates, emergency campaign notifications, and project media reports.
- Support & Resolution: Responding to customer support requests, app feedback, and reporting technical bugs.
- Security & Fraud Prevention: Detecting unauthorized activity, protecting user accounts, preventing fraudulent transactions, and ensuring app stability.
- Legal Compliance: Fulfilling charity regulations, accounting standards, and anti-money laundering laws.
4. Legal Basis for Processing (UK GDPR & Applicable Law)
We rely on the following legal grounds to handle your personal information:
- Contractual Necessity: To manage your account and deliver donation services you request.
- Legal Obligation: To comply with financial reporting, charity oversight, and anti-fraud regulations.
- Legitimate Interests: To protect our platform security, prevent abuse, and keep donors updated on KORT's impact, provided these rights do not override your privacy rights.
- Consent: Where explicit permission is required (e.g., enabling non-essential push notifications or marketing communications). You can withdraw consent at any time.
6. Child Protection & Safeguarding Standards
KORT is dedicated to protecting vulnerable children. The App is intended for adult donors and supporters.
Beneficiary Dignity: Beneficiary photographs, stories, and videos published in the App's Social Impact section are handled with strict respect, care, and informed consent.
Prohibited Conduct: KORT strictly prohibits the reproduction, exploitation, downloading, or misuse of beneficiary or child photographs.
Reporting Concerns: If you identify any content or action that concerns child safety, notify our team immediately at admin@kort.org.uk with the subject "Child Safety Report".
7. Data Retention & Account Deletion
7.1 Retention Policy
We store personal data only as long as necessary for the operational and legal purposes defined in this policy:
- Account Information: Retained while your account remains open and active.
- Financial & Donation Logs: Retained for up to 6 years following a transaction to comply with UK statutory financial laws, HMRC Gift Aid obligations, charity auditing rules, and anti-money laundering protocols.
7.2 Complete Account Deletion Options
In accordance with Apple App Store Guidelines and Google Play User Data Policies, you can request full deletion of your account and associated data at any time through two methods:
In-App Deletion:
Navigate inside the mobile app to:
Settings → Account → Delete Account
External Web Deletion Portal:
If you cannot access the app, you can submit an online account deletion request at:
https://kortusa.org/contact.html
Note on Retained Data: Once an account deletion request is processed, your user profile, authentication records, and device tokens are permanently removed from our active databases. Transaction logs that KORT is required to keep by law will be securely archived and isolated from further processing until statutory retention periods expire.
8. Data Security & International Transfers
Security Measures: We implement end-to-end encryption in transit (HTTPS / TLS) and encryption at rest for sensitive account records. Server access is restricted strictly to authorized staff.
International Transfers: Data may be stored or processed outside your country of residence via our secure cloud service providers. Where data transfers occur, we implement standard contractual clauses and legal safeguards to ensure equivalent data protection levels.
9. Your Privacy Rights
Depending on your jurisdiction, you hold specific rights regarding your personal data:
- Access: Request a copy of the personal information KORT holds about you.
- Rectification: Request corrections to inaccurate or incomplete information.
- Erasure: Request deletion of your personal account data (subject to legal financial retention limits).
- Opt-Out: Disable marketing updates or non-essential push notifications at any time via App settings or device settings.
To exercise any of these rights, please contact our Data Protection team at admin@kort.org.uk.
10. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our App, operational practices, or app store policy updates. The "Last Updated" date at the top of this policy reflects the latest revision. Continued use of the KORT App after updates indicates your awareness of the revised terms.
11. Contact Us
If you have questions, comments, or data privacy requests, contact us at:
- Email: admin@kort.org.uk
- Website: https://kort.org.uk/
- Mailing Address: KORT, Leicester Business Centre, 111 Ross Walk, Leicester, LE4 5HH, United Kingdom