1. Who we are
The UAE Congenital Heart Association is the controller of personal information collected when a person requests a representative to collect a donation. This notice applies only to the representative-request and collection service and does not authorize marketing use.
2. Service and processing scope
The Association's activities and the field representative service are limited to the United Arab Emirates. Technical processing may use approved hosting or service providers inside or outside the UAE. Where processing or transfer occurs outside the UAE, the Association will apply the required contractual and organizational safeguards and identify relevant recipient categories in the published notice.
3. Why we collect information
- Receive the request and determine whether the service can be provided.
- Contact the requester and arrange the visit time and location.
- Assign the request to authorized personnel or a representative and track its status.
- Document collection and link it to the donation or receipt record where applicable.
- Meet legal, financial, audit, and misuse-prevention obligations.
4. Information we collect
Core information includes the name, UAE mobile number, emirate, area or address, preferred time, and expected amount if supplied.
Optional information includes email, notes, and precise geographical location. Precise location is not collected automatically and is sent only through a clear, deliberate user action.
The form does not request health information, identity-document images, or payment-card data. Do not enter such information in the notes field.
5. Consent and withdrawal
Submission relies on explicit consent recorded with the applicable version, date, and time. The requester may withdraw consent before collection using the contact channel below. Withdrawal does not affect lawful processing completed before withdrawal, and information may be retained where required by law, financial obligations, an active claim, or an audit hold.
6. Sharing and access
Operational lists display masked information. Full details are limited to authorized personnel whose duties require access. Information may be shared, only as necessary, with the assigned representative, contracted hosting, communications and technical service providers, or official authorities where legally required. Information is not sold or used for direct marketing.
7. Security
The Association applies appropriate technical and organizational controls, including access restriction, masked list views, administrative access and action records, transport and storage protection, and incident review. No technical system eliminates all risk, so controls are reviewed according to the nature of the information and the risks involved.
8. Retention and review
- Each request receives a review date 365 days after creation. This is a governance review date, not automatic deletion.
- After closure, precise location is deleted or anonymized within 30 days unless a legal obligation, dispute, or audit hold applies.
- At review, contact, address, and notes information whose purpose has ended is deleted or anonymized, or the reason for continued retention is documented.
- Financial records, receipts, and accounting entries linked to a donation follow a separate legal and financial retention policy and are not automatically deleted under the representative-request policy.
9. Your rights
Subject to applicable law, a data subject may request information about processing, correction of inaccurate information, restriction or cessation of processing, object to processing, request erasure where the legal conditions apply, withdraw consent, and complain to the competent authority. A request may be restricted where another law requires retention or where a claim, investigation, or financial obligation applies.
10. Contact and rights requests
- Privacy contact email
- Privacy@uaecha.ae
- Telephone or contact channel
- +971 4 222 0966
- Postal address
- Dubai Charity Association Building, Al Muhaisnah 2, next to the Ministry of Health and Prevention, Dubai, United Arab Emirates, Fourth Floor, Office No. 403
11. Changes to this notice
The Association may update this notice when the service, legal requirements, or processing providers change. The published notice will show its version and effective date. New requests will record the notice version and consent-copy version in force when submitted.