Privacy Policy

Last updated: 4 November 2025

Afghan Association Paiwand Ltd (“Paiwand”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use www.paiwand.com (the “Website”), make a purchase from our online shop, subscribe to our newsletter, contact us, attend events, volunteer, or otherwise interact with us online.

This policy covers our online and e-commerce activities. Some of Paiwand’s frontline services (for example: Community Advocacy, Immigration Advice, Mental Health & Counselling, Supported Accommodation, Education Projects, and Youth Activities) involve additional or different data processing. For those, we provide service-specific privacy notices at the point of collection.

1) Who We Are (Data Controller)

Afghan Association Paiwand Ltd
Registered office: 11 High Street, Edgware, London, HA8 7EE
Registered charity number: 1139972
Companies House Number: 6632483
ICO Registration Number: ZB338429
IAA Registration Number: F202500017
Email: info@paiwand.com
Telephone: 0208 905 8770

Paiwand acts as the Data Controller for all processing described in this Privacy Policy.

2) What Information We Collect

a) Information You Provide Directly

• Shop & Donations: Name, billing/shipping address, email, phone, and order details. Payment card data is processed securely by WooPayments (Stripe) and PayPal; Paiwand does not store your full card details.
• Forms: Contact Form 7, volunteer applications, newsletter sign-ups, event registrations, and referrals. This may include your name, email, phone, address, and message content.
• Support Queries: Any details you include when contacting us via email, phone, or social media.

b) Information Collected Automatically

When you use our Website, we collect limited technical information such as your IP address, browser type, operating system, referring pages, time spent on site, and cookie preferences. This helps us secure and improve our Website.

c) Information from Third-Party Tools

• WooPayments (Stripe) and PayPal process online payments.
• WP Maps may collect your IP and browser data when loading map tiles.
• Facebook Feed (Smash Balloon): May set cookies and collect limited analytics data when social media feeds are viewed.
• Newsletter plugin: Stores your email address and subscription preferences.
• Slider Revolution & Envato Theme assets: May load images, scripts, or fonts via CDNs (standard web logs may be recorded).

d) Special Category Data (Frontline Services Only)

For some support services, we may collect special category data such as health, ethnicity, or immigration information. These details are never collected via this Website and are handled under separate, service-specific notices with explicit consent or a lawful public interest basis.

3) How We Use Your Information

• To respond to your enquiries and provide requested services.
• To process donations, shop orders, and event bookings.
• To manage volunteer participation and newsletter communications.
• To comply with legal and financial obligations.
• To improve the security, usability, and accessibility of our Website.

We will never sell, trade, or rent your personal information. Data is used only for legitimate, transparent purposes.

4) Legal Bases for Processing (UK GDPR)

• Consent – for newsletters, optional cookies, and some form submissions.
• Contract – to process shop orders, donations, or provide services you request.
• Legal Obligation – to meet charity, tax, or accounting requirements.
• Legitimate Interests – to operate securely and efficiently while respecting your rights.
• Vital Interests – where processing is necessary to protect someone’s life (e.g. safeguarding).
• Substantial Public Interest or Explicit Consent – for special category data in certain frontline services.

5) Payments and E-Commerce

All payments made on our Website are handled by trusted third-party processors:

• WooPayments (Stripe) Privacy Policy
• PayPal Privacy Policy

Paiwand does not have access to or store your full payment information. Payment providers may collect information such as name, billing address, and order total to process payments and prevent fraud.

6) Children and Young People

This Website is intended for a general audience. We do not knowingly collect information from children under 16 without parental consent. For youth programmes, we obtain appropriate consent using separate forms and notices.

7) Who We Share Data With

We only share information with trusted providers who help us deliver our Website and services, such as Hostinger (hosting), WordPress, WooCommerce, WooPayments (Stripe), PayPal, Google Analytics, Envato, and regulatory bodies where legally required.

8) International Data Transfers

Some of our service providers may transfer or store data outside the UK. Where this happens, we ensure equivalent protection through adequacy decisions or UK Standard Contractual Clauses (SCCs).

9) Data Retention

• Orders and financial records: up to 7 years (for legal compliance).
• Contact and volunteer enquiries: up to 24 months after last contact.
• Newsletter data: retained until you unsubscribe or request deletion.
• Event registrations: up to 24 months after the event.
• Website logs and security data: typically 3–12 months.

When data is no longer required, it is deleted or anonymised.

10) Your Rights

• Access your data.
• Request correction or deletion.
• Withdraw consent.
• Object to certain processing.
• Request data portability.

Contact us at info@paiwand.com to exercise your rights, or complain to the ICO if you are unsatisfied.

11) Security Measures

We use SSL encryption, access controls, and secure hosting to protect your data. While no system is entirely risk-free, we take appropriate measures to ensure security.

12) Cookies and Tracking

We use cookies to ensure our site functions properly and to improve user experience. Some cookies are essential; others require your consent. You can adjust your cookie settings at any time.

Common Cookies Used

You can manage cookie preferences using our cookie banner or browser settings. Some features may not work properly without essential cookies.

13) Emails and Newsletters

Transactional emails (like order confirmations) are sent automatically to fulfil services. Marketing or newsletter emails are only sent if you have opted in, and you can unsubscribe at any time.

14) AI-Assisted Content

Paiwand occasionally uses AI tools such as ChatGPT or Gemini to help draft content or create illustrations. We never input personal or confidential user data into these tools, and all content is reviewed before publication.

15) External Links

Our Website may link to other organisations and resources. We are not responsible for their content or privacy practices.

16) Disclosures Required by Law

We may disclose information if required by law, including safeguarding, fraud prevention, or regulatory compliance.

17) Limitation of Liability

Afghan Association Paiwand Ltd takes reasonable and appropriate measures to safeguard personal information in accordance with this Privacy Policy and applicable data protection law. However, no system or transmission of data over the Internet can be guaranteed to be 100% secure. To the fullest extent permitted by law, Afghan Association Paiwand Ltd is not responsible or liable for any unauthorised access, loss, misuse, alteration, or disclosure of personal information that occurs beyond our reasonable control, or for the failure of any third party to comply with its own privacy obligations.

18) Updates to This Policy

We may update this Privacy Policy occasionally. The most recent version will always appear here.

19) Contact Us

Afghan Association Paiwand Ltd
11 High Street, Edgware, London, HA8 7EE
Email: info@paiwand.com
Telephone: 0208 905 8770