Privacy Policy
This Privacy Policy explains how the Tariq & Asma Farid Foundation ("TAFF," "we," "us," "our") handles information in connection with our website at tariqasmafaridfoundation.org (the "Site").
1. Information we do not collect
The Site does not:
- Use cookies, local storage, or session storage for tracking purposes.
- Use Google Analytics, Facebook Pixel, or any other analytics or advertising service.
- Run user fingerprinting, behavioral profiling, or session replay.
- Sell, rent, or share visitor information with third parties.
- Maintain user accounts, logins, or profiles.
2. Information you choose to send us
The contact and grant pages provide forms that pre-compose a draft email in your own mail client (using a standard mailto: link). When you send that email, the information in it travels from your device through your email provider to ours — TAFF never receives it through our website's servers.
Once we receive an email from you, we may retain it for as long as is reasonably necessary to respond, evaluate your inquiry, and maintain ordinary records consistent with our charitable purpose and U.S. tax obligations.
We ask that you do not include sensitive third-party information in messages to us — such as full names of beneficiaries, identification or visa numbers, medical records, or financial account numbers. If we need such information later, we will request it through a private, more appropriate channel.
3. Server logs
The Site is hosted by Netlify, Inc. ("Netlify"). Netlify may automatically log standard request data — IP address, user-agent string, referring URL, timestamp — for short periods, for the limited purposes of operating the service, preventing abuse, and ensuring security. We do not access or use these logs for any purpose other than diagnosing site issues. Netlify's privacy practices are described at netlify.com/privacy.
4. Third-party assets
To deliver the Site, your browser loads a small number of assets from third-party CDNs:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — typeface files. Google may receive your IP address as part of this request. Google's privacy policy.
- unpkg.com (Cloudflare-fronted CDN) — React and Babel JavaScript libraries with integrity hashes pinned. unpkg does not set cookies. Cloudflare's privacy policy.
We do not control these third parties and are not responsible for their practices. They are used solely to deliver static assets, not to track you.
5. Children's privacy
The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, please contact us and we will delete it.
6. Your rights — European Union (GDPR)
If you are in the European Economic Area, you have the following rights with respect to any personal data we hold about you:
- Right of access — to receive a copy of your personal data.
- Right to rectification — to have inaccurate data corrected.
- Right to erasure — to have your personal data deleted ("right to be forgotten").
- Right to restrict or object to processing.
- Right to data portability.
- Right to lodge a complaint with your local supervisory authority.
Because we collect no data through the Site itself, in practice this applies only to emails you have sent us. To exercise any of these rights, contact taffound@gmail.com. Our lawful basis for processing email correspondence is your consent and our legitimate interest in responding to inquiries (GDPR Art. 6(1)(a) and 6(1)(f)).
7. Your rights — California (CCPA / CPRA)
California residents have the right to know what personal information a business has collected about them, to request deletion of that information, and to opt out of its sale or sharing. We do not sell or share personal information. To exercise the right to know or delete, contact taffound@gmail.com.
8. International transfers
TAFF is based in the United States. Any email you send us will be received and stored on servers in the United States. By contacting us from outside the United States, you understand that your information will be transferred to and processed in the United States.
9. Security
The Site is served over HTTPS with HSTS, strict content-security headers, and a minimal third-party surface. We take reasonable measures to protect any correspondence we hold. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
10. Do Not Track
We do not track visitors. Accordingly, the Site does not differentiate based on Do Not Track signals — there is nothing for us to refrain from doing.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be posted on this page. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.
12. Contact
Questions about this Privacy Policy or your data may be sent to taffound@gmail.com or by post to:
Tariq & Asma Farid Foundation
Privacy Inquiries
10 Glenlake Pkwy, North Tower Suite 300
Atlanta, GA 30328 USA