What We Do
Learn About Us
Support Us
Data Policy
Learn about how we handle your data at CFAW
Learn about how we handle your data at CFAW
Effective Date: March 25th, 2025
1. Purpose
This Data Policy outlines CFAW's practices regarding the collection, use, storage, and protection of personal data collected for community events, newsletter signups, patronage, facilitator applications, and photographic/visual documentation, adhering to Pakistani law including the Prevention of Electronic Crimes Act (PECA) and the Personal Data Protection Act (PDP).
2. Data Collection for Community Events
For community events, CFAW collects the following information:
Name
CNIC (National Identity Card Number)
Phone Number
Payment Confirmation (related to event fees)
3. Data Collection for Newsletter & Patronage
For the Nani Ghar newsletter and patronage program, CFAW collects:
Name
Email Address (for newsletter delivery)
Patronage Level/Details (if applicable)
4. Data Collection for Facilitator Applications
Facilitator application forms may collect the following information:
Name
Contact Information
Proposed Event Type
Estimated Event Capacity (number of participants)
Material and Art Supply Requirements
Facilitation Experience and Qualifications
Portfolio or Work Samples (where applicable)
Any other information related to the applicant's ability to facilitate workshops
5. Photographic and Visual Data
CFAW reserves the right to use photographs and visual recordings taken during events and activities for:
Documentation purposes
Project presentations
Company promotional materials (website, social media, etc.)
Individuals have the right to request:
That their image not be used.
That their image be removed from CFAW's online platforms.
Such requests should be submitted in writing to hello@cfaw.center.
6. Data Use and Sharing
Community Events: Data collected for community events will not be shared with any third party unless there is a declared national emergency or a public health emergency requiring disclosure.
Newsletter & Patronage: Data collected for the newsletter and patronage will not be shared with third parties, except for Framer and Substack, which are used for newsletter distribution and website management, respectively. These platforms are expected to maintain appropriate data protection standards.
Facilitator Applications: Facilitator application data will be used for the purpose of evaluating and selecting facilitators. This data will be kept internal and will not be shared with third parties, except if legally obliged to do so.
General: CFAW does not sell or share data with any other third parties for marketing or other purposes.
7. Data Digitization and Storage
Paper-based data collected for community events (excluding CNIC information, which is handled with extra care) is digitized and stored securely. Data collected for the newsletter, patronage, and facilitator applications is collected digitally from the outset.
Encryption: CFAW utilizes encryption methods to protect sensitive data both in transit and at rest.
Physical Backups: Routine monthly physical backups of all digital data are performed.
Anonymity in Audits: Anonymity is maintained during financial audits (e.g., FBR proof) to protect individual privacy.
8. Data Subject Rights
Individuals have the right to:
Request Access: Request access to the data CFAW holds about them.
Request Removal: Request removal of their data. Such requests will be reviewed on a case-by-case basis by the operational team and the organizational head, considering legal and operational requirements.
Request Image Removal: Request the removal of their image from CFAW's platforms.
To exercise these rights, please contact CFAW at hello@cfaw.center
9. Data Collection Consent
Explicit consent is obtained from individuals before their data is collected. This consent outlines the purpose of data collection, how the data will be used, and the individual's rights regarding their data. This includes consent for photograph usage, and the right to revoke that consent.
10. Children's Data
For registering children for events or programs, CFAW requires consent from a parent, legal guardian, or teacher. Procedures are in place to verify the relationship of the consenting adult to the child.
11. Data Breach Contingency
In the event of a data breach, CFAW will:
Immediately assess the scope and impact of the breach.
Notify affected individuals and relevant authorities (e.g., PTA) as required by law.
Take steps to contain and remediate the breach.
Conduct a thorough investigation to determine the cause of the breach and implement preventative measures to avoid future breaches.
12. Legal Compliance
CFAW is committed to complying with all applicable Pakistani laws and regulations related to data protection, including PECA and the PDP Act.
13. Contact Information
For any questions or concerns regarding this Data Policy, please contact CFAW at: hello@cfaw.center
Effective Date: March 25th, 2025
1. Purpose
This Data Policy outlines CFAW's practices regarding the collection, use, storage, and protection of personal data collected for community events, newsletter signups, patronage, facilitator applications, and photographic/visual documentation, adhering to Pakistani law including the Prevention of Electronic Crimes Act (PECA) and the Personal Data Protection Act (PDP).
2. Data Collection for Community Events
For community events, CFAW collects the following information:
Name
CNIC (National Identity Card Number)
Phone Number
Payment Confirmation (related to event fees)
3. Data Collection for Newsletter & Patronage
For the Nani Ghar newsletter and patronage program, CFAW collects:
Name
Email Address (for newsletter delivery)
Patronage Level/Details (if applicable)
4. Data Collection for Facilitator Applications
Facilitator application forms may collect the following information:
Name
Contact Information
Proposed Event Type
Estimated Event Capacity (number of participants)
Material and Art Supply Requirements
Facilitation Experience and Qualifications
Portfolio or Work Samples (where applicable)
Any other information related to the applicant's ability to facilitate workshops
5. Photographic and Visual Data
CFAW reserves the right to use photographs and visual recordings taken during events and activities for:
Documentation purposes
Project presentations
Company promotional materials (website, social media, etc.)
Individuals have the right to request:
That their image not be used.
That their image be removed from CFAW's online platforms.
Such requests should be submitted in writing to hello@cfaw.center.
6. Data Use and Sharing
Community Events: Data collected for community events will not be shared with any third party unless there is a declared national emergency or a public health emergency requiring disclosure.
Newsletter & Patronage: Data collected for the newsletter and patronage will not be shared with third parties, except for Framer and Substack, which are used for newsletter distribution and website management, respectively. These platforms are expected to maintain appropriate data protection standards.
Facilitator Applications: Facilitator application data will be used for the purpose of evaluating and selecting facilitators. This data will be kept internal and will not be shared with third parties, except if legally obliged to do so.
General: CFAW does not sell or share data with any other third parties for marketing or other purposes.
7. Data Digitization and Storage
Paper-based data collected for community events (excluding CNIC information, which is handled with extra care) is digitized and stored securely. Data collected for the newsletter, patronage, and facilitator applications is collected digitally from the outset.
Encryption: CFAW utilizes encryption methods to protect sensitive data both in transit and at rest.
Physical Backups: Routine monthly physical backups of all digital data are performed.
Anonymity in Audits: Anonymity is maintained during financial audits (e.g., FBR proof) to protect individual privacy.
8. Data Subject Rights
Individuals have the right to:
Request Access: Request access to the data CFAW holds about them.
Request Removal: Request removal of their data. Such requests will be reviewed on a case-by-case basis by the operational team and the organizational head, considering legal and operational requirements.
Request Image Removal: Request the removal of their image from CFAW's platforms.
To exercise these rights, please contact CFAW at hello@cfaw.center
9. Data Collection Consent
Explicit consent is obtained from individuals before their data is collected. This consent outlines the purpose of data collection, how the data will be used, and the individual's rights regarding their data. This includes consent for photograph usage, and the right to revoke that consent.
10. Children's Data
For registering children for events or programs, CFAW requires consent from a parent, legal guardian, or teacher. Procedures are in place to verify the relationship of the consenting adult to the child.
11. Data Breach Contingency
In the event of a data breach, CFAW will:
Immediately assess the scope and impact of the breach.
Notify affected individuals and relevant authorities (e.g., PTA) as required by law.
Take steps to contain and remediate the breach.
Conduct a thorough investigation to determine the cause of the breach and implement preventative measures to avoid future breaches.
12. Legal Compliance
CFAW is committed to complying with all applicable Pakistani laws and regulations related to data protection, including PECA and the PDP Act.
13. Contact Information
For any questions or concerns regarding this Data Policy, please contact CFAW at: hello@cfaw.center
Contact:
Creating Art and Joy Since 2020
Contact:
Creating Art and Joy Since 2020
Contact: