This Privacy Policy explains how Kechara Soup Kitchen Society collects, uses, discloses, and safeguards personal data when you use this website, make a donation, volunteer, request receipts, or contact us. This Policy should be read together with our Terms and Conditions.

1. Who We Are

Kechara Soup Kitchen Society is responsible for personal data processed through this website and related engagement channels. For privacy-related enquiries, you may contact us via official channels listed on this website, including ksk@kechara.com.

2. Categories of Personal Data We Collect

Depending on your interaction with us, we may collect:

• Identity and contact details (for example: name, phone number, email);
• Donation and transaction-related details (for example: amount, donation type, payment method metadata);
• Receipt and compliance details (for example: ID type/number, tax-related details, and address information);
• Communication preferences (for example: newsletter opt-in);
• Technical usage information (for example: cookie preferences and basic website interaction data).

3. How We Collect Data

We collect data when you:

• Submit forms on this website;
• Make one-time or monthly donations;
• Request receipts or tax-exemption documentation;
• Subscribe to communications;
• Interact with cookie consent controls and website features.

4. Why We Use Personal Data

We process personal data for legitimate operational and compliance purposes, including to:

• Process donations and related confirmations;
• Facilitate recurring donation mandate setup and administration;
• Issue general receipts and support tax-exemption receipt workflows;
• Communicate service updates, donation support, and requested follow-ups;
• Send newsletters where you have opted in;
• Improve website usability, performance, and service delivery;
• Meet legal, regulatory, accounting, and reporting obligations.

5. Donation and Payment Processing

Payments are processed through third-party payment providers, including Razorpay Curlec and banking/payment networks, based on selected donation flow and method.

• Payment processing partners handle sensitive payment credentials directly.
• Kechara Soup Kitchen Society does not store full card numbers or full banking login credentials.
• Transaction metadata and donor-provided details may be used for reconciliation, receipts, and support purposes.

6. Data Sharing and Disclosure

We may share personal data only where needed, including with:

• Payment processors and banking/payment infrastructure participants;
• Service providers supporting website operations, communications, or compliance processing;
• Authorities or regulators when required by law, legal process, or lawful requests.

We do not sell your personal data.

7. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes described in this Policy, including operational, legal, accounting, audit, and reporting requirements. Retention periods may vary by data type and legal obligations.

8. Data Security

We apply reasonable technical and organisational safeguards to protect personal data from unauthorized access, misuse, alteration, or loss. No internet-based service can be guaranteed as fully secure, but we continuously improve protection controls appropriate to risk.

9. Your Rights and Choices

Subject to applicable Malaysian law (including the Personal Data Protection Act 2010, where relevant), you may request access to and correction of your personal data, and may withdraw consent for specific processing activities where consent is the legal basis.

You may also opt out of marketing communications at any time by following unsubscribe instructions or contacting us directly.

10. Cookies Policy

10.1 What Are Cookies and Similar Technologies?

Cookies and similar technologies are small files or local storage entries used to remember preferences, support website functionality, and analyze website usage.

10.2 How We Use Cookies

We use cookies or similar mechanisms for purposes such as:

• Strictly necessary functionality to support core website operation;
• Remembering your cookie preference choices;
• Improving user experience and understanding aggregate site usage trends.

10.3 Consent Choices

When presented with our cookie banner, you may choose to accept or reject non-essential cookies. We store your preference locally in your browser so the same prompt does not repeatedly appear.

If you reject non-essential cookies, core website functionality remains available, but certain analytics or convenience features may be limited.

10.4 Browser Controls

Most browsers allow you to manage cookies through browser settings, including deleting existing cookies or blocking future cookies. Browser-level settings may affect website functionality.

11. International Data Transfers

Some service providers may process data in jurisdictions outside Malaysia. Where such transfers occur, we take reasonable steps to ensure appropriate safeguards are in place consistent with applicable legal requirements.

12. Children's Data and Sensitive Contexts

This website is intended for general audiences. Where personal data relates to vulnerable individuals in programme contexts, we handle such information with heightened care and only for legitimate, authorized purposes.

13. Changes to This Policy

We may update this Privacy Policy periodically. The revised version will be posted on this page with an updated effective date. Continued use of this website after updates indicates acceptance of the revised Policy.

14. Contact and Complaints

For privacy requests, concerns, or complaints, contact us through the official channels listed on this website, including ksk@kechara.com. We will review and respond in accordance with applicable legal and operational requirements.