MANAFI
Privacy Notice
How account, application, learning and organization information is intended to be handled, and which details still require operator confirmation.
Operator and contact
MANAFI supports awareness and education through QASID, DALIL and JISR. The operator’s legal identity and privacy contact must be confirmed before this notice is published. No contact address is approved in this draft.
Information collected
Depending on your program and stage, information includes account and contact details, country, spoken languages and preferences; journey and learning records; DALIL experience, passport number and copy, introduction-video link and review records; or organization, representative, cooperation and meeting information. Acceptance records and protected operational and audit evidence are separate records.
Collection and purposes
Information is provided through account and application forms, authorized uploads, participation records and administrator review. The proposed purposes are account access, personalized awareness learning, application and qualification review, activity coordination, service messages and security. Collect only what the relevant stage requires. The operator must confirm the legal basis for each purpose; Terms acceptance is not blanket consent for all processing.
Who can access information
Access is limited by role, program and organization. Passport details and private video links are restricted to the applicant and authorized DALIL reviewers with a documented need. They do not belong in public profiles, ordinary exports or notifications. Representatives must not see another organization’s records or confidential internal review notes.
Providers, hosting and transfers
Before publication, the operator must identify actual recipients and service providers, hosting and processing countries, and any cross-border transfer arrangements and safeguards. This draft does not establish a hosting region, institutional partnership or transfer approval.
Retention and deletion
Before collection, approve retention and deletion rules for each category, especially passports, application files, learning records, audit evidence and backups. No retention duration is approved by this draft. A closure request does not promise immediate removal of records that must be retained. Issued links and downloaded copies cannot be assumed to be instantly recalled.
Your requests and choices
Use the account’s privacy request flow for a correction or closure request when available. Access, copies, deletion, consent withdrawal where relevant, and complaint procedures must be explained by the operator under the applicable rules, including any limits and response process. The approved public contact and escalation route remain to be supplied. Do not send passports or passwords through a public support form.
Cookies, preferences and communications
The account uses authentication and preference mechanisms. The operator must disclose the actual cookie and storage inventory before publication. Optional marketing and public-media permissions remain separate choices. Operational account and application notices are distinct from marketing. This draft does not authorize advertising trackers or claim that SMS or WhatsApp delivery is configured.
Protection and updates
The required controls include scoped access, private file storage, scanning, server validation and redacted diagnostics. Their deployment must be verified; no absolute security guarantee is made. Publish a dated, versioned notice when approved and explain material changes. Store the Privacy Notice version presented separately from Terms acceptance.