Data Protection

Privacy Policy

How Heart of Kurdistan collects, uses, and safeguards your personal data when you explore our digital guide.

Last Updated: January 2026 GDPR & UK Data Protection Aligned

1. Overview

At Heart of Kurdistan ("we", "our", "us"), we are committed to respecting and protecting the privacy of every visitor. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information when you interact with heartofkurdistan.org and associated services.

Commitment to Privacy

We do not monetize your personal information or sell user data to third parties. Our goal is strictly to provide an inspiring, educational platform.

2. Data We Collect

We collect minimal personal data necessary to provide a safe, high-performing web application:

  • Voluntary Submissions: Information provided when contacting us or creating an account (e.g. name, email address, inquiry text).
  • Technical & Analytics Data: IP address, browser type, device information, operating system, referring URL, and pages viewed. This data is aggregated and anonymized.
  • Session Information: Standard secure cookies to manage user authentication and preferences.

3. How We Use Information

The information we collect is used exclusively for:

  • Operating, maintaining, and improving platform performance and responsiveness.
  • Responding to user contact submissions, content suggestions, or technical assistance requests.
  • Preventing security vulnerabilities, fraud, and unauthorized API abuse.
  • Analyzing aggregate visitor demographics to improve cultural content layout.

5. Data Security

We enforce robust administrative, technical, and physical security measures, including HTTPS encryption, secure session tokens, firewall protections, and regular vulnerability scanning, to prevent unauthorized access or disclosure of personal data.

6. Your Rights

Under applicable data privacy laws (including UK GDPR and EU GDPR), you possess the following rights regarding your personal information:

  • Right of Access: Request a copy of the personal data held about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal records ("Right to be Forgotten").
  • Right to Restrict Processing: Request restrictions on processing your data under specific conditions.

7. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please reach out to our Privacy Officer at:

Email: privacy@heartofkurdistan.org

Platform: Heart of Kurdistan Digital Portal