Privacy Policy

Who we are

Al Ehsan Water Wells ("we", "us") builds and maintains clean water wells and provides donors, partner organisations and field teams with an online platform to sponsor, track and document those projects. This policy explains what personal data we handle through alehsanwaterwells.com and how we protect it.

Information we collect

• Account details — name, email address, phone number, organisation and role, created when you register or are invited to the platform.
• Sponsorship and payment records — amounts, references, dedication details, invoices and payment proofs you upload. Card details are never stored by us.
• Project content — photographs, documents, certificates, location details and progress updates relating to wells.
• Technical data — basic log and device information needed to keep the service secure and working.

Google Drive access

Our platform lets each user optionally connect their own Google Drive so project photos and documents already in their account can be found and opened from their dashboard. Connecting Drive is optional. If you choose to connect Google Drive:

• We request the Google Drive metadata read-only scope. This lets us read file and folder names, types, identifiers and viewing links so you can browse and open them. It does not let us read file contents, upload files, change files or delete files.
• Authorisation is handled by Google's own sign-in screen. We never see or store your Google password.
• Access credentials are held encrypted on our servers, linked to your account only, and are never shared with other users, organisations or third parties.
• Google user data is used solely to provide the Drive features you requested. It is never sold, used for advertising, or used to train AI models.
• You can disconnect your Drive at any time from the Google Drive window in your dashboard, or from your Google Account security settings. Disconnecting immediately revokes our access and deletes the stored credential.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data except as necessary to provide or secure this feature, comply with law, or complete a transaction you explicitly request. Humans do not read Google user data unless you give permission for support or security purposes, or the law requires it.

How we use your data

To create and secure your account, process and confirm sponsorships, issue receipts, certificates and invoices, deliver project updates and completion reports, respond to enquiries, and meet legal, accounting and charitable reporting obligations.

Sharing

We share data only with the service providers who run the platform on our behalf (hosting, database, email delivery and payment processing), with the partner organisation you sponsor through where relevant, and where required by law. We do not sell personal data.

Retention and security

Records are kept for as long as your account is active and for as long as required for financial and charitable record-keeping. Data is stored on access-controlled, encrypted infrastructure, and sensitive documents such as payment proofs are only accessible to authorised, signed-in users.

Your rights

You may request access to, correction of, or deletion of your personal data, withdraw consent, or ask us to stop sending updates. Contact us and we will respond within 30 days.

Children

The platform is not intended for children under 16.

Contact

Questions about this policy or your data: info@alehsanwaterwells.com