Demo Version

Quick donation options

Choose the donation amount

Notice

Your donation will be automatically directed to the most needy cases.

mada card
Mastercard
Apple Pay
Visa
Use the Tab key to move between elements.

You are here

Privacy Policy

Ehsan Sanabel
Article (1): Introduction
Ehsan Ecosystem, issued by Royal Order No. (48019) dated (13/08/1441 AH), aims to leverage data and artificial intelligence to maximize the impact and sustainability of development projects and services by providing advanced technical solutions and building an effective ecosystem through partnerships with government, private, and non-profit sectors. The objective is to enhance the Kingdom of Saudi Arabia’s leading role in development and charitable work and increase the non-profit sector’s contribution to GDP by offering diverse donation opportunities/services across various charitable fields that create lasting impact and deliver broad social benefits to the most needy cases.
Article (2): Data to be Collected and Purpose of Collection
  1. Name
  2. Mobile number
  3. Email address
  4. Age
  5. Gender

Name and email are used to complete registration; mobile number is used to ensure delivery of donation messages and impact reports. Age and gender are optional data the donor may add to improve user experience.

Article (3): Methods of Data Collection
  1. Directly: donor data provided by the data subject is collected through direct registration on the website/app.
  2. Indirectly: Ehsan does not collect any personal data indirectly and does not rely on any other sources for donor data.
Article (4): Use of Personal Data
We use the personal data collected directly as follows:

Personal data is used to fulfill account-creation requirements (name, email, and mobile number) to complete registration; to sign in by entering the mobile number; or via “Keep me informed” after completing a donation by entering the mobile number. Data is stored in Ehsan’s databases in encrypted records and linked to sending SMS messages to donors targeted by donation opportunities to improve beneficiary experience—such as notifying donors about request status in specific programs (campaigns, Adahi, Gift) and sharing impact reports for certain opportunities—until deleted in accordance with the National Information Center’s data destruction procedures.

Article (5): Storage and Destruction of Personal Data
Personal data is stored within the Kingdom of Saudi Arabia on National Information Center servers. The data will then be destroyed within five (5) years in a secure manner that prevents access or recovery, in accordance with the National Information Center’s destruction procedures, except for data tied to Ehsan’s core operations (donations linked to opportunities and services) that do not contain personal data.
Article (6): Legal Basis for Collecting and Processing Personal Data
The consent of the data subject, which may be withdrawn at any time unless another legal basis applies. To do so, contact the email specified in Article Nine.
Article (7): Rights of the Data Subject

Right to be informed: the data subject has the right to know how we collect data, the legal basis for collection and processing, how it is processed, stored, and destroyed, and with whom it will be shared. All details are available in this Privacy Policy, or by contacting us via the details in Article Nine.

Right of access: the data subject has the right to be enabled to access their personal data directly.

Right to obtain personal data: the data subject may request a copy of their personal data via the email specified in Article Nine. It will be provided—free of charge—within [seven business days] via email.

Right to rectify: the data subject may request correction of personal data they deem inaccurate, incorrect, or incomplete via the email specified in Article Nine; it will be reviewed and updated within [seven business days], and the data subject will be notified by email.

Right to destroy personal data: the data subject may request destruction of their personal data under certain circumstances, except for data linked to the organization’s core donation operations.

Withdrawal of consent: the data subject may withdraw consent to the processing of personal data at any time, unless there are legitimate purposes requiring otherwise.

Article (8): Sharing/Exchange of Personal Data
There is no sharing or exchange of personal data collected through Ehsan Platform with other entities.
Article (9): Exercising Data Subject Rights

The data subject may request access/rectification/destruction of their data by contacting: EData@nic.gov.sa

Article (10): Personal Data Protection Officer

Email: Dmo@sdaia.gov.sa

Article (11): Complaints and Inquiries

For complaints or inquiries related to the Privacy Policy or handling of personal data, contact the Ehsan Platform Management via the available channels at the following number (contact number 8001247000). If there is no response within seven business days, submit the complaint or inquiry to SDAIA’s Data Management Office (Dmo@sdaia.gov.sa). If the issue is not resolved or there is no response within seven business days, escalate to the National Data Management Office at: (pr@ndmo.gov.sa).

Article (12): Updates to the Privacy Policy

The last update to the Privacy Policy was made on (23/01/2025).

The Ehsan Platform Management reserves the right to add or amend any provisions of the Privacy Policy and will notify the data subject. The site management may terminate the data subject’s account if the data subject does not accept any changes to the Privacy Policy.

Arabic is the authoritative language for applying the terms and conditions; in case of any discrepancy in interpreting any text in another language, the Arabic text shall prevail.

Article (13): Ehsan Platform Management
The supervising entity over Ehsan Platform is the Saudi Data & AI Authority (SDAIA).