Last updated: 17 October 2026
Who we are
Taaluq Foundation is a registered non-profit society in Karachi, Pakistan.
- Registered society KAR 030 of 2016-17
- National Tax Number 8174927, approved as a non-profit organisation by the Federal Board of Revenue
- Certified by the Pakistan Centre for Philanthropy
- Registered office: Surraya Health Care Hospital, Shah Faisal Colony No. 1, Behind Misali Park, Karachi
- Email: info@taaluqfoundation.org
This policy explains what information we collect, why, and what you can ask us to do with it.
The information we collect
When you message us on Facebook or Instagram. If you write to our Facebook Page or our Instagram account, we receive your name or username as it appears on that service, your message, and the time you sent it. If you tell us your city, your area, or what you need, we record that too, so that a person can help you properly instead of asking you the same questions twice.
When you contact us by email or telephone. We keep your name, your contact details and what we discussed.
When you use a form on this website. We now offer three forms, and each sends its answers directly to the Foundation:
- Help request — your name, phone number, city or area, who needs help, the kind of help, and your description of the situation. We do not ask for your CNIC, your bank details, or medical documents.
- Volunteer application — your name, phone number, email, university or college, city, what you would like to help with, when you are available, and your Instagram if you choose to give it.
- Job application — your name, phone number, email, city, the position, your qualification and experience, and your CV. A CV is moved immediately into our private recruitment folder and is not left anywhere public on this website.
When you donate. We keep your name, your contact details, the amount, the date, and whether the gift was Zakat, Sadqa or a general donation. This is required for our accounts, our audit, and your receipt.
When you visit our website. Our website and our hosting provider keep ordinary technical records such as the pages requested and the time. We do not use these to build a profile of you.
Patients and students. Medical records at Surraya Health Care and student records at Surraya Free School are kept separately, at those institutions, under their own confidentiality. They are not part of this website, and they are not connected to our social-media accounts.
Children
The Foundation runs a school and a hospital, so we necessarily hold information about children. That information is collected from a parent or guardian, is used only to provide the service, and is never used for fundraising or marketing, and never shared publicly in a way that identifies a child without the family’s agreement.
Our Facebook and Instagram messaging is not intended for children. If a child writes to us, we answer only to direct them to an adult.
Why we hold it, and what we never do with it
We use your information to reply to you, to provide the service you asked for, to issue your donation receipt, to keep the accounts a registered non-profit is required to keep, and to tell you about the work your giving supports.
We do not sell your information. We do not rent it, trade it, or pass it to anyone for their own marketing. Ever.
Who else sees it
We share information only where it is necessary to run the Foundation:
- Our bank and our payment provider, to receive and reconcile a donation
- Our accounting system, where donations and receipts are recorded
- Our email and document systems, which hold our correspondence and records
- Meta (Facebook and Instagram), which carries the message you send us on those services and is governed by Meta’s own privacy policy
- Our auditors and regulators, where the law or our registration requires it
Each is used to do our own work, not theirs.
How long we keep it
- Donation records are kept as our accounts and our audit require.
- Enquiries, form submissions and messages that do not lead to a donation or a service — including CVs — are deleted after two years.
- Anything you ask us to delete is removed as described on our Data Deletion Instructions page, except where we are required to keep it.
Your rights
You may ask us at any time to tell you what information we hold about you, to correct anything that is wrong, to delete your information, or to stop contacting you.
Write to info@taaluqfoundation.org, or to our registered office above. We will not ask you why.
Keeping it safe
Access to donor and beneficiary records is limited to the staff who need it. Our systems are password-protected and our records are backed up. No organisation can promise perfect security, and we will not pretend otherwise — but if anything were ever lost or exposed, we would tell the people affected.
Changes
If we change this policy we will change the date at the top. Material changes will be announced on this page.
Questions or complaints
Write to info@taaluqfoundation.org, or to the registered office above. If you are not satisfied with our answer, you may write to the Chief Executive at the same address.