Responsible organization
Levant for Empowerment and Capacity Building, Registration No. 2151, headquartered in Lattakia, Syria. Address: Lattakia – Al-Thawra Autostrad – Opposite Shabata Restaurant.
Information we process
We process contact messages, partnership inquiries, volunteer applications and private volunteer records, beneficiary participation and certificate records, and staff accounts. Depending on purpose, this includes names, contact details, submitted content and training records. Limited security logs and derived connection-address keys are used for rate limiting and service protection.
Purposes
To respond to inquiries, evaluate collaboration, recruit and manage volunteers, communicate with participants, manage training, issue and verify certificates, and operate and protect the website. We do not use this data for advertising or marketing tracking.
Public information
Volunteer profiles are private by default and become public only after approval and confirmation of the person’s permission to publish public details. Phones, emails, addresses, identity details, CVs, documents and internal notes remain private. Certificate verification shows the holder’s name, training, issue date, certificate number, verification code, status and, when recorded, hours and instructor. There is no public beneficiary directory or name search.
Access, sharing and hosting
Internal access is restricted to authorized staff according to their responsibilities. Local-form data, the database and files are stored on the foundation’s hosting server; its geographic location depends on the actual hosting arrangement. Trusted hosting or maintenance providers may require access necessary to operate the service, and competent authorities may require lawful disclosures. We do not sell personal information.
Retention
Messages, applications and participation records are retained while necessary to handle requests and follow-up, manage participation, document training or meet applicable obligations. Retention needs should be reviewed periodically. Authorized staff can archive or permanently delete messages; archiving is not deletion. Sign-in sessions expire after 8 hours. Expired rate-limit records are removed by the maintenance procedure. Backup retention depends on server configuration. The current default keeps one successful local backup (BACKUP_KEEP=1), given the server’s 5 GB storage capacity. An additional secure external backup is recommended.
Protection and privacy requests
We use hashed passwords, protected sign-in sessions, rate limiting, server-side permissions and file validation. You can request access to, correction or deletion of your information, or withdraw permission for a public profile, subject to legitimate obligations and applicable duties. We verify identity appropriately before handling private data.
Privacy contact
This policy describes the website’s practices and does not claim legally verified regulatory compliance.