Welcome to Erteqa — a multidisciplinary Afghan organization delivering management consulting, technology innovation, educational empowerment, and impact solutions across Afghanistan.
Your trust matters to us. This Privacy Policy explains how Erteqa (“we”, “our”, or “us”) collects, uses, stores, and protects your personal information when you use our websites, mobile applications, and digital platforms (including AARI, ABD – Afghanistan Blood Database, Kankoor App, and other Erteqa services).


1. Introduction

We respect your privacy and are committed to ensuring the confidentiality and security of the personal data you share with us.
This policy complies with global data protection best practices and is designed to align with international standards such as GDPR, UN Data Protection Principles, and local Afghan data laws.

By accessing our website or using our services, you agree to this Privacy Policy. If you do not agree, please refrain from using our platforms.


2. Scope of This Policy

This policy applies to all Erteqa-operated platforms, including:

  • Erteqa Main Website (erteqa.org)

  • EPIC Educational Hub & Kankoor Application

  • AARI – Afghan AI Readiness Index Platforms

  • ABD – Afghanistan Blood Database

  • Partner Portals, Training Dashboards, and Cloud Systems

It covers both online and offline data collection activities (e.g., surveys, training registration, donor databases, and field research).


3. Information We Collect

We collect only the information necessary to provide effective services. The type of data we collect depends on how you interact with us.

a) Personal Information

  • Name, email address, phone number, and organization name

  • Gender, date of birth, and location (where relevant)

  • Login credentials and profile details for online accounts

  • Donor registration data (for ABD), educational records (for EPIC), or project participation details

b) Non-Personal / Technical Information

  • Browser type, device information, IP address, and system logs

  • Cookies and analytics data (e.g., page visits, referral sources, session durations)

  • App usage statistics from Erteqa mobile and web applications

c) Sensitive Information (Limited Use)

Certain programs (e.g., ABD Blood Database or PSEA Training) may require sensitive data such as medical information or gender.
We only collect this with explicit consent and process it under strict confidentiality.


4. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our digital and educational services

  • Register users for trainings, certifications, or projects

  • Match donors and hospitals (ABD) or evaluate AI readiness (AARI)

  • Communicate updates, event notifications, and partnership opportunities

  • Ensure system security, fraud prevention, and compliance with donor reporting

  • Generate anonymized data for research, reports, and performance analysis

We never sell or rent your personal data to any third party.


5. Legal Basis for Processing

We process your data under the following legal grounds:

  • Consent: When you voluntarily register, subscribe, or participate.

  • Contractual necessity: To deliver services you request (training, login, reporting).

  • Legitimate interest: To maintain platform integrity and improve user experience.

  • Legal obligation: To comply with applicable Afghan and donor data laws.


6. Data Sharing & Disclosure

We may share information only under these controlled conditions:

  • With partner organizations or donors for program implementation (only anonymized or relevant data).

  • With trusted third-party vendors (e.g., hosting, analytics, or payment services) who follow strict confidentiality agreements.

  • When required by law, legal process, or to protect users from harm or fraud.

All third parties are bound by confidentiality clauses and cannot use data for their own purposes.


7. Data Retention

We retain your data only for as long as necessary to:

  • Fulfill the purposes described above

  • Comply with donor, audit, or legal obligations

  • Maintain historical project records (anonymized where possible)

After the retention period, data is securely deleted or anonymized.


8. Data Security

We implement multiple layers of protection:

  • Encrypted transmission (HTTPS / SSL)

  • Secure cloud storage with limited access

  • Role-based authentication and regular access audits

  • Periodic data security reviews and penetration testing

  • Staff and partner training on data protection and confidentiality

While no digital system is 100% secure, we apply industry-standard safeguards to minimize risks.


9. Cookies & Tracking

Our website uses cookies to:

  • Improve site performance and navigation

  • Remember language and preference settings

  • Analyze traffic through Google Analytics and similar tools

You can manage or disable cookies in your browser settings. Disabling cookies may limit certain site features. 


10. Your Rights

You have the right to:

  • Request access to your personal data

  • Request correction or deletion of your information

  • Withdraw consent for processing at any time

  • Object to specific uses (marketing, analytics)

  • Request a copy of your data in a portable format

To exercise your rights, contact us at: privacy@erteqa.org


11. Data Transfers

If data is transferred outside Afghanistan (for cloud hosting or backup), we ensure:

  • The recipient country provides adequate data protection, or

  • A signed Data Processing Agreement (DPA) is in place ensuring compliance.


12. Children’s Privacy

Our services are not directed at children under 13. For educational programs involving minors, consent is obtained from parents, guardians, or schools in compliance with child protection standards.


13. Third-Party Links

Our website and apps may link to external resources or partner sites. We are not responsible for the privacy practices or content of those websites. We encourage you to review their respective privacy policies before providing personal information. 


14. Updates to This Policy

We may update this Privacy Policy periodically to reflect new technologies, regulations, or service changes. The latest version will always be posted on this page with the updated date.

For major changes, users will be notified via email or in-app message.

15. Contact Us

If you have any questions, concerns, or requests related to privacy or data protection, please contact:

We will respond to verified requests within 30 business days.