Privacy Policy

Who we are

The Project Noor is a student-led nonprofit initiative expanding access to quality education in underserved communities, starting in Bangladesh. This policy covers this website, our donation flow, and our Race Across Toronto event platform.

Information we collect

• Contact form: your name, email address, and message.
• Donations: your name, email address, donation amount, and currency. Card details are entered on Stripe's own secure checkout and never touch our servers.
• Race registration: first and last name, email, phone number, date of birth, city, emergency contact name and phone, accessibility needs, dietary restrictions, team information, and your recorded agreements.
• Participants under 16: parent or guardian name, email, phone, and consent.
• Basic technical data such as pages requested and error logs, used to keep the site working.

Why we collect it

• To reply to your messages.
• To process donations, issue receipts, and report fundraising totals.
• To register you for events, organize teams, verify eligibility and age, and contact you about race day.
• To keep participants safe, including reaching your emergency contact if needed.
• To meet accounting, tax, and legal obligations.

Photo and video

Event photos and video may be used by The Project Noor for fundraising, social media, and reporting when you have given photo release consent during registration. You can withdraw that consent at any time by emailing us, and we will stop using new material and remove existing material where reasonably possible.

Who we share information with

• Stripe, for payment processing and receipts.
• Our hosting, database, and email delivery providers, who process data only to run this website.
• Authorities or emergency services where required by law or needed to protect someone's safety.
• We do not sell, rent, or trade your personal information, ever.

How long we keep it

Contact messages are kept while we need them to respond and for our records. Donation records are kept as long as required for financial and tax purposes. Registration data is kept for the event, plus a reasonable period afterward for safety, accounting, and follow-up.

Security

Data is stored in access-controlled databases with row-level security rules, so a racer's private details such as emergency contacts are visible only to that racer and to the small number of organizers who need them. Payments are handled entirely by Stripe.

Your choices

• Ask for a copy of the personal information we hold about you.
• Ask us to correct anything inaccurate.
• Ask us to delete your information, subject to records we must legally keep.
• Withdraw photo release or marketing consent at any time.

Children

Participants under 16 may only register with the consent of a parent or guardian, and must be supervised by that parent or guardian during the event. We collect the minimum guardian information needed for consent and safety.

Changes

If we update this policy we will change the date at the top of this page. Significant changes affecting event participants will also be sent by email.