Our commitment to your privacy

At Brooke Pakistan we are dependent on the generosity of our supporters and the goodwill and trust of the public, our partners, and the communities we serve. We are committed to protecting and respecting your privacy, and to using your personal data in line with applicable laws in Pakistan.

This statement (together with our Terms of Use and any other documents referred to here) sets out how personal data we collect from you, or that you provide to us, will be processed.

Please read this to understand:

• what our policies and practices are regarding your personal data
• what information we collect, why, and how it may be used
• your rights in relation to your information

By visiting thebrooke.org.pk or providing us with personal data, you accept the practices described in this statement.

This statement does not apply to our staff, volunteers, or consultants, who receive separate internal privacy notices.

Brooke Hospital for Animals (Pakistan) (“Brooke Pakistan”, “we”, “us”) is a public company limited by guarantee, registered under licence from the Securities and Exchange Commission of Pakistan (SECP) under Section 42 of the Companies Act, 2017.

Registered/Head office: 9/295 Link Sarwar Road, Lahore Cantt, Pakistan Regional offices: Lahore, Faisalabad, Multan, Gujranwala, Peshawar, Karachi, Sukkur

Brooke Pakistan is an affiliate of Brooke (The Brooke Hospital for Animals), a UK-registered charity, but operates as a separate legal entity governed by Pakistani law. This privacy statement relates only to information collected by Brooke Pakistan. If you interact with Brooke’s UK site or other international affiliates, their own privacy statements apply.

We do not sell or swap your personal details with other organisations for their own marketing purposes. We may share limited data with contracted service providers strictly on a need-to-know basis (see “Data sharing” below).

Information you give us

• When you respond to our communications, fill in forms (in person, by mail, or on our website), donate, register for an event, sign up for emails, or contact us by phone/email.
• When you take part in events we organise.
• When you exchange contact details with us in person (e.g. business cards).
• This may include your name, address, email, phone number, and — for donations — payment details.
• We also collect information about equine owners, their families, and communities who benefit from our field programmes (as documented in our project reports and newsletters).
• Under 18s: [confirm actual policy] — we recommend the same practice as Brooke UK: ask young people taking part in events to confirm they are 18+, or obtain guardian consent.

Information we collect about you

• Records of donations, event registrations, and correspondence, so we can contact the right person with relevant communications.
• Where relevant, information about individuals at organisations we partner with or seek support from.
• Aggregated/anonymous website usage data (pages visited, device type, referral source).

Information we receive from other sources

• Via third-party sites linked to ours.
• From suppliers/partners who support our fundraising, communications, or donation processing.
• From social media, where you tag us, comment, or message us publicly (subject to that platform’s own privacy policy).

Supporters/donors

• Administration (confirming donations, correcting records, event registration).
• Keeping a record of your support history.
• Understanding your preferences for how/whether we contact you.
• Fundraising communications (only with appropriate consent — see “Consent” below).
• Legal/regulatory record-keeping requirements applicable in Pakistan.

Communities and individuals who benefit from our work

• We collect data (including photographs) about equine owners and their families for programme reporting. Where we intend to use this for public communications or campaigns, we obtain explicit consent/a signed form first.

Partner organisations and stakeholders

• To share information about our work, invite collaboration, and for advocacy purposes with organisations working on animal welfare/livelihoods.

General

• Internal record-keeping, complaint handling.
• Improving our website and services.
• Fraud prevention and site security.

We do not usually collect sensitive personal data (health, religion, ethnicity, etc.) except where clearly necessary — e.g. medical/dietary needs for event participation — and only with your knowledge.

[This section needs input from whoever confirms Brooke Pakistan’s actual compliance framework — Pakistan does not have a single GDPR-equivalent statute the way the UK does, so this section should NOT simply restate “GDPR legitimate interest” language. Suggested plain-language basis, pending legal confirmation:]

We process personal data where:

• you have given consent (e.g. opting in to marketing emails);
• it’s necessary to fulfil a service you’ve requested (e.g. processing a donation);
• we have a legal or regulatory obligation to do so;
• it’s necessary to protect someone’s safety in an emergency; or
• we have a legitimate organisational interest in doing so (e.g. maintaining donor records) that does not override your rights.

We may share your data with:

• Brooke Pakistan staff on a need-to-know basis, and with staff at Brooke’s international affiliates where relevant to our shared work.
• Contracted service providers (e.g. payment processors, email/SMS platforms, event organisers) under contracts that restrict them to using your data only for the purposes we specify.
• Authorities, where required by Pakistani law.

We do not sell your data to third parties.

Because Brooke Pakistan is affiliated with Brooke (UK) and other international offices, some data may be processed or stored outside Pakistan. [Needs confirmation: where is your data actually hosted — Pakistan-based servers, or a UK/international CRM? This materially changes what you can honestly claim here.]

We take reasonable steps to keep your information secure, including secure servers and restricted access. No transmission over the internet is ever completely secure, and any transmission is at your own risk.

Depending on applicable Pakistani law [to be confirmed with legal counsel — Pakistan’s data protection framework is still developing and rights may not map exactly onto UK-style rights], you may generally expect to be able to:

• ask what data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data, subject to legal/record-keeping requirements;
• withdraw consent to marketing communications at any time;
• object to certain uses of your data.

To exercise any of these, contact us at info@thebrooke.org.pk.

Our website uses cookies to help it function properly and to understand how visitors use the site. You can control cookies through your browser settings; disabling them may limit some site features.

If you donate by card, this is processed securely in line with standard payment card industry security practices. [Confirm: which payment gateway does Brooke Pakistan actually use, and does it hold PCI-DSS certification? Don’t claim a standard you haven’t verified.]

We retain personal data only as long as necessary for the purpose it was collected, including to meet legal or regulatory record-keeping requirements. [Specific retention periods need to be confirmed internally.]

Our website may link to third-party websites. We are not responsible for their privacy practices — please check their own privacy policies.

If you have questions about this privacy statement, or want to update your communication preferences, contact:

Brooke Pakistan 9/295 Link Sarwar Road, Lahore Cantt, Pakistan +92 (0)42 3665 0751 info@thebrooke.org.pk

We may update this statement from time to time. Changes will be posted on this page.

This privacy statement was last updated [DATE].

Please contact us directly first so we can help resolve any concern. [If Pakistan has a relevant regulator for data protection complaints once law is enacted, add that here — do not invent one.]