Privacy Policy

1. Who We Are

Sana Global Intelligent Systems (trading as "Sanarise"), registered in the Sultanate of Oman, is the controller of personal data collected through this website and in the provision of the NGO Kit platform.

• Legal name: Sana Global Intelligent Systems
• Trade name: Sanarise Intelligent Systems / NGO Kit
• Address: P.O.BOX 111, PC 112, South Al Mabilah, Al Seeb, Muscat Governorate, Oman
• TIN: 2252244
• Contact: legal@ngokit.com
• Website: https://ngokit.com

2. Scope of This Policy

This Privacy Policy covers two distinct contexts:

A. The ngokit.com Website

Data collected from visitors to this website, including those who submit the contact and demo request form. In this context, Sanarise acts as the data controller.

B. The NGO Kit Platform

Data processed within the NGO Kit ERP system on behalf of NGO clients. In this context, Sanarise acts as a data processor and the NGO client organization is the data controller. The client is responsible for its own legal basis for processing the personal data of its staff, beneficiaries, and third parties entered into the platform.

3. Data We Collect on ngokit.com

3.1 Contact and Demo Request Form

When you submit the contact form we collect: your name, job title, organization name and type, work email address, country, and the content of your message. This data is used solely to respond to your inquiry and follow up on your interest in NGO Kit. It is not sold, rented, or shared with third parties for marketing purposes.

3.2 Website Analytics

We use privacy-respecting analytics to understand page views and referral sources. We do not use advertising trackers or behavioral profiling tools.

3.3 Cookies

This website uses essential cookies only — those required for the website to function correctly. We do not use advertising cookies, cross-site tracking cookies, or third-party marketing cookies.

4. How We Use Your Data

We use data collected via this website to:

• Respond to your inquiries and demo requests
• Send follow-up information about NGO Kit that is relevant to your inquiry
• Improve the website and our communications

We do not engage in automated decision-making or profiling based on your personal data.

5. NGO Kit Platform — Our Role as Data Processor

When NGO clients use the NGO Kit platform, they enter operational data including staff records, beneficiary information, financial transactions, and procurement data. In this context:

• The NGO client is the data controller and is responsible for ensuring a lawful basis for processing.
• Sanarise is the data processor, operating under the client's instructions as set out in a Data Processing Agreement (DPA). A DPA is available on request at legal@ngokit.com.
• Client platform data is not used for any purpose beyond delivering the NGO Kit service.
• Sanarise implements appropriate technical and organizational security measures to protect platform data.
• In the event of a data breach, Sanarise will notify the affected client without undue delay.

6. Data Hosting and International Transfers

NGO Kit can be hosted on Odoo.sh (Odoo's managed cloud infrastructure, with ISO 27001 certified data centers) or on a self-hosted or third-party cloud environment at the client's choice. Sanarise is headquartered in the Sultanate of Oman. Clients subject to EU GDPR, Jordan's Personal Data Protection Law, or other jurisdictions requiring transfer safeguards should contact us at legal@ngokit.com to discuss applicable arrangements.

7. Data Retention

• Website inquiry data: Retained for up to 3 years from the date of last contact, or until deletion is requested.
• NGO Kit platform data: Retained for the duration of the service agreement plus any legally required retention period. On termination of a service agreement, data deletion or export is handled per the terms of that agreement.

8. Your Rights

Depending on applicable law, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at legal@ngokit.com. We will respond within 30 days. Identity verification may be required before we can action a request.

9. Applicable Law

This Privacy Policy is governed by the laws of the Sultanate of Oman. Where our clients are subject to Jordan's Personal Data Protection Law (PDPL, 2023) or the EU's General Data Protection Regulation (GDPR), Sanarise complies with applicable data processor obligations under those frameworks to the extent they apply to our role.

10. Children's Data

NGO Kit is a business-to-business (B2B) platform designed for organizations. We do not knowingly collect personal data from individuals under the age of 18 through this website. NGO clients who process beneficiary data involving children are responsible for ensuring lawful processing under applicable child protection laws in their jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in an updated "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Us

For any questions about this Privacy Policy or to exercise your data rights:

• Sana Global Intelligent Systems (Sanarise)
• P.O.BOX 111, PC 112, South Al Mabilah, Al Seeb, Muscat Governorate, Oman
• TIN: 2252244
• Email: legal@ngokit.com