The Order of Malta Jordan is a humanitarian NGO. Many of the people we work with — beneficiaries, donors, applicants, partners — share information with us in moments of trust. We treat that information as such.
01 — Who we are.
This privacy policy applies to the website orderofmaltajordan.org and any services we run from it, including the Yalla Digital platform at yalla.orderofmaltajordan.org.
The data controller is the Sovereign Military Order of Malta — Jordan National Association, registered as an NGO under the Jordanian Ministry of Health, registration number 420222139. Office: Q. Mesbah St. 14, 3rd Circle, Amman, Jordan.
For any privacy question, write to info@orderofmaltajordan.org with the subject line "Privacy".
02 — What we collect.
We collect personal information in a few clearly defined situations. We do not buy lists, scrape data, or track you across the open web.
When you contact us
If you submit our contact form, write to us, or call, we keep the name, email, phone number, and message you provide so we can reply and follow up.
When you apply for a role or submit a tender
Applications and bids submitted through our Careers and Get Involved pages are routed through Google Forms or directly to a procurement / careers email. We retain CVs, cover letters, references, and bid documents only for the purpose of evaluating the application.
When you donate or partner with us
Donations and grants are processed through bank transfer or partner platforms. We retain the records required for charitable accounting and audit under Jordanian law.
When you participate in a program
Beneficiaries of programs such as ACCESS, SAHA, and Yalla Digital share information directly with our field teams or partner organisations (OLOPC, JOHUD, ProSud, RIIFS, AICS). The data we hold is limited to what is needed to deliver the service — typically name, contact details, household information, and program-specific records (e.g. medical referral, training enrolment).
When you visit the website
Like most websites, our hosting provider (Cloudflare Pages) and our content backend (Google Firebase) record basic technical data — IP address, browser type, pages visited, and timestamps — for security, abuse-prevention, and aggregate analytics.
03 — Why we use it.
- To respond to your message or request.
- To deliver the program, role, or partnership you applied for.
- To meet our reporting and accounting obligations to donors, regulators, and the Jordanian government.
- To improve the website, fix bugs, and prevent abuse.
- To send you updates only if you have asked us to (e.g. newsletter sign-up).
We do not use personal data for advertising. We do not profile individuals. We do not sell or rent any data — full stop.
04 — Who we share it with.
We share personal information only with parties that need it to do the work we have asked them to do, or where we are legally required to.
- Programme partners (e.g. ProSud, AICS, RIIFS, OLOPC, JOHUD, Italian Hospital of Karak) — only the minimum needed to deliver the joint program, governed by partnership agreements.
- Service providers we rely on to run the website and admin: Google Firebase (database, authentication), Cloudflare (hosting, security), Cloudinary (image storage), Google Forms (applications). These vendors process data on our instructions only.
- Auditors and regulators, where required by Jordanian charitable, tax, or anti-money-laundering law.
- Law enforcement or courts, where compelled by valid legal process.
We never share contact lists with marketers. We never sell information.
05 — How long we keep it.
We keep information only as long as we need it for the purpose it was collected, plus any retention period required by law:
- Contact form messages: up to 24 months after the last interaction.
- Job and tender applications: up to 12 months after the role or tender closes (longer if you have asked us to keep your CV on file for future opportunities).
- Donation and accounting records: 10 years, in line with Jordanian financial reporting requirements.
- Programme delivery records: retained for the duration of the project plus the audit period required by the donor (typically 5 to 7 years for AICS-funded work).
- Server logs: 30 to 90 days, then aggregated or deleted.
06 — Your rights.
You can exercise the following rights at any time, free of charge, by writing to info@orderofmaltajordan.org:
- Access — ask us what personal data we hold about you.
- Correction — ask us to fix anything inaccurate.
- Deletion — ask us to delete data we no longer need a legal basis to keep.
- Withdrawal of consent — for anything we do based on your consent (e.g. newsletter), withdraw at any time.
- Objection — object to processing you believe is unjustified.
- Portability — ask for a copy of the data you have provided to us in a usable format.
We will respond within 30 days. If you are not satisfied with our response, you may complain to the relevant Jordanian authority.
07 — Children & vulnerable adults.
Several of our programs (notably ACCESS) work with children and youth aged 0 to 17, and many of our beneficiaries are in vulnerable situations. We hold this data with extra care:
- Information about minors is collected only with the consent of a parent or legal guardian, or under the supervision of a partner organisation acting in the child's interest.
- We never publish identifying photos or names of minors without explicit, signed consent from a guardian.
- Programme staff are trained on safeguarding and confidentiality.
08 — Cookies & analytics.
This website uses a small number of cookies and similar technologies, all functional or strictly necessary:
- Authentication tokens for the editor admin (only set after admin sign-in).
- Cloudflare and Firebase security tokens to prevent abuse.
- Optional analytics in aggregated form to understand which pages are visited, with no individual tracking and no third-party advertising.
You can clear cookies in your browser at any time. The site remains usable without them.
09 — International transfers.
Some of the providers we use (Google Firebase, Cloudflare, Cloudinary) operate global infrastructure. Personal data we hold may therefore be processed outside Jordan, including in the European Union and the United States. These providers are bound by contractual safeguards and recognised data-protection frameworks.
10 — Security.
We protect personal information with reasonable technical and organisational measures: encrypted transport (HTTPS), authenticated admin access, role-based permissions in our database, locked physical files, and a small staff with a signed confidentiality understanding. No system is perfect — if you ever suspect a breach involving your data, please write to us so we can investigate immediately.
11 — Changes to this policy.
We may update this policy as our work and the law evolve. The "Last updated" date at the top of this page always reflects the current version. Material changes will be flagged on the website or, where appropriate, communicated by email.
12 — Contact us.
Sovereign Military Order of Malta — Jordan National Association
Q. Mesbah St. 14, 3rd Circle · Grand Complex
Amman, Jordan
info@orderofmaltajordan.org · +962 6 551 2345