01Scope of the Policy and the Responsible Entity

QITAF Educational Company, as the organiser of Qitaf Quranic Forum and the controller of personal data, respects your privacy. This policy explains how your personal data is collected, used, shared, retained, and protected when you use the Qitaf Quranic Forum website or register for the event and its tracks, in accordance with Law No. (13) of 2016 on the Protection of Personal Data Privacy in the State of Qatar and any other applicable requirements in force.

02Data We May Collect

We are committed to collecting the minimum data necessary, according to the type of registration or participation. This may include:

• Identification and contact data: full name, email address, and phone number.
• Registration data: age range, occupation or job title, organisation, attendance type, and the selected programs or tracks.
• Identity data: your Qatari ID (QID) or passport number, used only to verify your identity at the event entrance; and, if you choose to add one, a profile photo shown in your account.
• Schools and groups data: the details of the representative of the body, the number of participants, and the data needed to manage the visit. No personal data of students is collected.
• Special track data: the professional or institutional information required for volunteering, participation in Takween City, media accreditation, sponsorship and partnership, or competitions and programs.
• Technical and operational data: IP address, device and browser type, sign-in records and one-time codes, registration and attendance logs, cookies, and security and performance data.
• Correspondence: the content of the enquiries, requests, and comments you send us.

03How We Collect Data

We collect data directly from you when you create a registration or write to us, or from a school or body representative registering a group under valid authority. Some technical data is also collected automatically when you use the website.

04Purposes of Processing

• Managing registration, verifying eligibility, and issuing the entry card and QR code.
• Sending confirmation messages, and operational updates related to the event.
• Managing the requests of schools, participants, volunteers, media representatives, sponsors, programs, and competitions.
• Allocating seats or booths and managing entry and attendance, where these services apply.
• Operating and protecting the website, preventing misuse, handling faults, and measuring general performance and usage.
• Meeting legal and regulatory obligations, and responding to the competent authorities where there is a legal basis.
• Preparing overall statistics about attendance that do not identify individuals.

05Basis of Processing and Mandatory Data

We process your data based on your consent where it is required, or on your request to register or participate, or to fulfil legitimate legal and operational obligations permitted by law. Mandatory fields are clearly marked; registration or the provision of a service may not be completed if the data required for it is not provided.

06Required and Optional Information

Required information: your full name, shown on your entry card and checked against your ID at the event entrance; your Qatari ID (QID) or passport number, used only to verify your identity at the event entrance and to match you with your registration; your email address, used to send your sign-in code and your registration messages; and your phone number, used only to contact you about your registration and the event. Optional information: gender, age range, occupation, job title and how you heard about the event. These are used only to prepare overall statistics about the event, which do not identify you. Your profile photo is optional, is shown only in your account and on your entry card, and is not used for any other purpose, including face matching or recognition.

07Age Eligibility and Accuracy of Information

Registration for this event is open to adults aged 18 years and over only. By registering, you confirm that you are at least 18 years old and that all the information you provide, including your age and identification details, is true, accurate and your own. You are solely responsible for the accuracy of the data you enter. The organiser does not verify, and is not able to verify, that the age you enter or confirm matches your Qatari ID or passport, and has no means or authority to prevent the entry of inaccurate information. The organiser does not knowingly collect or use the personal data of anyone under 18. If any person provides false or inaccurate information, including misrepresenting their age, that is the sole responsibility of that person, and the organiser bears no liability for it.

08Photography and Media Recording

The event is photographed and video-recorded for documentation, media coverage and promotion. By registering for or attending the event, every attendee accepts that they may appear in photographs and recordings taken during the event, and that the organiser may use them for these purposes. Clear notice is also given at the venue through announcements and signage at the entrances and inside the halls. For school and group visits, the representative who registers the visit confirms, on behalf of the school or group, that its participants, including students, may appear in event photographs and recordings, and that the school or group has obtained any approvals it needs from parents or guardians. The organiser does not use close-up or identifiable images of students for promotion. No personal data of students is collected through the website; schools provide only the number of participants.

09Data Sharing and Service Providers

We do not sell or rent your personal data. We may share the necessary extent of it with authorised staff at QITAF, and with providers of hosting, email, registration, analytics, security, access, and event-operation services, under arrangements that oblige them to maintain confidentiality and protection and to use the data only for the specified purpose. We may disclose it to a competent authority where the law requires. We do not share your data with sponsors for their marketing purposes except with your separate consent.

10Where Your Data Is Stored

Your registration data is stored and processed on secure servers located outside the State of Qatar, in India. Some service providers we use, such as email and website analytics services, may also process data outside the State of Qatar. In all cases we apply the contractual, technical and organisational measures needed to protect your data.

11QR Code and Account

The QR code or registration number is used to retrieve and verify your attendance record through authorised systems. The one-time sign-in code and the entry card must be kept confidential and must not be shared with others.

12Cookies

The website uses cookies necessary for its operation, its security, and sign-in. Analytics cookies and any non-essential cookies are activated only in line with the consent options available in the cookie banner. You may reject non-essential cookies or manage your preferences at any time.

13Data Security

We apply technical and organisational measures appropriate to the nature of the data and the risks, including securing communications, controlling permissions.

Nevertheless, absolute security cannot be guaranteed for any electronic system.

14Data Retention

We retain data for the period necessary to manage registration and the event and to fulfil the purposes set out in this policy and the legal obligations, according to an approved retention schedule that takes into account the type of data and the purpose of its collection. After that period, data is securely deleted or anonymised, unless it must be retained for longer under the law or to pursue a legal claim.

15Your Rights

You may exercise any of the following rights by submitting your request via email to privacy@qitaf-edu.qa:

• To request to know and access the data we process about you, within the limits permitted by law.
• To request the correction, completion, or updating of inaccurate data.
• To request the erasure of data or the cessation of its processing where the legal conditions are met.
• To withdraw consent for processing that is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.

We may request information to verify your identity before acting on a request, and these requests are served manually by the authorised QITAF team following that verification. If a complaint cannot be resolved with us, you may refer to the competent authority for personal data protection in the State of Qatar.

16External Links

The website may include links to external sites or services not operated by QITAF. Those sites are subject to their own privacy policies, and we recommend reviewing them before providing any data.

17Policy Updates

We may update this policy when the website’s functions, the processing requirements, or the relevant regulations change. The updated version is published on this page together with the last-updated date.

18Privacy Contact

For enquiries or requests relating to your data rights, contact QITAF Educational Company at privacy@qitaf-edu.qa, writing "Privacy" in the subject line, or by phone on 33696794 / 50037775.

19Data Collected by Registration Type

Data is collected according to the registration type or track you choose, as follows:

• Common data for all registration types: full name, email address, phone number, QID or passport number, and the required consents. Optional details you may choose to give: gender, age range, occupation or job title, how you heard about the event, and a profile photo.
• General public (guest): the common data, plus attendance type. No invite code is required and no seat is selected.
• VVIP and VIP guests: the common data, the invite code together with its linked email address, and seat selection.
• Sponsors: the common data, the invite code with its linked email address, the sponsorship amount (recorded as data only, with no payment), booth selection, and seat selection.
• Exhibitors and partners: the common data, the invite code with its linked email address, a description of services or catalogue, booth selection, and seat selection.
• Schools and educational institutions: the common data, the invite code with its linked email address, the school or institution name, the responsible contact person, the number of participants, and the representative’s declaration of authority.
• Tahbeer Competition: the common data, the invite code with its linked email address, and the track (Track 1 — Tahbeer | Recitation and Mastery, or Track 2 — The Tahbeer Research Award).
• Takween City: the common data, the invite code with its linked email address, and a description of what the experience offers.
• Media accreditation: the common data, the invite code with its linked email address, the media organisation, the role, and the coverage details.

20Emails and the One-Time Sign-in Code (OTP)

The website uses passwordless sign-in. When you request to sign in, a one-time code (OTP) is sent to your email address; it is valid for a limited period and can be used only once. Your email address is also used to send the system messages relating to your registration, including: the invite code; the registration confirmation with your entry card and QR code; the attendance-confirmation message sent about ten days before the event with the confirm or cancel links; the messages confirming, withdrawing, or cancelling your registration; and notifications of any change to your registration, seat, or booth. These messages are sent from event@qitaf-edu.qa, and a copy is retained by the organiser for operational and follow-up purposes.

21Storage and Use of Your Data Within the System

All the data you provide during registration or through the website’s forms is saved and persisted in the system database. It is used to manage your registration, issue your entry card and QR code, manage entry and attendance, allocate seats and booths where applicable, and communicate with you about the event. Operational records linked to your account are also stored — such as sign-in records, one-time codes, the registration and attendance log, and any changes made to your data. This data is accessible to authorised staff at the organiser according to their permissions, and is processed in line with the purposes and retention periods set out in this policy. QITAF Educational Company remains the controller of this data and the party responsible for it.