How we collect, use and protect your personal data. Last updated: 21 October 2026.
We Are Still Here | Baqoun is a Palestinian student-led initiative supporting university students in Gaza. It is moving towards formal legal registration and, until then, acts as the controller of the personal data described in this policy. The policy applies to this website, including its contact form and newsletter. You can reach us at info@wearestillhere.uk.
Contact form: your name, email address, subject and message. Newsletter: your email address and the language you use on the site. To protect the forms against abuse, we also keep a keyed hash (an irreversibly encoded value) of your IP address, never the address itself, together with a shortened browser identifier (user agent) with contact messages. We do not ask for sensitive categories of data, and ask you not to include them in your messages.
We use your contact details to reply to your enquiries, on the basis of our legitimate interests in answering the people who write to us (UK GDPR Article 6(1)(f)). We send you the newsletter only if you subscribe and confirm, on the basis of your consent (Article 6(1)(a)), which you can withdraw at any time using the unsubscribe link in every email. We use the hashed IP address and browser identifier to protect the forms against spam and abuse, and we process administrators' sign-in data to run the website, both on the basis of our legitimate interests in keeping the site secure. We do not carry advertising, we do not sell data, and we do not use it for automated decisions or profiling.
We use no tracking or analytics and store only what is strictly necessary: your language preference, held in your browser's local storage, and, for administrators only, a secure sign-in cookie that expires after 12 hours. Our hosting provider may also set technical cookies to protect the site against automated traffic. All fonts are served from our own site, so loading them does not share your IP address with a third party.
The website and its database are hosted by Cloudflare. If you subscribe to the newsletter or we email you, your email address is passed to our email delivery provider (currently Resend) solely to send that message. Only authorised members of the initiative's team have access to the data. These providers may process data outside the United Kingdom, including in the United States; where they do, the transfer relies on safeguards recognised under UK data protection law, such as the UK addendum to standard contractual clauses. External links (donations, the shop, WhatsApp and social media platforms) take you to other sites that follow their own policies, and the shop page loads product images from Teemill's image service.
Contact messages are kept for no more than 24 months after we last wrote to each other, and we review and delete those we no longer need at least once a year. Newsletter subscribers stay on the list until they unsubscribe; after that, only the email address, marked as unsubscribed, is kept so that we do not email you again, until you ask us to erase it. Sign-ups that are never confirmed never receive the newsletter and are deleted when we review the list. Administrator sign-in sessions expire after 12 hours.
You have the right to ask for a copy of your data, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format where this applies, and to withdraw your consent at any time. Email us at the address below and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113).
The site is served over encrypted connections (HTTPS). Administrator passwords are stored only as salted hashes, access to the administration area requires signing in and is limited to authorised members of the team, and the forms are protected against automated abuse. No system is completely secure; if a breach affecting your data occurred, we would tell you and the ICO as the law requires.
We may update this page when our practices change, and the date of the latest update is shown above.
For any question about privacy, or to request the deletion of your data:
info@wearestillhere.uk