Behind every record SAFE holds — a beneficiary file, a staff contract, a donor's details — is a person whose privacy the organization is bound to protect. Adopted in October 2025, this policy governs how personal data is collected, used, stored and deleted, applying GDPR principles, the OECD Privacy Guidelines and ICRC/UN humanitarian data guidance in the absence of a comprehensive Palestinian data protection law. It defines data subjects' rights, retention schedules, encryption and access controls, and breach response duties across all SAFE operations.