Privacy Policy

Last updated: November 17, 2025

LEG.TJ Website (“we,” “our,” “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, in compliance with the General Data Protection Regulation (GDPR) and other applicable European data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

LEG.TJ Republic of Tajikistan – Education Sector Coordination [Insert Contact Email / Address Placeholder]

2. Data We Collect

We only collect personal data that is strictly necessary for the operation, security, and improvement of the website.

Usage Data: Information about how you use our website (e.g., pages visited, time spent, navigation patterns).

Technical Data: Browser type, operating system, IP address (partially anonymized where possible).

Cookies & Tracking Technologies: Used to provide analytics, performance monitoring, and security.

We do not actively request or process sensitive personal data through this static website.

3. How We Collect Data

We use the following services to collect and process data:

Cloudflare (including Cloudflare Pages and Cloudflare Analytics): Used for hosting, performance optimization, and security. Cloudflare may collect anonymized usage and diagnostic information.

PostHog: Used for product analytics. We configure PostHog to respect GDPR guidelines, including IP anonymization and cookie consent where required.

All third-party services act as data processors under GDPR and are contractually bound to handle data securely.

4. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

Ensuring website security and preventing malicious activity (legitimate interest).

Measuring website usage and performance to improve services (consent, where required).

Hosting and delivering content efficiently (legitimate interest).

Where consent is required (e.g., non-essential analytics cookies), we will provide a cookie banner and allow you to manage preferences.

5. Data Retention

We retain personal data only as long as necessary for the purposes described above. Usage and analytics data are typically anonymized and aggregated. Specific retention periods depend on the configurations of Cloudflare and PostHog.

6. Data Sharing and Transfers

We do not sell or share your personal data with third parties for marketing. Data may be transferred outside the European Economic Area (EEA) to service providers such as Cloudflare and PostHog. In such cases, we ensure that appropriate safeguards are in place (e.g., Standard Contractual Clauses (SCCs)).

7. Your Rights under GDPR

You have the following rights regarding your personal data:

Right of access (obtain a copy of your data).

Right to rectification (correct inaccuracies).

Right to erasure (“right to be forgotten”).

Right to restriction of processing.

Right to data portability.

Right to object to processing (including analytics tracking).

Right to withdraw consent at any time.

To exercise your rights, please contact us at [Insert Contact Email].

8. Cookies and Tracking

Essential cookies: Required for security and basic site operation (cannot be disabled).

Analytics cookies: Used by Cloudflare Analytics and PostHog, enabled only with your consent.

You can manage or withdraw your consent at any time via the cookie banner or your browser settings.

9. Security

We use industry-standard technical and organizational measures to protect personal data. Hosting is provided via Cloudflare Pages with built-in security measures, including DDoS protection and TLS encryption.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date.

11. Contact

If you have questions or wish to exercise your rights, please contact us:

Donor Coordination Council (DCC) [Insert Contact Email] [Insert Postal Address]

If you are located in the European Union and believe that we have not handled your personal data lawfully, you also have the right to lodge a complaint with your local Data Protection Authority.