Last updated 22 October 2026.
Our principles
- We use personal information only for AGBU Lebanon's work: membership, schools, scouts, sports and cultural activities, events, staff and finance.
- We collect only what that work needs.
- Access is limited to authorised people, according to their role.
- Every meaningful action in the management area is recorded in an audit log.
- AI and automatic tools make suggestions; decisions about you are made by people.
What we hold
- Identity and contact details: name (in Latin, Arabic and Armenian), date of birth, phone, email, address, and civil register number and town.
- Family relationships, to manage family membership and link records.
- Religious community, as on official civil records or as you tell us. We use it to send greetings and messages relevant to your community, for example on your own feast days.
- Blood group, where given. It is kept for emergencies during activities such as scouting.
- Participation in activities, events, bookings and payments.
- Professional details and CVs that you choose to share.
- An image of your ID card, if you upload one to verify your identity. It is stored privately.
- For staff: employment records such as leave and pay.
- Records of your consent to communications.
How we use AI services
Some tasks are helped by an AI service: Claude, made by Anthropic (USA). Under Anthropic's commercial terms, this information is not used to train its models. Using it means some information leaves Lebanon. We send as little as possible:
- Writing help for staff and volunteers. Drafting announcements, letters and event messages, and turning meeting notes or minutes documents into minutes and follow-up tasks, from text that people write. The AI may improve the wording but may not add facts, and a person reviews the text before it is used.
- Explaining accounting entries. People's names are replaced by labels such as "Employee A" before anything is sent, and descriptions that mention a medical matter are not sent at all.
- Reading a CV you upload, to suggest your profession and skills. The CV document is sent for this. Only for someone we know to be an adult: if we do not hold a date of birth, the CV is not read automatically.
- Matching and cleaning records, for example linking an employee to their member record, matching an uploaded document to the right member, or finding duplicate records. Names, and for documents a few identifying details such as father's name, birth year and civil register, are sent; the duplicate finder covers adults only, and sends no dates of birth; phone numbers and emails are compared on our own systems and never sent.
- Reading shop receipts for event expenses, and scans of historical documents for our heritage archive.
- Checking how a name is spelled publicly on the web: adults only, and only the name is sent.
- Our WhatsApp assistant, where it is available. It is automated, and messages you type to it are processed by the AI service. It does not see the details stored on your record and does not ask for ID details; for people under 18 it offers its menu only, without AI.
- Reading ID cards. To save typing, the front of an adult's ID card is read by an automatic text-reading service, OCR.space (Germany). The back of the card is never sent.
What we do not send to AI services:
- Health information on your record, including blood group.
- Children's identity documents and school papers: pupils' official papers are not read by AI unless parents' consent is recorded, and ID cards of anyone under 18 are not read. Our features that look people up online, and the WhatsApp assistant's AI, are blocked for anyone under 18 or whose age we do not know.
Every request to an AI service is logged: which feature, who started it and whose record it was about. Anything our systems stop from being sent is logged too.
Your rights
You can ask to see the information we hold about you, to correct it, or to have it deleted. You can also object to a particular use, such as AI processing of your record or messages tailored to your community. Write to privacy@agbu-lb.org.
Security
The system uses HTTPS, hashed passwords, role-based access, and an audit log for every meaningful action. ID images and documents are stored privately and are never public.
This notice is being reviewed by our legal adviser and may be updated.
