How of What Policy
1. Mission
How of What is dedicated to advancing education, training, research, and knowledge-sharing in the fields of wellness and awareness, with special attention to individuals facing personal, social, or learning difficulties. Our mission is to provide accessible and reliable resources that empower people to live healthier, more informed, and more balanced lives.
This policy applies to:
· All educational content, training programs, and research outputs published or supported by How of What.
· All community members, trainers, researchers, and participants engaged in our activities.
· Both online and offline interactions, ensuring inclusivity and respect.
3. Core Principles
We are guided by the following principles:
- Accessibility: We ensure that our materials and programs are understandable, user-friendly, and inclusive, particularly for people with learning, physical, or cognitive challenges.
- Equity & Respect: We foster a respectful environment free from discrimination based on ability, background, or identity.
- Quality & Reliability: We base our content and training on verified knowledge, ethical research, and practical know-how.
- Wellness & Awareness: We promote holistic well-being, encouraging mental, emotional, physical, and social awareness.
- Privacy & Protection: We safeguard the confidentiality and dignity of all participants and contributors.
4. Education & Training
· Programs are designed to be inclusive and adaptive, considering different learning needs and abilities.
· Trainers and facilitators commit to using clear, compassionate, and empowering communication.
· Feedback from participants will be actively sought and integrated to continuously improve training quality.
5. Research & Knowledge Sharing
· Research supported by How of What will follow ethical standards that respect participants’ rights and dignity.
· Findings will be shared in accessible formats, ensuring that knowledge benefits the wider community.
· Collaboration with academic, health, and social institutions will be encouraged to enrich the quality of outcomes.
6. Community Engagement
· We value active participation from individuals and groups who benefit from or contribute to our initiatives.
· Dialogue, peer support, and co-learning are encouraged as essential parts of the wellness journey.
· Respectful interaction is mandatory; harassment, exclusion, or harmful behaviors will not be tolerated.
7. Accountability
· How of What commits to regularly reviewing and updating this policy in line with new research, community feedback, and evolving best practices.
· Concerns, suggestions, or complaints may be shared confidentially through our contact channels, and will be addressed promptly.
8. Privacy & Personal Data Protection (Law No. 81/2018)
To protect the privacy, dignity, and rights of all individuals involved with How of What, we commit to full compliance with Lebanese Law No. 81 of 2018 (Electronic Transactions and Personal Data) in all our data handling and processing.
8.1 Types of Personal Data We Process
Depending on the activity, we may collect:
· Basic identity & contact information (name, email, phone, address)
· Demographic / background data (age, gender, educational status, socio-economic background)
· Health-related or learning/disability data (self-reported, accommodations needed)
· Survey or feedback data (experiences, opinions)
· Research data (may be identifying or pseudonymized depending on design)
8.2 Legal Basis, Collection & Use of Data
· We collect data only for clearly defined, legitimate, and explicit purposes (e.g., enrolling in training, evaluating programs, research).
· Before or at the moment of collection, we inform the person (data subject) of:
I. Who is collecting the data (How of What) and who is responsible for data protection.
II. The purpose(s) of the data collection.
III. Whether providing data is mandatory or voluntary.
IV. The consequences of not providing data (if relevant).
V. To whom data may be disclosed, if applicable.
VI. What rights the data subject has (access, correction, deletion / erasure, objection).
· For sensitive data (health, genetic identity, sexual life, etc.), we obtain explicit consent, beyond general consent, specifying how data will be stored, used, who will access it, and duration.
8.3 Retention, Storage & Deletion
· Data is stored in secure systems, with protections such as access control, encryption where applicable.
· Retention period for each type of data is defined in advance (for example, participant contact info retained for X years, research data for Y years).
· After the necessary period, data is either securely deleted or anonymized, so individual data cannot be reconstructed.
8.4 Data Sharing & Third Parties
· We do not share personal or sensitive data with third parties unless one or more of the following apply:
I. The third party is required for program or research delivery, and has agreed to confidentiality/security obligations.
II. The data subject has given explicit consent.
III. It is required by law.
· When using external tools or platforms (surveys, cloud services, analytics), we ensure reasonable privacy and security safeguards are in place.
8.5 Sensitive Data & Licensing Requirements
· Processing of data relating to health, genetic identity, or sexual life is governed by stricter requirements under Law 81. For such data, either explicit consent or a license from the Ministry of Economy and Trade is required.
· We monitor whether specific processing occurs that triggers licensing or permission, and when needed will apply.
8.6 Rights of Data Subjects
Under Law 81/2018, individuals whose data we process have the following rights:
· Access: Know if their data is being processed, obtain a copy, see what data, who is processing, what it will be used fort>
· Rectification / Correction: Request that inaccurate, incomplete, ambiguous or out-of-date data be corrected.
· Deletion / Erasure: When data is no longer needed, or no longer valid, request deletion.
· Objection: Object to certain processing (especially non-essential or promotional). Also object to processing based on legitimate interests vs consent.
8.7 Security & Data Breach Management
· We implement technical and organizational measures appropriate to the nature and sensitivity of the data (access controls, encryption, secure backups, training of staff).
· Maintain logs and limit access to personal data to those who need it.
· If any breach or unauthorized disclosure occurs, we will:
I. Investigate to contain the breach.
II. Assess impact and risk to individuals.
III. Notify affected individuals, where required.
IV. Take corrective measures (improve security, revise practices).
8.8 Legal Compliance, Permits & Accountability
· When required by Law 81/2018, we will submit a declaration or obtain a license / permit from the Ministry of Economy & Trade.
· We will document all processing activities: what data, why, how, who has access, retention periods, how shared.
· Regular audits / reviews of processing practices and policy.
· Provide a clear mechanism for people to exercise their rights, submit complaints regarding data processing.
9. Enforcement & Remedies
· Any breach or violation of this policy or relevant legal norms will be investigated.
· We will correct the issue, mitigate harm, and take steps to prevent recurrence.
· Affected individuals may make complaints and seek remedies under applicable law.
· Where required, violations may be reported to or handled by competent authorities as per Lebanese law.