UNHCR Privacy Notice

Who is UNHCR?

UNHCR is the United Nations refugee agency which is mandated to protect the rights and improve the well-being of refugees, asylum-seekers, internally displaced persons (IDPs), returnees and stateless persons. To fulfill its roles and responsibilities in Syria, UNHCR collaborates and coordinates closely with the Syrian interim authorities as well as other UN agencies, non-governmental organizations (NGOs) and other partners. To implement protection and assistance services, UNHCR and its partners may collect and process certain personal data of persons receiving such services.

UNHCR collects and use personal data in accordance with its General Policy on Personal Data Protection and Privacy and Policy on the Protection of Personal Data of Persons of Concern to UNHCR.

Why does UNHCR collect and process personal data?

UNHCR and partners may collect and process personal data to enable UNHCR to provide protection and assistance services to refugees, asylum-seekers, internally displaced persons (IDPs), returnees and stateless persons in line with its mandate. Personal data are collected to determine who is in need of UNHCR protection and assistance services, what type of services, who has received services (including when and where) and who still needs to receive services.

UNHCR processes the personal data to firmly establish each person’s identity and ensure that the assistance provided reaches exactly those who are entitled to it. By anchoring identity in this way, we safeguard the integrity of our support and protect everyone’s right to receive the help they need.

What type of personal data does UNHCR collect?

UNHCR collects the following personal data:

  • Biographical data (such as full name, date of birth, nationality, family composition)
  • Contact information (e.g., address, phone number)
  • Photo and scans of iris and fingerprints
  • Information about specific needs (e.g., health conditions)

Where and how long does UNHCR store personal data?

In all countries where UNHCR operates, it stores personal data in dedicated databases.  Note that UNHCR in Syria also has access to necessary personal data collected by UNHCR in Egypt, Iraq, Jordan, and Lebanon to enable easier access to services and rights, ensuring as smooth return and reintegration for those who are returning to Syria.

Your personal data will be kept for as long as UNHCR or partners provide you with protection and assistance services. UNHCR may keep your personal data longer for the purpose of:

  1. Archiving for its administrative, fiscal, legal, historical value;
  2. For statistical or scientific research purposes;
  3. For accountability of UNHCR’s actions; or
  4. When it is necessary for long-term provision of protection and assistance and seeking of solutions for the people with and for whom UNHCR works in accordance with relevant regulations, rules, policies, administrative instructions and other instruments established or adopted by UNHCR or the United Nations.

Who will have access to personal data?

UNHCR treats your personal data with confidentially. Where it is necessary, in order to provide protection and coordinate assistance services, your personal data, with the exception of your iris scan and fingerprints, may be shared with:

  • UNHCR partners, who are collecting and using personal data for protection and assistance.
  • Other UN agencies (e.g., WFP, UNICEF) for the coordination of assistance.
  • NGOs for the coordination of assistance.

Please note that your iris scan and fingerprints will not be shared with anyone.

UNHCR will not share the personal data of refugees and asylum seekers in Syria with the government of their country of nationality or habitual residence.

What else do you need to know?

UNHCR will seek to provide you with protection and assistance services relevant to your situation on the basis of the information you provide to UNHCR. Therefore, it is important to provide true and accurate data to the best of your knowledge. If you provide inaccurate or false information, it may negatively affect your eligibility for protection and assistance services.

What are your rights as a data subject?

UNHCR would like to make sure you are fully aware of the following rights:

  • You have the right to access your personal data as well as information on how UNHCR collects, processes and stores it.
  • You have the right to correct or update your personal data that is inaccurate or incomplete.
  • You have the right to ask to delete your personal data if its processing is no longer necessary or legitimate.
  • You have the right to object to the use of your personal data, including sharing with certain partners or the government.

Please note that requests related to exercise of your rights may be subject to verification and assessment by UNHCR on a case-by-case basis.

Please note that personal data is necessary for UNHCR to provide protection and coordinate assistance. Therefore, if you do not provide personal data or if you object to the use of personal data, you may not benefit from protection and assistance services.

Please note that you can exercise your rights by contacting us through the channels provided below.

How can you contact us?

If you have questions about how UNHCR collects and processes personal data, or if you would like to make a request or lodge a complaint you can do so by:

If you believe your rights have been violated by UNHCR collecting or processing your personal data, you may also write an email to UNHCR Inspector General’s Office

All complaints are treated with strict confidentiality, meaning that all data is kept confidential, securely stored and used only for the mentioned purposes (protection, upholding rights, assistance service delivery) only authorized staff will have access to this data for the mentioned purposes.

Changes to this privacy notice

UNHCR keeps its privacy notices under regular review and places any updates on its official webpage. This privacy notice was last updated in July 2025.