1. Introduction

HopeConnect values your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, and protect your information when you use our website, donate to our causes, volunteer with us, or otherwise interact with our organization.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Make a donation or pledge
• Register as a volunteer
• Sign up for newsletters or updates
• Register for events
• Contact us via email, phone, or forms
• Submit stories or testimonials
• Apply for employment or internships

2.2 Information We Collect Automatically

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Referring website details
• Cookies and similar technologies

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors for donation verification
• Event registration platforms
• Social media platforms (with your consent)
• Publicly available sources
• Partner organizations (with appropriate agreements)

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Mission-Related Activities

• Process donations and provide tax receipts
• Manage volunteer programs and events
• Send updates about our work and impact
• Share success stories and reports
• Coordinate disaster relief efforts

3.2 Operational Purposes

• Maintain accurate donor and volunteer records
• Improve our website and services
• Ensure security and prevent fraud
• Comply with legal obligations
• Conduct research and analysis

3.3 Communications

With your consent, we may send you:

• Newsletters and impact reports
• Event invitations and updates
• Fundraising appeals (respecting your preferences)
• Volunteer opportunities

You can opt-out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

5. Information Sharing

We only share your information in the following circumstances:

5.1 Service Providers

We share information with trusted service providers who assist in our operations:

• Payment processors (Stripe, PayPal)
• Email service providers
• Event management platforms
• Website hosting services
• Analytics providers (Google Analytics)

All service providers are bound by strict confidentiality agreements and may only use data for specified purposes.

5.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes
• Protect our rights or property
• Prevent fraud or illegal activities
• Ensure safety of individuals

5.3 Partner Organizations

In limited cases, we may share information with:

• International partners for coordinated relief efforts
• Research institutions for impact studies (anonymized)
• Grant-making foundations for reporting requirements

We never sell or rent your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: All sensitive data is encrypted in transit and at rest
• Access Controls: Strict access controls and authentication measures
• Regular Audits: Security audits and vulnerability assessments
• Employee Training: Regular data protection training for staff
• Incident Response: Established procedures for data breaches
• Secure Development: Security-by-design in all systems

7. Data Retention

We retain personal data only as long as necessary for the purposes collected:

When data is no longer needed, we securely delete or anonymize it.

8. Your Rights

Depending on your location, you may have the following rights:

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience:

10. International Data Transfers

As an international charity, we may transfer your data outside your country of residence:

• To our international offices for coordinated operations
• To service providers located in other countries
• To partner organizations in regions where we work

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (EU)
• Adequacy decisions where applicable
• Binding Corporate Rules for internal transfers
• Explicit consent when required

11. Children's Privacy

We do not knowingly collect personal information from children under 16 without parental consent. If we learn we have collected personal information from a child under 16 without verification of parental consent, we will delete that information.

Parents or guardians who believe their child has provided us with personal information can contact us to request deletion.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make changes:

• We will update the "Last Updated" date
• We will post a notice on our website for significant changes
• We will notify registered users via email for material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Our Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

• Data Protection Officer: Jane Smith
• Email: dpo@hopeconnect.org
• Phone: +1 (234) 567-8910
• Address: HopeConnect Data Protection Office, 123 Privacy Lane, San Francisco, CA 94102, USA

You also have the right to lodge a complaint with your local data protection authority.