Privacy Policy

Everjoice Jeketa Win (EJW) Foundation respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what we collect, how we use it, how we store it, and the choices you have.

Who this policy applies to

This policy applies to personal information submitted through this website, including the contact form, newsletter sign-up, and donation intent form.

What we collect

Depending on how you use the website, we may collect:

• Contact form submissions: name, email address, subject, message, and the page/source where the message was sent from.
• Newsletter sign-up: email address and the submission date/time.
• Donation intent submissions: name, email address, intended amount, currency, frequency, and any optional note you provide.
• Basic technical information: limited server logs may include IP address, user agent, date/time, and request path for security and troubleshooting.

What we do not collect

• We do not intentionally collect special category data (e.g., health, biometrics, political opinions) via this website.
• We do not sell your personal data or share it for third-party marketing.
• We do not collect card details on this website at present.

How we use your information

• Responding to enquiries: replying to messages you send us and following up where needed.
• Sending updates: newsletters or updates if you subscribe (you can opt out at any time).
• Handling donation intent: contacting you about your stated intention to donate and confirming practical next steps.
• Website security: preventing spam, fraud, abuse, and unauthorised access, and maintaining system integrity.

Lawful basis for processing

Where relevant laws apply, we process personal data on one or more of these bases:

• Consent: where you voluntarily submit information or subscribe to updates.
• Legitimate interests: to operate, secure, and improve the website, and respond to genuine enquiries.
• Legal obligation: where record-keeping is required by law (only where applicable).

How we store and protect information

We use technical and organisational measures designed to reduce risk, including:

• Secure sessions and CSRF protection on forms.
• Server-side validation and sanitisation of inputs.
• Rate limiting and spam-abuse controls (where configured).
• Restricted access to admin areas and operational mailboxes.

No method of transmission or storage is 100% secure, but we maintain appropriate protections and continuously improve.

Who we share your data with

We share personal data only where necessary to operate the website and respond to you:

• Email delivery providers: messages are transmitted via our email sending setup (e.g., SMTP) to authorised admin mailboxes.
• IT and hosting suppliers: our hosting provider may process limited technical logs to keep services running securely.

International transfers

Because the Foundation operates across multiple regions, your data may be processed in different countries depending on website hosting and authorised mailbox locations. We take reasonable steps to ensure safeguards are in place.

How long we keep your data

• Contact messages: kept as long as needed to manage the enquiry and maintain an appropriate record of correspondence.
• Newsletter subscriptions: retained until you unsubscribe (or inactive addresses are removed as part of list hygiene).
• Donation intent: retained as needed to follow up and maintain basic fundraising records.
• Security logs: retained for a limited period for security/troubleshooting, then rotated/deleted.

Your rights

Depending on your jurisdiction, you may have rights to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion where applicable.
• Object to, or request restriction of, certain processing.
• Withdraw consent (for example, newsletter subscription) at any time.

To exercise these rights, use the Email button in the footer to contact us securely.

Cookies

This website may use essential cookies required for core functionality (such as security sessions). We do not currently use advertising cookies. If analytics tools are added later, we will update this policy.

Children’s privacy

This website is not designed to intentionally collect personal information from children. If you believe a child has provided personal data through this site, please contact us via the Email button in the footer so we can address it.

Changes to this policy

We may update this policy to reflect website or operational changes. Updates will be posted on this page.