Privacy Policy
Draft — pending review by counsel. Effective date: to be set on approval.
This Privacy Policy explains how NUFDI Fund ("NUFDI Fund", "we", "us") collects, uses, and protects information when you visit nufdifund.org (the "Site"), contact us, or make a contribution.
1. Information we collect
- Information you give us: name, email address, and any message you send through our contact form.
- Contribution information: when you donate, our payment provider collects your name, contact details, payment card or bank details, and contribution amount. We receive the transaction details (name, contact details, amount, date, transaction reference) but we do not receive or store full payment card numbers.
- Employer and occupation: where required by law for certain contributions, we may ask for your employer and occupation.
- Automatically collected information: server logs record IP address, browser type, device information, pages visited and referring pages. Site analytics are privacy-friendly (Plausible) and do not use cookies or collect personal data.
2. How we use information
- To process and acknowledge contributions and send receipts.
- To respond to your inquiries and send updates you have requested. You can unsubscribe at any time.
- To operate, secure, and improve the Site, including fraud prevention and error diagnostics.
- To comply with legal, tax, and regulatory obligations, including record-keeping for contributions.
3. How we share information
- Service providers that help us operate the Site and process contributions (hosting, database, email delivery, payment processing, analytics). They may use your information only to provide services to us.
- Legal requirements: we may disclose information when required by law, subpoena, or to protect our rights, safety, or property.
- We do not sell, rent, or trade your personal information or our donor list to third parties.
4. Cookies and analytics
The Site uses only strictly necessary cookies (for example, to remember your language and theme preference). Embedded third-party content (for example YouTube videos or the donation form) may set its own cookies governed by the third party's policy.
5. Data retention
We keep contribution records as long as required by tax and regulatory law. Contact-form messages are kept until you ask us to delete them or the purpose has ended. Server and error logs are retained for a limited period and then purged.
6. Security
We use industry-standard safeguards, including encryption in transit (HTTPS), access controls, and encrypted backups. Payment card data is handled entirely by our PCI-compliant payment provider. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Your choices and rights
You may request access to, correction of, or deletion of your personal information, or ask us to stop sending you communications, by emailing [email protected]. Residents of certain states may have additional rights under applicable privacy laws; we will honor applicable requests.
8. Children
The Site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
9. International visitors
The Site is operated in the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.
10. Donor privacy
NUFDI Fund respects the privacy of its supporters. We will not sell, share, trade, or rent our donors' names or personal information with any other entity, nor send mailings on behalf of other organizations. Donor information is used only to process contributions, issue receipts, comply with legal reporting obligations, and communicate with donors about NUFDI Fund's work. Donors may request to be recognized anonymously, may opt out of any communication, and may request the correction or deletion of their information at any time. Where the law requires us to report contributions to a government authority, we will comply with that requirement.
11. Changes and contact
We may update this policy; the effective date above will change when we do. Questions: [email protected].