DEFAW Inc. (“we,” “us,” or “our”) is a nonprofit organization registered in the United States and committed to safeguarding the personal data of our donors, partners, supporters, and visitors. This Privacy Policy explains how we collect, use, disclose, and protect your personal information, and outlines your rights under applicable privacy laws including the U.S. Privacy Laws, California Consumer Privacy Act (CCPA/CPRA), UK Data Protection Act, and the EU General Data Protection Regulation (GDPR).
By using our website, you consent to the practices described in this policy.
1. Information We Collect
We may collect the following types of personal data:
a. Information You Provide Directly
Name, email address, and contact details
Donation information (amount, date, method)
Preferences and communication consents
Messages submitted via contact forms
b. Information Collected Automatically
IP address, browser type, device ID
Website usage statistics via cookies and analytics tools
Geographic location (approximate)
We do not collect or store payment card information. All transactions are securely processed by Stripe, PayPal, and GiveLively under their respective privacy policies.
2. How We Use Your Information
We use your information to:
Process donations and send receipts
Acknowledge contributions and communicate impact
Respond to inquiries and messages
Improve website performance and user experience
Comply with legal and regulatory obligations
We may also use anonymized, aggregated data for internal reporting and analysis.
3. Donor Privacy
We are committed to the confidentiality of donor information:
We do not sell, rent, or tradedonor data
Donor data is only shared with essential third-party service providers for processing and operations
Donors may request to remain anonymous in any public acknowledgment
You can contact us at info@defaw.org to update or restrict how your information is used.
4. Legal Basis for Processing (EU/UK GDPR)
For individuals in the EU/UK, we process your data under one or more of the following lawful bases:
Your consent
Legitimate interests, such as engaging supporters and improving programs
Compliance with a legal obligation
Contractual necessity, when managing donations or communication requests
5. Data Retention
We retain personal data only as long as necessary to fulfill the purposes stated in this policy, unless a longer retention period is required by law or for legitimate nonprofit record-keeping.
6. Data Sharing and International Transfers
We may share your personal data with trusted vendors that support our operations, such as:
Donation processors (Stripe, PayPal, GiveLively)
Email and communications platforms
Cloud storage and website providers
Some of these providers may be located outside your country of residence. Where data is transferred internationally (e.g., from the EU/UK to the U.S.), we rely on Standard Contractual Clauses or equivalent legal safeguards to protect your information.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
Improve website navigation and performance
Monitor engagement through tools like Google Analytics
Remember your preferences (e.g., language settings)
You can manage cookie settings in your browser. For more information, see our Cookie Policy (or the section below if integrated).
8. Your Rights
Depending on your location, you may have the following rights:
Accessyour data
Correct or updateinaccurate information
Request deletion(“right to be forgotten”)
Object to or restrictdata processing
Withdraw consentat any time
Data portability
To exercise any of these rights, email info@defaw.org. We will respond within the timeframes required by applicable laws.
9. Data Security
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, or misuse. This includes encrypted payment processing, restricted access controls, and secure hosting infrastructure.
However, no internet transmission is completely secure. We encourage you to take steps to protect your data as well, especially when using public or shared devices.
10. Children’s Privacy
This website is not intended for children under 13. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete the information promptly.
11. Updates to This Policy
We may update this Privacy Policy periodically to reflect legal, operational, or technological changes. When we do, we will revise the “Effective Date” at the top. We encourage you to review this policy regularly.
12. Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or your data, please contact us:
