1. Scope
This policy explains how Hopeora Foundation collects, uses, discloses, and protects information through this website, donation forms, contact forms, newsletter forms, administrative systems, and related communications.
2. Information we collect
We may collect names, email addresses, telephone numbers, country, state, city, postal code, donation purpose, donation amount, optional messages, consent choices, transaction references, device and browser information, and security-related network data. Contact submissions contain the information you choose to provide.
Payment card and eligible wallet credentials are collected and processed by Stripe Checkout. Hopeora’s database stores transaction identifiers and payment status, not full card numbers or card security codes.
3. How we use information
- Process, document, reconcile, and acknowledge donations.
- Generate receipts and send transaction communications.
- Respond to contact requests and administer newsletters.
- Operate, secure, diagnose, and improve the website.
- Prevent abuse, fraud, unauthorized access, and duplicate processing.
- Comply with legal, accounting, audit, and regulatory obligations.
- Measure marketing performance when optional consent and configured tools permit; consented network data used for server-side measurement is encrypted at rest.
4. Legal grounds and choices
Depending on applicable law, processing may be based on your request, consent, legitimate operational interests, contractual necessity, legal obligations, or protection of vital interests. Optional analytics, advertising scripts, and server-side advertising conversion events operate only after acceptance through this website’s cookie consent control.
5. Service providers
Hopeora may use service providers for hosting, payment processing, email delivery, analytics, advertising measurement, security, and professional support. Providers receive information only as needed for their role and are subject to their own terms and privacy practices.
6. Retention
Donation and financial records may be retained for the period required by applicable accounting, tax, fraud-prevention, audit, and legal obligations. Contact and newsletter information is retained according to operational need, consent status, and legal requirements. Security logs may be retained for a limited diagnostic period.
7. Security
The platform uses access controls, secure cookies, CSRF protection, output escaping, prepared database statements, rate limiting, encrypted secret settings, security headers, audit logs, HTTPS support, and verified Stripe webhook signatures. No system can guarantee absolute security.
8. Your rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Some records cannot be deleted immediately where retention is legally required or necessary to protect legitimate rights.
9. Children
This donation website is intended for adults capable of making a lawful payment. Do not submit a child’s personal information through public forms unless you are authorized and it is necessary for an approved process.
10. Contact
Privacy questions may be sent through the Contact page or to support@hopeorafoundation.xyz.
11. Changes
Hopeora may update this policy as operations, technology, or legal requirements change. The effective date above will be revised when the policy is materially updated.