Privacy Policy

1. Who is responsible for your data

The data controller is Благодійна організація «Міжнародний благодійний фонд «Руки друзів»» (EDRPOU 40105032), registered on 05.11.2015. The English legal name is ICF "Friends' Hands" (per the OCHA CBPF record); "Hands of Friends" is the display brand name, not the legal name.

For data-processing questions: fond.hands@gmail.com, tel. +380 50 821 4978. A dedicated privacy contact address will be added by the foundation before launch.

2. What data we collect

Through the site forms you may voluntarily provide: name, email, phone, organisation name and the content of your message. The exact set depends on the form - donation, organization request, newsletter sign-up or the contact form. In the prototype every form is disabled: the fields are inactive and no data is transmitted or stored.

Technical data: basic anonymised visit metrics (see the analytics section below). We do not collect payment-card data on our own servers - payments will be processed by certified payment providers.

3. Why, and on what legal basis

Handling messages and aid requests - to reply to you and provide the service (performance at the data subject's request).

The "what we did with your donations" newsletter - only with your explicit consent (a separate checkbox), which you can withdraw at any time.

Processing donations and reporting to donors and regulators - the foundation's legal obligations and the legitimate interests of charitable activity.

4. Who we share data with

We do not sell your data. We only share it with service providers needed to run the site: the payment provider (for payments), the newsletter service (for emails) and hosting. The list of specific services will be added by the foundation before launch.

In the prototype none of these services is connected: the pages make no requests to third-party domains, so there is nothing to share and nobody to share it with yet.

We may disclose data where required by law or at the request of authorised bodies.

5. How long we keep data

Message data is kept for as long as needed to reply and fulfil the request, and for donor reporting as required by law and donors. Exact retention periods will be set in the final version.

Newsletter subscriptions are kept until you unsubscribe.

6. Cookies and analytics

The site does not use advertising or tracking cookies. In the prototype no analytics is connected at all. After launch, to understand traffic, we plan to use cookieless analytics that collect no personal data (for example, Plausible), so no cookie-consent banner is required.

If tools that use cookies are added in the future (for example, Google Analytics or a social-media pixel), we will add a consent banner and update this section.

7. Your rights

You have the right to know what data we process, to receive a copy, to correct or delete it, and to withdraw newsletter consent. To do so, write to fond.hands@gmail.com.

You also have the right to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights as the supervisory authority for personal-data protection.

8. Security and changes

This page makes no claim about any level of security: in the prototype the forms are disabled and payments are switched off, so no personal data is collected or stored through the site. The specific technical and organisational safeguards will be defined by the foundation with legal counsel and described here before launch - together with the caveat that no transmission over the internet is ever fully secure.

We may update this policy. The current version is always available on this page with its date.