Privacy Policy

1. Introduction

Lend A Hand Up operates the website located at https://lendahandup.org. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site. By accessing or using our Site, you agree to the collection and use of your information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Data

When you interact with our Site, we may collect personal information that can be used to identify you (“Personal Data”). This may include, but is not limited to:

• Name
• Email address
• IP address
• Browser user agent string

2.3 Cookies

We use cookies to improve your experience on our Site. Cookies are small data files stored on your device. We use the following types of cookies:

• Comments: If you leave a comment, you may opt-in to saving your name, email address, and website in cookies. These cookies are retained for one year.
• Auth0 Login: When you log in using our Auth0 system, cookies related to your authentication session will be set. These cookies are necessary for managing your session and will persist according to your selected preferences and Auth0’s settings. If you log out, the session cookies will be removed.

2.4 Embedded Content

Our Site may include embedded content from other websites (e.g., videos, images, articles). Embedded content from these websites behaves as if the visitor has visited the other website directly. These websites may collect data, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content.

3. How We Use Your Information

3.1 Purpose of Use

We use the information we collect for the following purposes:

• To provide and maintain our Site
• To notify you about changes to our Site
• To allow you to participate in interactive features of our Site
• To monitor usage of our Site
• To detect, prevent, and address technical issues

3.2 Sharing of Data

We do not sell, trade, or otherwise transfer to outside parties your Personal Data, except as described below:

• Service Providers: We may share your Personal Data with third-party service providers to facilitate our services. This includes Stripe, which processes payments on our behalf. Stripe’s privacy policy can be found at https://stripe.com/privacy.
• Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.

4. Retention of Your Information

4.1 Comment Data

If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

4.2 Registered User Data

For users that register on our Site, we store the personal information provided in their user profile. Users can view, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also view and edit this information.

5. Data Protection

5.1 Security Measures

We implement a variety of security measures to protect the safety of your personal information, including:

• Encryption: Data is encrypted during transmission using Secure Socket Layer (SSL) technology.
• Access Controls: Access to personal data is restricted to authorized personnel only. We use role-based access controls and regularly review permissions.
• Data Minimization: We collect and store only the minimum amount of personal data necessary for the intended purpose.
• Security Audits: We conduct regular security audits and vulnerability assessments to identify and mitigate potential risks.

5.2 Data Breach Procedures

In the event of a data breach, we will take the following actions:

1. Detection and Containment: Monitor our systems to detect breaches and contain any breaches that occur.
2. Assessment and Notification: Assess the scope and impact of the breach. Notify affected users and relevant authorities as required by law within 72 hours of becoming aware of the breach.
3. Remediation: Take steps to mitigate the breach’s impact, including patching vulnerabilities and updating security protocols.

6. Third-Party Data Sources

We may receive data about you from third-party sources, including:

• Payment Processors: We receive information from Stripe when you make a donation or payment. This may include your name, email address, and transaction details.
• Social Media Platforms: We may receive information from social media platforms if you interact with us through those services.
• Authentication Providers: If you log in using a third-party authentication service like Auth0, we receive information to verify your identity and provide access to our services.

7. Contact Information

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@lendahandup.org
• Mailing Address:
  Lend A Hand Up
  4321 20th Ave S
  Fargo, ND 58103
  USA
• Phone: +1 (701) 123-4567

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

9. Governing Law

This Privacy Policy shall be governed and construed in accordance with the laws of the State of North Dakota, without regard to its conflict of law provisions.

© 2024 DAKOTA MEDICAL FOUNDATION