Privacy policy

Who we are

Charitable Organization “Promise Society” (EDRPOU 39238132) operates this fundraising website at https://www.obitnytsia.org. We process personal data to receive charitable gifts, send receipts, and run the public site.

What we collect

When you donate by card we ask for an email address (required), and you may optionally give a name and a comment. We also store the gift amount, currency (UAH), frequency (one-time or monthly), campaign if you chose one, language, and a payment order reference.

WayForPay, our payment processor, handles card details on their hosted page. We receive payment metadata such as transaction status, amount, and related processor fields needed to confirm the gift. We do not store full card numbers on this site.

The site stores a language preference cookie so the English or Ukrainian interface stays selected. Server logs may include technical data such as IP address, user agent, and the pages requested.

The footer newsletter asks for an email. We store it only after you confirm the address from the message we send, then use it for news from the field and new campaign updates. You can ignore the message if you did not subscribe.

Why we use this data

We use donor details to process the gift, confirm payment status, issue a receipt, and — for monthly gifts — provide a cancel link. Confirmed newsletter addresses are used only to send field news and campaign updates. We keep gift records for accounting, anti-fraud checks, and to answer donor questions.

We do not sell personal data. We do not use donation details for unrelated marketing.

Who processes data for us

WayForPay processes card payments (including Google Pay and Apple Pay where offered) and returns status to our webhook and status checks.

The website is hosted on Vercel. Gift records and newsletter subscribers are stored in a private server store (not the public CMS dataset). When email is configured, messages are sent with Resend.

Public content may be served from our CMS and image CDN (Sanity).

How long we keep it

Gift and receipt records are kept for as long as needed for charity accounting, legal obligations in Ukraine, and donor support. Technical logs are kept for a short operational period. You may ask us to update or delete data where the law allows; some payment records must be retained.

Your rights

Subject to Ukrainian personal-data law, you may request access to the data we hold about you, correction of inaccurate data, and restriction or deletion where applicable. Monthly donors can stop future charges with the cancel link in the receipt email.

Privacy requests

For privacy requests only, write to Charitable Organization “Promise Society”, EDRPOU 39238132. Use the email address from your donation receipt if you have one, or the contact details published for this organization in the Ukrainian Unified State Register. Please include enough detail for us to find your gift (for example the order reference on the receipt). This is not a general contact form.

Children and changes

Donations should be made by adults. We do not knowingly collect personal data from children in order to take payment.

We may update this policy when our practices or providers change. The date above shows the latest revision.