Privacy Policy

Open Hearts for Orphans ("OHFO") takes our supporters' privacy seriously. Our official privacy policy is shown below:

OHFO collects Personal Data in a lawful and fair manner. No personal  data, other than what is necessary, is requested. Personal Data we  collect when you donate to, support, or volunteer for 

OHFO includes your name, postal address, telephone number, and email address. In more  limited circumstances, we also may collect:

• Data about family members and companions, such as names of your children or name of spouse if shared with OHFO
• When applying to volunteer with OHFO, we collect information you  provide to us on program interest, skills, native language, and similar  questions which we use for volunteer placement. When hired we request  and store your date of birth and often a personal or family photograph

We collect Personal Data primarily through our online website when a  donation is made, when a volunteer application is submitted, or when you sign up to receive our newsletter.

We use Personal Data to provide you with a financial receipt, reports  on how your funding is used, and to update supporters on new projects.  We also use data for our once-a-year annual campaign postal mailing, which is only sent to donors in the United States.

OHFO takes supporter and volunteer privacy very seriously. We will not  sell or trade personal information, whether received online or in any  other manner, to any other entity without prior written approval.

Personal Data is shared with third-party service providers for the purpose of credit card payment processing through Stripe and Paypal, who both process transactions at the highest security  standards. OHFO does not store credit card information on our servers. For US  supporters, Personal Data is used to mail our annual campaign.

We will disclose Personal Data to comply with legal process, to respond to requests from government authorities, including authorities  outside your country of residence, and to meet national security or law enforcement requirements.

We use strict organizational measures to protect Personal Data along with technical measures that include a comprehensive set of compliance certifications and attestations under the EU-U.S. privacy framework. If  we would ever have a reason to believe data was compromised, we would  notify our supporters within 72 hours by law.

You have the right to request and receive detailed information on  what data we have on you personally, where that data is stored and how it’s utilized. You have the right to ask us to delete all information we  have on you personally (“data erasure”) and can revoke the consent you gave previously to us for news and information.