1. Introduction
The Inala Foundation ("we," "us," or "our") is a US-registered 501(c)(3) nonprofit organization (EIN: 88-3451722) based in Fort Lauderdale, Florida. We are committed to protecting your personal information and being transparent about how we use it.
This Privacy Policy explains what information we collect when you visit our website, make a donation, submit a contact form, or sign up for our newsletter. It also explains your rights and how to exercise them.
If you have questions about this policy or how we handle your data, please contact us at:
Inala Foundation, Fort Lauderdale, FL 33316
Phone: +1 (646) 209-9546
Email: privacy@inalafoundation.org
2. Who This Policy Applies To
This policy applies to anyone who uses our website or otherwise provides personal information to us, including donors, supporters, newsletter subscribers, and anyone who contacts us through our website. We serve a global community including donors in the United States, the European Union, the United Kingdom, Australia, and other countries. Where your local laws give you specific rights, we honor those rights. See the jurisdiction-specific sections below.
3. What Information We Collect
We only collect information that you provide directly to us or that is necessary to process your donation or respond to your inquiry.
When you make a donation
- Your name, email address, billing address, and phone number (if provided)
- Donation amount and frequency (one-time or recurring)
- Payment card details. We do not store your card number. Payments are processed securely by Stripe, Inc. Stripe handles and stores your card details on our behalf. You can review Stripe's privacy policy at stripe.com/privacy.
When you submit a contact form
- Your name and email address
- The content of your message
When you sign up for our newsletter
- Your name (if provided) and email address
Automatically collected information
We use basic, privacy-respecting analytics to understand how our website is used (for example, which pages are visited most often). This may include your IP address, browser type, and general geographic region. We do not use advertising cookies, behavioral tracking, or third-party marketing pixels.
4. How We Use Your Information
We use your information only for the purposes listed below. We do not sell, rent, or trade your personal information to any third party.
- To process your donation: We use your contact and payment information to complete your transaction, send you a donation confirmation and tax receipt, and maintain our financial records as required by law.
- To respond to inquiries: If you contact us through our website, we use your information to respond to your message.
- To send newsletters and updates: If you sign up for our newsletter, we use your email address to send you updates about our work and mission. You can unsubscribe at any time using the link at the bottom of any newsletter email.
- To maintain our records: We keep records of donations for accounting, tax compliance, and legal purposes.
- To improve our website: We use anonymized analytics data to understand how our site is used and to make it better.
- To comply with the law: We may use or disclose your information where required to do so by law, court order, or regulatory authority.
5. Legal Bases for Processing (GDPR)
If you are located in the European Union, the United Kingdom, or a country with similar laws, we process your personal data on the following legal bases:
- Performance of a contract: When you make a donation, we process your information to fulfill the transaction you requested.
- Legitimate interests: We process certain information (such as basic analytics and fraud prevention) because we have a legitimate interest in running our organization effectively and securely.
- Consent: Where we send you newsletters or marketing communications, we do so on the basis of your consent. You may withdraw consent at any time.
- Legal obligation: We process and retain certain data (such as donation records) because we are required to do so under US tax law and other applicable regulations.
6. How We Share Your Information
We do not sell or share your personal information with third parties for their own marketing purposes. We share information only in the following limited circumstances:
- Payment processing: We share the information necessary to process your donation with Stripe, Inc. Stripe is bound by its own privacy policy and is not permitted to use your information for any other purpose.
- Email service providers: We use a third-party email platform to send newsletters and donation receipts. This provider has access to your email address and name for the sole purpose of delivering those communications on our behalf.
- Legal requirements: We may disclose your information if required by law, subpoena, court order, or government request, or where we believe disclosure is necessary to protect our rights or the safety of others.
- Business transitions: If the Inala Foundation is ever merged with or transfers its assets to another organization, your information may be transferred as part of that process. We will notify you in advance if this happens.
7. Data Retention
We keep your personal information only for as long as it is needed for the purpose it was collected, or as required by law.
- Donation records are retained for a minimum of seven years for accounting and tax compliance purposes.
- Contact form submissions are retained for as long as necessary to resolve your inquiry, and generally no longer than two years.
- Newsletter subscriber information is kept until you unsubscribe, after which we delete your data promptly.
- Analytics data is anonymized and does not identify individuals.
8. International Data Transfers
The Inala Foundation is based in the United States. If you are located outside the United States, including in the EU, UK, or Australia, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.
Where transfers of data from the EU or UK to the United States are required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or the UK International Data Transfer Agreement. If you would like more information about the safeguards in place, please contact us.
9. Security
We take reasonable steps to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These steps include using HTTPS encryption on our website and working only with service providers such as Stripe who maintain industry-standard security practices. No method of transmitting or storing data is 100% secure. If you have reason to believe that your information has been compromised, please contact us immediately.
10. Cookies and Tracking
We use only minimal, essential analytics to understand how our website is being used. We do not use advertising cookies, cross-site tracking, social media pixels, or behavioral profiling tools. You can disable cookies in your browser settings at any time. Disabling cookies will not affect your ability to use our website.
11. Children's Privacy
Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
12. Your Rights
Depending on where you live, you may have certain rights regarding your personal information. We respect and honor these rights for all users, regardless of location.
- Access: Request a copy of the personal information we hold about you.
- Correction: Ask us to correct any inaccurate or incomplete information.
- Deletion: Ask us to delete your personal information, subject to our legal obligations to retain certain records.
- Restriction: Ask us to stop using your data in certain ways.
- Portability: Request a copy of your data in a portable format where applicable.
- Object: Object to our processing of your data where we rely on legitimate interests.
- Withdraw consent: Withdraw consent for newsletter emails or other consent-based processing at any time.
To exercise any of these rights, please contact us at privacy@inalafoundation.org. We will respond within 30 days. We will not discriminate against you for exercising your privacy rights.
13. EU and UK Residents (GDPR)
If you are located in the European Union or the United Kingdom, you have the rights described in Section 12 under the General Data Protection Regulation (GDPR) or the UK GDPR, as applicable. You also have the right to lodge a complaint with a supervisory authority. In the EU, this is the data protection authority in your member state. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. We are committed to resolving any privacy concerns directly, so please contact us first.
14. California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you specific rights regarding your personal information.
Categories of personal information we collect: identifiers (name, email address, billing address, IP address); financial information (donation amount, handled by Stripe); communications (contact form messages); internet activity (basic analytics data).
We do not sell or share your personal information for cross-context behavioral advertising. Your California rights include the right to know, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights. To submit a CCPA request, contact us at privacy@inalafoundation.org. We will respond within 45 days.
15. Australian Residents
If you are located in Australia, we handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We collect only the personal information that is reasonably necessary for our functions, and you may access and request correction of your information by contacting us. If you are not satisfied with how we handle a privacy concern, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
16. Links to Other Websites
Our website may contain links to third-party websites such as our payment partner Stripe. This Privacy Policy applies only to the Inala Foundation website. We are not responsible for the privacy practices of other websites and encourage you to review their policies before providing any personal information.
17. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If we make significant changes, we will post a notice on our website. Your continued use of our website after any changes are posted constitutes your acceptance of the updated policy.
18. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal information, please contact us:
Inala Foundation
Fort Lauderdale, FL 33316
Phone: +1 (646) 209-9546
Email: privacy@inalafoundation.org
We take all privacy inquiries seriously and will respond promptly.
This policy was last reviewed on May 19, 2026.