Privacy notice
This notice explains, in plain language, what personal data this fund collects, why, how long we keep it, and what you can ask us to do with it.
Who is responsible for your data
The controller is Благодійна організація «Благодійний фонд «Тепло Милосердя»», a charitable organisation registered in Ukraine. You can reach us about anything in this notice at warmthofmercy@proton.me.
What we collect
If you leave an intention or light a candle: the name you enter, an email address if you choose to give one, and the text of your intention.
If you start a donation: what the gift is for, the amount, the currency, whether it is one-time or monthly, the language, and the page you came from. We do not receive or store your card details — payment happens on the provider’s own secure page.
Automatically: our server keeps standard technical logs (time, page, browser type). For donation clicks we store your IP address only as a salted hash, which cannot be turned back into an address.
We do not collect anything else, and we do not buy data about you from anyone.
Why we collect it, and on what legal basis
To receive and pray for your intention, and to send you the document or reply you asked for — on the basis of your consent (GDPR Article 6(1)(a)). You give this consent by ticking the box on the form, and you may withdraw it at any time.
To keep the site working and safe, and to understand which pages are read — on the basis of our legitimate interest (Article 6(1)(f)) in preventing abuse. Statistics only run if you allow them.
To keep accounting records of gifts, where the law requires it — on the basis of a legal obligation (Article 6(1)(c)).
How long we keep it
Intentions and candles: for as long as they are prayed for, and then no longer than three years.
Donation click records: two years, for reporting and for proving that a gift was received.
If you ask us to delete something, we delete it unless the law requires us to keep an accounting record.
Who we share it with
We do not sell your data and we do not share it for advertising. It is seen only by the people who run the fund, and by the service providers that make the site and payments work — a hosting provider and a payment provider. Each of them is bound to use it only for that purpose.
If you ask for a Mass intention, the name and intention are passed to the priest who will celebrate. Nothing else is.
Your rights
You can ask us to show you what we hold about you, correct it, delete it, restrict how we use it, or send it to you in a portable form. You can object to processing based on our legitimate interest, and you can withdraw consent at any time without it affecting anything done before.
Write to warmthofmercy@proton.me and we will answer within one month. If you are not satisfied, you may complain to the Ukrainian Parliament Commissioner for Human Rights, or to the data protection authority in your own country.
Changes
If this notice changes, the date at the top changes with it. Substantial changes will be shown on the site.
You can change this at any time on the Cookies page.