Effective Date: September 5, 2025

UMAI Foundation (“we,” “our,” “us”) respects your privacy. This Privacy Policy explains what we collect, how we use it, and your choices. It applies to our website and any online forms or communications that link to this Policy.

We keep data collection to a minimum and gather information only when you voluntarily provide it or when it’s necessary for security.

You provide:

• Contact details (name, email, phone, mailing address) — for inquiries, program sign-ups, volunteering.
   
• Donation details (amount, currency, contact info). Payment cards are processed by our third-party payment processor; we do not store full card numbers.
   
• Optional content (messages, survey responses, photos/testimonials) you choose to share.
   

We automatically receive (security only):

• Limited server logs from our hosting provider (e.g., IP address, date/time, URL) to keep the site secure and prevent abuse. We do not use these logs to profile or track visitors.
   

• We do not use cookies or similar tracking technologies on our pages.
   
• We do not run targeted/behavioral advertising and do not sell or “share” personal information for cross-context behavioral advertising.
   
• If you interact with third-party embedded services (e.g., a donation checkout, map, or video), those providers may set their own strictly necessary cookies to deliver that feature. Their use is governed by their own privacy policies.
   

• Respond to messages and provide programs/events you request.
   
• Process donations and send receipts/acknowledgments.
   
• Send updates and newsletters if you opt in (you can unsubscribe anytime).
   
• Protect our site and comply with legal and reporting obligations.
   

Where the GDPR applies, we rely on: consent (e.g., newsletters), contract/steps prior to contract (program or event registration), legal obligation (records/receipts), and legitimate interests (site security, basic analytics-free performance).

• Contact/inquiry records: typically up to 24 months after last interaction.
   
• Donation records: kept as required by law and nonprofit accounting (often 7 years).
   
• Security logs: retained briefly by our host and then deleted or anonymized.
   

We do not sell or rent personal data. We share only with:

• Service providers (e.g., payment processors, email delivery, secure hosting) bound by confidentiality and data-protection terms.
   
• Authorities when required by law, safety, or to protect our rights.
   

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to withdraw consent where processing is based on consent.

• California (CCPA/CPRA): You have the rights to know, delete, and correct personal information, and to opt out of sale/sharing (мы это не делаем). We honor Global Privacy Control (GPC) signals where applicable.
   
• EU/UK (GDPR): You may request data portability and lodge a complaint with your data protection authority.
   

To make a request, contact us at privacy@umai-foundation.org. We may need to verify your identity before responding.

Our site is intended for a general audience. We do not knowingly collect personal information from children under 13 (or the relevant age in your jurisdiction) without verifiable parental consent. If you believe a child provided data, contact us to remove it.

If you access our services from outside the United States, your information may be processed in the U.S., where privacy laws may differ. We take appropriate steps to protect your data consistent with this Policy.

We apply reasonable administrative, technical, and physical safeguards. No system is 100% secure, but we work to protect your information from unauthorized access, use, or disclosure.

We may update this Policy from time to time. Changes will be posted here with a new Effective Date.

UMAI Foundation

[Foundation Address]

Email: privacy@umai-foundation.org

General inquiries: info@umai-foundation.org