ChasdeiChashi.org Privacy Policy

Last Updated: June 2024

Introduction

This Privacy Policy has been compiled to better serve those concerned with how their
Personally Identifiable Information (PII) is being used online.
PII, as defined by U.S. privacy law and information security, refers to information that
can be used on its own or with other data to identify, contact, or locate an individual,
or to identify someone in context.

Please read this Privacy Policy carefully to understand how we collect, use, protect,
or otherwise handle your personal information in accordance with our website.

At Chasdei Chashi L’Kallah (DBA for Keren Simchas Kallah), we value the privacy
of your personal data and comply with the General Data Protection Regulation (GDPR).
This policy describes who, why, and what personal data we process, your rights, and contact
details for GDPR-related requests. Our Privacy Policy is included and easily accessible on all
our forms and online pages.

Terms and Conditions Information

ChasdeiChashi.org includes links to our Privacy Policy and SMS Terms and Conditions.
This information is accessible from all pages of our website.

You can view our privacy policy at:
https://chasdeichashi.org/privacy-policy/

Information We Collect

• Name
• Address
• Email address
• Phone number
• Other details to help improve your experience

When We Collect Information

• When you fill out a form
• When you make a donation
• When you enter information on our site

Data Controller

How We Use Your Information

• Send periodic emails regarding donations, orders, or services
• Respond to customer service requests
• Follow up via live chat, email, or phone inquiries

Data Protection and Security

• We do not use vulnerability scanning or PCI standards.
• We provide articles and information and do not request credit card numbers directly.
• We perform regular malware scanning.
• Your personal information is stored behind secure networks and is accessible only by authorized personnel.
• All sensitive data is encrypted via SSL (Secure Socket Layer) technology.
• All transactions are processed through a secure gateway provider and are not stored on our servers.

Data Processing and Retention

• Contact details (name, address,  phone, email)
• Information related to donations or orders

Data retention period: 4 years

Data sharing: We do not share your data with third parties without consent.

Your Rights (Under GDPR)

• To be informed
• To access your data
• To update or rectify data
• To request erasure (“right to be forgotten”)
• To restrict processing
• Data portability
• To object to processing
• To restrict automated decision-making

To exercise these rights, please contact:
support@chasdeichashi.org

SMS Terms of Service and Conditions

How We Use SMS:
Chasdei Chashi L’Kallah only responds via SMS when a user initiates contact (e.g., for help placing an order).
We never initiate contact via SMS for marketing purposes.

By opting into SMS from a web form or other medium, you are agreeing to receive SMS messages from

Chasdei Chashi L’Kallah. This includes SMS messages for marketing or customer care.

• Messaging frequency may vary.
• Message and data rates may apply.
• To opt out, text STOP.
• For assistance, text HELP or visit
  https://chasdeichashi.org.
• See privacy policy at https://chasdeichashi.org/privacy-policy

Cookies

We do not use cookies for tracking purposes.
You may disable cookies in your browser settings; some site features may not function properly if cookies are disabled.

Third-Party Disclosure

We do not sell, trade, or transfer your Personally Identifiable Information to outside parties.

Third-Party Links

Our website does not include or offer third-party products or services.

Google Services

We do not use Google AdSense or other advertising services.

California Online Privacy Protection Act (CalOPPA)

• Users can visit our site anonymously.
• Our Privacy Policy is linked from our homepage or first significant page.
• Users will be notified of any changes to this policy on this page.
• Users can update personal information by emailing us.

Do Not Track (DNT)

We honor Do Not Track signals and do not track, plant cookies, or use advertising when a DNT browser mechanism is active.

Children’s Online Privacy Protection Act (COPPA)

We do not collect or market information from children under 13 years old.
Parents remain in control of children’s data under COPPA regulations.

Fair Information Practices

In compliance with U.S. Fair Information Principles, if a data breach occurs:

• We will notify affected users via email and site notification within 1 business day.

We adhere to the Individual Redress Principle, ensuring individuals can pursue enforceable rights against violators.

CAN-SPAM Act Compliance

We collect your email address to:

• Send information and respond to inquiries
• Provide updates related to donations or orders

We agree to:

• Not use false or misleading subjects or email addresses
• Identify messages as advertisements when applicable
• Include our business address
• Honor opt-out/unsubscribe requests promptly

Users may unsubscribe using the link at the bottom of each email.

Contacting Us