Privacy Policy

This policy explains what personal information Otolizz Foundation collects through this website, why we collect it, who else sees it, and what you can ask us to do about it. We have tried to write it in plain language rather than legal boilerplate.

Who we are

Otolizz Foundation, 8 Eastern Parkway, Hillside, New Jersey 07205. If you have any question about this policy, or about information we hold on you, email support@otolizz.org.

What we collect, and why

If you make a donation

We collect your name, email address, and any postal address or telephone number you choose to give. We keep a record of the amount, the date, and which cause you chose. We need this to process the gift, to send you a receipt, and to meet our own record keeping obligations.

We never see your card details. Payment is taken on Stripe's or PayPal's own secure pages. Your card number, expiry date and security code do not pass through this website at any point and are never stored by us.

If you contact us

We keep your name, email address, any telephone number you give, and what you wrote, so that we can reply and so that whoever picks the conversation up next can see what has already been said.

If you apply to volunteer

We keep the details on the form: your name, contact details, where you are based, your availability, any experience you mention, and why you would like to help. We use it only to consider your application and to contact you about it.

If you book a place at an event

We keep your name, email address, telephone number if given, the number of places you reserved, and anything you told us we should know — for example an access requirement. We use it to manage the event and to contact you if plans change.

If you join our mailing list

We keep your email address, your name if you give one, and a record of when and from where you signed up. That record exists so we can show your consent was genuine. We only add you once you have clicked a confirmation link sent to your address, so nobody can sign you up without your knowledge.

Everyone who visits

Our web server keeps ordinary access logs, and we record the IP address attached to form submissions so that we can deal with abuse.

How we protect it

Names, email addresses, telephone numbers and postal addresses are encrypted in our database, not stored as plain text. Access to donor records inside our admin system is restricted to the people who need it, and every time someone opens a donor record it is logged.

Staff accounts all require two-factor authentication.

Who else sees your information

We do not sell, rent or trade your personal information. We share it only with the services we need to run the site, and only for that purpose:

• Stripe and PayPal — to take payments. They handle your card details directly under their own privacy policies.
• Our email provider — to deliver receipts, replies, confirmations and newsletters.
• Cloudflare — to tell human visitors from automated ones on our forms.
• Our web host — which stores the site and its database.

We may also disclose information where the law requires it.

Cookies

This site sets two cookies, both strictly necessary for it to work: one keeps your session while you are filling in a form, and one protects forms against cross-site request forgery. Neither tracks you, and neither is used for advertising.

We do not currently run analytics or any advertising tracker on this site. If that changes, we will ask for your consent first and update this page.

How long we keep it

• Donation records — seven years. Tax and charity record keeping require this, and it applies even if you ask us to delete other information.
• Messages you send us — two years.
• Mailing list signups that were never confirmed — thirty days, then deleted automatically.
• Mailing list subscriptions — until you unsubscribe.

Your rights

You can ask us to:

• tell you what information we hold about you;
• correct anything that is wrong;
• delete your information;
• stop sending you email.

Email support@otolizz.org and we will respond within a month.

One limit worth stating plainly: we cannot delete the financial record of a donation, because we are required to keep it. We can remove your contact details from everything else, and we can stop contacting you entirely.

Depending on where you live, you may have additional rights under the General Data Protection Regulation or the California Consumer Privacy Act, including the right to complain to your data protection authority. We will not treat you differently for exercising any of them.

Unsubscribing

Every newsletter has a one-click unsubscribe link that needs no password and no account. It works immediately.

Children

This site is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has given us information, please tell us and we will delete it.

Changes to this policy

If we change how we handle personal information we will update this page and change the date at the top.