Privacy Policy
GivePower Foundation ("GivePower", "we", "our" or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard information when you visit givepower.org (the "Site") or interact with our services.
Please read this policy carefully. By using the Site, you acknowledge the practices described here. Where we rely on your consent (for example, for non-essential cookies or marketing communications), we will ask for it separately and you may withdraw it at any time. If you do not agree, please do not use the Site.
Effective Date: July 23, 2026
Last Updated: July 23, 2026
1. Information We Collect
1.1 Information You Provide
We collect information you voluntarily provide when you:
- Fill out a contact or inquiry form (name, email address, message)
- Sign up for our newsletter or email updates (name, email address)
- Make a donation (name, email, billing address, payment card information)
- Apply for a partnership, volunteer opportunity, or program
- Otherwise communicate with us via the Site
1.2 Automatically Collected Information
When you visit the Site, certain information is collected automatically, including:
- Browser type, operating system, and device information
- IP address and approximate geographic location
- Pages visited, time spent on pages, and referring URL
- Cookies and similar tracking technologies (see Section 5)
1.3 Payment Information
When you make a donation, payment card data is processed by our third-party payment processor. GivePower does not store full credit card numbers on our servers. Our payment processor is bound by applicable Payment Card Industry Data Security Standards (PCI DSS).
1.4 Information About Program Participants and Beneficiaries
In the course of delivering our charitable programs, we may collect personal information about the individuals and communities we serve. This may include names, photographs, audio and video recordings, written or recorded testimonials and general location or community information. We collect this information to operate, document and report on our programs and, where we have obtained appropriate consent, to share program stories in our communications and fundraising materials. We obtain consent before collecting or publishing this information, take additional care where it concerns children and honor requests to withdraw it. Several of the countries where we work treat photographs and similar records as personal, and in some cases sensitive, data, and we handle them accordingly.
2. How We Use Your Information
We use the information we collect to:
- Process donations and send donation receipts and tax acknowledgment letters
- Respond to your inquiries and support requests
- Send newsletters, impact updates, and other communications you have requested
- Improve and personalize the Site and our services
- Comply with legal obligations and maintain our records as a 501(c)(3) nonprofit
- Detect and prevent fraud or unauthorized activity
- Analyze usage trends to improve user experience
We will not sell, rent, or trade your personal information to third parties for their own marketing purposes.
3. How We Share Your Information
3.1 Service Providers
We share information with trusted third-party vendors who assist us in operating the Site and delivering our services, including:
- Payment processors (for donation processing)
- Email and CRM platforms (for donor communications)
- Website analytics providers
- Cloud hosting and IT infrastructure providers
These vendors are contractually obligated to use your information only to provide services to us and to maintain appropriate security measures.
3.2 Legal Requirements
We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
3.3 Organizational Transfers
If GivePower undergoes a merger, acquisition, or restructuring, your information may be transferred to the successor organization, subject to equivalent privacy protections.
3.4 International Data Transfers
GivePower is based in the United States and information we collect may be transferred to, stored in or processed in the United States and other countries whose data protection laws may differ from those in your country. Where we transfer personal information across borders, we take steps intended to keep it protected. Depending on the country involved, this may include relying on a recognized adequacy determination, putting in place recognized safeguards such as Standard Contractual Clauses or obtaining your consent. Additional information about the basis for transfers from the European Economic Area, the United Kingdom, Kenya, Tanzania or Colombia is described in Section 7 or is available on request.
4. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Donation records are retained for a minimum of seven (7) years to comply with IRS requirements applicable to 501(c)(3) organizations. Contact and newsletter subscriber data is retained until you request deletion or unsubscribe. For individuals in the European Economic Area, the United Kingdom, Kenya, Tanzania and Colombia, we keep personal information only for as long as necessary for the purpose for which it was collected, after which it is deleted or anonymized. We can provide more detail about retention periods for specific categories of data on request.
5. Cookies and Tracking Technologies
We use cookies (small text files stored on your device) and similar technologies to keep the Site functioning properly, to understand how visitors use the Site (analytics), and to support outreach for our charitable mission. We group cookies into three categories: Necessary, Analytics, and Advertisement.
Necessary cookies are required for the Site to function and are always active; they do not require your consent.
Analytics and Advertisement cookies are turned off by default. We place them only after you give consent through our cookie banner, and we apply this approach to every visitor regardless of location. You can give or withdraw your consent at any time through the cookie banner or our preferences tool, and you can also control cookies through your browser settings. Withdrawing consent does not affect cookies already placed before you withdrew it, and disabling certain cookies may affect Site functionality.
We do not sell your personal information. We do not currently respond to browser "Do Not Track" signals. Because Analytics and Advertisement cookies remain off unless you opt in, none of them are set unless and until you choose to allow them.
6. Third-Party Links
The Site may contain links to third-party websites, including partner organizations and social media platforms. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.
7. Your Rights and Choices
7.1 All Users
You may:
- Opt out of marketing emails at any time by clicking "Unsubscribe" in any email or contacting us directly
- Request access to or correction of your personal information
- Request deletion of your personal information, subject to legal retention requirements
- Withdraw your consent at any time where our processing is based on consent, without affecting processing carried out before the withdrawal
- Request a copy of your personal information in a portable format, or object to or request restriction of certain processing
- Lodge a complaint with the data protection authority in your country (see the regional sections below)
7.2 California Consumer Privacy Act (CCPA)
GivePower is a nonprofit organization and exempt from the CCPA. We value the privacy of our donors, supporters, volunteers and website visitors and we aim to handle personal information responsibly and voluntarily regardless of where you live. As a matter of practice, we offer the following choices to all individuals including residents of California:
Know. You may request a summary of the categories of personal information we have collected about you, the sources of that information, the purposes for collecting it and the categories of third parties with whom we share it.
Access. You may request a copy of the specific personal information.
Delete. You may ask us to delete personal information we have collected about you, subject to exceptions (for example, where we must retain records to complete a transaction you requested, comply with legal obligations or maintain donation and tax records).
No sales. We do not sell your personal information and we do not share it for cross-context behavioral advertising.
No retaliation. We will not deny you services or treat you differently for exercising any of these choices.
To submit a request, contact us at the address below. We may need to verify your identity before responding and we will respond within a reasonable time.
7.3 European Economic Area / UK Residents (GDPR)
If you are located in the EEA or UK, our legal bases for processing your personal information include your consent, our legitimate interests as a nonprofit, and compliance with legal obligations. You have the right to access, rectify, erase, restrict, or port your personal information, and to object to processing. Where we rely on consent, you may withdraw it at any time. When we transfer your personal information from the EEA or UK to the United States or another country, we use an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses (and the UK Addendum), a copy of which is available on request. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us at the address below.
7.4 Kenya Residents (Data Protection Act, 2019)
If you are located in Kenya, you have the right to be informed of how your personal data is used; to access your personal data; to have inaccurate or misleading data corrected; to request deletion and to object to processing. Where processing is based on consent, you may withdraw it at any time. You may also lodge a complaint with the Office of Data Protection Commissioner (ODPC). We transfer personal data outside Kenya only where permitted; for example, to countries recognized as providing adequate protection, subject to appropriate safeguards, or with your consent. To exercise your rights, contact us at the address below.
7.5 Tanzania Residents (Personal Data Protection Act, 2022)
If you are located in Tanzania, you have the right to access your personal data, to request correction or deletion, to object to processing (including for direct marketing) and to seek redress through the Personal Data Protection Commission. Where processing is based on consent, you may withdraw it at any time. We transfer personal data outside Tanzania only in accordance with applicable legal requirements. To exercise your rights, contact us at the address below.
7.6 Colombia Residents (Law 1581 of 2012 / Habeas Data)
If you are located in Colombia, you have the constitutional right (habeas data) to know, update, rectify and delete your personal information and to be informed about how it is used. We process your personal data on the basis of your prior, express and informed authorization, which you may revoke at any time, subject to legal limits. We request your authorization separately for any non-essential purposes, such as marketing. You may submit consultations and complaints (consultas y reclamos) to us and, if unresolved, to the Superintendent of Industry and Commerce (SIC). A Spanish-language version of this policy is available. To exercise your rights, contact us at the address below.
8. Children's Privacy
Our Site is not directed to children, and we do not knowingly collect personal information from children through the Site. The age at which a person is considered a child varies by country, generally under 16 in the EEA and the UK (and as low as 13 in some countries) and under 18 in Kenya, Tanzania and Colombia. Where we collect information relating to children as part of our charitable programs, we do so only with the consent of a parent or guardian and with appropriate safeguards. If you believe a child has provided us personal information without the required consent, please contact us and we will promptly delete it or obtain the necessary consent.
9. Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information. If we become aware of a personal data breach affecting your information, we will notify you and the relevant supervisory authorities where required by applicable law and within the applicable timeframes. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use caution when submitting personal information online.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. We encourage you to review this page periodically. Continued use of the Site following any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
GivePower Foundation
415 East Saint Elmo Rd, Suite #1-F1,
Austin, TX 78745
privacy@givepower.org
GivePower® is a registered trademark of GivePower Foundation, a 501(c)(3) nonprofit organization.