1. Information we collect
We collect only the information needed to communicate with you, process donations, and keep the site secure.
Information you provide
- Contact and volunteer forms: name, email address, and the content of your message.
- Donations: when you give through our Givebutter widget, you provide payment and contact details directly to Givebutter. We receive donor name, email, and donation amount from Givebutter for recordkeeping and follow-up.
- Email replies: any information you include when responding to our emails.
Information collected automatically
- Basic technical data (IP address, browser type, timestamps) used for security, spam prevention, and diagnosing errors.
- Cloudflare Turnstile challenges collect limited signals from your browser to verify you are human. Turnstile is designed to minimize tracking and does not use invasive fingerprinting.
2. How we use information
- To respond to inquiries submitted through contact and volunteer forms.
- To process, acknowledge, and keep records of donations.
- To send transactional emails such as receipts, confirmations, and replies.
- To protect the site from spam, abuse, and fraud.
- To operate, maintain, and improve the website.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Donation processing
Donations, one-time and recurring, are processed by Givebutter. Payment card details are entered on Givebutter's PCI-compliant infrastructure and are not stored on our servers. Givebutter's handling of your information is governed by its own privacy policy.
4. Contact forms
Submissions from our contact and volunteer forms are transmitted to our backend, protected by Cloudflare Turnstile, and stored in our Supabase database so we can follow up with you. A copy is emailed to our team via Resend so we can reply promptly.
5. Email communications
Transactional emails (form confirmations, replies, donation acknowledgements sent by us) are delivered through Resend. We do not run a marketing mailing list from this website. If you have received an email you did not expect, please contact us.
6. Third-party services
We rely on a small set of trusted vendors to operate the site:
- Givebutter — donation processing and donor management.
- Supabase — database, authentication, and secure form intake.
- Cloudflare Turnstile — spam and bot protection on forms.
- Resend — delivery of transactional emails.
- Instagram — embedded social content; loading it may cause your browser to interact with Meta's servers under their policies.
Each service processes information under its own privacy policy.
7. Data security
We use industry-standard safeguards including HTTPS in transit, access controls, hashed authentication credentials, and row-level security policies on our database. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.
8. Data retention
We keep contact and volunteer submissions for as long as reasonably needed to respond, follow up, and maintain organizational records. Donation records are retained as long as required for accounting, tax, and audit purposes. You may request deletion of your personal information at any time (see Your rights).
9. Your rights
Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you, or to object to certain processing. To exercise these rights, email us at support@lotmitzvahs.org. We will respond within a reasonable time.
10. Children's privacy
This website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.
11. Updates to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected here with a new "Last updated" date. Continued use of the site after changes means you accept the updated policy.
12. Contact
Questions about this policy or your information? Email support@lotmitzvahs.org.