Privacy Policy

Effective date: January 21, 2019
Last update: March 12, 2026

This Privacy Policy explains how Thaki (“Thaki”, “we”, “us”) collects, uses, shares, and protects personal data when you use
www.thaki.org
(the “Website”) and when you sign up for our newsletter or make a donation.

Scope note (important): This Policy applies to our Website and related forms and donation flows. Our social media pages
(e.g., Instagram, YouTube, Facebook, LinkedIn, UpScrolled) are governed by each platform’s own policies.

1) Who is responsible for your data (Controller)

Controller: Thaki

Contact: info@thaki.org

If you need to exercise your rights (see Section 10), contact us at
info@thaki.org.

2) What data do we collect?

We collect personal data in the following categories, depending on how you use the Website:

A) Information you provide directly

• Newsletter: email address.
• Donations: information needed to process your donation and provide a receipt, typically name, email, donation amount, and transaction details. Payment details are processed by our payment providers (see Section 6).
• Contact: name, email, and message content.

B) Information collected automatically

When you visit the Website, we may automatically collect certain personal data and technical data, such as:

• IP address
• browser type/version
• device identifiers
• pages visited and interactions
• date/time and time spent

C) Cookies and similar technologies

We use cookies and similar technologies to operate the Website and support analytics and related functions (see Section 8).

3) Why we use your data (purposes)

We use personal data we collect for the following purposes:

• understand Website performance and improve content
• send newsletters and updates (when you opt in)
• process donations and provide receipts
• respond to your messages
• prevent fraud and misuse

4) Legal bases for processing (GDPR)

If you are in the European Economic Area (EEA) / UK, we process your personal data on one or more of these legal bases:

• Consent
  • Newsletter sign-up
  • Marketing/advertising cookies and analytics cookies (e.g., Google Analytics), where consent is required
• Contract / steps at your request
  • Processing donations and providing confirmation/receipts
• Legitimate interests
  • Website security, preventing abuse, improving Website reliability
  • Basic analytics where applicable and lawful in your jurisdiction (we rely on consent where required)
• Legal obligation
  • Accounting/record-keeping obligations related to donations where applicable

You can withdraw consent at any time (see Section 10).

5) How long we keep data (retention)

We keep data only as long as needed for the purposes described in this Policy:

• Newsletter subscription data: kept until you unsubscribe (and then kept only as needed for suppression/record of consent).
• Contact messages: we retain correspondence for as long as needed to respond to and maintain records of our communications. We periodically review and/or delete or anonymize messages that are no longer necessary.
• Donation records: We retain donation transaction records for as long as necessary for financial, audit, and legal compliance, and we periodically review what we keep to ensure it remains necessary.
• Analytics/advertising data: kept according to the settings and retention controls of the relevant tools (see Section 8).

6) Who we share data with

We do not sell your personal data.

We share personal data only with:

A) Service providers (Processors)

We use trusted third parties to help run the Website and our activities, such as:

• Email/newsletter service provider (to send newsletters)
• Analytics provider: Google Analytics
• Payment processors:
  • PayPal for donations from outside the US
  • CharityStack for donations in the US

These providers process data on our behalf or as independent controllers depending on their role in the transaction.

B) Legal and safety reasons

We may disclose personal data where necessary to comply with applicable law, regulation, legal process, or lawful request, or to protect the rights, property, safety, and security of Thaki, our users, donors, partners, service providers, or others.

7) International transfers

Your data may be processed in countries outside where you live.

• If you are located outside the Netherlands and provide information to us, we may process it in the Netherlands.
• Some providers (e.g., analytics, and payment processors) may process data in other countries, including the United States.

Where required, we rely on appropriate safeguards for international transfers (such as adequacy decisions, Standard Contractual Clauses, or other mechanisms supported by the provider).

8) Cookies, and Google Analytics.

We use cookies and similar technologies for:

A) Strictly necessary cookies

These are required for the Website to function (e.g., security, load balancing, basic site operations).

B) Preference cookies

These remember your choices (if any) to improve your experience.

C) Analytics cookies (Google Analytics)

We use Google Analytics to understand how visitors use the Website (e.g., pages visited, time on site). Where required by law, analytics cookies are set only after you provide consent through our cookie banner/settings.

Managing cookies

You can manage cookie preferences via:

• our cookie banner/settings (where available)
• your browser settings (blocking or deleting cookies)

If you block certain cookies, parts of the Website may not function correctly.

9) Data Security

We use reasonable technical and organizational measures to protect your data. However, no method of transmission or storage is completely secure.

10) Your rights

Depending on your location and applicable law, you may have rights regarding your personal data, including:

• access to your personal data
• correction of inaccurate data
• deletion (erasure)
• restriction of processing
• data portability
• objection to processing (especially where based on legitimate interests)
• withdrawal of consent (where processing is based on consent)

To exercise your rights, email info@thaki.org. We may ask for proof of identity.

Complaints

If you believe your rights are being infringed, you may have the right to lodge a complaint with your local data protection authority.

11) Children’s privacy

The Website is not intended for children under 18 and we do not knowingly collect personal data from children under 18 through the Website. If you believe a child has provided personal data, contact us and we will take steps to delete it.

12) Changes to this Policy

We may update this Policy from time to time. We will post updates on this page with a revised “Last updated” date.

13) Contact

If you have questions or requests related to privacy, contact:
info@thaki.org