Effective Date: May 12, 2026  |  Last Updated: May 12, 2026

1. Introduction

TIKVA ("TIKVA," "we," "our," or "us") is an organization supporting women and children in crisis in Colombia. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website at tikva.ngo (the "Site"), make a donation, subscribe to updates, contact us, apply to participate in a trip or volunteer opportunity, or otherwise interact with the organization.

TIKVA serves a global community of supporters, partners, and beneficiaries. Because our donors and visitors may reside in many jurisdictions, this policy is written with reference to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"), the European Union's General Data Protection Regulation ("GDPR"), the United Kingdom's UK GDPR, Colombia's Ley 1581 de 2012 (Statutory Data Protection Law), and similar privacy laws.

2. California Notice at Collection

The following summary describes the categories of personal information we may collect, the purposes, whether each category is sold or shared, and how long it is retained. Full details appear in the sections that follow.

Identifiers (name, email, phone, mailing address, IP, device IDs)

  • Purpose: respond to inquiries, send organizational updates, process donations.
  • Sold or shared? Not sold. Shared only with service providers as needed to operate the organization (see Section 7).
  • Retention: see Retention section.

Donor and supporter records (donation amounts, payment details, giving history)

  • Purpose: process donations, deliver tax acknowledgments, communicate with supporters.
  • Sold or shared? Not sold. Shared with our payment processor and giving platform to complete transactions.
  • Retention: 7 years for IRS or equivalent tax reporting purposes.

Volunteer and trip participant information

  • Purpose: coordinate trip logistics, manage volunteer applications, deliver organizational care.
  • Sold or shared? Not sold. Shared with trip coordinators, hosts, and partners as needed.
  • Retention: per the term of the program, plus a reasonable period after.

Internet or network activity (browsing, page views, cookie data)

  • Purpose: site analytics through Google Analytics 4.
  • Sold or shared? Shared with Google Analytics if analytics cookies are accepted.
  • Retention: up to 26 months for analytics.

3. Categories of Personal Information We Collect

Categories of personal information defined by California law that we may collect:

  • Identifiers: name, email address, phone number, mailing address, IP address, online identifiers.
  • Donor records: information you provide when making a donation, including payment information processed by our payment partners.
  • Volunteer and trip participant records: contact details, emergency contacts, dietary needs, medical or accessibility information you choose to share for the safe operation of trips and programs.
  • Internet or network activity: browsing history on our Site, pages viewed, referring URLs, interaction with our content, and information collected through cookies.
  • Geolocation data: approximate location derived from IP address.
  • Sensitive information: we work with women and children in crisis. We treat all information about beneficiaries with the highest level of discretion. Information about beneficiaries is not published on this Site without consent and is handled separately from donor and volunteer data.

4. Sensitive Personal Information

We do not intentionally request Sensitive Personal Information through the Site. However, you may choose to provide limited health, medical, dietary, or accessibility information when applying for a trip or volunteering. We use that information only to fulfill your request and to provide reasonable care during the program.

TIKVA also collects sensitive information about the women and children we serve in Colombia. That information is processed under separate program-level agreements with strict confidentiality, is never published on this Site without explicit consent from the individual or guardian, and is not part of the data flows described in this policy.

5. Sources of Information

  • Directly from you when you donate, subscribe to updates, apply for a trip, contact us, or otherwise interact with us.
  • Automatically from your device and browser when you visit the Site, through cookies, analytics, and server logs.
  • From our service providers, including donation processors, email service providers, and analytics vendors.
  • From parents or guardians when minors are registered for organizational activities.

6. How We Use Your Information

We use personal information to:

  • Process donations and issue receipts or tax acknowledgments as required.
  • Communicate with you about TIKVA, updates from the field, prayer requests, and ways to support the work.
  • Coordinate trips, volunteer programs, and partnership engagements.
  • Respond to inquiries and provide organizational care.
  • Improve our Site, content, and donor experience.
  • Detect and prevent fraud and protect Site security.
  • Comply with legal, tax, and reporting obligations in the jurisdictions where we operate.

7. Service Providers and Partners

We share personal information with trusted service providers and partners who help us operate. The list below is representative and not exhaustive. We may add, change, or replace providers from time to time, provided the new provider serves an equivalent purpose under similar confidentiality and security obligations. Examples of categories and current providers include:

  • Website hosting and infrastructure providers.
  • Donation and payment processors that handle gifts on our behalf.
  • Email and communication platforms, including Mailchimp, used to send organizational updates and newsletters.
  • Cookie consent management providers, including Osano, or any similar consent platform we may use.
  • Analytics platforms, including Google Analytics 4, or any similar analytics platform we may use.
  • Trip and program coordination partners on the ground in Colombia and elsewhere.
  • Parent organization, denominational body, or fiscal sponsor where applicable, for accounting, oversight, and program coordination.

8. Third Parties and Advertising

We currently use Google Analytics 4 to understand how visitors use our Site. This service may collect anonymized usage data through cookies.

We do not sell personal information for monetary consideration. We do not currently engage in cross-context behavioral advertising or build remarketing audiences from our website visitors. If we engage in such activity in the future, we will:

  • Update this Privacy Policy to reflect that activity.
  • Gate any such tracking through our cookie consent manager so visitors can opt in or out.
  • Provide a clearly labeled "Do Not Sell or Share My Personal Information" opt-out link in our website footer.
  • Honor Global Privacy Control (GPC) signals as automatic opt-out requests.

We may share information with professional advisors (accountants, auditors, attorneys), government or licensing authorities when required by law, by subpoena or court order, or to protect our legal rights. We may also share information with successor entities in connection with a merger, dissolution, or organizational restructure.

9. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies for the following purposes:

  • Strictly necessary cookies required for the Site to function, including consent preference storage.
  • Functional cookies that remember your preferences and improve performance.
  • Analytics cookies for Google Analytics 4 to help us understand Site usage.

We use the Osano Cookie Consent Manager to manage your cookie preferences. When you first visit our Site, you will see a consent banner. You can change your preferences at any time by clicking the Osano cookie icon on any page. We honor browser-level Global Privacy Control (GPC) signals as automatic opt-out requests where applicable.

10. Retention

We retain personal information only as long as needed for the purposes described in this policy, to comply with legal and tax obligations, and to maintain accurate organizational records. Typical retention periods:

  • Donor and gift records: retained as required for tax reporting purposes, generally 7 years.
  • Volunteer and trip records: retained for the term of the program, plus a reasonable period after.
  • Newsletter and communication contacts: until you unsubscribe, plus a suppression record to honor your opt-out.
  • Site analytics: up to 26 months (Google Analytics default).
  • Server logs and security data: up to 12 months.

11. International Data Transfers

TIKVA operates internationally, with program activities in Colombia and a global donor base. When you interact with our Site or the organization, your personal information may be transferred to and processed in countries other than your country of residence, including the United States, Colombia, and the jurisdictions where our service providers operate. The privacy laws of these countries may differ from the privacy laws of your country.

For transfers of personal information from the European Economic Area, United Kingdom, or Switzerland to other countries, we rely on lawful transfer mechanisms such as Standard Contractual Clauses, adequacy decisions, or other appropriate safeguards. By interacting with the organization, you acknowledge that your information may be transferred internationally for the purposes described in this policy.

12. Your Privacy Rights

Depending on where you reside, you may have the following rights regarding your personal information.

California residents (CCPA/CPRA)

  • Right to Know: request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we have shared the information.
  • Right to Delete: request that we delete personal information we have collected from you, subject to legal exceptions.
  • Right to Correct: request that we correct inaccurate personal information we hold about you.
  • Right to Opt Out of Sale or Sharing: direct us not to sell or share your personal information for cross-context behavioral advertising. As noted above, we do not currently engage in such activity.
  • Right to Limit Use of Sensitive Personal Information: this right is preserved if we begin processing Sensitive PI in a way that requires this option.
  • Right to Data Portability: receive a copy of your personal information in a portable format.
  • Right to Non-Discrimination: we will not discriminate against you for exercising these rights.

European Economic Area, United Kingdom, and Switzerland residents (GDPR / UK GDPR)

  • Right of Access: request a copy of your personal information.
  • Right to Rectification: request correction of inaccurate or incomplete data.
  • Right to Erasure: request deletion of your personal information, subject to legal and tax recordkeeping obligations.
  • Right to Restrict Processing: request that we limit how we process your data.
  • Right to Data Portability: receive your data in a structured, commonly used, machine-readable format.
  • Right to Object: object to processing based on legitimate interests, including direct marketing.
  • Right to Withdraw Consent: where processing is based on consent, you may withdraw that consent at any time.
  • Right to Lodge a Complaint: file a complaint with your national data protection authority.

Colombia residents (Ley 1581 de 2012)

  • Know, update, and rectify your personal data with TIKVA.
  • Request proof of the authorization granted to TIKVA to process your data.
  • Be informed of the use TIKVA has given your personal data.
  • Submit complaints to the Superintendence of Industry and Commerce (SIC) for violations of the law.
  • Revoke the authorization and request the deletion of your data when constitutional and legal principles, rights, and guarantees are not respected.
  • Access your personal data that has been processed at no cost.

Lawful basis for processing (GDPR): we process personal information based on your consent (for marketing communications and non-essential cookies), the performance of a contract (donations, trip participation), our legitimate interests (operating the organization, responding to inquiries, communicating with supporters), and legal obligations (tax and accounting recordkeeping).

13. How to Submit a Request

To exercise any of your rights, contact us using one of the methods below:

We will verify your identity before responding to a request involving specific personal information. We aim to respond within 30 days for GDPR/UK GDPR/Colombian requests and within 45 days for CCPA requests. If we need more time, we will notify you and may extend as permitted by law.

Authorized agents (CCPA): you may designate an authorized agent to submit a request on your behalf. We will require the agent to provide written, signed authorization from you and verify your identity directly.

14. Children's Privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site. Where minors are involved in organizational activities or programs, registration is completed by a parent or guardian, who provides the child's name, age, and any other information needed for the safe operation of the activity.

We follow the Children's Online Privacy Protection Act (COPPA) and California's protections for minors. We do not knowingly sell or share the personal information of consumers under 16. For visitors from the European Economic Area, we do not knowingly process the personal data of children under 16 (or the age of digital consent in their country, as applicable) without parental consent.

TIKVA serves women and children in crisis in Colombia. Personal information about the children we serve is handled under separate program-level confidentiality protections and is not part of the data flows described in this policy.

15. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information, with heightened protections for information about the women and children we serve. Our service providers maintain their own security measures. No method of transmission or storage is fully secure, so we cannot guarantee absolute security. Notify us immediately if you suspect a security issue with your account or information.

16. Links to Third-Party Sites

Our Site may link to third-party websites and services, including but not limited to donation platforms, social media, partner organization sites, and similar third parties we may add or change over time. The privacy practices of any linked third party are governed by their own privacy policies, not ours.

17. Our Mission

TIKVA exists to support women and children in crisis in Colombia and to mobilize a global community of supporters who make the work possible. Information you share with us as part of organizational participation is used to support that mission. We will not knowingly use personal information in ways inconsistent with our calling or your trust.

18. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised Last Updated date. Material changes will be communicated by a notice on our Site or by email where appropriate.

19. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

TIKVA
[STREET ADDRESS]
[CITY], [STATE/ZIP], [COUNTRY]
Email: rebekahslick@gmail.com

Do Not Sell or Share My Personal Information

California residents may opt out of the sale or sharing of personal information for cross-context behavioral advertising. As stated in Section 8, we do not currently sell or share personal information for these purposes. If we engage in such activity in the future, an opt-out mechanism will be made available through the cookie consent manager on our Site and through this policy. We also honor Global Privacy Control signals as opt-out requests for the browser or device sending the signal.