# Privacy Policy

Last updated: 1 March 2025 · Effective: 1 March 2025

AerixGive is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we keep it safe. We never sell your data.

Who we are: AerixGive is a registered humanitarian charity focused on relief for communities affected by the ongoing crisis in Iran and the Middle East. Our registered address is AerixGive, 12 Relief Street, London, EC1A 1BB. For data protection enquiries, contact us at privacy@aerixgive.org.

## 1. Information We Collect

### Donation & Payment Information

When you make a donation, we collect your name, email address, billing address, and payment details. All payment transactions are processed securely through Stripe. AerixGive does not store your full card number, CVV, or bank account details on our servers.

### Contact & Communication Data

If you contact us via our Contact form or subscribe to our newsletter, we collect your name, email address, phone number (if provided), and the content of your message. This information is used solely to respond to your enquiry or send you updates you have opted into.

### Website Usage Data

We may collect non-personal usage data including browser type, IP address (anonymised), pages visited, and time spent on our site. This data is used in aggregate form to improve our website and user experience. We do not sell this data to third parties.

## 2. How We Use Your Information

### Processing Donations

We use your personal and payment information to process your donation, issue receipts, and provide confirmation of your contribution. Your donation record is retained for accounting and legal compliance purposes.

### Communicating With You

With your consent, we may send you updates on our humanitarian work in Iran and the Middle East, impact reports, campaign appeals, and organisational news. You may unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.

### Legal and Regulatory Compliance

We are required by charity law and financial regulations to maintain records of donations. We may disclose personal data to regulatory authorities (including HMRC and the Charity Commission) where required by law.

## 3. Data Security

### Encryption and Secure Processing

All data transmitted through our website is encrypted using industry-standard TLS (Transport Layer Security) technology. Payment data is processed by Stripe, a PCI DSS Level 1 certified payment processor. We conduct regular security reviews of our systems and access controls.

### Internal Access Controls

Access to personal data is restricted to authorised AerixGive staff and volunteers who require it to carry out their duties. All staff with data access receive training on data protection obligations and our internal data handling policies.

### Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and will inform affected individuals without undue delay, in accordance with applicable data protection law.

## 4. Sharing Your Data

### Third-Party Service Providers

We use a limited number of trusted third-party services to operate our platform, including Stripe (payment processing) and email service providers. These providers are contractually bound to process data only on our instructions and in accordance with applicable data protection law.

### No Selling of Data

AerixGive will never sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data is used exclusively to support our humanitarian mission and your relationship with us.

### International Transfers

Some of our service providers may be located outside the UK or EEA. Where this is the case, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with applicable law.

## 5. Cookies

### Essential Cookies

We use strictly necessary cookies to enable core website functionality, including secure checkout and session management. These cookies cannot be disabled and do not track personal information.

### Analytics Cookies

With your consent, we use anonymised analytics cookies to understand how visitors interact with our website. This helps us improve the site experience and reach more people in need of support. You may decline analytics cookies at any time via our cookie banner.

## 6. Your Rights

### Access, Correction and Deletion

You have the right to request access to the personal data we hold about you, correct inaccuracies, and in certain circumstances request deletion of your data. To exercise any of these rights, please contact us at privacy@aerixgive.org.

### Withdraw Consent

Where we process your data on the basis of consent (e.g. marketing emails), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

### Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

## Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. When we make significant changes, we will notify you by email (if we hold your address) and update the effective date at the top of this page. Continued use of our website after changes constitutes acceptance of the updated policy.

Questions about this policy? Contact us