PRIVACY POLICY

This Privacy Notice for Goa Outreach (a working name of Joy Home for Children; UK Registered Charity Number: 1131247) ("Charity," "we," "us," and "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://goaoutreach.org or any website of ours that links to this Privacy Notice.
• Engage with us in other related ways, including any marketing, donations, or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We act as the Data Controller responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please visit: https://goaoutreach.org/Charity-Contact.

SUMMARY OF KEY POINTS

• What personal information do we process? We process personal information depending on how you interact with us (such as via contact forms or donation choices).
• Do we process any sensitive personal information? We do not process sensitive personal information.
• Do we collect any information from third parties? We do not collect personal identifiers from third parties.
• How do we process your information? We process your information to provide, improve, and administer our Services, process charitable donations, communicate with you, ensure security, and comply with the law.
• In what situations and with which parties do we share personal information? We share data only with specific, trusted services like our payment processors and Google analytics/marketing platforms.
• How do we keep your information safe? We have organizational and technical processes in place, though no internet transmission is 100% secure.
• What are your rights? Depending on your location (UK, EEA, Canada), you have explicit rights to access, correct, restrict, or delete your data.

WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us, participate in activities on our website, or contact us directly. This includes names, email addresses, and communication preferences.

Payment Data: We do not directly collect, view, or store your financial payment details. All donation data is securely handled and processed directly by our third-party payment gateways: PayPal, Total Giving, and Go Fund Me. Please refer to their respective platforms for their specific privacy terms.

Information automatically collected

Some technical information—such as your Internet Protocol (IP) address, browser characteristics, and device operating system—is collected automatically when you visit our Services to ensure site security and run internal traffic analytics. We also collect information using cookies and tracking technologies as described below.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

HOW DO WE PROCESS YOUR INFORMATION?

We process your information to provide, improve, and administer our website Services, communicate with you regarding updates or support queries, block fraudulent activities, measure the efficacy of our charitable grant outreach, and comply with our legal and financial reporting obligations as a registered charity.

WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

We only process your personal information when we have a valid legal reason to do so under applicable global laws.

If you are located in the UK or EU/EEA:

Under the UK GDPR and EU GDPR, we act as the "Data Controller" and rely on the following distinct legal bases:

• Consent: Where you give us explicit permission for a specific track (such as non-essential cookie optimization or newsletter sign-ups). You can withdraw this consent at any time.
• Legitimate Interests: To effectively manage our relationship with our supporters, optimize our charity outreach campaigns funded by our Google Ad Grant, and run our day-to-day operations safely.
• Legal Obligations: Where data retention is strictly required by statutory authorities (such as UK Gift Aid declarations or financial auditing).

If you are located in Canada:

We may process your information if you have given us specific permission (express consent) or in situations where your permission can be inferred (implied consent). Exceptionally, we may process information without consent for investigations, fraud detection, or legal compliance.

WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We do not sell, rent, lease, or trade your data with third parties for commercial gain. We share your information only with necessary service providers contractually bound to protect your data, explicitly:

• Invoice, Donation and Billing: PayPal, Total Giving, and Go Fund Me (strictly for processing transactional data).
• Map Integration: Google Maps Platform APIs (to display local geographic coordinates on our contact pages).
• Marketing & Analytics Optimization: Google Ads and Google Analytics APIs to monitor our Google Ad Grant performance.

DO WE USE COOKIES AND GOOGLE TRACKING TECHNOLOGIES?

Yes, we use cookies, tracking pixels, and web beacons to optimize user experience and measure our outreach efficacy.

Google Ad Grants, Ads, and Analytics Disclosures:

• No Personalized Advertising: In strict compliance with Google Ad Grants policies, we do not run behavioral remarketing or personalized advertising campaigns. Google Ads are utilized solely for context-based search outreach.
• Third-Party Cookie Usage: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website.
• Google Consent Mode (v2 Compliance): In complete compliance with the UK/EU Data Privacy Directives and Google’s EU User Consent Policy, our website utilizes Google Consent Mode. Advertising tracking, personalization, and conversion cookies (ad_storage, ad_user_data, ad_personalization, and analytics_storage) are strictly blocked by default. They will only activate if you provide explicit, affirmative consent via our website's cookie consent banner.
• Google Analytics Opt-Out: We use Google Analytics to track and analyze website traffic performance. To explicitly opt out of Google Analytics tracking across all websites, you can download the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.
• Google Ads Opt-Out: You can opt out of Google's non-personalized ad measurement tracking at any time by visiting the Google Ads Settings page at https://adssettings.google.com. You can also opt out of third-party cookie usage via the Network Advertising Initiative opt-out page at https://optout.networkadvertising.org.

IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our operational core relies on infrastructure based in both India and the United Kingdom. For residents in the EEA or UK, any data flowing across international borders to our international operations or global service providers is strictly protected utilizing the European Commission and UK ICO-approved Standard Contractual Clauses (SCCs) to ensure an equivalent level of data protection.

HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal data only as long as necessary to fulfill the operational goals outlined in this document, typically holding standard contact identifiers for up to one year following your last interaction, unless an extended retention period is explicitly mandated or permitted by financial, tax, or charity laws (such as Gift Aid tracking).

HOW DO WE KEEP YOUR INFORMATION SAFE?

We utilize a mixture of technical and administrative organizational safeguards (including SSL encryption) to protect your personal data. However, please remember that no structural safeguard can guarantee absolute 100% digital transmission security over the public web.

DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly market to or collect data from children under 18 years of age through our digital web tracking tools. If we learn that personal data from minors has been collected via forms without verifiable parental consent, we will deactivate the entry and take swift steps to permanently wipe it from our systems.

WHAT ARE YOUR PRIVACY RIGHTS?

In regions like the UK and EEA, you possess explicit rights under the GDPR allowing you control over your personal data. This includes:

• The right to access and receive copies of your data.
• The right to request rectification (correction) of inaccurate data.
• The right to total erasure ("right to be forgotten").
• The right to restrict or object to our processing of your data.
• The right to data portability.

You can execute these rights directly by contacting us by submitting a request through our portal at https://goaoutreach.org/Charity-Contact. If you believe we are unlawfully processing your data, you also have the right to complain to your local data protection authority (such as the Information Commissioner's Office (ICO) in the UK).

CONTROLS FOR DO-NOT-TRACK FEATURES

Most modern web browsers contain a Do-Not-Track ("DNT") toggle signal. Because there is currently no standardized uniform engineering baseline for DNT recognition, our system does not explicitly alter its performance based on browser DNT signals. However, we strictly honor explicit cookie consent selections and Global Privacy Control (GPC) choices made on our cookie banner.

DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

While our operations are focused in the UK and India, visitors from US states (like California, Colorado, or Virginia) maintain rights regarding data transparency. We do not "sell" or "share" personal data for commercial monetary profit or cross-context behavioral advertising. You can disable tracking cookie deployments at any time via our cookie banner tools.

DO WE MAKE UPDATES TO THIS NOTICE?

Yes, we will modify this notice to match changing legislation and operational practices. The updated timeline will always be reflected via the "Last updated" date at the very top of this document.

HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions, concerns, or wish to invoke your data privacy rights regarding this notice, you may message us via our contact form, https://goaoutreach.org/Charity-Contact, or contact our head office by post at: