Privacy Policy
Your privacy is important to us. This policy explains how The Chahal Foundation collects, uses, and protects your personal information.
Last updated: January 28, 2026
Introduction
The Chahal Foundation ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at chahalfoundation.org or make a donation to our organization.
The Chahal Foundation is a 501(c)(3) nonprofit organization (EIN: 39-5160137) headquartered at 1061 Market St, San Francisco, CA 94103.
Information We Collect
Donation Information
- Name and contact information (email, phone, address)
- Payment details (processed securely by Stripe or PayPal)
- Donation amount, frequency, and designation
- Employer matching information
Form Submissions
- Contact form inquiries
- Volunteer and event registration
- Newsletter subscriptions
- Fundraiser creation details
Analytics & Usage Data
- Pages visited and time spent
- Device type, browser, and operating system
- IP address and approximate location
- Referral source and search terms
How We Use Your Information
We use the information we collect for the following purposes:
Third-Party Services
We use trusted third-party services to help operate our website and process donations. These services may collect data as described below:
Google Analytics 4
Website analytics and traffic analysis
Data collected: Page views, session data, device information, anonymized IP address
Microsoft Clarity
User experience analysis through heatmaps and session recordings
Data collected: Mouse movements, clicks, scrolling behavior (personal data is masked)
Stripe
Secure payment processing for donations
Data collected: Payment card information (we never see your full card number)
PayPal
Alternative payment processing for donations
Data collected: PayPal account information and transaction details
Brevo (Sendinblue)
Email communications and newsletters
Data collected: Email address, name, communication preferences, email engagement
Google reCAPTCHA
Bot prevention and form security
Data collected: Device and browser information for security verification
Cookies
We use cookies and similar technologies to enhance your experience, analyze site traffic, and for marketing purposes. Cookies are small text files stored on your device that help us provide and improve our services.
You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.
View our full Cookie PolicyYour Privacy Rights
European Union (GDPR)
If you are a resident of the European Economic Area, you have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
California (CCPA/CPRA)
California residents have additional rights under the CCPA and CPRA:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information
- Right to delete personal information
- Right to non-discrimination for exercising rights
- Right to correct inaccurate personal information
- Right to limit use of sensitive personal information
Note: The Chahal Foundation does not sell your personal information. We only share data with third-party service providers as necessary to operate our organization and fulfill our mission.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods:
- Donation records: 7 years (as required by IRS regulations)
- Contact form submissions: 3 years or until resolved
- Newsletter subscriptions: Until you unsubscribe
- Analytics data: 26 months (Google Analytics default)
Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmission
- PCI-DSS compliant payment processing through Stripe and PayPal
- Regular security assessments and updates
- Access controls and authentication requirements
- Secure data storage with encryption at rest
- Employee training on data protection
Children's Privacy
Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe we may have collected information from a child under 13, please contact us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.
Contact Us About Privacy
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your data, please contact us.
By Email
privacy@chahalfoundation.orgBy Mail
The Chahal FoundationAttn: Privacy Officer
1061 Market St
San Francisco, CA 94103