Privacy Policy
Your privacy matters. This policy explains how Multifaith Alliance for Syrian Refugees (MFA) collects, uses, stores, and protects your personal information in accordance with international privacy standards.
Multifaith Alliance for Syrian Refugees ("MFA," "we," "us," or "our") is a 501(c)(3) nonprofit organization (EIN: 81-0799662) committed to protecting the privacy and security of all individuals who interact with our website, services, and programs. This Privacy Policy applies to all information collected through our website (multifaithalliance.org), email communications, donation platforms, and any related services.
This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Children's Online Privacy Protection Act (COPPA), and other applicable privacy laws.
Information We Collect
A. Information You Provide Directly
- Name, email address, phone number, and mailing address when you register, donate, or contact us
- Payment and billing information (credit card, bank details) processed securely through Stripe and PayPal — we do not store card numbers on our servers
- Donation history, fund designations, and correspondence records
- Newsletter subscription preferences and communication opt-ins
- Information submitted through forms (volunteer, partnership, or inquiry forms)
B. Information Collected Automatically
- IP address, browser type, operating system, and device information
- Pages visited, time spent on pages, and referring URLs
- Cookies and similar tracking technologies (see Section 5)
Legal Basis for Processing
Under the GDPR and applicable laws, we process your personal data based on the following legal grounds:
When you subscribe to newsletters or opt into communications
To process donations and provide tax receipts
To comply with tax, financial reporting, and regulatory requirements
To improve our services, prevent fraud, and communicate our mission
How We Use Your Information
- Process and acknowledge donations, and issue tax-deductible receipts (IRS requirements)
- Send you updates about our humanitarian programs and their impact
- Respond to your inquiries, support requests, and partnership proposals
- Improve our website functionality, user experience, and content relevance
- Comply with legal and regulatory obligations (tax reporting, audit requirements)
- Prevent fraud, protect our systems, and ensure security
- Analyze aggregate, anonymized data to measure program effectiveness
Data Protection & Security
We implement industry-standard security measures to protect your personal information:
Cookies & Tracking Technologies
We use the following types of cookies:
Essential
Required for site functionality, language preference, login sessions, and theme selection. Cannot be disabled.
Analytics
Google Analytics to understand how visitors use our site. Data is anonymized and not sold to third parties.
Social Media
Used only when you interact with embedded social sharing features. We do not use advertising or retargeting cookies.
You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect site functionality.
Third-Party Services
We share data only with trusted service providers who are contractually bound to protect your information:
Stripe
Secure payment processing (PCI DSS Level 1)
PayPal
Alternative payment gateway
Google Analytics
Website traffic analysis (anonymized)
Google Fonts
Typography rendering (no tracking)
Cloudflare
CDN and DDoS protection
SMTP Provider
Transactional email delivery
We never sell, rent, or trade your personal information to third parties for marketing purposes.
Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Donation records: 7 years (IRS requirements for nonprofit tax compliance)
- Account information: Until you request deletion or close your account
- Newsletter subscriptions: Until you unsubscribe
- Analytics data: 26 months (Google Analytics default retention)
- Contact form submissions: 2 years from the date of submission
Your Rights
Depending on your jurisdiction (GDPR, CCPA, and other applicable laws), you have the following rights regarding your personal data:
To exercise any of these rights, contact us at privacy@multifaithalliance.org. We will respond within 30 days.
International Data Transfers
MFA is headquartered in the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. We ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required under the GDPR, to protect your data when it is transferred internationally.
Children's Privacy
Our website and services are not directed to children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without proper parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us immediately.
Donor Privacy
MFA is committed to respecting the privacy of our donors. We will not sell, share, or trade donor names, personal information, or donation history with any third party, nor send donor mailings on behalf of other organizations. Donor information will only be used internally for processing donations, issuing tax receipts, and communicating with donors about our programs — unless a donor gives explicit written permission otherwise. Donors may choose to remain anonymous in any public acknowledgment.
California Privacy Rights (CCPA)
If you are a California resident, the CCPA provides you with additional rights:
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information — we do not sell personal information
- The right to non-discrimination for exercising your privacy rights
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where required by law, provide additional notice (such as via email or a prominent notice on our website). Your continued use of our website after such changes constitutes your acceptance of the updated policy.
Questions About This Policy?
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer:
Multifaith Alliance for Syrian Refugees • EIN: 81-0799662