Privacy Policy

1. What Information Do We Collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on our services, express interest in our products or services, participate in activities on our sites, or otherwise contact us. The personal information we collect may include:

• Names
• Email addresses
• Usernames and passwords
• Mailing addresses

Sensitive information

We do not process sensitive personal information.

Payment data

We may collect data necessary to process your donation or payment. All payment data is stored by our payment processors — PayPal and Stripe. We do not store your payment card details on our own systems.

All personal information you provide must be true, complete, and accurate. Please notify us of any changes.

2. How Do We Process Your Information?

We process your personal information for the following reasons:

• To facilitate account creation and authentication — so you can create and log into your account.
• To deliver services to you — to provide the services or resources you request.
• To respond to your inquiries — to answer your questions and resolve any issues.
• To send administrative communications — to inform you of changes to our terms, policies, or services.
• To fulfil and manage orders and donations — to process your payments and maintain records.
• To enable user-to-user communications — where our services allow this.
• To protect vital interests — when necessary to prevent harm.

3. What Legal Bases Do We Rely On?

If you are in the EU or UK

The GDPR and UK GDPR require us to explain the legal bases we rely on. We may rely on:

• Consent — where you have given us permission for a specific purpose. You may withdraw consent at any time by contacting us.
• Performance of a contract — where processing is necessary to fulfil our obligations to you.
• Legal obligations — where processing is required for compliance with applicable law.
• Vital interests — where processing is necessary to protect your safety or the safety of a third party.

If you are in the EEA or UK and believe we are unlawfully processing your information, you have the right to complain to your Member State data protection authority or the UK data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

If you are in Canada

We may process your information where you have given specific (express) consent, or where consent can be reasonably inferred (implied consent). You may withdraw consent at any time by contacting us. In certain exceptional cases, applicable law may permit us to process your information without consent — for example, for fraud investigations, legal compliance, or where it is clearly in your vital interest.

4. When and With Whom Do We Share Your Information?

We may need to share your personal information in the following situations:

• Business transfers — in connection with any merger, sale of assets, financing, or acquisition of all or a portion of our organisation.

We have not disclosed, sold, or shared any personal information to third parties for commercial purposes in the preceding twelve months. We will not sell or share personal information belonging to website visitors, users, or donors in the future.

5. How Long Do We Keep Your Information?

We retain personal information only for as long as needed for the purposes set out in this notice — or for as long as you maintain an account with us — unless a longer period is required by law (for example, for tax or accounting purposes).

When we have no ongoing legitimate need to process your information, we will delete or anonymise it, or securely isolate it until deletion is possible.

6. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organisational security measures designed to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. While we will do our best to protect your information, transmission to and from our services is at your own risk. You should only access our services within a secure environment.

7. Do We Collect Information From Minors?

We do not knowingly solicit data from or market to children under 18 years of age. By using our services, you represent that you are at least 18, or that you are the parent or guardian of a minor and consent to that minor's use of our services. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and take reasonable steps to delete the data promptly. If you are aware of any such data, please contact us at johned@cybermissions.org.

8. What Are Your Privacy Rights?

In some regions (EEA, UK, Switzerland, and Canada), you have rights under applicable data protection laws, which may include:

• The right to request access to and obtain a copy of your personal information
• The right to request rectification or erasure
• The right to restrict the processing of your information
• The right to data portability (where applicable)
• The right not to be subject to automated decision-making
• In certain circumstances, the right to object to processing

To exercise any of these rights, please contact us. We will consider and act on your request in accordance with applicable data protection laws.

Withdrawing your consent

If we are relying on your consent to process your information, you may withdraw that consent at any time by contacting us. Please note that withdrawal does not affect the lawfulness of processing that took place before withdrawal.

Opting out of marketing communications

You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. You will be removed from marketing lists, though we may still send you service-related communications necessary for the administration of your account.

Managing your account

To review or update the information in your account, you may log in to your account settings, or contact us directly. Upon a request to close your account, we will deactivate or delete your account and information from our active systems, though we may retain certain information to prevent fraud, comply with legal requirements, or assist with investigations.

Questions about your privacy rights? Email us at johned@cybermissions.org.

9. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your browsing activities tracked. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow in the future, we will update this policy accordingly.

10. Do United States Residents Have Specific Privacy Rights?

Categories of personal information collected

We have collected the following categories of personal information in the past twelve months:

We retain collected personal information for as long as the user has an account with us (Categories A, B, and J).

California Residents — Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request, once per year and free of charge, information about personal information disclosed to third parties for direct marketing purposes. If you are a California resident and wish to make such a request, please contact us using the details in Section 12.

If you are under 18, reside in California, and have a registered account with our services, you have the right to request removal of data you publicly post on our services. To do so, contact us with the email address associated with your account and a statement that you reside in California.

CCPA Privacy Notice

Under the California Consumer Privacy Act (CCPA), California residents have the following rights:

• Right to know — the categories and specific pieces of personal information collected about you.
• Right to delete — to request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to correct — to request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share your personal information.
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, please contact us as described in Section 12. We will respond to verifiable requests within 45 days.

11. Do We Make Updates to This Notice?

We may update this privacy notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. If we make material changes, we may notify you by posting a prominent notice on our website or by contacting you directly. We encourage you to review this notice periodically.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this privacy notice, please contact us:

• Email: johned@cybermissions.org
• Post: Cybermissions / AIBI-International, P.O. Box 40 Rhoadesville, VA 22542, USA
• Online: Contact form

13. How Can You Review, Update, or Delete Your Data?

Depending on the laws of your country, you may have the right to request access to, correction of, or deletion of the personal information we hold about you. To make such a request, please email johned@cybermissions.org or use our Contact page. We will respond in accordance with applicable data protection laws.