Privacy Policy

1. Introduction

Thelma Ellis Sixteen Foundation, Inc. (U.S.) and its affiliated charity Sixteen Foundation Limited (Jamaica) ("we," "our," or "us") are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit thelmaellis.org, donate, subscribe, create an account, start a fundraiser, apply to a program, or otherwise interact with us.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the site. This policy works together with our Terms of Use and Cookie Policy.

2. Information We Collect

Information you provide directly

• Contact & forms: name, email address, phone number, and message content when you contact us or submit a form.
• Donations: name, email, billing/postal address, donation amount and frequency, and (where applicable) employer/matching-gift details. Card and bank details are entered directly with our payment processor — we do not store full card numbers on our servers.
• Newsletter & updates: the email address (and any preferences) you provide when subscribing.
• Accounts & portal: login credentials and the giving history associated with a donor-portal account.
• Fundraisers & programs: information you submit to start a fundraiser, volunteer, or apply for a scholarship or school support.
• Stories & media: content you choose to share, such as a story, testimonial, photo, or comment.
• SMS opt-in: the mobile number you provide if you opt in to text messages.

Information collected automatically

• Cookies & consent: a functional preference (stored in your browser) remembers your cookie-consent choice. See our Cookie Policy.
• Usage & device data: standard server logs (IP address, browser/device type, pages visited, timestamps) and, after you consent, analytics data, used for security, fraud prevention, and improving the site.

3. How We Use Your Information

We use the information we collect to:

• Process donations, send receipts/acknowledgments, and administer recurring gifts
• Respond to your inquiries and provide the services or programs you request
• Send newsletters and organizational updates if you opt in (you can unsubscribe anytime)
• Administer accounts, fundraisers, applications, and events
• Protect the security and integrity of our site and prevent fraud or abuse
• Improve our website, programs, and communications
• Comply with our legal, accounting, and reporting obligations

We do not sell, trade, or rent your personal information.

4. Legal Bases for Processing

Where the laws of your jurisdiction (for example, the EU/UK GDPR) require a legal basis, we rely on one or more of the following: your consent (e.g., newsletters, SMS, non-essential cookies); performance of a request or contract (e.g., processing a donation or account); our legitimate interests in operating, securing, and improving our mission and site; and compliance with a legal obligation. You may withdraw consent at any time.

5. How We Share Your Information

We share personal information only as needed to operate, and only with providers bound to protect it. These include:

• Stripe & PayPal — payment processing for donations.
• SMTP2GO — delivery of our transactional and newsletter emails.
• Twilio / Sinch — delivery of SMS notifications to those who have opted in.
• Google Analytics & reCAPTCHA — privacy-respecting analytics (loaded only after consent) and spam/bot protection on our forms.
• Web3Forms — processing of contact-form submissions.
• Lu.ma — our embedded events calendar.
• Akaunting — bookkeeping/accounting for donation records.

We may also disclose information when required by law or to protect the rights, safety, or property of the Foundation, our community, or others; and in connection with a merger, reorganization, or transfer of assets, in which case we will require the recipient to honor this policy. Each provider's use of your data is also governed by its own privacy policy.

SMS / text-message consent

If you opt in to receive text messages from us, we use your mobile number only to send the operational notices described in our Terms of Use (meeting reminders, document-signing requests, and similar). Mobile opt-in information and consent are never shared with, or sold to, any third parties or affiliates for marketing or promotional purposes. You can opt out at any time by replying STOP. Message and data rates may apply; message frequency varies.

6. Cookies & Analytics

We use a minimal set of cookies and similar technologies. Non-essential analytics load only after you accept cookies, and you can change your choice at any time. For full details and how to opt out, see our Cookie Policy.

7. Data Retention

We keep personal information only for as long as necessary to fulfill the purposes in this policy — for example, donation and accounting records are kept as required by tax and charity law, while contact-form messages are kept for a shorter period. When no longer needed, information is deleted or anonymized. You may request deletion at any time (subject to records we must retain by law).

8. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you, and request a copy (portability)
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict our processing, and withdraw consent
• Unsubscribe from emails (via the link in any email) or texts (reply STOP)
• Lodge a complaint with your local data-protection authority

To exercise any of these rights, contact us at corporate [at] thelmaellis.org. We will not discriminate against you for exercising your rights, and we may need to verify your identity before responding.

9. International Data Transfers

We operate in the United States and Jamaica, and our service providers may process data in the United States and other countries. Where required, we take steps to ensure your information receives an appropriate level of protection when transferred across borders.

10. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Donations and accounts are intended for adults (18+). If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

11. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encrypted connections (HTTPS) and limiting access to those who need it. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our site may link to or embed third-party websites and services. We are not responsible for their content or privacy practices; we encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the "Last updated" date at the top of this page. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests about this Privacy Policy or your personal information, please contact us:

• Email: corporate [at] thelmaellis.org
• Phone (USA): (645) 239-1600
• Phone (Jamaica): (876) 347-1600

This page is provided for general information and does not constitute legal advice. Please contact the Foundation with any questions.