Privacy Policy

1. Introduction

Global Life Relief & Charity Foundation (GLRelief) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website glrcf.org or use our services.

By using GLRelief, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password, phone number, shipping/billing address
• Payment Information: Credit/debit card details, billing address, PayPal account (processed securely through encrypted payment processors)
• Profile Information: Profile photo, bio, preferences, interests, wishlist items
• Communication Data: Messages, reviews, ratings, feedback, customer support inquiries
• Identity Verification: Government-issued ID, business registration documents (for vendors), tax information (for donations)
• Donation Information: Donation amounts, frequency, campaign preferences, employer matching info

2.2 Information Collected Automatically

• Device Information: IP address, browser type and version, operating system, device identifiers, mobile network information
• Usage Data: Pages visited, time spent on pages, links clicked, search queries, referring/exit pages
• Location Data: Approximate geographic location based on IP address (precise location only with your consent)
• Transaction Data: Purchase history, bid history, donation records, shopping cart contents
• Cookies & Similar Technologies: Session cookies, persistent cookies, web beacons, pixels (see our Cookie Policy)

2.3 Information from Third Parties

• Social Media: Profile information if you connect via Facebook, Google, etc.
• Payment Processors: Transaction confirmations from Stripe, PayPal
• Analytics Providers: Google Analytics, Mixpanel usage statistics
• Fraud Prevention Services: Risk scores and fraud indicators

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Provide & Improve Services

• Process and fulfill orders, auctions, and donations
• Manage your account and provide customer support
• Send order confirmations, receipts, and shipping updates
• Personalize your experience and recommend relevant products/campaigns
• Improve website functionality, features, and user interface

3.2 Communication

• Send transactional emails (order updates, bid notifications, donation receipts)
• Deliver newsletters and promotional offers (you can opt-out anytime)
• Respond to inquiries and provide customer support
• Send important updates about policy changes or service disruptions

3.3 Security & Fraud Prevention

• Detect, prevent, and investigate fraud, abuse, and illegal activities
• Protect against security breaches and unauthorized access
• Enforce our Terms & Conditions and other policies
• Monitor and analyze usage patterns to identify suspicious behavior

3.4 Analytics & Research

• Analyze user behavior and preferences
• Conduct market research and surveys
• Measure effectiveness of marketing campaigns
• Generate aggregate statistics and insights

3.5 Legal Compliance

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from government authorities
• Maintain tax and financial records
• Protect our legal rights and interests

4. Information Sharing

We may share your information in the following limited circumstances:

4.1 With Your Consent

We share information when you explicitly authorize us to do so.

4.2 Service Providers

We work with trusted third-party companies that help us operate our business:

• Payment Processors: Stripe, PayPal (PCI-DSS compliant)
• Shipping Companies: USPS, UPS, FedEx, DHL
• Cloud Hosting: Amazon Web Services (AWS), Cloudflare
• Email Services: SendGrid, Mailchimp
• Analytics: Google Analytics, Mixpanel
• Customer Support: Zendesk, Intercom

These providers access only the information necessary to perform their services and are contractually obligated to protect your data.

4.3 Sellers & Vendors

When you make a purchase, we share necessary information with the seller (name, shipping address) to fulfill your order.

4.4 Charity Partners

When you donate, we share your donation details with the recipient charity organization. Your personal contact information is only shared if you opt-in.

4.5 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms & Conditions
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Protect the safety of users or the public

4.6 Business Transfers

If GLRelief is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred. We'll notify you before your information is transferred and subject to a different privacy policy.

4.7 Aggregated & Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally for research, marketing, or analytics purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

5.1 Technical Safeguards

• Encryption: SSL/TLS encryption for data transmission (256-bit encryption)
• Secure Servers: Data stored on encrypted, firewalled servers
• Payment Security: PCI-DSS Level 1 compliant payment processing
• Password Protection: Passwords hashed using bcrypt algorithm
• Regular Updates: Software and security patches applied promptly

5.2 Organizational Safeguards

• Access Controls: Limited employee access based on role and need-to-know
• Employee Training: Regular security and privacy training
• Confidentiality Agreements: All staff sign NDAs
• Security Audits: Regular internal and third-party security assessments
• Incident Response: Procedures in place for data breach notification

5.3 Your Responsibility

• Keep your password confidential and secure
• Enable two-factor authentication (highly recommended)
• Log out after using shared devices
• Report suspicious activity immediately
• Keep your contact information up-to-date

6. Your Privacy Rights

You have the following rights regarding your personal information:

6.1 Access & Portability

• Access: Request a copy of all personal data we hold about you
• Data Portability: Receive your data in a machine-readable format (CSV, JSON)
• Timeline: We respond within 30 days of request

6.2 Correction & Update

• Update your account information anytime in your profile settings
• Contact us to correct inaccurate data
• We'll verify your identity before making changes

6.3 Deletion (Right to be Forgotten)

• Request deletion of your account and associated data
• We'll delete data unless legally required to retain it
• Some information may be retained in backups for up to 90 days
• Anonymous transaction records may be retained for legal/tax purposes

6.4 Opt-Out of Marketing

• Unsubscribe from promotional emails using the link in any email
• Adjust email preferences in your account settings
• You'll still receive transactional emails (order confirmations, receipts)

6.5 Object to Processing

• Object to certain types of data processing (e.g., direct marketing)
• Restrict processing in certain circumstances

6.6 Withdraw Consent

• Withdraw consent for optional data processing at any time
• This doesn't affect the lawfulness of processing before withdrawal

How to Exercise Your Rights

7. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information, see our Cookie Policy.

Types of Cookies We Use:

• Essential Cookies: Required for site functionality (login, cart)
• Performance Cookies: Analytics and site improvement
• Functionality Cookies: Remember preferences (language, currency)
• Marketing Cookies: Personalized ads and retargeting

Cookie Management: You can control cookies through:

• Browser settings (block, delete, or limit cookies)
• Our Cookie Preferences Center (click "Cookie Settings" in footer)
• Opt-out tools (Google Analytics opt-out, NAI opt-out)

8. Children's Privacy

GLRelief is not directed to children under 13 years old. We do not knowingly collect personal information from children under 13.

Users aged 13-17 must have parental/guardian consent to create an account.

9. International Data Transfers

GLRelief operates from the United States. Your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate.

By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (EU approved)
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant authorities

10. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this policy:

• Account Data: Until you close your account
• Transaction Records: 7 years (tax and legal compliance)
• Marketing Data: Until you opt-out or 5 years of inactivity
• Analytics Data: Up to 26 months
• Customer Support: 3 years after resolution
• Legal Claims: Duration of applicable statute of limitations

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Know: What personal information we collect, use, and share
• Delete: Request deletion of personal information
• Opt-Out: Opt-out of sale of personal information (we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, contact: [email protected]

12. European Privacy Rights (GDPR)

If you're in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

• Right to access, rectification, erasure, and restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authority

Legal Basis for Processing: Consent, contract performance, legitimate interests, legal obligations

EU Representative: Contact [email protected]

13. Do Not Track

Some browsers have "Do Not Track" (DNT) features. Currently, there is no industry standard for DNT. We honor DNT signals where technically feasible.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

Notice of Changes:

• Material changes will be notified via email and/or prominent notice on our website
• Last updated date shown at the top of this policy
• Continued use after changes constitutes acceptance

15. Contact Us

Thank you for trusting GLRelief with your information.
We're committed to protecting your privacy while making a positive impact in the world.