Privacy policy

Last updated May 2026

This policy is published in good faith and reflects how we actually operate. It has not yet been reviewed by Canadian privacy counsel and may be updated when that review is complete.

Heart of the World Ukraine("we", "us") is a Canadian non-profit corporation. We collect personal information only when you choose to give it to us — by contacting us, donating, or subscribing to a recurring gift — and we use it only for the purposes described below. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. What we collect

When you submit the contact form:

Name and email (required); phone and organization (optional).
The inquiry type and the message body you write.

When you donate:

Name, email, amount, currency, and any optional message you include.
Payment details (card number, billing postal code, etc.) are entered into Stripe directly and are never seen, transmitted, or stored by our servers. Stripe returns a tokenized payment reference that we keep with the donation record.
For recurring donations, Stripe maintains the customer and subscription objects on its side; we keep a mirrored record so we can email you about your gift.

Automatically, on every form submission:

A one-way hash of your IP addressand your browser's user-agent string. We use these only for rate-limiting and abuse detection; we do not log raw IPs.
A Cloudflare Turnstile token, which Cloudflare uses to verify you are not a bot. Turnstile is privacy-preserving and does not track you across sites.

2. How we use it

To respond to your message or process and acknowledge your donation.
To send you a receipt, a thank-you email, and (if you set up recurring) confirmations of subsequent gifts.
To prevent fraud, spam, and abuse of our forms.
To meet our Canadian tax, accounting, and corporate record-keeping obligations.

We do not sell your data, rent it, share it with advertisers, or use it for marketing profiling. We do not run third-party advertising or analytics trackers on this site.

3. Where it lives (sub-processors)

We use a small number of trusted vendors to actually run the site. Each is bound by its own privacy and security commitments:

Supabase (Postgres database, Canada region) — stores contact submissions, donation records, and subscription mirrors.
Stripe (payments) — processes card and bank-debit transactions; stores customer and subscription data per its own policy.
Resend (email delivery) — sends donation receipts, contact-form notifications, and other transactional email.
Cloudflare Turnstile (bot detection) — verifies form submissions are made by humans.
Vercel (hosting) — serves the website and runs our backend functions.

4. International transfers

Some of our sub-processors (Stripe, Resend, Cloudflare, Vercel) operate or store data in the United States and other jurisdictions. By using this site you consent to your information being processed outside Canada under the privacy laws of those jurisdictions.

5. How long we keep it

Contact-form submissions: up to 24 months, then deleted.
Donation and subscription records: kept as long as required by Canadian tax and corporate law (typically a minimum of 6 years).
Stripe webhook event logs: kept for operational reconciliation and then pruned.

6. Your rights

Under PIPEDA you can request access to, correction of, or deletion of your personal information. You can also withdraw consent for further use at any time (subject to legal obligations we may have to retain a record of a completed donation). Email us at admin@heartoftheworldukraine.com and we will respond within 30 days.

7. Children

This site is not directed to children under 13, and we do not knowingly collect personal information from them.

8. Cookies

We do not use tracking cookies. Stripe and Cloudflare may set strictly necessary cookies on the donation and contact pages to enable secure payment and bot detection. Without these the site cannot function.

9. Changes to this policy

If we make material changes we will update this page and refresh the "Last updated" date above.

10. Tax status

Heart of the World Ukraine is a Canadian non-profit corporation, not a registered charity. Donations are not tax-deductible and we cannot issue official tax receipts.

11. Contact

Questions or requests: admin@heartoftheworldukraine.com. Mailing address: 3018 Dalehurst Dr., Mississauga ON, L5N 6M8, Canada.