Data Protection Policy

Effective date: January 1, 2026 · Last reviewed: July 2026

Purpose

This policy describes the technical and organizational measures La Familia Simón Foundation uses to protect personal information collected through our website, donation processing, and community programs.

Data minimization

We collect only the personal information reasonably necessary to provide services, process donations, and meet legal or grant reporting requirements.

Access controls

Access to personal and case-related information is limited to staff and volunteers who need it to perform their role, and is governed by our internal confidentiality standards described in our Client Rights policy.

Storage & transmission security

Where personal information is stored electronically, we use reasonable safeguards such as access-controlled systems and secure connections for data transmitted through our website and donation platform.

Third-party service providers

We may use trusted third-party providers for services such as payment processing, email communication, and case coordination. These providers are expected to maintain appropriate data protection standards and are authorized to use personal information only to provide the contracted service.

Data breach response

In the event of a data security incident affecting personal information, we will take prompt steps to investigate, contain, and, where required by law, notify affected individuals and relevant authorities.

Retention & disposal

Personal information is retained only as long as necessary for the purposes described in our Record Retention Policy, after which it is securely disposed of.

Related policies

This policy works together with our Privacy Policy and Client Rights page to protect the individuals and communities we serve.