United Hatzalah Privacy Policy

Effective Date: May 23, 2023

Friends of United Hatzalah, Inc. (together with its subsidiaries, affiliates, and/or related companies, “Friends of United Hatzalah,” “UH,” “our”, “we” or “us”) respects your privacy and we are committed to protecting it through our compliance with this privacy policy (“Privacy Policy”).  

Friends of United Hatzalah is a 501(c)3 registered in the State of New York (EIN 11-3533002) and is affiliated with United Hatzalah of Israel (Charity No. 580465979), United Hatzalah Canada (Charity ID 83825 5180 RR0001), British Friends of United Hatzalah (Charity No. 1101329), and United Hatzalah France (Association No. W751225617).

This Privacy Policy describes how UH collects, stores, uses, and protects your information, including any information you may provide when you make a donation to us by mail, using our online portal, sign up to receive our newsletter, or take part in interactive elements, when you use our website at https://israelrescue.org/ (our “Site”), or any other websites, pages, features, or content owned and operated by us (collectively, including the Site and Apps, our “Services”).

Please read our Terms of Use and this Privacy Policy carefully before accessing and using our Services. By using our Services, you consent to the collection and use of your personal information in accordance with this Privacy Policy and our Terms of Use and our various privacy practices as described in this Privacy Policy. If you do not feel comfortable and/or disagree with any part of this Privacy Policy, you should not use or access our Site or Apps. Please Note: You are not obligated by law to provide us with any personal information.

By providing us with your data, you warrant to us that you are over 13 years of age. 

We may update this Privacy Policy from time to time, without prior notice, as we update or expand our Services and changes may apply to any personal information we already hold about you, as well as any new information collected after the Privacy Policy is modified. If we make material changes, we will notify you by posting the updated Privacy Policy on this page with a revised effective date at the top of this Privacy Policy. We encourage you to look for updates and changes to this Privacy Policy by checking this site when you access our Services. If you continue to access or use our Services after receiving the notice of changes, you acknowledge your acceptance of the updated Privacy Policy. If you have any questions about this Privacy Policy, please reach out to us anytime at the contact information included within the “Contact Us” section below.

Contents

1. Information we collect about you and how we collect it
2. How we use your information
3. Sharing and disclosure of personal information
4. Retention 
5. Communication preferences
6. Access, correction, and deletion of your personal information
7. Your California privacy rights
8. Data security
9. Special notice to individuals in the European economic area, the United Kingdom, and Switzerland
10. Integration of third-party services and public forums
11. Children’s privacy
12. Contact us 

1. Information we Collect About you and How we Collect it

UH collects personal information when you interact with our Services. Personal information is any information that identifies or makes an individual identifiable. The definition of personal information depends on the applicable law based on your physical location. Only the definition that applies to your physical location will apply to you under this Privacy Policy.

The types of personal information that we may collect about you include, but is not limited to: information you provide to us, information collected automatically about your use of our Site and Apps, information from third parties, and information received from other sources to help us supplement our records, improve the personalization of our Services to you, and to detect fraud.

1. Information You Voluntarily Provide to Us: The personal information we collect on or through our Services may include:
   • Form Submissions: information that you provide by filling in our Contact Us form to request information or assistance, such as first and last name, email address, postal address, telephone number and/or information you enter into the free-form box; 
   • Newsletter Sign-ups: information relating to our eNewsletter blasts, such as first and last name, and email address;
   • Technical Support: information you provide when you report a problem with our Services or otherwise communicate with us by email, our Site, by telephone, in writing or through other means;
   • Making Donations: information that you provide by filling in our Donor form pages, such as first and last name, email address, postal address, telephone number, birthday, gender, marital status, partner name, education, profession, company and/or information you enter into the message box;
   • Donor Services: records and copies of your correspondence (including email addresses), if you contact us by telephone or in writing, including for donor support;
   • Volunteer Participation: information related to your participation in our volunteer programs, such as first and last name, email address, postal address, telephone number and/or resume;
   • Location: information pertaining to your device’s location and Apps usage;
   • Surveys and Feedback: information relating to your participation in a survey that we may ask you to complete for research purposes; 
   • Payment Information: payment card, transaction or financial account information, when you make a donation; 
   • Device Permissions: information relating to your use of features of our Services that may ask you to grant us access to the camera, media files, or microphone on your computer or mobile device.
2. Information from Third Parties: When you interact with our Services or accounts on a social media platform, we may collect the personal information that you or such third-party platform make available to us on that page or account, including your social media account ID and/or user name associated with that social media service, your profile picture, email address, friends list or information about the people and groups you are connected to and how you interact with them, and any information you have made public in connection with that social media service.
   
   The information we obtain depends on your privacy settings on the applicable social media service; we will comply with the privacy policies of such third-party social media platform and we will only collect and store such personal information that we are permitted to collect by those social media platforms. When you access our Services through social media channels or when you connect our Services to social media services, you are authorizing us to collect, store, and use such information and content in accordance with this Privacy Policy.
3. Information Collected Automatically: As you navigate through and interact with our Site or Apps, we may use automatic data collection technologies to collect certain information about your mobile devices and/or other equipment, browsing actions and patterns, including:
   • Information About Your Use of our Services: when you browse our Site or Apps, our systems automatically collect information such as your web request, Internet Protocol (“IP”) address, browser type, browser language, domain names, referring and exit pages and URLs, platform type, pages viewed and the order of these page views, the amount of time spent on particular pages, and the date and time of your request. 
   • Device Information: if you access our Services through a mobile device (e.g., a smart phone or tablet), we may be able to identify the general location of your mobile device, your mobile device’s brand, model, operating system, resolution, screen size, system version, mobile network information, and your mobile device’s advertising ID.
   • Performance Data: information about your preferences to make your use of our Services more productive, via the use of Cookies or similar tracking technologies. For more information, please see Section 2, “Cookies and Other Tracking Technology.”
4. Information Collected from Other Sources: We receive information about you from other sources to help us correct or supplement our records, to improve the quality or personalization of our service to you, and to prevent or detect fraud.
   • Some information we collect is publicly available. For example, we may collect information you submit to a blog, a chat room, or a social network like Facebook, Twitter, Pinterest or Google+. We may also collect information about you from other companies and organizations. By gathering additional information about you, we can correct inaccurate information, enhance the security of your transactions, and give you product or customer recommendations and special offers that are more likely to interest you.

2. How we use your information

UH will only use your personal information as described in this Privacy Policy or as disclosed to you prior to such processing taking place. The purposes for which we may use your personal information include:

1. To Provide You with Service-Related Communications: contacting you regarding the administration of any features or functions of the Services you have registered to use, and notifying you about changes to our Services, our policies, terms or any products or services we offer or provide though our Services; 
2. To Provide Donor/Volunteer Support or to Respond to You: providing you with notices about your donor or volunteer account, including renewal notices, and responding to your questions or other requests;
3. To Send You Donor and Promotional Emails: contacting you with newsletters, donor marketing or promotional materials and other information that may be of interest to you based on our Services that you already use or the offerings that you have already purchased or inquired about, unless you have opted not to receive such information; 
4. For Internal Use and Services Improvement: accumulating and reporting aggregate, statistical information in connection with the Services and user activity, including determining which features and services users like best to help us operate, enhance and improve our Services;
5. To Enforce Compliance with Our Agreements or Policies: keeping you secure and safe while using our Services, which requires us to process your personal information in accordance with this Privacy Policy to combat spam, malware, malicious activities, fraud, or security risks, as part of our ongoing maintenance and enforcement of our security measures;
6. To Maintain Legal and Regulatory Compliance: processing personal information to pay our taxes, fulfill our business obligations, ensure compliance with employment and recruitment laws, or as necessary to manage risk under applicable law. 
7. For Customization: Saving your donor or volunteer account or other personal information (so you do not have to re-enter it each time you visit or use our Services); tracking your return visits to and use of our Services; tailoring your experience on our Services; and/or otherwise customizing what you see when you visit and use our Services;
8. With Your Consent: For any other purpose disclosed to you prior to you providing us your personal information or which is reasonably necessary to provide our Services or other related products and/or services requested, with your permission or upon your direction;

3. Sharing and Disclosure of Personal Information

We may share or disclose your personal information in the following circumstances:

1. Within Our Corporate Organization. We may share your personal information with our subsidiaries and affiliates, such as United Hatzalah of Israel, United Hatzalah of Canada, British Friends of United Hatzalah, and United Hatzalah France, in order to provide you with our Services and take actions based on your requests, as well as for the purpose of management and analysis. For example, we may share your information with our subsidiaries and affiliated organizations to record and recognize donations, and expand and promote our services.
2. Service Providers. We may employ other companies and individuals to facilitate our Services (our “Service Providers”), provide services on our behalf, perform service-related business activities, or assist us in analyzing how our Services are used. These Service Providers provide us support services such as credit card processing, website hosting, email and postal delivery, location mapping, analytics and marketing services. Our Service Providers have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Our Service Providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
3. Corporate Transactions. We may disclose personal information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by us about users of our Services is among the assets transferred.  You agree to and do hereby consent to our assignment or transfer of rights to your personal information. 
4. As Required by Law. We may disclose your information if we believe that the disclosure is required by law, if we believe that the disclosure is necessary to enforce our agreements or policies, in response to valid requests by public authorities (e.g., a court or a government agency), or if we believe that the disclosure will help us protect the rights, property, or safety of UH or our customers.
5. Co-Branded Services and Features. Portions of our Services may be offered as part of co-branded services and features. We will share your personal information with our co-branded partners based on your voluntary use of or participation in a co-branded service or feature. The co-branded partners will be identified on the co-branded feature or service, along with an applicable co-branded partner’s privacy policy. Use of your personal information by a co-branded partner will be subject to a co-branded partner’s privacy policy. If you wish to opt-out of a co-branded partner’s future use of your Personal information, you will need to contact the co-branded partner directly.
6. Consent. We may disclose your personal information for any purpose with your consent.

4. Retention

UH will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data or the information you provided to us to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. We will retain your marketing contact information until you unsubscribe from our marketing communications. We will also retain Site and Apps usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Services, or we are legally obligated to retain this data for longer periods.

5. Communications Preferences

In order to provide service to you, we may send you communications related to your transactions, security, or the administration of this website. From time to time, we may also send you other messages or updates about UH, our Site, and our other activities. If you do not wish to receive non-transaction or security-related communications from us, you may opt-out by clicking the “unsubscribe” link in the communication or by contacting us as specified in the “Contact Us” section, below.

You may also update information about your donor or volunteer account with us. We will update and correct your donor profile if you wish to make changes.

Please note that “opt-out” and “unsubscribe” requests may not take effect immediately and may take a reasonable amount of time to receive, process and apply, during which time your information shall remain subject to the prior privacy settings. Additionally, you should be aware that any information provided to third parties prior to your election to opt-out or unsubscribe will not be retrieved or rescinded, unless required by applicable law.  

Similarly, you may opt in to receive text messages, telephone calls and mailings.

6. Access, Correction, and Deletion of Your Personal Information

You have the right to access, correct and delete your personal information that you shared with us on our Services or through other written or oral means, subject to certain limitations.  We are committed to ensuring that your personal information is kept accurate and up to date. However, it is up to you to update it with any changes. 

You may also notify us via the information in the “Contact Us” section below to request access to, or to correct any personal information that you have provided to us. We may not accommodate a request to delete or change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect, such as for maintaining a record of donors.

If you no longer wish to have your personal information be processed, you may request to delete your donor or volunteer account, subject to certain limitations, by contacting us as described below. Once you submit your request, we will send an email to the email address linked to your donor or volunteer account requesting that you confirm your deletion request. Once you confirm your request, this process cannot be cancelled, undone, withdrawn, or reversed. When your account is deleted, all associated personal information is deleted.

7. Your California Privacy Rights

This section applies only to California residents. 

California Civil Code §1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact us at the address provided below in the “Contact Us” section.

UH is a not-for-profit accrediting organization and, as such, does not fall within the scope of the definition of “business” set forth in the California Consumer Privacy Act of 2018, Cal. Civ. Code §1798.100 et. seq. (“CCPA”), and therefore is not subject to that law. 

Although the CCPA does not apply to UH, the below section voluntarily organizes the information found elsewhere in this Privacy Policy in a manner intended to be useful for California residents.

For California residents only, below is a summary of the “Personal Information” categories as identified and defined by the CCPA (see California Civil Code section 1798.140(o)) that we collect, the reason we collect this Personal Information, where we obtain the Personal Information, and the third parties with whom we may share your Personal Information. 

As described elsewhere in this Privacy Policy, we generally collect the following categories of Personal Information about you when you use our Services:

• identifiers such as a name, address, unique personal identifier, email, phone number, your device’s IP address, software, and identification numbers associated with your devices; 
• protected classifications, such as education-related information; 
• commercial information such as records of products or services purchased, obtained, or considered by you; 
• Internet or other electronic information regarding your browsing history, search history, the webpage visited before you came to our Site, length of visit and number of page views, click-stream data, locale preferences, your mobile carrier, date and time stamps associated with transactions, and system configuration information;
• your geolocation, to the extent you have configured your device to permit us to collect such information;
• professional or employment-related information; and 
• inferences about your preferences, characteristics, behavior and attitudes.

We collect your Personal Information for the business purposes described in Section 3, above. The CCPA defines a “business purpose” as the use of Personal Information for the business’s operational purposes, or other notified purposes, provided the use of Personal Information is reasonably necessary and proportionate to achieve the operational purpose for which the Personal Information was collected or another operational purpose that is compatible with the context in which the Personal Information was collected. 

The categories of third parties with whom we may share your Personal Information are listed in Section 4, above.

Privacy Rights

If you are a California resident, then under the CCPA you have rights in relation to your Personal Information; however, your rights are subject to certain exceptions. For instance, businesses subject to the CCPA—which UH is not—cannot disclose specific pieces of Personal Information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of the Personal Information, your account, or the security of a business’s network systems. Although UH is not subject to the CCPA, we note that California residents generally benefit from the following rights:

• Right Against Discrimination – California residents have the right not to be discriminated against for exercising any of the rights described in this section. 
• Right to Know – California residents have the right to request a copy of the specific Personal Information a business has collected about a California consumer during the 12 months prior to the request.
• Right to Delete – California residents have the right to request that a business delete any Personal Information collected or maintained about them, subject to certain exceptions.
• Right to Opt-Out of Selling – California residents have the right to opt-out of having their Personal Information sold. UH does not sell your Personal Information and is not subject to the CCPA.

8. Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. All personal information you provide to us is stored on our secure servers behind firewalls. Any payment transactions will be encrypted using SSL or other encryption technology, or will use our third-party payment processors, who will use appropriate security procedures.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on our Services.

9. Special Notice to Individuals in the European economic area, the United Kingdom, and Switzerland

This section only applies to individuals that access or use our Services while located in the EEA, United Kingdom and/or Switzerland (collectively, the “Designated Countries”). We may ask you to identify which country you are located in when you use some of our Services or we may rely on your IP address to identify which country you are located in. 

When we rely on your IP address, we cannot apply the terms of this section to any individual that masks or otherwise hides their location information from us so as not to appear located in the Designated Countries. If any terms in this section conflict with other terms contained in this Policy, the terms in this section shall apply to users in the Designated Countries.

1. Consent to International Transfers of Personal Information.  As needed for our business operations, we may store, process and transmit the personal information of individuals residing in Designated Countries to the United States or other jurisdictions that may have data protection laws that are less protective than the laws of the country in which you reside. If you do not consent to your information being transferred to the United States or outside of the country or jurisdiction where you are located, you should not use our Services.
   
   When we transfer your personal information to the United States or elsewhere, we do so subject to appropriate safeguards as permitted under the applicable data protection laws.
2. Our Relationship to You. UH is a data controller with regard to any personal information collected from individuals accessing or using our Services. A “data controller” is an entity that determines the purposes for which and the manner in which any personal information is processed.
3. Marketing. We will only contact individuals located in the Designated Countries by electronic means (including email or telephone) based on our legitimate interests, as permitted by applicable law, or the individual’s consent. When we rely on legitimate interests, we will only send you information about our offerings or Services that are similar to those which were the subject of a previous donation or sale to you. If you do not want us to use your personal information in this way or to disclose your personal information to third parties for marketing purposes, please click an unsubscribe link in your emails or contact us at [email protected]. You can object to direct marketing at any time and free of charge.
4. Legal Bases for Processing Your Personal Information. Below is a list of the purposes described in our Privacy Policy with the corresponding legal bases for processing.
   

   Purposes of Processing	Legal Basis for Processing
   Section 3(a) To Provide You Our Services Section 3(b) To Provide You with Service-Related Communications Section 3(c) To Provide Donor/Volunteer Support or Respond to You Section 3(e) For Internal Use and Services Improvement Section 3(f) To Enforce Compliance with Our Agreements or Policies Section 4(a) [Disclosure] Within Our Corporate Organization Section 4(b) [Disclosure to] Our Service Providers	Based on our contract with you or to take steps at your request prior to entering into a contract.
   Section 3(d) Send You Donor and Promotional Emails Section 4(b) [Disclosure to] Our Service Providers	Based on your consent.
   Section 3(e) For Internal Use and Services Improvement Section 3(f) To Enforce Compliance with Our Agreements or Policies Section 3(g) To Maintain Legal and Regulatory Compliance Section 4(d) Disclosure for Law Enforcement	Based on our legal obligations.
   Section 4(d) Disclosure for Law Enforcement	To protect your vital interests.
   Section 3(b) To Provide You with Service-Related Communications Section 3(c) To Provide Donor/Volunteer Support or Respond to You Section 3(e) For Internal Use and Services Improvement Section 3(h) For Customization Section 4(a) [Disclosure] Within Our Corporate Organization Section 4(b) [Disclosure to] Our Service Providers  Section 4(c) [Disclosure] Relating to Corporate Transactions	Based on our legitimate interests. When we process your personal data for our legitimate business interests we always ensure that we consider and balance any potential impact on you and your rights.

5. Your Individual Rights. We provide you with the rights described below when you use our Services. We may limit your individual rights requests in the following ways: (a) where denial of access is required or authorized by law; (b) when granting access would have a negative impact on others’ privacy; (c) to protect our rights and properties; and (d) where the request is frivolous or burdensome.

If you would like to exercise your rights under applicable law, please contact us at [email protected]. When we fulfill your individual rights requests for correction (or rectification), erasure or restriction of processing, we will notify third parties also handling the relevant personal information unless this proves impossible or involves disproportionate effort. In certain circumstances, you have the following data protection rights:

• The Right to Access, Update or Delete the Information We Have on You: Whenever possible, you can access, update or request deletion of your personal information directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
• The Right of Rectification: You have the right to have your information rectified if that information is inaccurate or incomplete.
• The Right to Object: You have the right to object to our processing of your personal information.
• The Right of Restriction: You have the right to request that we restrict the processing of your personal information.
• The Right to Data Portability: You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
• The Right to Withdraw Consent: You also have the right to withdraw your consent at any time where UH relied on your consent to process your personal information.
• Automated Individual Decision-Making, Including Profiling: While you do have the right not to be subject to a decision based solely on automated processing of your personal information, including profiling, under applicable law, UH does not subject your personal information to such processing activities.

Please note that we may ask you to verify your identity before responding to such requests.

If you believe that we have infringed or violated your rights under this Privacy Policy, please contact us as described in the “Contact Us” section below so that we can work with you to resolve your concerns. You also have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority in the EEA.

10. Integration of Third-Party Services and Public Forums

Our Services may be linked to, rely on and be integrated with websites, applications, interfaces, services and platforms operated by other companies, including third-party services. The Services may also feature advertisements from these companies. We are not responsible for the privacy practices of such websites, applications, interfaces, services and platforms operated by third parties that are linked to, rely on and/or integrated with our Services or for the privacy practices of third-party advertising companies. Once you leave our Services via a link, access a third-party service or click on an advertisement, you should check the applicable privacy policies to determine, among other things, how related companies process personal information they may collect about you. This Privacy Policy applies solely to information collected by UH.

Our Services may include a community environment or forum for individuals to discuss topics of their choosing.  Unless a commenter or poster is identified as an official UH moderator or has an officially verified UH account, UH has no responsibility for the content, advice, transmissions, or other communications made within such a forum.

11. Children’s Privacy

Our Services are not directed toward children under the age of 13, and we do not knowingly collect any personal information from children under the age of 13. If a child under 13 provided our Services with personal information, we ask that a parent or guardian contact us as described below so that we may promptly delete the child’s information from our record.

13. Contact Us

We welcome your questions, comments, and concerns about privacy. You can contact us anytime via our Site located at https://israelrescue.org/blog/contact/, or as follows: [email protected]