Privacy

Privacy Policy

Last updated June 13, 2023

Introduction

This Privacy Policy (“Policy”) and this Site’s Terms of Service (together the “Terms”) govern all use of missiontochildren.org and that Site’s services (together the “Site” or “Services”). The owners and contributors to the Site will be referred to as “we,” “us,” or “our” in this Policy. By using the Site or its Services, and/or by clicking anywhere on this Site to agree to the Terms and this Policy, you are deemed to be a “user” for purposes of this Policy. You and every other user (“you” or “User” as applicable) are subject to this Policy. You and each user also agree to the Terms by using the Services. In these Terms, the word “Site” includes the site referenced above, its owner(s), contributors, suppliers, licensors, and other related parties.

Who we are

Our website address is: https://www.missiontochildren.org.

This Site offers you the opportunity to learn about, and prayerfully partner with the charitable work of:

Mission to Children, a 501c3 religious charity incorporated in California of the United States of America; or

Our office of operations is located in Escondido, CA. We provide this privacy statement explaining our online information practices, so that you can decide whether and how to interact with this Site and its Services.

This online Privacy Policy applies only to information collected through our Site and not to information collected offline.

Please also review our Terms of Service that govern the use and the users of this Site.

By using our Site, you consent to this Privacy Policy.

Changes to this Policy will be posted to this Site

This policy is subject to change and was last updated on October 6, 2021.

Protection of user information

We work hard to protect the security of your information while using our Site. This Site uses Secure Sockets Layer (SSL) software, which encrypts information you choose to share with us. We use third-party services to protect this Site, including, but not limited to, a website firewall.

What we don’t do with your data

We do not share, sell, rent, trade, or lease your personally identifiable information.

What rights you have over your data

Data deletion, data portability

If you have a user account with this Site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Cookies

This Site uses cookies.

Cookies are small pieces of code that the Site or a service provider will put on your computer if your Web browser allows it. The Site uses cookies to recognize and keep certain information. On the Site, that information may be used to recognize your computer and browser from current or past visits to the Site or related sites. We may use this cookie-captured information to improve our service to you, to protect you by improving site security and banning malicious attackers (including geo-exclusion), to aggregate information about visitors to the Site and their behavior, to understand and save user preferences, or to keep track of advertising. We may contract with third-party service providers to assist us in better understanding our Site visitors. You are not required to share this data in order to use our Site. In most Internet browsers, you can change your settings so that you will be warned each time a cookie is being sent, or so that cookies will be turned off (learn). With cookies blocked, some functions of the Site may not operate properly.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Third-party service providers

Only Mission to Children employees and third-party service providers such as contractors are granted necessary access to your data for the sole purpose of carrying out their contractual obligations with us. These professional service providers each adhere to strict privacy and data protection practices to ensure your information is safe.

You may view each serve provider’s commitment to protect your data and privacy here:

Email sign-up forms: https://mailchimp.com/legal/privacy/
Donation forms for United States donors: https://raisedonors.com/privacy.html
Contact forms hosted on this Site: Gravity Forms

This Site does not handle, transmit, or process your credit card information. If you so choose, your payment information is processed through embedded and outbound links provided by the contracted service providers previously mentioned.

If you donate online, or instruct us to add you to our direct mail list, or consent to be added to our direct mail list, your personally identifiable information including name, address, phone number, and how you contacted us will be securely stored in our contracted donorCRM: https://www.aegispremier.com/. We do not store credit card numbers in our donor CRM.

If required by law, we may release your information in order to comply with such orders.

Source: WordPress

Our website address is: https://www.missiontochildren.org.

Usernames, Passwords, and Profiles

If prompted, Users must provide a valid email address to the Site, at which the User can receive messages. User must also update the Site if that email address changes. The Site reserves the right to terminate any User account if a valid email is requested but is not provided by the User.

If the Site prompts or allows a User to create a username or profile, Users agree not to pick a username or provide any profile information that would impersonate someone or that is likely to cause confusion with any other person or entity. The Site reserves the right to cancel a User account or change a username or profile data at any time. Similarly, if the Site prompts or allows a User to create an avatar or upload a picture, User agrees not to use any image that impersonates some other person or entity, is disrespectful or inappropriate, or that is otherwise likely to cause confusion.

You are responsible for protecting your username and password for the Site, and you agree not to disclose it to any third party. We recommend that you create a password that contains: At least eight characters, includes a combination of lower-case and upper-case letters, and contains at least one symbol and one number. You are responsible for you changing your password regularly. You are responsible for all activity on your account, whether or not you authorized it. You agree to inform us of unauthorized use of your account by contacting us immediately. You acknowledge that if you wish to protect your interactions the Site, it is your responsibility to use a secure encrypted connection, virtual private network, or other appropriate measures.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Gravity forms

What personal data we collect and why we collect it.

This Site hosts various forms to collect, process, and transmit visitor communications intended for our staff. Such data may include: First and last name, e-mail address, phone number, country of residence, role in relation to our charity, purpose for inquiry, and consent.

We do not retain the IP addresses of contact form submissions.

reCAPTCHA

Our Site forms require the use of Google’s reCAPTCHA service before they can be submitted. If you consent to use Google’s reCAPTCHA service, a cookie is created that stores your consent. This cookie deletes itself after thirty days. Use of the reCAPTCHA service is subject to the Google Privacy Policy and Terms of Use.

Visiting the login page sets a temporary cookie that aids compatibility with some alternate login methods. This cookie contains no personal data and expires after 1 hour.

Who we share your data with

No one outside our charity. All data submitted through hosted forms send only to the authorized staff members of Mission to Children.

How long we retain your data

All submitted requests through hosted forms on this Site are permanently erased after 90 days.

For further details about the third-part provider of our hosted forms, please read Gravity Forms privacy policy.

Source: iThemes Security

What personal data we collect and why we collect it.

Cookies

Some forms on this site require the use of Google’s reCAPTCHA service before they can be submitted. If you consent to use Google’s reCAPTCHA service, a cookie is created that stores your consent. This cookie deletes itself after thirty days. Use of the reCAPTCHA service is subject to the Google Privacy Policy and Terms of Use.

Visiting the login page sets a temporary cookie that aids compatibility with some alternate login methods. This cookie contains no personal data and expires after 1 hour.

Security Logs

The IP address of visitors, user ID of logged in users, and username of login attempts are conditionally logged to check for malicious activity and to protect the site from specific kinds of attacks. Examples of conditions when logging occurs include login attempts, log out requests, requests for suspicious URLs, changes to site content, and password updates. This information is retained for 7 days.

Who we share your data with

A QR code image is generated for users that set up two-factor authentication for this site. This image is generated using Google Chart’s API. As part of generating this image, your username is sent to the API. For details about Google Chart’s privacy policy, please see Security and Privacy in Charts.

When using the Remember Device for Two-Factor, a cookie (itsec_remember_2fa) will be set with a secure token that expires in 30 days.

How long we retain your data

Security logs are retained for 7 days.

Where we send your data

This site is part of a network of sites that protect against distributed brute force attacks. To enable this protection, the IP address of visitors attempting to log into the site is shared with a service provided by ithemes.com. For privacy policy details, please see the iThemes Privacy Policy.

Source: Sucuri

This site is scanned for potential malware and vulnerabilities by Sucuri’s SiteCheck. We do not send personal information to Sucuri; however, Sucuri could find personal information posted publicly (such as in comments) during their scan. For more details, please see Sucuri’s privacy policy.

Source: Akismet

We collect information about visitors who comment on Sites that use our Akismet anti-spam service. The information we collect depends on how the User sets up Akismet for the Site, but typically includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as their name, username, email address, and the comment itself).

Source: Google Analytics

This Site uses Google Analytics to collect information about the use of our Site to help us better serve our partners and improve our charitable programs. We track all browsing through this Site such as pages views, entry pages, exit pages, and links clicked. Contact forms on this Site may request personally identifying information such as: First and last name, relationship to our charity (if any), country, e-mail, and any information you choose to send us. This Site also collects demographics data listing Age, Gender, and Interest data. The following applies to this Site when viewed on any device with wireless access: If location services are activated on your device, our Site collects information about the location of your device such as country, state or province, and city. Our site also collects specific device information such as model, browser, internet service, and operating system used to access this Site. We do not combine this non-personally identifiable information with any personally identifiable information.

Currently, each session on this Site times out after 30 minute and each Google campaign session times out after 12 months.

Additional steps this Site takes to protect your privacy using Google Analytics:

We anonymize your IP address.
We do not track User IDs.

Google’s ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. You can prevent Google Analytics from recognizing you on return visits to this Site by disabling cookies on your browser. Google Analytics retains our data associated with cookies, user identifiers, and advertising identifiers for 14 months.

Google remarketing

This Site enables data collection for Google Display and Search Remarketing. If you are signed into Google, this includes your data if have chosen to enable Google to associate your web and app browsing history with your Google account, and to use such information from their Google account to personalize ads. Our use of the Google Analytics product temporarily joins your device identifiers and/or cookies to our Google Analytics data in order to better communicate with our audience. We use such non-personally identifiable data in connection with our Google Non-Profit account in order to provide a continuity of experience for Site visitors. Third-party vendors, including Google, may show our ads to you across the internet if you have chosen to share your non-personal data with this Site. Third-party vendors, including Google, use cookies and/or device identifiers to serve ads based on user’s past visits to our Site. Information about how you can opt out of Google’s use of cookies or device identifiers by visiting Google’s Ads Settings. Alternatively, you can point your visitors to opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative opt-out page or control the use of device identifiers by using their device’s settings.

Source: Google AdWords

If we use lead forms in connection with Google AdWords Non-profit account

We will request and use information from users (1) only as reasonably necessary for the limited purpose described in our lead forms and (2) per our privacy policy and any additional disclosures that we include in our lead forms.
We will not sell the information provided by users or otherwise abuse that information (for example, by spamming users with repeated phone calls or emails).
We will provide users with clear and comprehensive information about data collection and processing, including any sharing of users’ information with third parties, and obtain consent for that collection and processing where legally required. We will not license or otherwise disclose the information We receive from users to a data broker.
We will comply with all applicable laws and regulations when contacting users or otherwise using the information they provide, including any marketing or spam regulations that may apply.

Google AdWords for Non-profits: Webhooks with lead forms

If we use lead form webhooks with Google AdWords Non-profit account

We will comply with all webhook instructions provided by Google, including properly configuring an endpoint to handle POST requests. Google is not responsible for errors resulting from our misconfiguration of the webhook.
The webhook is provided in beta form. Google may discontinue, deprecate, or change the webhook at any time without notice, and Google does not guarantee availability, delivery of data, or technical support.
Our use of the webhook is governed by the Google API Terms of Service, available at https://developers.google.com/terms/ together with these terms.

Source: Mailchimp

We use Mailchimp as our e-mail marketing platform to add and contact subscribers to our list. All messages are intended to advance our mission and vision. Such messages may include news, updates from the field, prayer requests, fundraising request, or invitations to submit your own prayer requests or questions to our staff. The data you input on this Site through Mailchimp-provided forms will be transferred to Mailchimp for processing. Learn more about Mailchimp’s privacy practices here and Data Processing Addendum here.

Opt-out of e-mail subscription

Ministry and marketing e-mails sent from Mission to Children will include an opt-out link at the bottom of each message. We may choose to send you a final message in order to confirm your decision and learn from your experience so that we can improve our work.

Disputes

We are based in California and you are contracting to use our Site. This Policy and all matters arising from your use of the Site are governed by and will be construed according to the laws of California, without regard to any choice of laws rules of any jurisdiction. The federal courts and state courts that have geographical jurisdiction over disputes arising at our office location in California will be the only permissible venues for any and all disputes arising out of or in connection with this Policy or the Site and Service.

Arbitration

Notwithstanding anything that may be contrary within the “Disputes” provisions above, all matters, and all claims within a multi-claim matter, that are arbitrable, including all claims for monetary damages, shall be decided by a single arbitrator to be selected by us, who shall hold hearings in or near California, under the Rules of Procedure for Christian Conciliation created by Peacemaker ministries.

Contact

If you have any questions or suggestions about our Site’s Privacy Policy, please send them through our contact page.