Privacy Policy

Leila's Friends Association is a Swiss association registered in the Swiss Commercial Register under identification number CH-501-6015569-5. For the purposes of data protection law, the Association is the controller of the personal data described in this policy.

You can reach us at any time at leilasfriendsfoundation@gmail.com.

Depending on how you interact with us, we may process the following data:

• Donation data. When you make a donation, we receive your name, your email address, the donation amount, whether the donation is one-time or monthly, and the campaign or project you chose to support. We need this to process and confirm your donation and to keep proper records.
• Payment details. Payments are processed by Stripe. Your card or bank details go directly to Stripe and are not stored on our website. We never see or store your full card number.
• Donation context. We record which page or call-to-action a donation was started from (for example, a specific campaign page). This helps us report transparently on which campaigns received support.
• Website usage data. With your Analytics consent, we use Google Analytics to understand how the website is used: pages visited, approximate region, device and browser type and referring website. This data does not identify you by name. Optional campaign-referral storage also requires Analytics consent; your selected campaign is recorded with a donation regardless of your cookie choice.
• Messages. If you contact us by email, we process your email address and the content of your message to respond.

• To process your donation and send you a confirmation.
• To keep the accounting and donation records required of a Swiss association.
• To report on the support our campaigns receive, in aggregate form and without publishing donors' identities.
• To understand how our website is used, so we can improve it.
• To respond to your questions and requests.
• To comply with our legal obligations.

We do not sell or rent personal data, and we do not use it for automated decision-making or profiling.

All donations are processed by Stripe, our payment provider. When you donate, Stripe collects the payment details and email address needed to complete the transaction and prevent fraud. Stripe acts as an independent controller for this processing; you can read Stripe's privacy policy at stripe.com/privacy.

For monthly donations, Stripe processes the recurring payments on the schedule you selected until you cancel.

This website loads Google Analytics only after you consent to the Analytics category in our Silktide cookie banner. We rely on your consent for this optional analytics processing. Google Analytics uses cookies and similar technologies; the data collected (such as pages visited and approximate location) is used for website statistics. We do not send it names, email addresses or payment identifiers. With consent, campaign interactions and selected donation amounts may be measured without donor identity.

You can refuse or withdraw Analytics consent at any time using Cookie settings in the footer. Browsing and donations do not depend on accepting analytics. You can also use your browser settings or Google's official opt-out. For details on how Google handles this data, see policies.google.com/privacy.

Our use of cookies and similar technologies is described in detail in our Cookie Policy.

We share personal data only with the providers we need to run the Association and this website:

• Stripe — payment processing and payment records.
• Google — aggregate website analytics.
• Hosting and technical service providers — operation of this website.

We may also disclose data where required by law or to assert or defend legal claims. Beyond these cases, we do not pass on personal data to third parties.

We keep donation and accounting records for as long as Swiss law requires us to (accounting records are generally kept for ten years). Website analytics data is kept for the retention period configured in our analytics tool, and email correspondence is kept only as long as needed to handle your request and any follow-up.

You have the right to:

• request information about the personal data we hold about you;
• have incorrect data corrected;
• request deletion of your data, where we are not obliged to keep it;
• object to certain processing, including analytics;
• receive certain data in a portable format;
• withdraw a consent you have given, at any time.

To exercise any of these rights, write to leilasfriendsfoundation@gmail.com. We may ask you to confirm your identity before we respond. If you are not satisfied with our answer, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Some of our providers, such as Stripe and Google, are based outside Switzerland and may process data in other countries, including the United States. Where data is transferred abroad, we rely on the safeguards recognised under Swiss data protection law, such as adequacy decisions or the contractual clauses agreed with the providers.

This website is not directed at children. Donations by minors require the consent of a parent or legal guardian. We do not knowingly collect personal data from children under 16.

We may update this privacy policy from time to time, for example when our services or providers change. The version published on this page, with its effective date, is the version that applies.