Privacy Policy

Stichting Everyday Refugees (Everyday Refugees Foundation) is responsible for the personal information described in this policy. We handle that information with care and in accordance with applicable data-protection law, including the GDPR.

1. Information we collect

Depending on how you interact with us, we may collect:

• identity and contact details, such as your name, email address, telephone number and postal address;
• donation information, including amount, date, transaction reference and limited billing details (full payment-card details are handled by the payment provider);
• messages, enquiries, partnership requests and other correspondence you send us;
• communication preferences, including newsletter or campaign choices;
• technical information such as IP address, browser, device, referring page and website interactions, subject to your cookie choices.

2. Why we use your information

We use personal information to process and administer donations, issue confirmations, respond to enquiries, manage partnerships and volunteers, protect our website, maintain financial and legal records, and—where permitted—share news about our work.

Our legal bases may include your consent, performance of an agreement, compliance with a legal obligation, and our legitimate interests in operating and protecting the Foundation and communicating its charitable mission. You may withdraw consent at any time without affecting earlier processing.

3. Who receives your information

We share information only where necessary with trusted service providers such as website hosting, email, cloud-storage, professional advisers and payment processors. We may also disclose information where required by law or to protect people, the Foundation or its legal rights. We do not sell personal information.

Some providers may process data outside the European Economic Area. Where that happens, we use an applicable legal transfer mechanism and appropriate safeguards.

4. How long we keep information

We retain personal information only as long as needed for the purpose for which it was collected and to meet legal, accounting, safeguarding and reporting obligations. Financial and donation records may need to be retained for the period required by Dutch law. Enquiries and marketing preferences are reviewed and deleted or anonymised when no longer needed.

5. Your rights

Subject to applicable law, you may ask to access, correct, erase, restrict or receive a copy of your personal information, or object to certain processing. You may also withdraw consent and lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). We may need to verify your identity before completing a request.

6. Security

We use reasonable technical and organisational measures designed to protect information against loss, misuse, unauthorised access, alteration and disclosure. No online service can guarantee absolute security.

7. Children’s information

Our public website is not intended to collect personal information directly from children without appropriate permission. Where our charitable work involves children, we apply separate safeguarding and consent procedures.

8. Cookies and third-party content

Our Cookies Policy explains how cookies, local storage, payment tools and embedded services may operate. Third-party websites and social platforms have their own privacy practices, which we do not control.

9. Updates

We may update this policy when our practices, services or legal obligations change. Material changes will be identified on this page by a revised update date.