Privacy Policy

Global Newah Heritage (“we,” “our,” or “us”) is a 501(c)(3) nonprofit organization committed to preserving the cultural heritage of the Newari people. We respect your privacy and are committed to handling your personal information responsibly. This policy explains what we collect, how we use it, and your rights.

1. Information We Collect

Information you provide directly

When you interact with our website, we may collect:

• Donation information: name, email, billing address, phone, amount, frequency, and any message you include.
• Event RSVPs: name, email, phone, guest count, dietary needs, accessibility requests, and notes you submit when registering.
• Contact form submissions: name, email, phone, subject, and message content.
• Newsletter signups: your email address.
• Member account information: if you sign in with Google, we receive your name, email address, profile picture, and a Google account identifier.

Information collected automatically

• IP address, browser type, device type, and operating system
• Pages visited, time on site, and referring URLs
• Cookies and similar technologies (see Section 6)

Payment information

We do not store credit card details on our servers. All payment processing is handled by Stripe, Inc. When you donate or RSVP for a paid event, your card information is sent directly to Stripe and we only receive a confirmation, the amount, and a non-sensitive reference identifier.

2. How We Use Your Information

We use the information we collect to:

• Process donations and issue tax-deductible receipts
• Manage event registrations and send confirmation emails
• Respond to contact form inquiries and volunteer requests
• Provide member account features (profile, donation history, RSVPs)
• Send program updates, event announcements, and newsletters (only if you opt in)
• Improve our website and programs based on usage analytics
• Comply with legal obligations including tax reporting
• Protect against fraud, abuse, and security threats

3. How We Share Information

We do not sell, rent, or trade your personal information. We share information only in these specific situations:

Service providers

We use trusted third-party services that process your data on our behalf:

• Stripe — payment processing (privacy policy)
• Resend — transactional email delivery (privacy policy)
• Supabase — database hosting in the United States (privacy policy)
• Vercel — website hosting and content delivery (privacy policy)
• Google — authentication when you sign in with Google (privacy policy)
• Cloudinary — image hosting and optimization (privacy policy)

Legal obligations

We may disclose information if required by law, court order, subpoena, or to comply with applicable tax reporting (IRS Form 990 disclosures, for example, are public but do not include individual donor names unless required).

With your consent

We may share information in other circumstances with your express permission, such as featuring a donor story in our newsletter only after you agree.

4. Data Retention

• Donation records: retained for at least 7 years to comply with IRS recordkeeping requirements.
• Member accounts: retained until you request deletion or remain inactive for 5+ years.
• Event RSVPs: retained for 2 years after the event for attendance records and community reporting.
• Newsletter subscriptions: retained until you unsubscribe.
• Contact form messages: retained for 2 years.

5. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or incomplete information
• Delete your account and personal information (subject to legal retention requirements for donation records)
• Object to certain processing activities
• Withdraw consent for marketing communications at any time (unsubscribe links are in every newsletter)
• Data portability — request a copy of your data in a machine-readable format

If you live in the European Economic Area, United Kingdom, or California, you may have additional rights under GDPR, UK GDPR, or CCPA respectively. To exercise any of these rights, contact us at info@globalnewah.org.

6. Cookies and Tracking

We use cookies for:

• Essential cookies — session management for logged-in members. These cannot be disabled if you want to sign in.
• Analytics— to understand how the site is used. You can opt out by enabling “Do Not Track” in your browser or using browser privacy controls.

We do not use cookies for advertising or third-party retargeting.

7. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. International Data Transfers

Our servers and service providers are located primarily in the United States. If you access our website from outside the U.S., your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from your country.

9. Security

We use reasonable technical and organizational measures to protect your personal information, including encryption in transit (HTTPS), secure database access controls, and limited employee access on a need-to-know basis. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

If we become aware of a data breach that affects your personal information, we will notify you and the appropriate authorities as required by applicable law.

10. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you by email or through a prominent notice on our website.

11. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us:

See also our Terms of Service.