1. General information
   1.1 This Privacy Policy describes how we process and protect personal data of users, donors, volunteers and other persons interacting with our Services.
   1.2 “Personal data” means any information that directly or indirectly identifies an individual, e.g., name, email address or payment details.
   1.3 We process personal data in accordance with international data protection standards, including the General Data Protection Regulation (GDPR), ensuring transparency, accountability and security.
   1.4 We do not collect sensitive personal data (for example, information about race, health or religion) and we do not process personal data without your consent.
   1.5 By using our Services you confirm that you have read and agree to this Privacy Policy.

2. Data controller
   The data controller for all personal data we process is:
   VŠĮ Action4.Life
   Email: info@action4.life
   Contact us at the address above for any questions about your personal data.

3. Information we collect
   We collect only the personal data necessary to provide and improve our Services:

3.1 Donations

• Name, email address and payment details (securely processed by third-party providers such as Stripe).

• Transaction data: date, amount and the last four digits of the payment card.

3.2 Volunteer applications

• Name, email address, phone number and additional information (e.g., skills or experience).

3.3 Communications

• Information contained in messages sent via the website, email or social media.

3.4 Social media interactions

• Data provided when interacting with our official accounts: publicly available information (likes, comments, follows) and direct messages sent via platforms.

• Official accounts:
  Facebook: ResilienceofUkraine, thesol.eu, LifeAidUkraine
  Instagram: resilience__initiative, thesol.eu, action.4.life

1. Purposes of processing
   We process personal data to:

• Manage donations and issue receipts;

• Communicate with supporters, volunteers and donors;

• Respond to enquiries and requests;

• Provide updates about our activities and campaigns;

• Comply with legal obligations and ensure operational security.

1. Data sharing
   We do not sell or transfer personal data to third parties except in the following cases:

• Donations: transaction processing by payment providers (e.g., Stripe). If they operate outside the EU, we ensure GDPR compliance through appropriate safeguards, including Standard Contractual Clauses (SCC).

• Support services: trusted third-party companies providing IT infrastructure, hosting and communications services.

• Legal requirements: disclosure required by law, court order or governmental request, or to protect the rights and safety of our organization, users or others.
  All third-party processors are bound by confidentiality obligations and strict data-protection standards.

1. Data retention
   We retain personal data only as long as necessary for the stated purposes or to satisfy legal requirements:

• Donation records: 7 years for financial reporting and tax purposes.

• Volunteer data: retained for the duration of participation and deleted 30 days after the participation ends.

• General correspondence: up to 3 years unless law requires otherwise.
  To request deletion, contact: info@action4.life

1. Data security
   We implement organizational and technical measures (including encryption and access controls) to protect data against unauthorized access, alteration or misuse. While no system can be guaranteed completely risk-free, we continuously improve protections and monitor potential threats.

2. Your rights
   Under applicable data protection laws (including GDPR) you have the right to:

• Access: request a copy of your data;

• Rectification: correct inaccurate data;

• Erasure: request deletion (subject to legal obligations);

• Restriction: limit processing;

• Portability: receive your data in a machine-readable format;

• Object: challenge processing based on legitimate interests;

• Withdraw consent: withdraw consent at any time.
  To exercise these rights contact info@action4.life.

1. Cookies and tracking
   Our website does not currently use cookies or tracking technologies. If we introduce them, they will be used to: improve user experience, analyse site performance and personalise content and features. Users will be notified via a banner and will be able to choose preferences.

2. Minors
   This Policy applies only to persons aged 18 and over. We do not knowingly collect or process data of persons under 18. If a minor provides us with information, that is done at their own responsibility.

3. Data breach notification
   In the event of a data breach we will take all reasonable steps to mitigate harm and will notify affected individuals where appropriate. For details contact: info@action4.life.

4. Policy updates
   We may update this Privacy Policy to reflect changes in practices or law. The current version is always available at www.action4.life. Check for updates periodically.

5. Unsubscribing
   You may opt out of receiving news and updates while continuing to donate or participate as a volunteer. To unsubscribe contact: info@action4.life.

6. Contact information
   For all questions or requests related to this Privacy Policy contact: info@action4.life