Privacy Policy
Thank you for taking the time to read our Privacy Policy for Donors and Sponsor (this “Policy”).
About us
Make-A-Wish Foundation International (“Make-A-Wish”, “we”, “our”, “us”), are committed to protecting your privacy and the privacy of the Wish Children who we are here for, their families and friends.
We have our head office at 1702 E. Highland Avenue, Suite 305, Phoenix, Arizona 85016, United States of America, and our operational offices at Frits Spitsstraat 1, 1217 WC Hilversum, the Netherlands. We are registered with the Arizona Corporation Commission and the Internal Revenue Service as a 501(c)(3) organization with the Employer Identification Number 86-0726985.
This Policy explains how and why we collect and process (as data controller for the purposes of data protection laws), personal information relating to:
- donors and sponsors (“Donors and Sponsors”),
- visitors of our web site (“Web Visitors”), and
- beneficiaries of a wish from a Make-A-Wish Affiliate (“Wish Children”) and their families (“Wish Family”) for communications and and advancing the mission of our organization.
Please read this Policy carefully. This Policy refers to the following additional terms, which also apply to your use of our website: our Website Terms of Use govern your use of our website and our Cookies Policy sets out information about the cookies we use on our website. If you do not agree with this Policy, then please do not send any personal information to us (whether online or within any forms).
There are two areas where information is collected on our website, the donation form and the contact us form. Our “Donation Form” is hosted by DonorBox. Their privacy policy can be located here. All DonorBox forms are protected by SSL/TLS encryption technology. The “Contact Us” form is SSL encrypted and no information is stored within our website database.
Our other “Donation Form” is hosted by FundraiseUp and the privacy policy can be located here. For more information on our security policy here.
If you have any questions or queries, please contact us using the details given below.
Summary table of personal data processed and the lawful basis for processing
|
Type(s) of personal information we process |
Why we process this personal information |
Our legal basis for processing this personal information |
|
To enable us:
|
|
|
To enable us to keep in touch with you about our fundraising campaigns (subject to your preferences and consent for receiving such communications). |
|
|
To enable us to provide and promote our services and to produce statistics and records (anonymised as appropriate) of our activities. |
(1) The legitimate interests of Make-A-Wish as a charity offering to grant wishes to Wish Children; and (2) (as applicable) in order to comply with our legal obligations. (3) (as applicable) your consent. |
Wish Child and Wish Family
|
Type(s) of personal information we process |
Why we process this personal information |
Our legal basis for processing this personal information |
|
To seek sponsorship (financial and/or in-kind contributions), to raise funds and to advance the awareness of our organisation to enable our mission longterm. To carry out research related to our mission. We share this information with our potential or current sponsors, corporate partners and donors, as well other media platforms. |
(1) The legitimate interests of Make-A-Wish as a charity offering to grant wishes to Wish Children, and (2) (as applicable) the consent from the Wish Child’s Parent(s) or Guardian(s) and the Wish Child (if applicable). |
|
To enable us and our local office that granted the wish to keep in touch with the family. To enable us to foster a Wish Alumni community. (Both subject to your preferences for receiving future communications post wish granting). |
(1) The legitimate interests of Make-A-Wish as a charity offering to grant wishes to Wish Children; and (2) (as applicable) the consent from the Wish Child’s Parent(s) or Guardian(s) and the Wish Child (if applicable), and |
|
To enable us to produce reports, statistics and records (anonymized as appropriate) of our activities. We share this with the Make-A-Wish International board and other Make-A-Wish entities, and our sponsors |
(1) The legitimate interests of Make-A-Wish as a charity offering to grant wishes to Wish Children, and (2) (as applicable) the consent from the Wish Child’s Parent(s) or Guardian(s) and the Wish Child (if applicable). |
More about the information we use and why
Where we have a legal basis to use your personal information without consent (as we have described above), this Policy fulfils our duty to process personal information transparently, and helps us to do so fairly and lawfully and in a manner that you would expect given the nature of our relationship with you, by giving you appropriate notice and explanation of the way in which your personal information will be used.
Where consent is required for our use of your personal information, we will ask you to positively opt-in by ticking the appropriate consent box or otherwise communicating your consent and such consent may also be collected by a Make-A-Wish Affiliate in our interest. You may withdraw this consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal), and please be advised that withdrawing such consent may mean that we are unable to continue to provide any services to you and may be obliged to discontinue your participation in activities where the use of personal data with your consent is reasonably necessary.
Where you provide us with personal information relating to other individuals, you must obtain the consent of those individuals before doing so.
If you have any questions or require any further information regarding our use of personal information please contact: [email protected].
Sharing your information
We may share your personal information with:
- any Make-A-Wish entity located in any other country where the wish is taking place in that other country or where we need to liaise with that overseas affiliate for granting the wish; and
- our selected third-party service providers, and other companies that support us in the performance of our activities, as the trusted operators of secure cloud-based platforms accessed by us and/or our affiliates from time to time in order to provide centralised data storage, and data management and transaction processing services. Specifically, this includes Salesforce Inc., an entity established in the United States, which hosts a customer relationship management platform used by Make-A-Wish affiliates to enable them to administer, co-ordinate and track wish applications. Such operators or service providers shall only be permitted access to your information to the extent required by them in order to provide us with contracted system maintenance, support or related services, or to provide (or assist us in performing) any related data back-up, restoration or other error correction or bug fixing activities; and
- Make-A-Wish’s payment service provider(s) as iATS, Cybersource and Stripe who may process financial transactions on our behalf; and
We require all our third-party service providers and all other companies that support us to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal information for their own purposes and we only permit them to process your personal information for specified purposes in accordance with our instructions.
We also reserve the right to disclose some or all of your personal information to:
- government bodies or law enforcement agencies, or response to other legal or regulatory requests, if and to the extent required by law; and
- our auditors, lawyers or other professional advisers for any auditing, accounting or related business purposes, or in the enforcement, defence or settlement of any legal proceedings brought by or against us, as reasonably necessary for these purposes.
Parental Consent
If you are a parent or guardian of a Wish Child, then we ask that you read this Policy upon request by a Make-A-Wish Affiliate to complete and sign a Content Release Approval Form, in order to give your permission to us to use yours and the Wish Child’s personal information in the way described throughout this Policy. If your Wish Child is able to provide informed consent (usually at least 16 years of age, although the age varies among EU member states) we would ask that your Wish Child also gives permission to us to use their personal information. If you are a Wish Child at least 18 years old and feel you understand this Policy and its Impact well enough, you can also sign the Content Release Approval Form for yourself.
If you have any questions or queries please contact us using the details given below.
Where we store and process your data
The information that we collect relating to you, your Wish Child and the Wish Family will be stored on our secure servers within the United States of America and Europe.
In addition, your personal information may also be transferred by us to, and stored by, entities located outside the European Economic Area (“EEA”), including entities located in the United States of America or to other countries around the world. This information may include special category data.
These entities may include Salesforce Inc. (and its relevant subsidiaries) and other overseas Make-A-Wish affiliates (as mentioned above).
We believe that we have taken all technical and organisational steps reasonably necessary to ensure that your personal information under our control is held securely and in accordance with applicable law and this Policy. However please note that the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of any information which is transmitted to us via the internet.
Recording and Photography
We may collect and process photographs and/or moving film images in connection with the granting of any wish, volunteer engagements, our fundraising activities and other events. Where explicit consent has been provided, we may photograph and/or film wishes for the purpose of sharing stories on behalf of Wish Children and encouraging charitable activities.
If you have concerns about the use of photographs or moving film images, please contact: [email protected].
Cookies
Our website uses cookies to distinguish you from other users of our website. Cookies are pieces of information transferred from our website to your computer’s hard disk, which allow our website to store information about your browsing patterns. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. Every time you use our website, the cookie may be accessed. You may disable cookies on your browser options but please be aware that by doing so you may lose certain features or functionality of our website. For detailed information on the cookies we use and the purposes for which we use them, please refer to our Cookies Policy.
We also gather statistical and technical information about our web users, traffic patterns and website performance in order to provide a better experience to website visitors. This may include the IP address of the device you are using to access our website, your operating system and your browser type. This data does not identify you.
Use of your information for direct marketing purposes
Where you have consented to receive marketing communications from us, and/or to be placed on mailing lists, in connection with future support of our charitable aims or as a potential donor, volunteer or fundraiser, we may also (in accordance with applicable law) use your contact details, including email address and telephone number(s), for requesting and/or processing donations, recording transactions and related direct marketing purposes. We may also obtain and store your bank or credit card details where you are an active donor or fundraiser, and use that information in connection with receiving donations and recording transactions from or with you.
We do not sell or share any of your personal information to any other person or business for the purposes of marketing.
Even if you have initially consented to receive marketing communications from us, you have the right at any time to ask us not to use your personal information for marketing purposes. You may exercise this right by opting out of any marketing communications we may send you. You may also exercise this right by contacting us at or by writing to us at: [email protected].
Retaining your personal information
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure of your information, the purposes for which we process your information and whether we can achieve those purposes through other means, and the applicable legal requirements. For example, we retain your personal information as long as necessary to comply with our obligations, including our obligations to you, to address any request by you (including to administer your donation), or to enforce our rights.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. Even if you request that we erase your information, we may still need to keep it (see Your rights below) or may keep it in a form that does not identify you.
If you would to Know how long we will hold any specific information then please contact us at [email protected].
Transferring your personal information overseas
If you are based in the EEA, we may transfer, process and store the information we collect from you to the organisations mentioned under Where we store and process your data above, or to relevant third parties and service providers outside the EEA as necessary.
Therefore, your personal information may be processed in countries outside EEA that are not considered to have laws that are equivalent to EU data protection standards. In those cases, however, we ensure that the recipient of your personal information offers an adequate level of protection and security, for instance by entering into the appropriate agreements and, if required, standard contractual clauses or an alternative mechanism for the transfer of data as approved by the European Commission or other applicable regulators or legislators.
If you require further information and/or to see a copy of such agreements please contact us at [email protected].
Updating and accessing your personal information
You have the right to access personal information held about you, subject to certain conditions, and to request its rectification or deletion.
If you would like to access or amend the personal information which we hold about you or you would like us to stop using your personal information, please contact: [email protected].
Your rights
By law you have the right:
- to request access to your personal information (commonly known as a “data subject access request“). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it. We will need to prove your identity before we release any personal information to you.
- to request correction or erasure of your personal information (unless we have the legal right to retain it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- to object to processing of your personal information where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
- to request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- (in certain circumstances) to request the transfer of your personal information to another party.
- to change your information processing preferences (including to withdraw your consent to data processing and/or to receive marketing communications) at any time.
You should be aware that if you ask us to stop processing your personal information in a certain way or to erase your personal information, and this type of processing is necessary in order for us to continue to provide services to you, then we may not be able to do so. This does not include your right to object to direct marketing, which can be exercised at any time without restriction.
If you want to exercise any of the rights listed above, please contact: [email protected].
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and verify your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
Where you have provided your consent to the collection, use or transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact: [email protected].
Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Marketing
If you would like to receive information by email, SMS and/or via social media about our activities and campaigns or other information that we consider may be of interest to you (including, for example promotional materials and newsletters), then we will ask you to confirm your consent to receive these communications.
You have the right at any time to withdraw your consent to us contacting you for marketing purposes or giving your information to Make-A-Wish affiliates. If you no longer wish to be contacted for marketing purposes, you can unsubscribe by using the “unsubscribe” link at the bottom of our marketing messages or by contacting: [email protected].
We will not provide your personal information to any other third-party businesses for marketing purposes.
Other websites
Our website may contain links to other websites, including Facebook, Twitter and Instagram. This Policy only applies to our website so when you link to other websites, you should read their own privacy policies.
Changes to this Policy
We keep this Policy under regular review and will post any updates on this webpage.
This Policy was last updated in April 2024.
How to contact us
Thank you for taking the time to review our Privacy Policy. We are very serious about privacy and safety of personal data. If you have any questions, you can contact:
Make-A-Wish Foundation International
Head office: 1702 E. Highland Avenue, Suite 305
Phoenix, AZ 85016
United States of America
[email protected]
Operational Office: Frits Spitsstraat 1
1217 WC Hilversum
The Netherlands
[email protected]
Contact details of our data protection officer: [email protected]
Complaints
If for any reason you are not happy with the way that we have handled your personal information please contact [email protected] . If you are still not happy, you have the right to make a complaint to the Dutch Data Protection Agency, at https://autoriteitpersoonsgegevens.nl/.