Privacy Policy - Najil Cab Foundation

Privacy Policy — Najil Cab Foundation

Last updated: March 19, 2026

The Najil Cab Foundation (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website najilcabfoundation.org and interact with our services.

1. Information We Collect

1.1 Information You Provide

Donations: When you make a donation, we collect your name, email address, billing address, and payment information. Payment processing is handled securely by our payment providers (Wompi, powered by Bancolombia). We do not store your credit card details on our servers.
Contact forms: When you contact us via our website form or email, we collect your name, email address, and the content of your message.
Chatbot conversations: Our chatbot assistant (“Meli”) processes your messages to provide helpful responses. We store anonymized conversation logs (with hashed IP addresses) to improve our service. No personally identifiable information is retained in chatbot logs.
Newsletter subscriptions: If you subscribe to updates, we collect your email address.

1.2 Information Collected Automatically

Analytics: We use Google Analytics 4 (GA4) and Jetpack Stats to understand how visitors use our website. This may collect anonymized data such as pages visited, time spent, browser type, device type, and approximate geographic location. No personally identifiable information is collected through analytics.
Cookies: We use essential cookies for website functionality (login sessions, shopping cart) and analytics cookies to measure website performance. See Section 5 for details.
Server logs: Our hosting provider (Hostinger) may collect standard server log data including IP addresses, browser information, and pages requested.

2. How We Use Your Information

Process and confirm your donations
Send donation receipts and tax documentation upon request
Respond to your inquiries and support requests
Improve our website and user experience
Send updates about our conservation work (only if you opted in)
Comply with legal obligations

We never sell, rent, or share your personal information with third parties for marketing purposes.

3. Payment Processing

Donations are processed through Wompi (by Bancolombia), Colombia’s trusted payment platform. All payment transactions are encrypted using industry-standard SSL/TLS technology. We do not have access to your full credit card number. For more information, see Wompi’s Privacy Policy.

4. Data Sharing

We may share limited data with the following service providers, solely for the purposes described:

Wompi (Bancolombia): Payment processing
Google Analytics: Website analytics (anonymized)
Jetpack (Automattic): Website statistics and security
Hostinger: Website hosting
DeepSeek: AI chatbot responses (no personal data is sent; only your chat message text)

5. Cookies

Our website uses the following types of cookies:

Essential cookies: Required for basic website functionality (WooCommerce cart, login sessions). These cannot be disabled.
Analytics cookies: Google Analytics and Jetpack use cookies to measure website traffic and user behavior. This data is anonymized and aggregated.
Performance cookies: LiteSpeed Cache uses cookies to deliver cached content for faster page loads.

You can manage cookies through your browser settings. Disabling cookies may affect some website functionality.

6. Data Retention

Donation records: Retained for 5 years as required by Colombian tax regulations.
Contact form submissions: Retained for 1 year, then deleted.
Chatbot logs: Anonymized logs retained for 90 days for service improvement, then deleted.
Analytics data: Retained according to Google Analytics and Jetpack default retention periods (14 months for GA4).

7. Your Rights

Under applicable data protection laws (including Colombia’s Law 1581 of 2012 on Data Protection, the EU General Data Protection Regulation (GDPR), and the Dutch UAVG), you have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data (subject to legal retention requirements).
Objection: Object to processing of your data for specific purposes.
Portability: Request your data in a portable format.
Withdraw consent: Withdraw consent for optional data processing at any time.

To exercise any of these rights, contact us at info@najilcabfoundation.org.

8. Children’s Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

9. International Data Transfers

As a Colombian organization serving international supporters, your data may be processed in Colombia and by service providers in other countries. We ensure appropriate safeguards are in place for any international data transfers.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including SSL/TLS encryption for all data in transit, secure payment processing through certified providers, and regular security updates.

11. Third-Party Links

Our website may contain links to external websites (social media, partner organizations). We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

Email: info@najilcabfoundation.org
WhatsApp: (+57) 321 703 82 34
Website: najilcabfoundation.org/contact-us

Fundación Najil Cab — NIT registered Colombian nonprofit foundation (fundación sin ánimo de lucro).