ONG É Por Amor • Fighting hunger. Cultivating dignity. WhatsApp: (21) 99028-9090 PIX (CNPJ) 40.356.591/0001-59

Governance and data protection

Privacy Policy

ONG É Por Amor respects the privacy of donors, volunteers, beneficiaries, partners, website visitors and all other people who engage with the organization. This policy explains, in clear terms, how we collect, use, store and protect personal data in our institutional, social and administrative activities.

Privacy treated as part of our institutional responsibility.

Personal data protection is part of ONG É Por Amor’s commitment to ethics, transparency, security and respect for human dignity. We process personal information only when necessary to enable donations, institutional communication, accountability, volunteer management, relationships with corporate partners and the execution of social activities.

Core commitment To use personal data in a proportionate, secure way, consistent with the organization’s social purpose, avoiding unnecessary collection and respecting the rights of data subjects.
01

Scope of this policy

This Privacy Policy applies to the processing of personal data carried out by ONG É Por Amor through its digital channels, forms, campaigns, donations, institutional communications, social actions, volunteer processes, partner relationships, accountability and other activities related to its mission.

The policy also applies to data collected through the NGO’s institutional website, campaign pages, contact forms, newsletter forms, donation systems, payment methods, communication tools and platforms used for administrative management or relationships with supporters.

02

What data we may collect

  • Identification data: first name, last name, CPF or CNPJ when necessary, date of birth in specific contexts and registration information voluntarily provided.
  • Contact data: email, phone number, WhatsApp, address and other information necessary for communication.
  • Donation data: amount donated, frequency, payment method, receipts, contribution history and information necessary for financial reconciliation.
  • Volunteer data: area of interest, availability, experience, emergency contacts when applicable and information necessary to organize activities.
  • Partner and company data: representatives’ names, job title, corporate email, phone number, company, CNPJ, relationship history and information related to partnership proposals.
  • Browsing data: IP address, device type, browser, pages accessed, cookies and technical information used for security, analysis and website improvement.
  • Beneficiary data: information necessary to organize assistance, record actions, monitor social needs, provide accountability and support institutional evidence, always with reinforced care and respect for the dignity of the people served.
03

How data is collected

Data may be collected directly from the data subject when they fill out forms, make donations, subscribe to communications, contact the NGO, register as a volunteer, request information, participate in campaigns or otherwise engage with the organization.

We may also receive data through payment platforms, donation management tools, relationship systems, email services, institutional partners, supporting companies and administrative records necessary for the organization’s operation.

04

Purposes of processing

  • Process donations, recurring contributions, campaigns and payments.
  • Issue confirmations, receipts, thank-you messages and communications related to donations.
  • Maintain relationships with donors, volunteers, corporate partners, suppliers and supporters.
  • Organize social activities, street outreach, projects in Manguinhos, emergency campaigns and institutional initiatives.
  • Send newsletters, reports, invitations, impact updates and institutional communications.
  • Prepare transparency reports, accountability documents, impact indicators and governance materials.
  • Comply with legal, regulatory, tax, accounting and administrative obligations.
  • Ensure website security, fraud prevention, platform integrity and improvement of the browsing experience.
05

Legal bases used

The processing of personal data by ONG É Por Amor may occur based on the data subject’s consent, compliance with a legal or regulatory obligation, performance of a contract or preliminary procedures, the organization’s legitimate interest, protection of life or physical safety, health protection in applicable contexts and other legal bases provided for under Brazilian law.

Whenever we rely on legitimate interest, we will seek to respect the data subject’s legitimate expectations, limit processing to what is necessary and preserve their fundamental rights and freedoms.

06

Donations and payment methods

To enable donations, ONG É Por Amor may use payment platforms and intermediaries, including methods such as PIX, credit card, PayPal, Mercado Pago, Stripe and other solutions integrated into the website or institutional campaigns.

Sensitive financial data, such as full card number, security code and banking authentications, are processed directly by payment platforms, according to their own security and privacy policies. ONG É Por Amor accesses only the information necessary to identify the donation, perform financial reconciliation, provide accountability and maintain the relationship with the donor.

07

Institutional communication and newsletter

When the data subject registers to receive communications from ONG É Por Amor, we may use their name, email address, phone number or other information provided to send news, reports, campaigns, invitations, impact updates, volunteer opportunities and content related to the institutional mission.

The data subject may request to stop receiving these communications at any time through the channels made available by the organization or through unsubscribe links included in messages, when applicable.

08

Data of beneficiaries and people in vulnerable situations

Due to the humanitarian nature of ONG É Por Amor’s work, some data may be processed in the context of social assistance, meal distribution, emergency support, actions in vulnerable territories, internal records, follow-up of needs and evidence of impact.

This data must be handled with reinforced care, avoiding unnecessary exposure, embarrassment, sensationalist use of images or any practice that could compromise the dignity, safety or privacy of the people served.

09

Images, testimonials and audiovisual records

ONG É Por Amor may record images, videos and testimonials from institutional activities, social actions, campaigns, events, volunteers, partners and beneficiaries for purposes of transparency, communication, accountability, social mobilization and impact disclosure.

Whenever people served by the organization are directly identifiable, especially children, adolescents or people in vulnerable situations, the organization must adopt careful criteria, obtain authorization when necessary and carry out an ethical assessment regarding image exposure.

Principles

How we guide data processing.

ONG É Por Amor adopts data protection principles compatible with its social and institutional work, seeking balance between transparency, security, operational necessity and respect for data subjects.

01

Purpose

We process data for legitimate, specific purposes related to the organization’s mission, management and sustainability.

02

Necessity

We seek to collect only the information necessary for each activity, avoiding excessive data collection.

03

Transparency

We seek to explain, in accessible terms, how data is used and which channels may be contacted.

04

Security

We adopt administrative and technical measures to reduce risks of improper access, loss, alteration or unauthorized exposure.

10

Data sharing

ONG É Por Amor may share personal data with suppliers, technology platforms, payment systems, hosting services, email tools, accounting, legal counsel, audit services, institutional partners, supporting companies and public authorities, when necessary to fulfill the purposes described in this policy.

Sharing will be limited to what is necessary and must observe criteria of security, confidentiality, purpose and legal compliance. ONG É Por Amor does not sell personal data.

11

Cookies and browsing technologies

The ONG É Por Amor website may use cookies and similar technologies for technical functionality, security, audience measurement, browsing improvement, integration with forms, campaigns, donation tools and performance analysis.

Visitors may configure their browser to block or delete cookies. However, some website features, forms or donation resources may not function properly if certain cookies are disabled.

12

Storage and retention

Personal data will be kept for the time necessary to fulfill the purposes for which it was collected, observing legal, tax, accounting and regulatory obligations, accountability requirements, defense of rights, audits and the organization’s legitimate needs.

When data is no longer necessary, ONG É Por Amor may delete it, anonymize it or keep it in a restricted manner when there is a legal obligation or appropriate institutional justification.

13

Information security

ONG É Por Amor adopts security measures compatible with its operational reality to protect personal data against unauthorized access, loss, alteration, improper disclosure or inappropriate use.

These measures may include access control, passwords, permission restrictions, document organization, use of reliable platforms, internal guidance, backups, care in file sharing and periodic review of processes.

14

Children and adolescents

When personal data of children and adolescents is processed in social, educational, cultural, assistance, campaign or institutional record contexts, ONG É Por Amor must observe the best interests of the child and adolescent, adopt reinforced care and seek authorization from legal guardians when necessary.

The organization must avoid any improper exposure of children and adolescents, especially in contexts of social vulnerability, poverty, food insecurity or assistance-based support.

Data subject rights

Data subjects may request information about their data.

The data subject may contact ONG É Por Amor to exercise their rights under personal data protection legislation.

Confirmation and access

Request confirmation of whether processing exists and access to personal data processed by the organization.

Correction

Request the update or correction of incomplete, inaccurate or outdated data.

Deletion or anonymization

Request deletion, blocking or anonymization of unnecessary, excessive or improperly processed data.

Information about sharing

Request information about public or private entities with which personal data has been shared.

Withdrawal of consent

When processing depends on consent, request its withdrawal, subject to applicable legal and institutional obligations.

Review and clarification

Request clarification about criteria for processing, retention, security and use of personal data.

Privacy channel

Questions, requests and exercise of rights.

Requests related to personal data may be sent to ONG É Por Amor’s institutional channel. The organization will review each request according to applicable legislation, the nature of the request and the legal, accounting, administrative and social obligations involved.

Institutional email contato@eporamor.org.br
Phone and WhatsApp +55 21 99028-9090
Organization identification Associação Humanitária É Por Amor — CNPJ 40.356.591/0001-59
Response time Requests will be reviewed and answered within a reasonable period, considering the complexity of the request and applicable legal requirements.
15

Updates to this policy

This Privacy Policy may be updated periodically to reflect changes in legislation, tools used, internal processes, donation channels, institutional activities or ONG É Por Amor’s data protection practices.

The most recent version will be available on the organization’s institutional website, with the date of update indicated.

16

Final provisions

By using ONG É Por Amor’s digital channels, making donations, filling out forms, participating in campaigns, registering for communications or engaging with the organization, the data subject acknowledges the practices described in this policy.

This policy should be interpreted together with other institutional documents of ONG É Por Amor, including governance, transparency, donation, ethics, integrity, safeguarding and people protection policies.

Ongoing transparency

Privacy, trust and responsibility go together.

ONG É Por Amor works to strengthen its institutional governance, protect personal data and maintain transparent relationships with those who donate, support, work, volunteer or receive assistance from the organization.