Grace Advocacy Relief Organization (GARO)

1. Purpose

This Data Protection Policy outlines how GARO collects, uses, stores, and protects personal information in accordance with ethical standards and applicable data protection laws.

2. Scope

This policy applies to:

  • Donors

  • Volunteers

  • Beneficiaries

  • Website users

  • Staff and contractors

3. Principles of Data Protection

GARO commits to the following principles:

  • Lawfulness, fairness, and transparency

  • Purpose limitation – data collected only for legitimate organizational purposes

  • Data minimization – collecting only what is necessary

  • Accuracy – maintaining up-to-date records

  • Storage limitation – retaining data only as long as required

  • Confidentiality and security – protecting data from misuse, loss, or unauthorized access

4. Data Collected

GARO may collect:

  • Names, contact details, and demographic information

  • Donation history

  • Volunteer applications and background information

  • Communication preferences

  • Website analytics data

GARO does not sell or rent personal data to third parties.

5. How Data Is Used

Personal data may be used for:

  • Processing donations and issuing receipts

  • Communicating updates, newsletters, or organizational announcements

  • Volunteer coordination and management

  • Compliance with legal obligations

  • Program planning and reporting

6. Data Security

GARO implements administrative, technical, and physical safeguards to protect personal information. Access is limited to authorized personnel only.

7. Third-Party Sharing

Data may be shared with secure service providers (e.g., donation processors, email platforms) solely for operational purposes.
All third-party partners must comply with privacy and security standards.

8. Data Subject Rights

Individuals may request at any time:

  • Access to their data

  • Correction of inaccuracies

  • Deletion of their personal information

  • To withdraw consent

  • To opt out of communications

Requests can be made via info@garo.org.

9. Updates to Policy

GARO may update this policy to reflect legal or operational changes. The current version will always be available on our website

Data Protection Policy