Privacy Policy

Last updated: September 2025

Sophie’s Hope Foundation/cureGSD1b is a nonprofit organization based in the United States. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information, and outlines your rights under applicable privacy laws, including the European Union’s General Data Protection Regulation (GDPR).

1. Information We Collect

We may collect and process the following types of personal data:

  • Contact details (e.g., name, email address, phone number, mailing address)
  • Donation information (e.g., payment details processed securely by third-party providers, donation history)
  • Communications (e.g., messages, emails, or inquiries you send to us)
  • Technical information (e.g., IP address, browser type, device data, cookies for website analytics and functionality)

Children’s data: We do not knowingly collect data from children under 16 without parental consent.

2. How We Use Your Information

We use personal data only where we have a lawful basis under GDPR, such as:

  • Consent: When you sign up for newsletters, events, or agree to specific processing.
  • Legal obligation: To comply with financial and tax regulations.
  • Legitimate interests: To operate and improve our services, support our mission, and communicate with supporters, as long as these do not override your rights.

Examples include:

  • Responding to inquiries or requests
  • Managing donations and issuing receipts
  • Sending newsletters, updates, or fundraising appeals (with your consent where required)
  • Conducting research, analysis, and improving our programs
  • Ensuring website security and proper functioning

3. Sharing Your Information

We do not sell or rent your personal data.

We may share your information only with:

  • Service providers who help us operate our website, donation platforms, or communication tools, under strict data protection agreements
  • Regulators or legal authorities when required by law

All third parties are required to keep your data secure and use it only for the services they provide to us.

4. International Data Transfers

As we are based in the United States, your personal data may be transferred and stored outside the European Economic Area (EEA). When we transfer your data, we take appropriate steps to ensure adequate protection, such as using Standard Contractual Clauses approved by the European Commission.

5. Data Retention

We keep your personal data only as long as necessary for the purposes outlined above, including to meet legal, accounting, or reporting requirements. For example:

  • Donation records: kept for up to 7 years (for tax/legal compliance)
  • Newsletter/email lists: kept until you unsubscribe

6. Your Rights (EU/EEA Users)

Under GDPR, you have the right to:

  • Access your personal data and receive a copy
  • Correct inaccurate or incomplete data
  • Erase your data (“right to be forgotten”), where legally possible
  • Restrict or object to processing in certain circumstances
  • Data portability, where applicable
  • Withdraw consent at any time (e.g., unsubscribe from emails)
  • File a complaint with your local data protection authority

To exercise your rights, please contact us at the details below.

7. Security

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure. However, no system is 100% secure, and we cannot guarantee absolute security of your data.

8. Cookies

Our website may use cookies or similar technologies to improve functionality and analyze usage. You can control cookies through your browser settings.

9. Contact Us

Jamas Lafreniere
23 Briarcliff Dr.
Hopkinton, MA 01748
Email: jamas@sophieshopefoundation.org
Translate