Privacy

Privacy Notice

Empowering Orthodox Hebrew Day Schools and our affiliates (“we” or “us”) are committed to processing personal data lawfully, fairly, and transparently.

This notice explains:

• What personal data we collect and why
• When and why we share it
• How we store and protect it
• How you can manage communications and exercise your rights

We may update this notice to reflect changes in our practices or applicable laws. If we make significant updates, we will post a notice on our platforms.

For any questions, please contact us.

When This Notice Applies

Our Sites and Tools

This notice applies to personal data collected electronically through our websites, portals, platforms, repositories, forms, surveys, forums, interactive sites, exhibits, mobile apps, and other tools that reference this notice (collectively, “our sites and tools”). As the data controller, we are responsible for processing your personal data.

Supplemental Privacy Notices

In certain interactions, additional privacy notices may apply. These may be embedded in this notice or provided separately. We will inform you when a supplemental notice applies.

Third-Party Links

This notice does not cover third-party applications, integrations, or websites that may be linked to or accessible from our sites and tools. We are not responsible for their content, functionality, or privacy practices. Please review their privacy policies and terms of use.

What Data We Collect

Personal Data You Provide

We collect personal data when you voluntarily share it with us, such as:

• Newsletters & Updates: Email address, country, interests
• Contacting Us: Email, phone, or other personal details
• User-Generated Content: Social media posts, messages, feedback, documents, photos, or videos

Please provide only the necessary personal data. While sharing personal data is optional, certain features (e.g., signing up for newsletters, applying for jobs, or registering for events) may require it. Choosing not to provide this data may limit access to these features.

Personal Data You Provide About Others

Only share personal data about others if you are legally authorized or required to do so. If providing data on someone’s behalf, you must:

• Share a copy of this notice and any applicable supplemental privacy notice with them.
• Obtain their explicit consent before submitting their data.
• Provide proof of notice and consent upon request.

Data from Third Parties

We may receive personal data from:

• Your company/organization or professional references.
• Public sources and third-party analytics providers.
• Service providers or other third parties acting on apparent authority.

For example, we may receive your data if:

• You are listed as a contact person for an organization.
• Your information appears in submitted documents, social media posts, feedback, or other content.
• A service provider registers you for site access, events, or job applications.

Payment Processing

We use third-party Payment Processors to handle donations and other transactions. If payments are made through our sites, you may need to provide credit card or payment details, which we share with the Payment Processor for processing.

If redirected to a Payment Processor’s site, their privacy policy and terms of use will apply. We encourage you to review them.

Interest-Based Advertising

We may engage third parties to display targeted advertisements based on your interactions with our sites and tools. These third parties may use tracking technologies to collect data about:

• Your visits to our sites and other websites.
• Your engagement with our ads and communications.

You can opt out of interest-based advertising at any time. In some regions, we will only display personalized ads if you opt in. For more details or to manage your preferences, please contact us.

Data We Collect Automatically

When you visit our sites and tools, we may automatically collect certain personal data, including:

• Technical Information: IP address, internet service provider (ISP), browser type, and language.
• Usage Data: Referring webpage, pages visited, crash data, and interactions with our sites and tools.
• Tracking Technologies: We use cookies, pixels, and similar technologies to enhance your experience and personalize content. We may also link this data with information you provide (e.g., newsletter sign-ups) to create a seamless experience across devices.

For more details and how to manage tracking preferences, see Cookies & Similar Technologies.

Sensitive Personal Data

We do not intentionally collect sensitive personal data unless you explicitly consent for a specific purpose or as required by law.

Minors

Our sites and tools are not intended for individuals under 13 years old (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us. If we discover such data, we will delete it promptly.

How We Use Your Data

Primary Purposes

We use your personal data to:

• Communicate with you: Send information about our organization, funded activities, and issues relevant to your interactions with us. (Legitimate interests)
• Share updates: Provide publications, newsletters, and updates that you have chosen to receive. (Consent)
• Process submissions: Review and respond to proposal documents, reports, deliverables, and other submitted content related to funding applications, projects, or services. (Legitimate interests and/or contract performance)
• Analyze feedback: Assess and respond to feedback, comments, messages, media, and other content you submit via our sites and tools. (Legitimate interests and/or consent)
• Manage programs: Inform and administer our program strategies and charitable activities. (Legitimate interests)
• Enhance security and functionality: Maintain and improve our sites, tools, systems, facilities, and events. (Legitimate interests)
• Protect rights and safety: Ensure security and uphold legal and ethical responsibilities. (Legitimate interests)
• Maintain archives: Preserve information in the public interest. (Legitimate interests)
• Comply with legal obligations: Fulfill legal requirements, such as court orders or subpoenas. (Legal obligations)

Additional Purposes

Other uses of your personal data may be described in a supplemental privacy notice based on our specific engagement with you.

Legal Basis for Processing

We process personal data only when there is a valid legal basis, which may include:

• Contractual necessity: When processing is required to enter or fulfill a contract with you.
• Legal compliance: When required by law, regulation, or legal process.
• Legitimate interests: When necessary for our legitimate interests or those of a third party, provided they do not override your rights.
• Public interest: When maintaining an archive for the public good.
• Vital interests: When necessary to protect your life or another person’s safety.

If processing is based on your consent, we will clearly inform you. You may withdraw consent at any time, and we will seek additional consent before using your data for new, unrelated purposes.

When We Share Your Data

Employees, Agents, Affiliates, Service Providers, and Partners

We may share your personal data with:

• Internal Personnel: Employees, agents, and affiliates who require access for business purposes.
• Service Providers: Third parties (including supplemental staff, project workers, inbound secondees, and outsourced service workers) who process data on our behalf and strictly follow our instructions.
• Partners: Third-party organizations collaborating with us on funded projects or events.

We do not share your personal data with third parties for marketing purposes unless you have explicitly consented. If you suspect misuse of your personal data by a third party, please contact us immediately.

Publicly Accessible Submissions

Any personal data you share in public or interactive areas of our sites and tools—such as comment sections, online forums, and community platforms—may be visible to other visitors. Others may access, share, or use this content.

Some interactive areas may allow you to adjust privacy settings to control visibility. However, even if you delete a submission, copies may remain in cached or archived locations or be retained by other users.

Legal Compliance and Law Enforcement

We may disclose personal data when required to comply with:

• Applicable laws and regulations
• Court orders or subpoenas
• Law enforcement or government requests

Transfer of Control

We will not transfer control of your personal data to a third party unless:

• You have expressly consented, or
• The transfer is required by law, court order, or legal process.

How We Store and Protect Your Data

Storage and Transfers

Your personal data may be stored in your region or in any country where we or our service providers operate. Employees and service providers worldwide may access personal data under the terms outlined in this notice.

To ensure your legal rights and protections remain intact during data transfers, we:

• Use legally recognized agreements, such as Standard Contractual Clauses or equivalent, as required by applicable law.
• Require our employees and service providers to comply with strict data protection standards in accordance with applicable laws.

Storage Period

We retain your personal data only as long as necessary to fulfill its intended purpose or as required by law. Once no longer needed, we will:

• Delete or anonymize your data.
• If deletion is not possible, securely store your data and restrict further access until it can be deleted.

We may dispose of data at our discretion, subject to applicable laws. For details on retention periods for specific types of personal data, please contact us.

Protection Measures

While internet data transmission is never entirely secure, we implement rigorous technical and organizational safeguards to protect personal data, including:

• Access restrictions: Only authorized personnel can access personal data, and they are required to maintain confidentiality.
• Regular security assessments: We continuously review and strengthen our security measures to prevent unauthorized access or disclosure.
• Service provider compliance: Third-party service providers must meet or exceed our data privacy and security standards.

How We Store and Protect Your Data

Storage and Transfers

Your personal data may be stored in your region or in any country where we or our service providers operate. Employees and service providers worldwide may access personal data under the terms outlined in this notice.

To ensure your legal rights and protections remain intact during data transfers, we:

• Use legally recognized agreements, such as Standard Contractual Clauses or equivalent, as required by applicable law.
• Require our employees and service providers to comply with strict data protection standards in accordance with applicable laws.

Storage Period

We retain your personal data only as long as necessary to fulfill its intended purpose or as required by law. Once no longer needed, we will:

• Delete or anonymize your data.
• If deletion is not possible, securely store your data and restrict further access until it can be deleted.

We may dispose of data at our discretion, subject to applicable laws. For details on retention periods for specific types of personal data, please contact us.

Protection Measures

While internet data transmission is never entirely secure, we implement rigorous technical and organizational safeguards to protect personal data, including:

• Access restrictions: Only authorized personnel can access personal data, and they are required to maintain confidentiality.
• Regular security assessments: We continuously review and strengthen our security measures to prevent unauthorized access or disclosure.
• Service provider compliance: Third-party service providers must meet or exceed our data privacy and security standards.

For more details on our security policies, please refer to our standard information security requirements for service providers.

How We Store and Protect Your Data

Storage and Transfers

Your personal data may be stored in your region or in any country where we or our service providers operate. Employees and service providers worldwide may access personal data under the terms outlined in this notice.

To ensure your legal rights and protections remain intact during data transfers, we:

• Use legally recognized agreements, such as Standard Contractual Clauses or equivalent, as required by applicable law.
• Require our employees and service providers to comply with strict data protection standards in accordance with applicable laws.

Storage Period

We retain your personal data only as long as necessary to fulfill its intended purpose or as required by law. Once no longer needed, we will:

• Delete or anonymize your data.
• If deletion is not possible, securely store your data and restrict further access until it can be deleted.

We may dispose of data at our discretion, subject to applicable laws. For details on retention periods for specific types of personal data, please contact us.

Protection Measures

While internet data transmission is never entirely secure, we implement rigorous technical and organizational safeguards to protect personal data, including:

• Access restrictions: Only authorized personnel can access personal data, and they are required to maintain confidentiality.
• Regular security assessments: We continuously review and strengthen our security measures to prevent unauthorized access or disclosure.
• Service provider compliance: Third-party service providers must meet or exceed our data privacy and security standards.

For more details on our security policies, please refer to our standard information security requirements for service providers.

Managing Communications & Exercising Your Data Rights

Managing Communications from Us

• Most newsletters, updates, and automated emails include an unsubscribe link or options to manage your preferences.
• You can opt out of promotional emails at any time by following the instructions in the communication.
• However, we may still send you important administrative messages related to our sites and tools that you cannot opt out of, unless required by law.

Exercising Your Data Rights

Depending on applicable laws, you may have rights to:
✔ Confirm whether we hold personal data about you.
✔ Access, correct, or delete your personal data.
✔ Withdraw consent previously given for data processing.
✔ Object to or restrict processing of your personal data.
✔ Deactivate, block, anonymize, or delete your data.
✔ Request a copy of your personal data and transfer it to a third party.

To exercise these rights, if not available directly through our tools, please contact us.

If you believe your rights have been violated, you may also file a complaint with the relevant data protection authority.