Last updated: May 2, 2025
What data we collect
When you purchase through IranAid, we collect only the information necessary to process your order and issue a receipt:
| Data | Why we collect it | Who holds it |
|---|---|---|
| Name (optional) | Personalise your order confirmation and thank-you message | Stripe + our server logs |
| Email address | Send your order confirmation; contact you if there's an issue | Stripe + our server logs |
| Order amount | Process your payment and update our live delivery counter | Stripe |
| Payment method details | Complete your transaction | Stripe only — never our server |
| IP address & browser info | Security, fraud prevention (standard server logs) | Our server (Caddy access logs) |
What we do NOT collect
- We do not collect or store your card number, CVV, or bank details — ever. These are handled exclusively by Stripe.
- We do not use tracking cookies, advertising pixels, or third-party analytics.
- We do not sell, rent, or share your personal data with any third party for marketing purposes.
How we use your data
Your name and email are used only for the following purposes:
- Sending you an order confirmation via Stripe.
- Contacting you if there is an issue with your order or if you have a refund request.
- Aggregated, anonymised data (total packages delivered, buyer count) is displayed publicly on our live impact counter. No individual data is ever shown publicly.
Stripe's role
Payment processing is handled by Stripe, Inc. When you purchase, you are interacting directly with Stripe's secure infrastructure. Stripe may collect additional data as part of fraud prevention and compliance. Their practices are governed by Stripe's Privacy Policy.
Data retention
Stripe retains payment records in accordance with their own policies and applicable financial regulations (typically 7 years). We retain server logs for a maximum of 30 days, after which they are deleted automatically. Contact form submissions are retained for up to 12 months.
Your rights
You have the right to request access to, correction of, or deletion of any personal data we hold about you. To exercise these rights, please contact us. We will respond within 30 days. Note that Stripe maintains their own records independently of us; requests regarding Stripe's data must be directed to Stripe directly.
Cookies
This website does not use cookies for tracking or analytics. Stripe's payment element may set functional cookies strictly necessary to process your payment. These cookies are set by Stripe's domain and are governed by their privacy policy.
Security
Our website is served over HTTPS (TLS). Our server is hosted on a private VPS and is not accessible to the public except through the defined API endpoints. We do not store card data on our server at any point.
Changes to this policy
We may update this privacy policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.
Contact
For privacy-related questions or data requests, please use our contact form or email helpdesk@szosyan.com.