Privacy Policy
Version 1.0 — 19 September 2026
This policy explains what personal information we collect through this website, why we collect it, and what rights you have over it.
Who we are
Earthchild is part of the work of the Peace 2000 Institute, Vogasel 1, 109 Reykjavík, Iceland, 5407952669. The Institute is the data controller for the information described here, and you can reach us about anything in this policy through our contact form.
What we collect and why
When you visit the site
Our hosting provider records technical information — your IP address, browser and the pages you request — in server logs, in order to keep the site running and secure. We rely on our legitimate interest in operating a secure website.
When you give a gift
Donations are processed by Fundraise Up. We collect your name, email address, the gift you chose, the amount, and where you tell us, a message to be passed to the child receiving your gift. Payment card details are handled by our payment processor and are never stored by us.
We process this to complete your donation and to meet our legal and reporting obligations. Where you have asked to be kept informed, we also use your email address for that.
When you apply to be an ambassador
We collect the details on the signup form: your name, email address, country, chosen handle, the channels you will share on and your approximate audience size, your reason for joining, and a photo if you provide one. Once you have commission to be paid, we will separately ask for the payment details needed to pay you.
We also keep records of gifts attributed to your link and commission earned and paid.
We process this to operate the ambassador programme and to pay you — that is, because it is necessary to perform our agreement with you — and, for the financial records, because we are required to keep them.
When you contact us
We keep what you send us and our reply, so that we can deal with your enquiry and refer back to it.
Cookies
We use cookies that are necessary for the site to work, including for donations and, where you are logged in, for your session.
We also use a cookie that records when a visitor has arrived through an ambassador’s link, so that gifts can be attributed to the right ambassador.
Who we share it with
We use the following organisations to provide this website and our services. They act on our instructions and may not use your information for their own purposes.
- Fundraise Up — donation processing.
- Stripe — card payments.
- Salesforce — our supporter and ambassador records.
- Cloudways — website hosting.
- Amazon SES — sending email from the site.
We do not sell your information, and we do not share it with anyone else except where we are required to by law.
Where your information is held
We use providers based both inside and outside the European Economic Area. Several of them store European data within the EEA. Where information is transferred outside the EEA, we rely on the European Commission’s standard contractual clauses or another approved safeguard. You can ask us where your information is held and for a copy of the safeguards that apply.
How long we keep it
We keep donation and commission records for as long as our accounting, tax and charity reporting obligations require. We keep ambassador account information for as long as you are an ambassador, and remove your public profile when you leave. We keep enquiries for one year.
Your rights
You have the right to ask us for a copy of the information we hold about you, to have it corrected if it is wrong, and in some circumstances to have it deleted or its use restricted. Where we rely on your consent — for example to send you campaign news — you can withdraw it at any time, and that does not affect anything done before you withdrew it. You can also object to processing we carry out on the basis of our legitimate interests.
Where we must keep financial records, we may not be able to delete everything, but we can remove the rest.
To exercise any of these rights, use our contact form and choose “My personal information”. If you are not satisfied with how we have handled your information you can complain to Persónuvernd, the Icelandic Data Protection Authority, though we would rather you came to us first so that we can put it right.
Changes
We may update this policy. The version number and date above will change when we do.