Supporter Data Privacy Policy

AHC and your data

Privacy notice: We’re committed to protecting your privacy and keeping you informed of how your information is used.

Although we’re based in Cambodia, where we’re not subject to the General Data Protection Regulation (GDPR), the majority of our supporters are in Europe, the US and Hong Kong. Our supporters expect that their data is stored and protected in line with international best practice. Therefore, we’ve modelled our donor data privacy policy on best practice in these countries.

This privacy policy clearly defines how we collect and use data.

For the purpose of donor data privacy, the data controller is Angkor Hospital for Children’s International and Cambodia Fundraising Departments. We are located at Tep Vong (Achamean) Road & Oum Chhay Street, Preah Sangreach Tep Vong St, Krong Siem Reap, 17259, Cambodia.

About us: Angkor Hospital for Children (hereby “AHC”) is a charitable organisation located in Siem Reap, Cambodia. AHC is registered as a non-government organisation in Cambodia, as a charity in Hong Kong (Angkor Hospital for Children Limited), the UK (Charity registration number 1166998) and the United States (EIN 99-0384215) – meaning that your donations are tax deductible.

AHC’s International and Cambodia Fundraising Departments (hereby “we”) exist to fund and support AHC’s strategic goals, which includes:

  • Community education and outreach projects
  • Ongoing training for doctors and nurses
  • Wages for all staff
  • Improvements and upgrades to the hospital’s administration and infrastructure

This is done to fulfil AHC’s mission to improve health care for every child in Cambodia, now and for years to come (hereby “ongoing running costs”).

We communicate with potential supporters, donors and other individuals to develop mutually beneficial relationships and to fundraise for our ongoing running costs.

Developing an understanding of our previous volunteers, current and potential supporters, donors and other individuals (hereby “you”) through your personal data enables us to make better decisions, use our resources effectively and raise philanthropic gifts more efficiently. We do this to meet the legitimate and regularly expressed expectation that supporters have of charities, to focus resources on the charitable cause and ensure efficiency in all fundraising and administration efforts.

About you: This privacy notice uses “you” to mean any individual about whom we collect and hold personal data, including past and present volunteers, current and potential supporters, community fundraisers, donors and other individuals.

Full cookie statement in privacy policy:

Use of cookies and pixels:

Most web browsers are automatically set to accept cookies. Your browser controls will allow you to restrict, block or delete cookies.

What is a website cookie?

A cookie is a small piece of data that a web server sends to a user’s browser or your device. This data is stored in the user’s device and sent back to the server with subsequent requests. Cookies remember information about the user, enabling the website to provide a more personalised and efficient experience.  Cookies also provide insights as to how you navigate our website, which helps us continually improve the quality of our content.

We use cookies:

  • To collect information to gain insights on how many people visit our website, what country/city/region they’re from, which browser/operating system they’re using and pages viewed on the website. This helps us make improvements to our website
  • To allow functionality for the user on our website
  • To enable use of third-party advertising or social media services to enable tracking and retargeting for online marketing material.

What is a pixel?

A pixel is a HTML code snippet that loads when a user visits a website or opens an email. It is useful for tracking user behavior and conversions.

How we use pixels:

  • We use Mailchimp as our e-mail service provider. Our e-mails contain tracking pixels embedded to allow us to analyse the success of our e-mails. From these tracking pixels, we can see when you open an e-mail, which links within the e-mail you and the pages you visit on our website
  • We also use pixels on our social media pages to track how people engage with our content. This is non-identified and provides us with insights which enable us to continually improve our content
  • With social media pixels, we may see if and when a user clicks through a social media post to our website, how long they spend one that page and any other pages they visit at the same time
  • Data acquired from pixels assists us in measuring the performance of our fundraising and communications efforts. Data won’t be passed to third parties.

By browsing our website, you agree that we may place these types of cookies on your device.

Donor research:

Finding potential major donors in our database and streamlining our fundraising activities is a lawful legitimate interest in order to support AHC’s mission of improving health care for every child in Cambodia. We undertake this research to meet the legitimate and regularly expressed expectation that supporters have of charities, to focus resources on the charitable cause and ensure efficiency in all fundraising and administration efforts.

E-mails:
If you sign up to our e-mail list, we collect your personal information in order to send you organisational updates and periodic requests for support. The information we collect includes your name and e-mail address. We use pixels to track information on which e-mails you open and how you engage with them. This allows us to improve our communications and gain insights into very engaged donors who we may then decide to approach for further support.

Surveys:
We conduct donor engagement surveys annually to better understand the motivations and interests of our supporters. This helps us improve our website and communications and enable us to make targeted asks for larger gifts or bequests to supporters who have expressed interest in such giving.
The information we collect will be stored in Salesforce, our customer relationships management system.

More information below on the steps we take to keep your data secure.

Major donor research:
We may undertake research to produce briefings and profiles on a limited number of individuals who we believe are capable of gifting or influencing major donations above US$10,000.

We do this:

  • To ensure our communications are relevant and timely
  • To make efficient and effective use of resources
  • To understand the background of individuals
  • To make appropriate requests and ensure that individuals aren’t needlessly approached for philanthropic gifts, inappropriate levels of giving, considered for boards, committees and other opportunities that are irrelevant to them.

Wealth scan:
In the future, we may decide to contract a third-party partner with experience in this field to help us conduct a wealth scan. On our behalf, the contracted third party would compile publicly accessible data on the background, wealth and potential of our current supporters.

We would do this:

  • To better understand our current supporters and their philanthropic interests
  • To decide whether and on what basis to approach donors with the capacity to give major gifts
  • To ensure that we use fundraising and other resources efficiently.

Major donor research and wealth scans utilise publicly available data, which poses no risk to individual privacy. Individuals typically expect charities they already support to contact them. They also understand that charities might reach out if they are local or if publicly available information suggests a shared interest. Major donors, in particular, expect not-for-profit organisations to be well-informed about potential supporters.

We recognise that the individuals in our database are financially aware and busy. They expect us to conduct thorough research before approaching them for a major donation. To uphold our commitment to data protection, we will complete a Data Protection Impact Assessment before any such work begins. This ensures that we carefully consider and protect the data subject’s rights.

We conduct this research to fulfil the legitimate and regularly expressed expectations of our supporters. This allows us to focus our resources on our charitable cause and ensure efficiency in all fundraising and administrative efforts.

You can object to us processing your data for these purposes at any time by contacting us on ahc@angkorhospital.org.

Donations:

We use the following platforms to enable donations:

  • Stripe: collects personal information such as your name, email address, zip code and payment information. You may access Stripe’s Privacy Policy here. Upon making a donation via Stripe, you will receive an e-mail confirmation to the e-mail address you provided
  • PayPal: collects personal information such as your name, e-mail address, address and payment information. You may access PayPal’s Privacy Policy here. Upon making a donation via PayPal, you will receive email confirmations to the email address you provided
  • ABA Bank: we partner with ABA Bank to provide easier donation services in Cambodia. We don’t store your bank details. You may access ABA Bank’s Privacy Policy here.


Information security:

At AHC, safeguarding donor data is a top priority. To ensure the highest standards of information security, we implement the following measures:

  1. Data storage platform:
  • All donor data is securely stored in Salesforce, our customer relationship management system. Salesforce complies with industry-leading security certifications, including ISO 27001, SOC 1, SOC 2, and GDPR
  • Salesforce’s backup service backs up donor data daily to ensure its availability in the event of unforeseen circumstances.
  1. Access control:
  • Access to donor data within Salesforce is restricted to authorised personnel only, based on role-based permissions
  • Each user is required to authenticate using secure login credentials, including multi-factor authentication (MFA).
  1. Data encryption:
  • All donor data is encrypted both in transit (using HTTPS/TLS protocols) and at rest (using AES-256 encryption).

Complaints:

If you believe your information has been mishandled, or if you have a complaint or question about our Privacy Policy or data collection methods, please contact us on ahc@angkorhospital.org and someone from our Executive Committee will respond to your query within two working days.