LittleCareFund (littlecarefund.org, “we”, “us”) is a children’s medical support initiative connecting donors with verified medical cases in the Philippines. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).

What we collect

We only collect information you choose to give us, plus a small amount of technical information needed to keep the site secure.

  • Contact form: your name, email address, the reason you’re getting in touch and your message.
  • Pledges: your name, email address, pledge amount, and optionally your phone number and comments.
  • Updates sign-up and advocacy pack requests: your name and email address.
  • Marketing preference: whether you ticked the box to hear from us.
  • Technical information: your IP address when you submit a form, which we use to prevent spam and abuse.

Please don’t include sensitive information (such as health details about yourself or a child) in a contact form message unless it’s needed. If you do, we’ll treat it with extra care and only use it to respond to you.

Donations and payments

When online donations are available, payments will be processed by Stripe, a third-party payment provider. Your card details go directly to Stripe and are never seen or stored by LittleCareFund. Stripe’s handling of your payment information is covered by Stripe’s privacy policy.

How we use your information

  • To reply to your enquiry or follow up on your pledge.
  • To send you the information or materials you asked for.
  • To send you updates about cases, outcomes and our work — only if you’ve signed up for updates or ticked the box to hear from us.
  • To protect the site from spam, fraud and misuse.
  • To keep records we’re required to keep by law.

We don’t sell, rent or trade your personal information.

Email updates

We manage our contact list with Brevo, an email service provider. When you submit a form, your name and email address are stored in our Brevo account along with which form you used and whether you agreed to receive updates. We only send updates to people who have agreed to receive them. Every update includes an unsubscribe link, or you can ask us to remove you at any time.

Cookies and analytics

The public site doesn’t set its own cookies. If we use analytics (Google Analytics) or advertising measurement (Meta Pixel), these only load after you say “Yes” to the cookie banner, and they may then set cookies to help us understand how the site is used. If you say “No”, they don’t load. To change your choice, clear this site’s data in your browser and the banner will appear again.

Admin staff who log in to manage the site use login cookies that are necessary for the site to work.

Children featured on the site

Campaigns and stories may include a child’s first name, age, location, photo and medical need. We only publish this with the consent of the child’s parent or guardian, after verifying the case with the treating medical practitioner. We publish only what’s needed to tell the child’s story and raise support. A parent or guardian can ask us to change or remove a child’s information at any time.

Who we share information with

We use trusted service providers to run the site. They only handle your information to provide their service to us:

  • Supabase — database and secure storage.
  • Vercel — website hosting.
  • Brevo — email contact list and updates.
  • Stripe — payment processing (when donations are live).
  • Google and Meta — analytics, only if you’ve agreed to cookies.

We may also share information with partner medical practitioners where it’s needed to verify or fund a case, or where the law requires it.

Storing information overseas

Our service providers may store or process information outside Australia and the Philippines, including in the United States and the European Union. We choose providers that protect information to a standard comparable to the laws that apply to us.

How we protect your information

Information is stored in secured, access-controlled systems. Access is limited to authorised admin staff, who must sign in with multi-factor authentication. Connections to the site are encrypted.

How long we keep it

We keep enquiries, pledges and security records for as long as we need them to respond to you, run our work and meet legal obligations. If you ask us to delete your information, we will, unless we’re required to keep it.

Your rights

You can ask us to:

  • tell you what personal information we hold about you and give you a copy;
  • correct information that’s wrong or out of date;
  • delete your information;
  • stop sending you updates.

To make a request, use our contact form. We’ll respond within 30 days.

Complaints

If you’re concerned about how we’ve handled your information, please contact us first through our contact form so we can try to put it right. If you’re not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or the Philippine National Privacy Commission (privacy.gov.ph).

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.