Privacy Policy

Enlight Studies ("Enlight", "we", "us", or "our") is a non-governmental, non-profit organization registered in the Republic of Armenia. This Privacy Policy describes how we collect, use, store, and share information when you visit enlightngo.org or interact with our services. By using our website, you agree to the practices described below.

This policy applies to information processed through our website and related services, including donations, account registration, and any communication you initiate with us. It does not cover third-party websites we link to, which are governed by their own privacy policies.

We collect only the information needed to operate our services and fulfill our mission. The categories of personal data we process are:

• Account information. If you create an account or log in, we receive your name, email address, and authentication identifiers from the sign-in provider you choose.
• Donation information. When you donate, we collect your name, email address, donation amount, currency, frequency, and a record of the transaction. Card and payment credentials are entered directly with our payment processor and are not stored on our servers.
• Communications. If you contact us by email or other channels, we keep the contents of those messages and any contact details you provide so that we can respond.
• Technical and usage data. Like most websites, we automatically collect limited technical data such as IP address, browser type, device information, referring pages, and timestamps. We use this data to operate the site, prevent abuse, and understand how visitors use our content.

We process personal data for the following purposes:

• Process and acknowledge donations, including issuing receipts and managing recurring contributions.
• Respond to questions, requests, and feedback, and send transactional messages related to your activity with us.
• Operate, maintain, and improve the website, including security, fraud prevention, and analytics.
• Comply with legal, accounting, and reporting obligations applicable to non-profit organizations in Armenia.
• Further our charitable and educational mission, including reporting aggregate, non-identifying statistics about our supporters.

Where applicable law (such as the EU GDPR) requires a legal basis, we rely on: your consent (for example, when you submit a donation or contact form), the performance of a contract (to process your donation), our legitimate interests (to keep the site secure and improve our services), and legal obligations (for tax and accounting records).

We do not sell your personal data. We share information only with the parties needed to operate our services:

• Payment processors. Card transactions are handled by Ameriabank CJSC. The information you submit during checkout is processed by the bank under its own terms and privacy policy.
• Security and anti-abuse providers. We use Google reCAPTCHA to protect our forms. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.
• Infrastructure and analytics providers. We rely on hosting, email delivery, and analytics providers that process data on our behalf under contractual confidentiality and security obligations.
• Legal and regulatory disclosures. We may disclose information when required by law, court order, or to protect the rights, safety, or property of Enlight, our supporters, or the public.

We keep personal data only as long as needed for the purposes it was collected, including legal, accounting, and reporting requirements. Donation records are retained for the period required by Armenian non-profit and tax law. Account data is retained until you ask us to delete it, subject to any obligations that require us to keep it longer.

We apply reasonable technical and organizational safeguards to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

We use cookies and similar technologies to keep you signed in, remember language preferences, secure forms, and understand site usage. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

Our service providers may process your data outside of Armenia, including in the European Union and the United States. Where required, we put in place appropriate safeguards for such transfers.

Depending on where you live, you may have the following rights regarding your personal data:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your personal data, subject to legal retention requirements.
• Restrict or object to certain processing activities.
• Receive a copy of your data in a portable format where applicable.
• Withdraw consent for processing that is based on consent, without affecting prior processing.
• Lodge a complaint with the data protection authority in your country.

To exercise any of these rights, contact us at the address below. We may ask for information to verify your identity before acting on your request.

Our website is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Our website contains links to external sites, including social media and partner organizations. We are not responsible for the content or privacy practices of those sites. We encourage you to review their privacy policies before sharing personal information.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be highlighted on this page. Your continued use of the website after the changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your personal data, please contact us at [email protected].