Your data
Privacy policy
Keren Esther cares deeply about the privacy of its donors and of the families it supports. Here is what data we collect, why, how long we keep it and how to exercise your rights.
Last updated 23 October 2026 · in line with the GDPR and French data protection law
Who is responsible for your data?
Keren Esther, 9 rue Parrot, 75012 Paris, France. For any question about your data: info@kerenesther.org.
What data, and why?
When you donate
We collect your full name, email address, phone number, country, postal address (for the tax receipt), and the amount, date, frequency and allocation of your donation. We use this data to:
- record and manage your donation, including monthly donations;
- issue and send your tax receipt;
- thank you and keep you informed about how donations are used;
- meet our accounting and tax obligations.
Legal basis: carrying out your donation and our legal obligations (accounting, tax receipts).
When a donation is not completed
If you start a donation without completing the payment, the information already entered is saved. A member of the association may contact you, once, to help you complete it if you ran into a problem. This information is deleted on request.
Legal basis: the association’s legitimate interest.
Your donor area
To access your donor area, you receive a sign-in link by email. We record the email address used and, for security, the IP address of the request.
When you write to us
Information sent through the contact form (name, email, phone, message) is used only to reply to you.
Payments
Card payments are processed by Stripe and PayPal payments by PayPal. You enter your bank details directly with them: the association never has access to them and does not store them. These providers apply their own privacy policies.
Who can access your data?
Only authorised members of the association. Your data is never sold, rented or exchanged. It is shared only with the providers needed to run the website and process donations:
- o2switch
- Our web host, in France
- Stripe and PayPal
- Payments
- Email service
- Receipts and messages
Some of these providers may process data outside the European Union, in particular in the United States. These transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.
How long do we keep it?
- Donations and tax receipts
- 10 years, the legal retention period for accounting records
- Donor contact details
- 3 years after your last donation, to keep you informed
- Uncompleted donations
- 12 months at most
- Contact form messages
- Until we reply, then 12 months at most
- Donor area session
- 24 hours
Your rights
You may at any time access your data, have it corrected or deleted, restrict its use, object to its processing or ask for a copy. Write to info@kerenesther.org or to 9 rue Parrot, 75012 Paris, France. We reply within one month.
Some data cannot be deleted while the law requires us to keep it, in particular data linked to a tax receipt already issued.
If you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL): cnil.fr.
Security
The website uses an encrypted connection (HTTPS). Access to donor data is restricted to authorised members of the association.