Privacy Policy

Effective Date: August 15, 2025

This Privacy Policy (“Policy”) describes the personal data that Project HOPE – The People-to- People Health Foundation, Inc. and its branch offices and subsidiaries (collectively, “Project HOPE,” “we,” “us,” or “our”), may collect and process through projecthope.org and any of its subdomains and other websites that link to this Policy (“Website”), mobile applications (each, an “App”), and other services or products provided by Project HOPE (collectively, the “Services”). This Policy describes how we may collect, use, or disclose personal data about you; your choices regarding our use of your personal data; how we safeguard such personal data; and how you may contact us regarding our privacy practices.

Project HOPE acts as the data controller of your personal data collected through our Services, as described in this Policy.

What Personal Data Do We Collect?

We may collect the following personal data directly from you, automatically when you access the Website or App, when you use our Services, or from other parties:

Contact information, including name and email address.
Content of communications, including information you provide to us in email, through online forms, or other correspondence.
Demographic Data, including race, ethnicity, religion, and gender.
Health information, including medical history and physical or mental health conditions, diagnoses, treatments, and medications.
Transaction information, including payment details (e.g., credit or debit card number), billing address, and phone number.
Electronic and network activity collected automatically through your use of our Website, including IP address, device identifier, browser type, and operating system; information about your interaction with our Website, such as the times and dates of your visits, pages you viewed, and links you clicked; usage preferences, such as time zone, language, and screen resolution; and links that referred you to our Website.

Personal data includes “sensitive” personal data or “special categories” of persona data (“Sensitive Personal Data”). We may collect Sensitive Personal Data as defined by applicable law, including religious or philosophical beliefs, race or ethnic origin, citizenship or immigration status, gender identity, health information, and biometric information. We process these categories of personal data in limited circumstances, as permitted or required by applicable law, to comply with our obligations in connection with our Services and subject to additional safeguards. If you provide Sensitive Personal Data to us for purposes that require consent, you consent to the collection, use, disclosure, and other processing for the purpose for which you provided it and as permitted by applicable law.

Why Do We Collect Personal Data?

We use the personal data we collect to:

Provide our Services, including giving you access to our programs and Services, designing and improving our programs and Services, monitoring the effectiveness of our programs, evaluating individual skill sets and matching them to corresponding needs in the field, analyzing personal data to provide clients and health care providers relevant and useful information, conducting research to understand our global and regional impact, and managing personnel and financial operations for internal purposes.
Provide access to our Website and App, including facilitating and personalizing your user experience; monitoring and analyzing trends, usage, and activities of Website and App visitors; delivering promotional content; improving our Website and App; and providing technical support.
Communicate with you, including providing information about our products, programs and Services, responding to your requests, inviting you to participate in events, and sending you content related to your interests and our organization.
Secure our Services, including protecting our Services from cyber risks; authenticating users; enforcing our policies and terms; protecting our rights; fulfilling our legal obligations; preventing, identifying, investigating, stopping, and responding to suspected or actual fraud, illegal or malicious activities, and other activity that violates or may violate applicable laws, regulations, legal process or our policies; and generally safeguarding our Services.
Comply with applicable laws, regulations, legal processes, industry standards, and our policies, including managing risks, investigations, reporting, and other compliance activities; responding to court orders or other government and law enforcement mandates or requests; identifying or managing legal actions related to our or others’ rights or property; supporting actual or threatened claims, defenses or declarations in a case or before any jurisdictional and/or administrative authority, arbitration or mediation panel; and enforcing compliance with applicable laws, regulations, or legal processes as well as industry standards and our company policies, including export control requirements. We may use, screen, and share your personal data to comply with Office of Foreign Asset Control (“OFAC”) or other prohibited or denied party lists and international governmental or regulatory requirements, including those regarding anti-terrorism, money laundering, and asset control.

How Do We Disclose Personal Data?

We may disclose your personal data:

To vendors and contractors that help us manage and operate our Services; communicate about our programs, Services, events, and partnership opportunities; and otherwise support our operations.
To our affiliates, partners, and donors that we collaborate with to provide our programs and Services, including implementation partners, fundraising partners, and other stakeholders.
For legal compliance, including disclosing your personal data if required or authorized to do so by law or in the good-faith belief that such action is necessary to comply with legal requirements or with legal process served on us; protecting and defending our rights or property or the rights and property of other parties; protecting the personal safety of any individual; responding to subpoenas, warrants, or court orders; fulfilling law enforcement or public safety purposes; responding to or otherwise related to any legal process; complying with export control requirements; investigating, preventing, or taking action regarding possible illegal activities, suspected fraud, safety of person or property, or a violation of our policies; complying with laws, regulations, or other legal obligations; enforcing our terms, policies, or agreements with other parties; or preventing crime.
For safety and security, such as disclosing your personal data to a third party to protect the security or integrity of our Website or Services; protecting against fraud; and protecting the rights or property of Project HOPE, our clients, our donors, or others.
For intercompany transactions, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or any portion of our assets, including negotiations of the transaction.

To the extent we provide the above parties access to your personal data obtained through our Apps, we require that they provide the same level of personal data protection as required by this Policy. We may also share aggregated and anonymous data with our third-party partners and with the general public.

Under What Legal Bases Do We Process Personal Data?

We process your personal data under certain legal bases, including:

To fulfill a contract, when the processing is necessary for us to perform our contract with you or allow you to enter into a contract with us, including to provide you with the products and Services you request or process your donations; respond to your inquiries; process your job application; or otherwise fulfill our contractual obligations to you.
With consent, when you have consented to our processing of your personal data.
When we have a legal obligation to process your personal data, or we reasonably believe that it is necessary to protect our rights or the rights of another or to comply with judicial or regulatory proceedings, a court order, or other legal process.
To protect vital interests, when processing is necessary in order to protect your vital interests.
When we have a legitimate interest in processing your personal data, in particular, we have a legitimate interest to: promote our products and Services, grow our organization, and provide information about our Services and product offerings; limit access to information to appropriate persons and enable stakeholders to access confidential information securely; analyze and improve the safety and security of our Websites, business, products, and Services, including by implementing and enhancing security measures and safeguards and protecting against fraud, spam, and other abuse; otherwise maintain and improve our Website, products, and Services; and operate our business and provide you with information and communications about our products and Services that are tailored to, and in accordance with, your preferences.

How Do We Use Cookies and Other Online Tracking Technologies?

We and our vendors use cookies, pixels, and other online tracking technologies (collectively “Cookies”) to:

Collect and analyze information about your interactions with our Website and App, including by collecting information about which pages on our Website and App you viewed or links you clicked and how you interacted with our content during your visit or over multiple visits.
Store information to improve Website and App functionality.
Help you access and navigate the Website and App more efficiently.
Recognize your login information and preferences, so that you do not need to enter the information each time you visit the Website and App.
Customize your browsing experience, including by showing you information more likely to be relevant to you.
Deliver and customize advertisements and track campaign efficacy.

We and our vendors may collect personal information about your online activities over time and across different devices and websites when you visit the Website, and link information collected by Cookies to other information collected about you.

We may engage web analytics service providers, such as Google Analytics, to help us understand and analyze how visitors interact with our Website. We use such data to administer and improve the quality of our Website and serve ads on our behalf across the internet. We may also implement Google Analytics Advertising Features such as dynamic remarketing, interest-based advertising, and audience targeting.

In certain instances, we may contract with service providers to help us analyze activity on our Website, as applicable, through session replay technologies to help us understand and analyze how visitors use our Services, and to improve the Services. These technologies may collect the following types of information, among others: IP address; screen size; device type (unique device identifiers); browser information; geographic location; and preferred language.

Your web browser may have settings that allow you to transmit a “Do Not Track” (“DNT”) signal when you visit various websites or use online services. Like many websites, our Website is not designed to respond to DNT signals received from browsers. To learn more about DNT signals, visit allaboutdnt.com. You may set your browser to notify you of or decline the receipt of Cookies; however, certain features of the Website may not function properly or be available if your browser is configured to disable Cookies.

Certain vendors we work with offer tools you can use to limit or opt out of their Cookies, such as:

Google. For more information on how Google Analytics and other Google products use data, visit policies.google.com/technologies/partner-Websites. To opt out of Google Analytics Cookies, visit tools.google.com/dlpage/gaoptout. To adjust your Google advertising settings, visit adssettings.google.com.
Meta (Facebook). To change your privacy and advertising settings with Meta, login to your Facebook account and navigate to the Privacy Center at facebook.com/privacy/center or review your Ad Preferences at facebook.com/adpreferences.

Some vendors may participate in the Digital Advertising Alliance (“DAA”) and its AdChoices opt-out program or the Network Advertising Initiative (“NAI”). For more information about opting out or to use the DAA opt-out tool visit youradchoices.com (for web browsers) or aboutads.info/appchoices (for mobile apps). For more information about opting out or to use the NAI opt-out tool, visit networkadvertising.org/choices/ (for web browsers) or networkadvertising.org/mobile-choice/ for (mobile apps).

We are not responsible for the effectiveness or accuracy of other parties’ notices or opt-out mechanisms.

How Do We Transfer Personal Data?

In connection with any of the uses or sharing of personal data, we may transfer personal data internationally to an organization or location outside of the country in which the personal data is collected, including to the United States. Project HOPE will follow all data protection protocols required by applicable local laws. Please be aware that the data protection laws and regulations that apply to your personal data transferred to the United States or other countries may be different from the laws in your country of residence and different standards may apply to how your personal data is used and protected. Where applicable, we will use standard contractual clauses to safeguard your personal data, including the European Union approved Standard Contractual Clauses.

How Long Do We Retain Personal Data?

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. In determining any personal data retention period, we consider the amount, nature, and sensitivity of the personal data; the potential risk of harm from any unauthorized use or disclosure of your personal data; the purposes for which we process your personal data and whether we can achieve those purposes through other means; and applicable legal requirements. Generally, we keep personal data relevant to our dealings with you for as long as necessary.

If you no longer wish to provide your personal data through our App, you may uninstall our App from your device. Note that this action will not delete your user profile or any information we previously collected via the App, nor does it affect our personal data collection through our other Services.

What Safeguards Do We Have in Place?

We maintain organizational, technical, and administrative measures designed to protect personal data against unauthorized or illegal access, destruction, use, loss, modification, or disclosure. We make reasonable efforts to provide a level of security appropriate to the risk associated with the processing of personal data, however, no data transmission or storage system is guaranteed to be completely secure in all circumstances.

What Privacy Rights Do You Have and How Can You Exercise Your Rights?

Depending on your location and applicable privacy laws, you may have certain rights related to your personal data, including the rights to:

Ask us to confirm whether we process your personal data.
Request access to or information about your personal data that we collect, use, and/or disclose.
Request that your personal data be corrected, updated, or completed if you become aware that any personal data that we maintain about you is incorrect, out of date, or incomplete.
Ask for a copy of your personal data, including in an electronic format, and transmit such personal data to another entity under circumstances required by applicable law.
Object to or restrict collection, use, disclosure, or other processing of your personal data under certain circumstances.
Withdraw your consent to process your personal data in circumstances where our collection, use, disclosure, or other processing is based on your consent; or request details about consequences for not consenting to a processing activity.
Request that we delete, destroy, anonymize, or block the processing of personal data that we have collected, used, disclosed, or otherwise processed about you.

If you would like to exercise your privacy rights or file a complaint, please contact us at dataprivacy@projecthope.org. If you believe that we have violated any of your data protection rights, we ask that you contact us. We will always try to assist when you have concerns about the privacy of your personal data and appreciate the opportunity to do so; however, you may also contact the data protection authority responsible for overseeing compliance with data protection law in your jurisdiction.

We may request information from you to help us confirm your identity prior to processing your request. Your rights are limited to the rights provided under the applicable law, which may be based on your country of residence, employment, and/or citizenship. Your rights can be restricted by exemptions permitted under relevant laws.

How Will We Provide Notice About Changes to This Privacy Policy?

Our practices with respect to personal data may vary from time to time. We reserve the right to update this Policy at any time, and we will make an updated copy of such Policy available on our Website, as indicated by the Effective Date at the top of the Policy.

How Can You Contact Us?

If you have any other questions, requests, comments, or concerns related to this Privacy Policy, please reach out to us at dataprivacy@projecthope.org.

Project HOPE’s headquarters is located at 1101 Connecticut Avenue NW, Suite 500, Washington, DC 20036.