1to1WiSh ("1to1WiSh," "we," "us," or "our") is a 501(c)(3) nonprofit organization that operates a platform connecting people who wish to give items, time, or skills with people who need them. This Privacy Policy explains what information we collect when you use 1to1wish.org (the "Site"), how we use and share it, and the choices available to you. By using the Site, you agree to the collection and use of information as described here.
1. Information We Collect
Information you provide directly. When you register for an account, post a wish, request a wish, contact us, or submit feedback, we collect information such as your name, email address, password, general location (city, state/region, or country), the content of your listing (including any photos you upload), and any messages you send us.
Donation information. If you make a monetary donation, that transaction is processed by our third-party payment processor, Zeffy. We do not directly collect or store your payment card or bank details — Zeffy handles that in accordance with its own privacy policy and applicable payment-industry security standards. We may receive confirmation of your donation (such as your name, email, and donation amount) from Zeffy for our own record-keeping and receipting.
Information collected automatically. Like most websites, our hosting provider (Netlify) may automatically log standard technical information when you visit the Site, such as your IP address, browser type, device type, referring pages, and timestamps. This is used for security, fraud prevention, and understanding aggregate site usage — we do not use this information to build individual advertising profiles.
Information from third-party features. If you use the language selector on the Site, your request is sent to Google Translate to render a translated version of the page; that interaction is subject to Google's own privacy policy. If you follow links to our social media pages (Facebook, Instagram, LinkedIn, TikTok), your interactions there are governed by those platforms' privacy policies, not this one.
2. How We Use Your Information
- To create and maintain your account and authenticate you when you log in.
- To publish, display, and manage the wishes you post, including connecting you with a matching donor or recipient.
- To communicate with you about your account, a listing, a donation receipt, or a support request.
- To screen listings and enforce our Terms & Conditions, including reviewing reported content.
- To send you optional updates about 1to1WiSh, if you've opted in (you can unsubscribe at any time).
- To understand aggregate usage of the Site so we can improve it, and to detect, prevent, and respond to fraud, abuse, or security incidents.
- To comply with legal obligations, including those associated with our nonprofit and tax-exempt status.
3. Your Email Address and Public Visibility
Your email address is never displayed publicly on the Site. It is used solely for our internal records, to verify your listings, to contact you about a match, and for account-related communication. Other details you choose to include in a public wish listing (such as your first name, general location, or a description) will be visible to other users, so please avoid including sensitive personal information in a public listing beyond what's needed to describe your wish.
4. How We Share Information
We do not sell your personal information. We share information only in the following circumstances:
- With other users, as intended by the Site's purpose — for example, connecting a donor and recipient so a wish can be fulfilled. We share only what's needed to make that connection (typically first name, general location, and listing details), not your full contact information, unless you choose to share more directly.
- With service providers who help us operate the Site, such as our hosting provider (Netlify), our form-processing tools, and our donation processor (Zeffy). These providers are only permitted to use your information to provide services to us.
- For legal reasons, if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of 1to1WiSh, our users, or the public.
- In connection with a change to our organization, such as a merger, reorganization, or transfer of assets — in which case we would take reasonable steps to ensure the receiving party honors this Privacy Policy or a comparably protective one.
5. Cookies and Similar Technologies
The Site may use minimal cookies or similar local storage strictly necessary for basic functionality (such as remembering your session while you're logged in). We do not currently use third-party advertising or cross-site tracking cookies. If this changes, we will update this policy accordingly.
6. Data Retention
We retain your account and listing information for as long as your account is active, or as needed to fulfill the purposes described in this policy, including maintaining accurate records for our nonprofit and tax-exempt reporting obligations. If you request deletion of your account, we will remove or anonymize your personal information within a reasonable period, except where we are required to retain certain records by law (for example, donation records for tax purposes).
7. Your Rights and Choices
- Access and correction — you can request a copy of the personal information we hold about you, or ask us to correct it, by contacting us.
- Deletion — you can request that we delete your account and associated personal information, subject to the retention exceptions described above.
- Opt out of communications — you can unsubscribe from non-essential emails at any time using the link in those emails, or by contacting us directly.
- Depending on where you live (for example, under the California Consumer Privacy Act or the EU/UK General Data Protection Regulation), you may have additional rights, such as the right to data portability or to object to certain processing. Contact us and we'll do our best to honor applicable rights even where not strictly required.
8. Children's Privacy
1to1WiSh is intended for use by individuals who are 18 years of age or older, or organizations acting through an authorized adult representative. We do not knowingly collect personal information from children under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us with personal information, please contact us so we can remove it.
9. Data Security
We use reasonable administrative, technical, and organizational measures designed to protect your information, including relying on reputable, security-conscious providers (such as Netlify and Zeffy) for hosting and payment processing. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. International Users
1to1WiSh welcomes donors and recipients worldwide. If you access the Site from outside the United States, be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate, which may have different data protection laws than your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised effective date. Your continued use of the Site after a change becomes effective constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out through our Contact page. We're a small nonprofit team and will do our best to respond promptly.