How we collect, use, and protect your information — and how we protect the safety of our volunteers and the people we serve.
Sudan's Emergency Response Rooms (ERRs) is responsible for managing data collected directly through this website, unless a specific page or service states that another party is responsible for that processing.
Donation and payment data may be processed by a fiscal sponsor, a payment provider, or an external donation platform. In those cases, that sponsor or provider may be independently responsible for part of the data under its own privacy policy. Please read the policy of whichever site you are taken to when you click a donate link.
A. Information you provide — we may collect information you choose to send when you:
This may include your name, email address, preferred language, message content, the type of request, and anything else you choose to include.
B. Donation information — when you donate through a fiscal sponsor or external platform, data such as the donor's name, email, payment details, donation amount, currency, transaction date, and anonymity preference may be collected. Payment data is normally processed by the fiscal sponsor or payment provider — card or bank account details should never be sent to ERRs by email or through website forms.
We may not have access to complete payment data. How much information reaches ERRs depends on the fiscal sponsor's or donation platform's settings, the donor's choices, and applicable legal and accounting requirements.
We may use information for the following purposes:
We do not use your data to send unsolicited marketing messages. If you subscribed to the newsletter, you can unsubscribe at any time using the unsubscribe link or by reaching out to us.
If you subscribe to the ERRs newsletter, we'll use your email address to send the newsletter and updates you agreed to receive. Every send includes a clear way to unsubscribe.
We keep your email address for as long as you're subscribed, or as long as needed to manage your request or meet legal requirements. After you unsubscribe, we may keep a limited record of your request to prevent future messages, unless the law requires otherwise.
We may use photos, stories, or testimonials to document our work or explain the impact of donations. As far as possible, we commit to the following:
If you appear in a photo or story published on this site and would like to request a review or removal, send your request to program@lccsudan.org with a link to the content and an explanation, without including unnecessary sensitive information.
We do not publish the precise locations of Response Rooms, volunteer names, movement information, or distribution details when doing so could create a security risk. Our "Rooms" and map pages may show only general areas or aggregated data.
Anyone contacting ERRs should not send the following through public channels:
If sensitive information genuinely needs to be exchanged, we will identify a secure channel and appropriate procedures before requesting it. Ordinary email is not automatically a secure channel for sensitive information.
We may share the minimum information necessary with:
We take reasonable technical and organizational steps to reduce the risk of unauthorized access, loss, alteration, or unintended disclosure. These may include restricting access privileges, using strong passwords, keeping software updated, vetting service providers, backing up data, and training the people who handle it.
No system connected to the internet can be guaranteed to be completely secure. If we become aware of a security breach affecting personal data, we will take appropriate steps to limit the harm, and notify affected individuals or authorities when the law requires it.
This site contains links to external platforms — donation pages, social media, YouTube, newsletter services, maps, and award or partner websites. We don't control those parties' privacy practices, and this policy does not apply to data processing that happens outside the ERRs website.
We do not ask children to submit personal data through this site. Parents or guardians should make sure children do not send personal information, photos, or location details through our public forms.
We do not publish stories or photos that identify affected children except under appropriate protection and consent procedures, and after assessing the risk of publication.
We may update this policy when the site, our services, donation providers, or legal requirements change. We'll publish the new version on this page and update the "last updated" date. If a change is significant enough to require extra notice, we'll use whatever method fits the data involved and our legal obligations.
For questions about this policy, or for privacy-related requests, please reach us through our Contact page, and we will route your request to the right privacy and protection team.