GAZA SUPPORT / OPEN & ACCOUNTABLE
Privacy notice
How this website handles information, your choices, and optional services that may stay off until enabled in settings.
About this notice
This notice describes how the public website handles choices on your device and optional server features. When email, notifications or giving are enabled, the operator must publish a complete privacy notice for those services.
What the website does with your choices
The support explorer keeps your chosen priority, currency, amount and frequency in the current page’s memory. It does not transmit these choices, save them in cookies or browser storage, or use them to create a pledge. Reloading the page clears them.
Cookie choices are saved in browser storage for up to 180 days. Accessibility display settings are saved only when you allow optional display storage. These preferences stay on your device and are not submitted to us.
Optional server features now include email signup, browser notifications, PayPal donations and administrator access. They are disabled until the operator configures and enables them. There are no advertising pixels or embedded social feeds. If you allow it in Cookie settings, Google Analytics (measurement ID G-CRBV5NBDY0) may set cookies and send usage data to Google; it does not run until you opt in. Images are served with the website rather than loaded from external image providers.
Hosting and access information
Serving a website involves processing technical information such as IP addresses, request details and browser information. Hosting and private-access providers may process logs or authentication information separately. Their identities, roles, locations, retention periods, transfer safeguards and applicable legal bases must be confirmed for the final service. Visiting any website may involve technical processing such as server logs.
Optional services after activation
Email signup records your address, consent version and timestamps. A confirmation link expires after 24 hours; only confirmed subscribers should receive updates. Unsubscribe using the link in the subscription email. Pending records are removed after 30 days by the scheduled worker. Retention for confirmed and unsubscribed records must be finalised before activation.
Browser notifications require a separate browser permission. The server stores a device endpoint, encryption keys, consent version and a hashed management token. Browser push providers process delivery requests. Turning notifications off in Updates deactivates the endpoint. Permission in browser settings can also be revoked.
PayPal processes payment details on its own service. This server stores the donation amount, currency, provider identifiers, timestamps and verified payment status; it does not store card numbers. Financial-record retention and the operator’s legal bases must be confirmed before fundraising.
Administrator access uses a secure session cookie, an audit trail and time-limited request limits. No public user accounts are offered. Hosting logs, email delivery and push-provider processing must be documented with the final provider details before enabling administrator sign-in.
Your rights
Depending on the processing and applicable law, rights may include access, correction, erasure, restriction, portability and objection. Where consent is used, it can be withdrawn. You can raise a concern with the UK Information Commissioner’s Office or the relevant data protection authority in your EU country.
Privacy contact details for rights requests should appear on this page when optional data collection is enabled.
Before any data collection begins
The final notice must identify the controller and any applicable representative or data protection officer; specify the data, purposes, lawful bases, recipients, retention, international transfers, rights and complaint routes; and explain any profiling. Marketing preferences must be separate from support choices. This site does not perform profiling or automated decisions about visitors.