Effective Date: 19/08/2026
Organisation: Peru Fusion Ireland CLG (“we,” “our,” or “us”)
Contact Email: perufusionire@gmail.com
At Peru Fusion, we value your support and are deeply committed to protecting your privacy and personal data. This Privacy Policy details how we collect, use, store, and protect your personal information when you register for a membership or make a donation through our website.
1. Information We Collect
When you join our membership program or support us through a donation, we collect the following types of personal information:
- Personal Identity & Contact Data: Your full name, email address, phone number, and physical mailing address (if provided).
- Membership & Transaction Data: Information regarding your membership tier, subscription history, donation amounts, payment frequency, transaction dates, and donation receipts.
- Technical & Usage Data: Your IP address, device characteristics, browser type, and interaction data collected during your session for security and site performance monitoring.
- Payment & Financial Information: Credit or debit card numbers, CVV codes, bank account details, and full payment authorisations are processed directly by our third-party payment partner, Stripe. Peru Fusion does not store, process, or have access to your full credit card credentials or bank account details on our servers.
2. How We Use Your Personal Data
We use your personal data strictly for operational, administrative, and legal purposes, including:
- Processing your membership enrollment, subscription renewals, and one-time or recurring donations.
- Generating and delivering donation receipts and payment confirmations.
- Managing your active membership account and delivering member-exclusive benefits or updates.
- Communicating important organisational news, event invitations, and donor impact reports.
- Monitoring, detecting, and preventing fraud, unauthorised activity, and technical security issues.
- Fulfilling legal, accounting, tax, and regulatory compliance requirements.
3. Legal Grounds for Processing (GDPR)
If you are accessing our services from the European Union (EU) / European Economic Area (EEA) or the UK, our legal bases under data protection laws (including the General Data Protection Regulation / GDPR) for processing your personal data include:
- Performance of a Contract: Processing required to manage your membership agreement or execute your donation.
- Legal Obligation: Processing necessary to comply with legal, financial, and tax record-keeping requirements.
- Legitimate Interests: Processing necessary for operational administrative tasks, network security, and keeping our community informed about our organisation’s impact.
- Consent: Where you have explicitly opted in to receive marketing updates or promotional newsletters (you may withdraw your consent at any time).
4. Third-Party Data Sharing & Payment Processors
We do not sell, rent, trade, or lease your personal information to third parties. We share limited, necessary data only with trusted service providers who assist us in operating our site and administering memberships:
Stripe (Payment Processing Provider)
We use Stripe, Inc. as our exclusive third-party payment processor to manage membership subscriptions and donations securely.
- Data Processing: When you submit payment details, Stripe collects payment credentials, billing details, IP addresses, and device metadata.
- Independent Data Controller: Stripe acts as an independent Data Controller for compliance, anti-money laundering (AML), regulatory reporting, and fraud detection purposes.
- Security & Compliance: Stripe is certified as a PCI Level 1 Service Provider—the highest level of security certification in the payments industry.
- Privacy Terms: To understand how Stripe processes and protects your data, please review the Stripe Privacy Policy.
Other Operational Providers
We may share limited personal details (e.g., name and email address) with email service providers (such as Zoho Campaigns) to dispatch membership updates and administrative receipts. All third-party providers are contractually obligated to process your data securely and solely according to our instructions.
5. International Data Transfers
Stripe operates globally and may transfer, store, or process transaction data on servers located outside the European Economic Area (EEA). Whenever personal data is transferred internationally, appropriate legal safeguards are applied—such as European Commission-approved Standard Contractual Clauses (SCCs) or equivalent legal data protection frameworks—to ensure your personal data remains protected to European standards.
6. Data Security & Retention
- Data Security: We implement robust administrative, technical, and physical security measures—including SSL/TLS encryption across our entire site—to protect your personal information against unauthorised access, loss, or alteration.
- Data Retention: We retain your personal data for as long as your membership profile remains active or as required to fulfil the purposes outlined in this policy. Transaction logs and financial records associated with donations and memberships are retained for 6 to 7 years in accordance with legal and tax accounting obligations.
7. Your Privacy Rights
Under applicable privacy legislation (such as the GDPR), you hold specific rights regarding your personal information:
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Request corrections to inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): Request the deletion of your personal data, subject to legal or regulatory retention obligations.
- Right to Restrict or Object: Object to or request restriction of certain processing activities (including opting out of promotional emails).
- Right to Data Portability: Request a copy of your data in a structured, standard machine-readable format.
To exercise any of these rights, please contact us at [Insert Contact Email].
8. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our legal obligations, operational practices, or payment workflows. Any modifications will be posted directly on this page with an updated “Effective Date.”
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please reach out to us:
- Organisation: Peru Fusion Ireland CLG
- Email: perufusionire@gmail.com
