Who we are
Cans For Kids is a registered charity in Cyprus (Charity No 187), founded in 1990. We collect aluminium cans through 82 collection points across Cyprus, recycle them, and use the proceeds to buy medical equipment for children's hospitals and support children in need. Our website is cansforkids.org.
This policy explains how we collect, use and protect personal data when you use our website, in line with the EU General Data Protection Regulation (GDPR) and Cyprus data protection law. We are the data controller for the personal data described below. For any privacy question, contact us at hello@cansforkids.org.
What data we collect
Contact and enquiry forms — when you send us a message through our contact, volunteering, sponsorship or suggestion forms, we collect the details you provide: your name, email address, subject and the content of your message.
Donations — we do not process payments on this website. Donations are made by direct bank transfer to the charity's bank account, so your bank and payment details are handled by you, your bank and our bank — not by this website. If you contact us about a donation, we keep your contact details so we can thank you and send you any acknowledgement you need.
Committee and admin accounts — members of our committee who manage the website have accounts (name and email) so they can update content.
Technical data — like most websites, our servers automatically record basic technical information such as your IP address, browser type and pages visited. We use this only to keep the website secure and working and to understand general usage. We do not use it to identify or profile you.
How we use your data, and why (our legal bases)
We use your personal data only for the charity's legitimate activities:
- To answer your enquiries and requests — based on your consent and our legitimate interest in responding to you.
- To process and acknowledge donations and volunteering — steps you ask us to take before supporting us, and our legitimate interest.
- To meet our legal and accounting obligations as a registered charity — a legal obligation.
- To keep the website secure and working — our legitimate interest.
- Where you have agreed, to send you updates about the charity's work — you can unsubscribe at any time — your consent.
We will never sell your personal data, and we will never use it for anything unrelated to the charity's work.
Cookies
Our website uses a small number of cookies, all strictly necessary for the site to work (session and security cookies). We also show optional third-party content, such as YouTube videos, which only sets cookies if you choose to play a video. See our Cookie Policy for the full list.
Children
The charity's work is for children, but our website is aimed at adults — parents, donors, volunteers and sponsors. We do not knowingly collect personal data from children under the age of 14. If you believe a child has given us personal data, please contact us and we will delete it.
Who we share your data with
We do not sell or rent personal data. We share data only with:
- Our hosting provider, who stores the website and its database (currently Hostify), under a data-processing agreement.
- Our email provider (which hosts the hello@cansforkids.org mailbox and delivers enquiry emails).
- YouTube (Google), if you play a video embedded on our site — videos are embedded in privacy-enhanced mode, and Google receives data only when you play them.
- OpenStreetMap, which powers our Can Bank Locator map — no personal data is sent.
- Authorities, only where the law requires us to.
Our providers are bound by data-processing agreements and EU-standard safeguards. Some providers store data outside the EU/EEA; where that happens we rely on the European Commission's standard contractual clauses to protect your data.
How long we keep your data
- Contact messages and enquiries — up to 24 months, so we can follow up and keep a record of our correspondence, then deleted.
- Donation correspondence — for as long as required by Cyprus charity and accounting law (currently six years).
- Committee admin accounts — while the person is active on the committee, then removed.
- Server logs — up to 30 days for security, then deleted.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data (the right to be forgotten).
- Ask us to restrict or stop processing your data.
- Receive your data in a portable format.
- Object to processing based on our legitimate interest.
- Withdraw any consent you have given, at any time.
To exercise any of these rights, email us at hello@cansforkids.org — we will respond within 30 days. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) if you believe we have not handled your data properly.
Security
We take reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), secure admin access, and access limited to the committee members who need it.
Changes to this policy
We may update this policy from time to time — for example, if we add new features such as website analytics. The latest version will always be on this page, with the date it was updated.
Contact
Cans For Kids (Charity No 187), Cyprus. Email: hello@cansforkids.org.
If you have any question about how we handle personal data, we will be happy to help.