Privacy Policy
Effective Date: October 1, 2025
Who we are: Cristeros (“Cristeros,” “we,” “us,” or “our”) is an initiative of Aequitas Education, a U.S. 501(c)(3) nonprofit organization (EIN: 83-1080761) based in New Mexico. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our websites (including www.cristeros.co), mobile applications, online services, and any other properties that link to this Policy (collectively, the “Services”).
By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.
1) Scope & Audience
This Policy applies to personal information we process as a controller through the Services, including information related to donors, app users, volunteers, and newsletter subscribers. This Policy does not apply to third-party sites or services that we do not control.
2) Information We Collect
a) Information you provide
- Account & profile: name, email, username, password, photo, parish/diocese, interests.
- Donations & tax receipts: name, email, address, donation amount, messages to us; payment card data is processed by our payment processor(s) and not stored by us.
- Communications: emails, support requests, surveys, feedback.
- User content: posts, messages, images, and other materials you submit in the app or community features.
b) Information collected automatically
- Usage & device data: IP address, device identifiers, app version, pages/screens viewed, actions taken, timestamps, crash logs, and diagnostics.
- Cookies/SDKs: cookies, pixels, local storage, and mobile SDKs for core functionality, security, analytics, and (if enabled) messaging. You can control cookies through your browser/app settings, but core cookies may be required for the Services to function.
c) Information from third parties
- Payment processors & fundraising platforms: payment status, donation amounts, and limited donor details (no full card numbers).
- Auth/identity providers (if used): sign-in info and basic profile.
- Analytics & communications providers: aggregate or pseudonymous engagement metrics.
We do not knowingly collect sensitive personal data (e.g., precise geolocation, health data, government IDs), and we ask that you do not submit it through the Services.
3) How We Use Information
We use personal information to:
- Provide, secure, maintain, and improve the Services;
- Process donations, send receipts/acknowledgments, and maintain donor records;
- Communicate with you (e.g., service notices, tax receipts, newsletters, updates);
- Moderate user content and enforce our Terms;
- Analyze and improve engagement and performance;
- Comply with legal obligations and protect our rights, users, and the public;
- With consent, send promotional, fundraising, or program communications (opt-out anytime).
Legal bases (EEA/UK): performance of a contract, legitimate interests (e.g., security, analytics, communications), consent (where required), and legal obligations.
4) When We Share Information
We do not sell personal information. We may share:
- Service providers/Processors: hosting, payment, analytics, email/SMS, security, support—bound by confidentiality and data-processing terms;
- Affiliates: Aequitas Education and related nonprofit activities consistent with this Policy;
- Legal & safety: to comply with law, valid requests, or to protect rights, privacy, safety, and property;
- Organizational transfers: in case of reorganization or merger into another nonprofit entity;
- With your direction or consent.
5) Data Retention
We retain personal information for as long as necessary to provide the Services, comply with legal, accounting, and tax requirements (e.g., donation records), resolve disputes, and enforce agreements. When no longer needed, we delete or de-identify data.
6) Children’s Privacy
The Services are not intended for children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.
7) Your Choices & Rights
- Email/SMS: unsubscribe via message footer or app settings.
- Cookies/Tracking: control via browser/device settings (core cookies may be required).
- Access/Correction/Deletion: you can request access, correction, deletion, or restriction of your personal information, or object to processing where applicable.
- California/CPRA: we do not “sell” or “share” personal information as defined by CPRA; you may request access, deletion, and information about our practices.
- EEA/UK: you may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is based on consent. You may lodge a complaint with your data protection authority.
We may need to verify your identity and request limited additional information to process rights requests.
8) Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. No security controls are 100% effective; we cannot guarantee absolute security.
9) International Transfers
If you access the Services from outside the United States, your information may be processed in the U.S. and other countries with laws that may differ from yours. Where required, we implement appropriate safeguards (e.g., Standard Contractual Clauses).
10) Third-Party Services & Links
Our Services may link to third-party websites, apps, or services. Their privacy practices govern those properties; review their policies before using them.
11) Changes to this Policy
We may update this Policy from time to time. We will post the updated Policy and revise the “Effective Date.” Material changes will be communicated as required by law.
12) Contact Us
Cristeros (Aequitas Education)
Gallup, New Mexico, USA
Email: admin@aequitas.charity
