Privacy Policy
Effective Date: August 26, 2026
Last Updated: August 26, 2026
Legado El Salvador (“Legado El Salvador,” “Legado,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, store, protect, and otherwise process personal information through our website, online forms, donation pages, communications, programs, events, and other services or interactions that link to or reference this Privacy Policy (collectively, the “Services”).
Legado El Salvador is a nonprofit organization operating programs in El Salvador with administrative operations in California, United States. Because we operate across jurisdictions, this Privacy Policy is intended to address applicable privacy and data-protection requirements in the jurisdictions in which we operate, including applicable requirements of El Salvador and the United States.
By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires your consent to a particular processing activity, we will obtain that consent in the manner required by law.
1. Information We Collect
Depending on how you interact with Legado, we may collect the following categories of information.
Information You Provide Directly
We may collect information you voluntarily provide to us, including:
Name and contact information, such as email address, mailing address, telephone number, and other contact information.
Information submitted through contact forms, volunteer applications, event registrations, inquiries, surveys, or other forms.
Donation and transaction information, including donation amount, date, payment method, billing information, and related transaction details.
Information provided when you subscribe to newsletters, updates, or other communications.
Information you provide when communicating with our staff, volunteers, representatives, or program personnel.
Information relating to your participation in our programs, events, volunteer activities, or mission trips.
Information you voluntarily provide about your interests, preferences, affiliations, or areas in which you wish to support our work.
Any other information you voluntarily choose to provide.
Information Collected Automatically
When you access our website, certain information may be collected automatically by us or by third-party service providers. This may include:
IP address;
browser and device type;
operating system;
referring and exit pages;
pages viewed;
dates and times of access;
approximate geographic information;
website interactions and usage information;
cookies and similar technologies; and
other technical information reasonably necessary to operate, secure, and improve the website.
We may use cookies, pixels, analytics tools, and similar technologies to operate the website, understand website usage, maintain security, remember preferences, and improve our Services.
2. How We Collect Information
We may collect personal information:
directly from you;
automatically when you use our website or Services;
through forms, registrations, and applications;
when you make or inquire about a donation;
when you communicate with us;
through third-party service providers that provide services on our behalf;
from event or program partners where legally permitted; and
from publicly available sources where legally permitted.
We do not intentionally collect more personal information than is reasonably necessary for the purposes described in this Privacy Policy.
3. How We Use Personal Information
We may use personal information for legitimate organizational, operational, administrative, charitable, and legal purposes, including to:
operate and maintain our website and Services;
respond to questions, inquiries, and requests;
process and acknowledge donations;
issue donation receipts and maintain appropriate financial records;
communicate with donors, volunteers, supporters, participants, and other individuals;
send newsletters, updates, event information, and other communications;
administer events, volunteer activities, mission trips, and programs;
evaluate and improve our programs and Services;
understand how our website is used;
maintain website and information-security measures;
detect, investigate, and prevent fraud, abuse, unauthorized access, or other unlawful activity;
comply with applicable laws, regulations, legal processes, and governmental requests;
establish, exercise, or defend legal claims and rights;
maintain organizational records;
protect the safety, rights, property, and security of Legado, our personnel, program participants, supporters, website users, and other individuals; and
carry out other purposes disclosed to you at the time information is collected or otherwise permitted by applicable law.
We may also use aggregated, de-identified, or anonymized information for legitimate organizational purposes, including research, analytics, reporting, and improving our programs, provided that such information cannot reasonably be used to identify you.
4. Donations and Payment Information
Legado may use third-party payment processors to process donations and other payments.
When you make a donation, your payment information may be collected and processed directly by the applicable payment processor. Legado generally does not receive or store your complete credit card number, security code, or online banking credentials.
Payment processors may collect and process information according to their own privacy policies and terms.
We may receive information such as your name, email address, donation amount, transaction date, payment status, and other information necessary for donation administration, accounting, acknowledgment, tax reporting, fraud prevention, and legal compliance.
Donation records may be retained as required by applicable law and our legitimate organizational and accounting requirements.
5. Information About Children and Program Participants
Legado may operate programs that involve children, families, or other vulnerable individuals.
We take additional care with information relating to children and program participants. We do not knowingly collect personal information directly from children through our public website for purposes unrelated to the operation of an applicable program.
Where our programs require the collection of information about a child or other program participant, such information may be collected from a parent, legal guardian, authorized representative, partner organization, or other authorized source, as appropriate.
Program-related information may include names, ages, photographs, educational information, emergency-contact information, participation information, and other information reasonably necessary to administer and protect participants.
We may limit access to participant information to authorized personnel, volunteers, contractors, or partner organizations who have a legitimate need to access that information.
6. Photographs, Video, and Stories
As part of our nonprofit activities, Legado may photograph, record, or otherwise document events, programs, participants, volunteers, staff, or other individuals.
Where appropriate or legally required, Legado will obtain applicable releases, permissions, consents, or authorizations before using identifiable photographs, videos, testimonials, or personal stories for public-facing purposes.
Such materials may be used in connection with Legado's charitable mission, including on our website, social media accounts, newsletters, fundraising materials, educational materials, reports, presentations, and other communications.
We recognize that stories involving children and vulnerable individuals require particular care and will seek to avoid unnecessary disclosure of identifying or sensitive information.
If you believe that a photograph, video, story, or other content concerning you or your child has been used improperly, please contact us using the information below.
7. Sensitive Personal Information
Certain information may be considered sensitive or specially protected under applicable law. Depending on the nature of our programs, this may include information concerning health, family circumstances, government identification, financial information, or other sensitive information.
We seek to limit the collection of sensitive information to circumstances in which it is reasonably necessary for a legitimate organizational purpose, program administration, safety, legal compliance, or another permitted purpose.
We do not request that individuals submit sensitive information through ordinary website contact forms unless specifically instructed to do so.
Please do not submit sensitive personal information through the website unless it is specifically requested and there is a secure method provided for doing so.
8. How We Share Personal Information
We do not sell personal information as a source of revenue.
We may disclose personal information to third parties when reasonably necessary to operate our organization and provide our Services, including:
Service Providers
We may share information with vendors and service providers that perform services on our behalf, such as:
website hosting and technology providers;
payment processors;
email and communication platforms;
donor-management and customer relationship management systems;
analytics providers;
cloud-storage providers;
accounting and financial service providers;
event-management platforms;
form and registration providers;
security and fraud-prevention providers; and
other vendors necessary to operate our organization.
These providers are generally authorized to use personal information only as reasonably necessary to provide services to Legado or as otherwise permitted by applicable law.
Program and Operational Partners
Where reasonably necessary to administer programs or fulfill our charitable mission, we may share information with affiliated entities, local program partners, contractors, volunteers, or other organizations involved in providing or supporting our Services.
We seek to limit such disclosures to information reasonably necessary for the applicable purpose.
Legal and Safety Purposes
We may disclose personal information when we reasonably believe disclosure is necessary to:
comply with applicable law or legal process;
respond to a lawful request from a governmental authority;
protect the rights, property, or safety of Legado or others;
investigate fraud, abuse, security incidents, or unlawful activity;
enforce our agreements or policies; or
establish, exercise, or defend legal claims.
Organizational Transactions
If Legado undergoes a merger, restructuring, reorganization, transfer of assets, change in organizational structure, dissolution, or similar transaction, personal information may be transferred as part of that transaction to the extent permitted by applicable law.
9. International Data Transfers
Because Legado operates in El Salvador and maintains administrative operations in the United States, your personal information may be transferred to, stored in, or processed in countries other than the country in which you reside.
For example, information collected in El Salvador may be processed or stored in the United States through our administrative systems or third-party service providers.
By providing personal information to us, you acknowledge that such transfers may occur where permitted by applicable law.
We will take reasonable steps to ensure that personal information is handled in accordance with applicable legal requirements and this Privacy Policy.
10. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.
However, no website, electronic transmission, information system, or method of storage can be guaranteed to be completely secure.
Accordingly, while we take reasonable measures to protect personal information, we cannot guarantee the absolute security of information transmitted to or stored by us or our service providers.
You are responsible for maintaining the confidentiality of any account credentials or other information used to access password-protected portions of our Services.
If we become aware of a security incident involving personal information, we will respond in accordance with applicable law and our incident-response procedures.
11. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
provide and administer our Services;
maintain donor and organizational records;
satisfy legal, accounting, tax, and reporting requirements;
resolve disputes;
enforce agreements;
prevent fraud and abuse;
maintain appropriate historical and organizational records; and
establish, exercise, or defend legal claims.
Different categories of information may be retained for different periods depending on their purpose and applicable legal requirements.
When information is no longer reasonably necessary, we may delete, anonymize, aggregate, or securely dispose of it, subject to applicable legal and operational requirements.
12. Your Privacy Choices
Depending on your location and applicable law, you may have rights relating to your personal information.
These rights may include the ability to:
request access to personal information we maintain about you;
request correction of inaccurate information;
request deletion of personal information, subject to applicable exceptions;
withdraw consent where processing is based on consent;
object to or restrict certain processing;
request information about how your personal information is processed or disclosed; and
unsubscribe from certain marketing or informational communications.
Certain information may be retained despite a request for deletion where retention is necessary or permitted by law, including for legal compliance, tax and accounting obligations, fraud prevention, security, dispute resolution, or the establishment, exercise, or defense of legal claims.
13. Marketing Communications
If you subscribe to our newsletter or other communications, we may use your contact information to send you updates about Legado, our programs, events, fundraising opportunities, volunteer opportunities, and other mission-related activities.
You may unsubscribe from promotional or informational emails by using the unsubscribe mechanism included in the communication or by contacting us.
Even if you opt out of certain communications, we may continue to send transactional, administrative, legal, security, donation-related, or other communications that are necessary to fulfill a transaction or relationship with you.
14. Cookies and Tracking Technologies
Our website may use cookies, pixels, tags, analytics tools, and similar technologies.
These technologies may help us:
operate the website;
remember preferences;
understand website traffic;
measure the effectiveness of communications;
improve website functionality;
detect security issues; and
understand how visitors interact with our Services.
Third-party providers may independently collect information through these technologies when their tools are implemented on our website.
You may be able to control certain cookies through your browser settings or available cookie-management tools. Disabling certain cookies may affect website functionality.
15. Third-Party Websites and Services
Our website may contain links to websites, applications, social-media platforms, payment processors, or other services operated by third parties.
We are not responsible for the privacy, security, content, or practices of third-party websites or services.
Your use of a third-party website or service is governed by that third party's own terms and privacy policy.
We encourage you to review the privacy policies of third-party services before providing them with personal information.
16. Social Media
Legado may maintain accounts or pages on third-party social-media platforms.
Interactions with Legado through social-media platforms may be subject to the privacy policies and terms of those platforms. Information you publicly post or disclose on a third-party platform may be visible to others and may not be controlled by Legado.
17. California Privacy Information
Legado is a nonprofit organization, and the California Consumer Privacy Act (“CCPA”), as amended, generally does not apply to nonprofit organizations.
Nevertheless, Legado seeks to apply privacy principles consistent with applicable California law and other applicable privacy requirements.
Nothing in this Privacy Policy is intended to provide fewer privacy protections than those required by applicable law.
If a California law provides you with a privacy right applicable to Legado or a particular processing activity, you may contact us using the information below to exercise that right.
18. El Salvador Privacy Information
Legado recognizes that El Salvador has enacted the Ley para la Protección de Datos Personales (Decreto Legislativo No. 144), which establishes requirements concerning the collection, processing, storage, use, and other handling of personal data.
To the extent applicable to Legado's activities, we intend to process personal data in accordance with applicable requirements of El Salvador's data-protection framework.
Individuals whose personal information is subject to applicable El Salvador privacy protections may contact us regarding requests concerning their personal information, including requests for access, correction, deletion, or other rights available under applicable law.
19. Do Not Track
Some web browsers offer a “Do Not Track” (“DNT”) setting.
Because there is not a universally accepted standard for responding to DNT signals, our website may not respond to all browser-based DNT signals.
Where applicable law requires us to recognize a particular privacy preference signal, we will process that signal as required by law.
20. Children's Privacy
Our website is not intended to be a general-purpose service for children to independently provide personal information.
We do not knowingly solicit personal information from children through our public website except where such collection is reasonably necessary for an authorized program or activity and handled in accordance with applicable law and appropriate parental or guardian authorization.
If you believe a child has provided personal information to us improperly, please contact us so that we can evaluate the circumstances and take appropriate action.
21. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, Services, technology, applicable law, or organizational needs.
When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.
Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.
Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by law.
22. Contact Us
If you have questions about this Privacy Policy, wish to exercise a privacy right, or have concerns about the handling of your personal information, please contact:
Legado El Salvador
8061 22nd St.
Westminster, CA 92683
United States
Email: [LegadoElSalvador@gmail.com]
For privacy requests, please include sufficient information for us to understand and process your request. We may take reasonable steps to verify your identity before providing access to, modifying, or deleting personal information, where permitted or required by applicable law.
23. No Guarantee of Security
Although Legado takes reasonable precautions to protect personal information, no method of electronic transmission or storage is completely secure.
Accordingly, Legado does not warrant or guarantee that personal information will never be accessed, disclosed, altered, lost, destroyed, or otherwise compromised, and Legado disclaims responsibility for security incidents to the maximum extent permitted by applicable law.
Nothing in this Privacy Policy limits any rights or remedies that cannot lawfully be limited or waived.
24. Severability
If any provision of this Privacy Policy is determined to be invalid, unlawful, or unenforceable, that provision shall be interpreted or modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall remain in full force and effect to the extent permitted by law.
25. Governing Law
This Privacy Policy shall be interpreted and applied in accordance with applicable law.
Nothing in this section is intended to deprive an individual of mandatory rights or protections provided by the laws applicable to that individual or to restrict any rights that cannot lawfully be restricted.
By using the Services, you acknowledge that you have had an opportunity to review this Privacy Policy.