How we handle information entrusted to the Institute.

1. Scope

This Privacy Policy applies to information collected through the ISO Metrik Institute website and related online forms. It does not replace a separate research consent, program consent, employment notice, donor agreement, or third-party service’s privacy terms.

2. Information you provide

The Institute may collect contact details and information voluntarily submitted through contact, newsletter, donation, partnership, volunteer, employment, program-interest, or public-record request forms.

Visitors should not submit medical records, card numbers, bank credentials, government identification numbers, passwords, or other unnecessary sensitive information through general website forms.

3. Donation and payment information

Online donations may be processed through WooCommerce, Stripe, or another approved payment provider. Payment credentials are entered with the payment provider and are not intended to be collected in general Institute forms. The Institute may receive transaction details needed for acknowledgment, accounting, donor stewardship, fraud prevention, and legal compliance.

4. Technical information

The website and its service providers may process ordinary technical information such as browser type, device type, approximate location derived from an IP address, pages visited, referring pages, timestamps, security events, and cookie or similar identifiers needed for operation, security, analytics, and user preferences.

5. How information may be used

• Respond to questions, requests, applications, and expressions of interest.
• Administer donations, acknowledgments, subscriptions, programs, partnerships, and public-record requests.
• Maintain governance, financial, tax, employment, research, safety, and charitable-operation records.
• Protect the website, prevent misuse, and investigate security or compliance concerns.
• Improve website accessibility, clarity, performance, and public usefulness.
• Meet legal, regulatory, contractual, and ethical responsibilities.

6. When information may be shared

Information may be shared with authorized personnel, professional advisers, payment processors, website and hosting providers, form or email services, auditors, regulators, law enforcement, or other service providers when reasonably necessary for an authorized purpose. The Institute does not intend to sell or trade personal or donor information.

7. Donor privacy

The Institute does not sell, rent, or trade donor lists or share donor information for another organization’s marketing or solicitation. Donor information may be disclosed only as reasonably necessary to payment processors, professional advisers, auditors, regulators, law enforcement, and service providers that help administer a gift, acknowledgment, restriction, fraud review, or legal obligation.

The Institute will use reasonable efforts to honor a donor’s anonymity, public-recognition, and communication preferences when feasible. An anonymity request limits public recognition but does not eliminate confidential accounting, audit, tax, governance, payment, or legally required records. Public donor recognition will be based on consent or an established acknowledgment practice that gives the donor a reasonable opportunity to request anonymity or correction.

Donors may request access, correction, an update to recognition or communication preferences, or information about the handling of a gift by contacting the Institute. Some records must be retained for legal, accounting, tax, fraud-prevention, governance, or operational purposes.

8. Retention and security

Information may be retained for periods appropriate to its legal, tax, accounting, governance, research, safety, historical, or operational purpose. The Institute uses reasonable administrative and technical safeguards, but no website or transmission method can guarantee absolute security.

9. Your choices

You may request access, correction, deletion, or an update to communication preferences by contacting the Institute. Some records may not be removed when retention is required or justified by law, tax and accounting rules, research integrity, fraud prevention, contractual obligations, or institutional record policy.

10. Third-party websites

Links to external websites and embedded third-party services are governed by their own terms and privacy practices. The Institute is not responsible for a third party’s content or information practices.

11. Policy updates

This policy may be updated as the website, programs, service providers, or legal obligations change. The current version and revision date will be posted on this page.