top of page

Privacy Policy

Donor privacy policy

Thank you for taking the time to read our Donor Privacy Policy.


About us

At Fundación Niños del Arco Iris we are committed to protecting your privacy and the privacy of our beneficiaries.


This Policy explains how and why we collect and process donor-related personal information, and with whom we may share it.


Please read this Policy carefully. If you do not agree to this Policy, please do not submit any personal information to us (either online or within any form).


For the purposes of data protection law (including the General Data Protection Regulation), the data controller is Fundación Niños del Arco Iris. We are registered with Sunat as a recipient of donations, with Resolution of Intendancy No. 0990050004022.


Information We Collect

We may collect and use the following personal information:


Contact information including: names, surnames, date of birth, address, telephone number, email, card number and card details.


Additional information that is reasonably necessary in connection with our processing of a Donor contribution, such as any payment information and any information that we need to help us respond to any inquiries and requests.

We may also collect personal information during visits or other meetings with you, or through telephone conversations or emails with you, or from publicly available sources of information.


How we use personal information and our legal basis for doing so

We collect, store and use personal information related to donors in order to keep them informed of our activities and to request assistance in fundraising.


This includes:

  • Manage financial and in-kind contributions;

  • Communicate with donors about our activities;

  • Support and communicate to Donors when they are carrying out activities on our behalf;

  • Comply with any conditions associated with any financing or other support we receive. In general, we may also use personal information for the following reasons:

  • Compliance with legal, regulatory and corporate governance obligations and good practices;

  • Collect information as part of investigations by regulatory bodies or in connection with legal proceedings or requests related to those matters;

  • Guarantee the confidentiality of confidential information;

  • Statistical analysis and research;

  • Prevent unauthorized access and modifications to our systems.

  • Summary table of personal data processed and the legal basis for processing

  • Type (s) of personal information we process  


Why we process this personal information 

Our legal basis for processing your personal information allows us to identify you and any accounts you have with us;

To communicate with you regarding our activities and our assistance and contributions to us; and

To process payments made to us and to receive funds.


More information about the information we use and why

When we have a legal basis to use your personal information without consent (as we have described above), this Policy fulfills our duty to process personal information in a transparent manner, and helps us to do so fairly and lawfully and in a way that you I would expect given the nature of our relationship with you, to give you appropriate notice and explanation of how your personal information will be used. When consent is required for our use of your personal information, we will ask you to positively opt out by checking the appropriate consent box otherwise communicating your consent. You may withdraw this consent at any time, but please note that withdrawing such consent may mean that we are able to continue to provide any service to you and may be required to discontinue your participation in activities where the use of personal data with your consent is reasonably necessary. When you provide us with personal information related to other people, you must obtain their consent before doing so. If you have any questions or need more information about our use of personal information, please contact


Share your information

We may share your personal information with your consent or as necessary with selected third-party service providers, and other companies that support us in carrying out the activities set out in the tables above. We require all of our third-party service providers and all other companies that support us to take appropriate security measures to protect your personal information in accordance with our policies. We do not allow our third-party service providers to use your personal information for their own purposes and we only allow them to process your personal information for specific uses in accordance with our instructions. We may also need to share your personal information with a regulator or otherwise to comply with the law or to respond to valid legal process, including from law enforcement or other government agencies.


With whom we can share personal information

We may share your personal information with the organizations or types of organizations listed below:


The payment service provider of Fundación Niños del Arco Iris to receive financial donations is Niubiz and it may process financial transactions on our behalf and third parties or service providers in the country or in another country, as necessary.


We also reserve the right to disclose some or all of your personal information to:

government agencies or law enforcement agencies, or response to other legal or regulatory requests, but only if and to the extent required by law to do so; and

our auditors, attorneys or other professional advisers for any auditing, accounting or related business purposes, or in the execution, defense or resolution of any legal proceeding brought by or against us, but only if and to the extent such disclosure is reasonably necessary for these purposes.


Parental consent

If you are at least 16 years old and feel that you understand this Policy well enough to give us permission to use your personal information when such permission is required, then we ask that you give us that permission. We also ask your parent, guardian, or other person with legal parental responsibility to confirm that permission.


If you are a parent, guardian or other person with legal parental responsibility for a child whose personal information will be used under this policy, then we ask that you read and accept this Policy and in order to give your permission for us to use that personal information. If your child is at least 16 years of age and is able to understand the meaning and impact of this Policy, then we ask that your child also give permission for us to use their personal information. If you have any questions or queries, please contact us using the details below.


Where we store and process your data

The information we collect in relation to you will be stored on our secure servers within the Fundación Niños del Arco Iris.


We believe that we have taken all technical and organizational measures reasonably necessary to ensure that your personal information under our control is kept securely and in accordance with applicable law and this Policy. However, keep in mind that the transmission of information over the Internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of any information that is transferred to us over the Internet.



Our website uses cookies to distinguish you from other users of our website. Cookies are pieces of information transferred from our website to your computer's hard drive, which allow our website to store information about your browsing patterns.  This helps us to provide you with a good experience when you browse our website and also enables us to improve our site. Every time you use our website, the cookie can be accessed. You can disable cookies in your options, but keep in mind that by doing so you may lose certain functions or functionalities of our website. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Policy. We also collect statistical and technical information about our web users, traffic patterns, and website performance in order to provide a better experience for website visitors. This may include the IP address of the device you are using to access our website, your operating system, and your browser type. This data does not identify you.


Use of your information for direct marketing purposes

Where you have consented to receive marketing communications from us, and / or to be placed on mailing lists, in connection with future support of our charitable goals or as a potential donor or fundraiser, we may also (in accordance with applicable law) use your contact details, including email address and phone numbers, to request and / or process donations, record transactions and related direct marketing purposes. We may also collect and store your bank or credit card details when you are an active donor or fundraiser, and use that information in connection with receiving donations and recording transactions from or with you. We do not sell or share any of your personal information to any other person or business for marketing purposes.


Even if you have initially consented to receiving marketing communications from us, you have the right at any time to ask us not to use your personal information for marketing purposes. You can exercise this right by opting out of any marketing communication that we may send you. You can also exercise this right by contacting us at


Use of your information for direct marketing purposes

We will only retain your personal information for as long as is necessary to fulfill the purposes for which we collected it, including satisfying any legal, accounting or reporting requirements. In determining the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your information, the purposes for which we process your information, and towards where we can achieve those purposes through other means, and applicable legal requirements. In some circumstances we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without prior notice. Even if you request that we erase your information, we may still need to retain it (see Your rights below) or maintain it in a non-identifying form. For more information on how long we keep your information, please contact


Updating and access to your personal information

You have the right to access personal information about you, subject to certain conditions, and to request its rectification or deletion. If you want to access or modify the personal information we have about you or want us to stop using your personal information, please contact


Your rights

By law you have the right:


To request access to your personal information (commonly known as a "data subject access request").  This allows you to receive a copy of the personal information we hold about you and check that we are processing it legally.  We will have to prove your identity before we disclose any personal information to you.


To request the correction or deletion of your personal information (unless we have a legal right to keep it. You also have the right to ask us to delete or delete your personal information when you have exercised your right to object to processing (see below).


To object to the processing of your personal information when we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation that makes you want to object to the processing on this ground. You also have the right to object when we are processing your personal information for direct marketing purposes.


To request the restriction of the processing of your personal information.  This allows you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.

(in certain circumstances) to request the transfer of your personal information to another party.


To change your information processing preferences (including withdrawing your consent to data processing and / or to receive marketing communications) at any time.


You should be aware that if you ask us to stop processing your personal information in a certain way or to erase your personal information, and this type of processing is necessary for us to process your donation or continue to provide you services, we may not be able to do so. This does not include your right to object to direct marketing, which can be exercised at any time without restriction. If you wish to exercise any of the rights mentioned above, please contact You will not have to pay a fee to access your personal information (or to exercise any of the other rights).


However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. We may need to request specific information from you to help us confirm your identity and verify your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to anyone who has no right to receive it. Where you have consented to the collection, use or transfer of your personal information for a specific purpose, you have the right to withdraw your consent to that specific processing at any time. To withdraw your consent, please contact Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes that you originally agreed to, unless we have another legitimate basis. to do it in law.



You confirm your consent to receive communications from us by email, SMS and / or through social networks about our activities and campaigns or other information that we believe may be of interest to you (including, for example, promotional materials and newsletters) . You have the right at any time to withdraw your consent for us to contact you for marketing purposes or to give your information to Fundación Niños del Arco Iris. If you no longer wish to be contacted for marketing purposes, you can unsubscribe by using the "unsubscribe" link at the bottom of our marketing messages or by contacting


We will not provide your personal information to any other third party company for marketing purposes.


Other web sites

Our website may contain links to other websites, including Facebook and Instagram. This Policy only applies to our website so when you link to other websites, you should read their own privacy policies.


Changes to this Policy

We keep this Policy under regular review and will post any updates on this web page. This Policy was last updated in November 2021.


How to get in touch with us

Thank you for taking the time to review our Privacy Policy. The Fundación Niños del Arco Iris takes the privacy and security of personal data very seriously. If you have any questions, you can contact:


Children of the Rainbow Foundation

Qquerocancha S / N, Urubamba, Cusco



If for any reason you are not satisfied with the way we have handled your personal information, please contact our data protection officer at

bottom of page