Who we are
BeneFutura International, Inc.
Effective Date: 01 January 2026
Last Updated: 17 February 2026
BeneFutura International, Inc. (“BeneFutura,” “BFI,” “we,” “our,” or “us”) is committed to protecting your privacy and handling your personal data transparently and lawfully in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), where applicable.
By using our website and services, you acknowledge the practices described below.
1. Data Controller
For purposes of the GDPR, BeneFutura International, Inc. is the Data Controller of your personal data.
Contact:
BeneFutura International, Inc.
[Insert Address]
[Insert Email – e.g., privacy@benefuturainternational.org]
2. Categories of Personal Data We Collect
We may collect and process the following categories of personal data:
A. Identity Data
- Full name
- Title
- Organization affiliation
B. Contact Data
- Email address
- Mailing address
- Telephone number
C. Financial Data
- Donation information
- Transaction history
(Payment details are processed by secure third-party providers.)
D. Technical Data
- IP address
- Browser type and version
- Time zone setting
- Device information
- Website usage data
E. Communications Data
- Messages, inquiries, or feedback you send to us
- Event registration forms
- Volunteer applications
3. Legal Bases for Processing (GDPR)
Under GDPR, we rely on the following lawful bases:
A. Consent
When you:
- Subscribe to newsletters
- Sign up for updates
- Register for events
You may withdraw consent at any time.
B. Contractual Necessity
When processing is necessary to:
- Process donations
- Provide receipts
- Manage volunteer or partnership agreements
C. Legal Obligation
When required for:
- Tax reporting
- Regulatory compliance
- Anti-fraud and accountability measures
D. Legitimate Interests
We may process data when necessary for:
- Improving website functionality
- Organizational communications
- Fraud prevention
- Program evaluation
We ensure our legitimate interests do not override your fundamental rights.
4. International Data Transfers
BeneFutura International, Inc. is based in the United States. If you are located in the European Economic Area (EEA), your personal data may be transferred to and processed in the United States or other countries that may not provide the same level of data protection as your home country.
Where such transfers occur, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs), where applicable
- Contractual protections with service providers
- Security and confidentiality agreements
5. Data Retention
We retain personal data only as long as necessary for:
- Fulfilling the purpose for which it was collected
- Legal, accounting, or reporting requirements
- Donor recordkeeping obligations
When data is no longer required, it is securely deleted or anonymized.
6. Your Rights Under GDPR
If you are located in the EEA or UK, you have the following rights:
Right of Access
Request a copy of your personal data.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”)
Request deletion of your personal data under certain conditions.
Right to Restrict Processing
Request limited use of your data.
Right to Data Portability
Request transfer of your data to another organization.
Right to Object
Object to processing based on legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
To exercise these rights, contact:
info@benefuturainternational.org
We will respond within one month, as required by GDPR.
7. Automated Decision-Making
BeneFutura International, Inc. does not engage in automated decision-making or profiling that produces legal or similarly significant effects.
8. Cookies and Tracking Technologies
We use cookies to:
- Improve website functionality
- Analyze site usage
- Enhance user experience
If required by applicable law (including GDPR), we provide a cookie consent banner allowing you to accept or manage cookie preferences.
9. Data Security
We implement appropriate technical and organizational security measures, including:
- Secure hosting environments
- Encrypted payment processing
- Limited access to personal data
- Confidentiality obligations for staff and partners
10. Third-Party Processors
We may use trusted third-party providers for:
- Website hosting
- Email communication services
- Donation processing
- Analytics
These providers process personal data only under contractual agreements that ensure GDPR-compliant protections.
11. Complaints
If you are located in the EEA and believe your data has been processed unlawfully, you have the right to lodge a complaint with your local Data Protection Authority (DPA).
12. Children’s Privacy
Our services are not directed to individuals under 13 years of age, and we do not knowingly collect personal data from children without appropriate consent.
13. Updates to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with a revised “Last Updated” date.