SHEMIM® (“SHEMIM”, “we”, “us”) operates shemim.org. This policy explains the information processed through the site and the choices available to you.
Data controller. SHEMIM, New York, USA. Contact: mail [at] shemim.org.
Messages and collaboration inquiries
The contact and collaboration forms ask for your name, email address, and message. The contact form also offers an optional phone field; the collaboration form asks for your area of interest. We use these details to respond to inquiries and consider collaboration proposals.
Submissions go to our Cloudflare-hosted gateway at /api/submit, which checks a
Cloudflare Turnstile verification token and sends the message through Resend
to our configured inbox. Your email address is used as the reply-to address. When available,
your IP address is sent to Cloudflare for the verification check and is also included in the
email delivered through Resend. This means the message and IP address can remain together in
email records. Please do not send sensitive health information through these forms.
Site delivery and security
Cloudflare provides hosting, content delivery, and security. It receives your IP address and request information when delivering pages. On pages with our contact or collaboration form, the Turnstile script loads to check for automated abuse; that check is separate from your analytics choice. See Cloudflare's Privacy Policy.
Cloudflare also adds browser security checks to delivered pages. Its hosting configuration currently adds a Cloudflare Web Analytics beacon for page and performance metrics. This is separate from the Google analytics choice below; our current Content Security Policy blocks that beacon from loading. Declining Google analytics does not disable Cloudflare's delivery or security processing.
Analytics and your choice
The site loads Google Analytics 4, and Google Tag Manager if configured, only after you accept analytics in the consent banner or have a saved acceptance. Analytics measures site use, such as page views and browser or device information. Requests to Google also expose network information, including your IP address, to Google. This policy does not promise that analytics activity is anonymous. See Google's Privacy Policy.
Your choice is stored in your browser's localStorage. To withdraw acceptance,
open Cookie settings in the footer and select Decline.
The site saves the denied choice, disables its Google Analytics measurement, attempts to
remove known first-party analytics cookies, and reloads the page if analytics tags were
already loaded so they are not loaded again. This does not erase data already sent to Google
or remove third-party providers' storage. See the Cookie Policy
for preference storage, caching, and the limits of these controls.
Donations through Donorbox
The embedded Donorbox form loads automatically on our donation page. Visiting that page connects your browser to Donorbox and its service providers before you submit a donation. This loading is separate from your choice about SHEMIM's analytics. Donorbox and the payment providers process donor, transaction, payment, and technical information under their own policies. Their use of cookies and similar technologies is described in Donorbox's Privacy Policy. Our contact and collaboration forms do not collect card or bank details.
Donation records made available to SHEMIM are used to administer contributions, respond to donor inquiries, and handle applicable recordkeeping requirements. Please do not include sensitive health information in a donation comment. Recurring contributions and refund inquiries are covered in our Terms & Conditions.
Service providers and processing locations
- Cloudflare: site delivery, hosting, security, and form verification.
- Resend and our email provider: delivery and storage of form messages, including the submitted fields and IP address described above.
- Google: consent-gated Analytics 4 and, if configured, Tag Manager.
- Donorbox and payment providers: the embedded donation interface, payments, and recurring-gift administration.
These services may process information in the United States and other countries. Data protection rules may differ from those where you live. This policy does not assert that a particular international-transfer contract or safeguard has been put in place for every service.
Retention
Messages may remain in our inbox and email-delivery systems as part of inquiry and collaboration records. Donation records are also subject to payment and recordkeeping requirements. Provider settings and policies affect retention of analytics, security, email, and payment information. We do not promise automatic deletion after a fixed period. Contact mail [at] shemim.org with a question about a particular record or a deletion request.
Your rights
Depending on the law that applies where you live, you may have rights to access, correct, delete, obtain a copy of, restrict, or object to processing of your personal information, withdraw consent, or complain to a data protection authority. To ask about information held by SHEMIM or exercise an applicable right, contact mail [at] shemim.org. For information a provider handles independently, its own privacy notice also explains how to contact it. The analytics control above changes future loading; it is not a request to delete historical records.
Changes
We will post updates here with a revised “Last updated” date.