Privacy Policy
Last updated: 15 May 2026
Children’s Joy (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website childrensjoy.io or interact with our services.
This policy is compliant with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and applicable international privacy laws.
1. Who We Are
Children’s Joy is a registered non-profit organization based in Norway. We provide free educational materials, coloring books, and digital resources to children worldwide, with a particular focus on orphaned and underserved children in India and Africa.
Data Controller:
Children’s Joy
Org.nr: 932417901
Elveveien 152A, 3267 Larvik, Norway
Email: info@childrensjoy.io
Phone: +47 46 41 27 93
For all questions regarding this Privacy Policy or our data practices, please contact us at info@childrensjoy.io.
2. Information We Collect
We collect the following categories of personal information:
2.1 Information You Provide Directly
- Donations: When you make a donation, we collect your name, email address, country, and payment information. Payment details are processed securely by Stripe and/or PayPal — we do not store full card numbers on our servers.
- Contact forms: When you contact us via our website forms, we collect your name, email address, and the content of your message.
- Newsletter subscriptions: If you subscribe to our newsletter, we collect your email address and, optionally, your name.
- Email correspondence: When you email us directly, we receive your email address and the contents of your message.
2.2 Information Collected Automatically
When you visit our website, we automatically collect:
- IP address (anonymized where possible)
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring website
- Date and time of visit
- Device type (desktop, mobile, tablet)
This information is collected through cookies and similar tracking technologies (see Section 7).
2.3 Information We Do NOT Collect
- We do not knowingly collect personal information from children under 16 without verifiable parental consent.
- We do not collect sensitive personal data (race, religion, political opinions, health data, etc.) unless you voluntarily provide it.
- We do not sell, rent, or trade your personal information to third parties.
3. Legal Basis for Processing (GDPR Article 6)
We process your personal data under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Processing donations | Performance of a contract (Art. 6(1)(b)) |
| Sending you requested information | Consent (Art. 6(1)(a)) |
| Responding to contact form inquiries | Legitimate interest (Art. 6(1)(f)) |
| Website analytics and improvement | Legitimate interest (Art. 6(1)(f)) |
| Newsletter communications | Consent (Art. 6(1)(a)) |
| Legal and tax compliance | Legal obligation (Art. 6(1)(c)) |
4. How We Use Your Information
We use your personal information to:
- Process and acknowledge donations
- Send tax receipts (where applicable)
- Respond to your questions and inquiries
- Send newsletters and updates (only if you have subscribed)
- Improve our website and services
- Comply with legal obligations, including financial reporting
- Prevent fraud and ensure website security
- Report on the impact of our work to donors and partners
We will never use your information for purposes incompatible with those listed above without first obtaining your consent.
5. Who We Share Your Information With
We share personal information only with the following categories of recipients:
5.1 Service Providers (Data Processors)
- Stripe, Inc. — Payment processing for credit card donations. Stripe Privacy Policy
- PayPal Holdings, Inc. — Alternative payment processing. PayPal Privacy Policy
- Google LLC — Website analytics via Google Analytics 4. Google Privacy Policy
- Hostinger International Ltd. — Website hosting services. Hostinger Privacy Policy
- Cloudinary Ltd. — Image and media delivery (CDN). Cloudinary Privacy Policy
All service providers are bound by Data Processing Agreements (DPAs) and process your data only under our instructions.
5.2 Legal and Regulatory Authorities
We may disclose personal information when required by law, court order, or to protect our legal rights, or to respond to lawful requests from public authorities, including in Norway and the EU.
5.3 We Do NOT:
- Sell your personal data
- Share your data with advertisers
- Use your data for automated decision-making or profiling
- Transfer your data to anyone for marketing purposes outside our organization
6. International Data Transfers
Some of our service providers (e.g., Stripe, PayPal, Google) are located outside the European Economic Area (EEA), primarily in the United States. When we transfer your personal data internationally, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- EU-US Data Privacy Framework certifications (where applicable)
- Other lawful transfer mechanisms under GDPR Chapter V
You may request more information about these safeguards by emailing info@childrensjoy.io.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and analyze traffic.
7.1 Types of Cookies We Use
- Strictly necessary cookies — Required for the website to function (e.g., session cookies). No consent needed.
- Analytics cookies — Google Analytics 4 (with IP anonymization enabled). Only set after you give consent.
- Functional cookies — Remember preferences such as language. Only set after consent.
7.2 Managing Cookies
When you first visit our website, you will see a cookie consent banner. You can:
- Accept all cookies
- Reject all non-essential cookies
- Customize your preferences
You can change your cookie preferences at any time by clearing your browser cookies or contacting us at info@childrensjoy.io.
7.3 Do Not Track
We respect “Do Not Track” (DNT) browser signals. When DNT is enabled, we do not load analytics cookies.
8. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
| Data Type | Retention Period |
|---|---|
| Donation records | 10 years (Norwegian accounting law) |
| Contact form submissions | 2 years from last contact |
| Newsletter subscribers | Until you unsubscribe |
| Website analytics data | 26 months (Google Analytics default) |
| Email correspondence | 3 years |
After the retention period, your data is securely deleted or anonymized.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15) — Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16) — Correct inaccurate or incomplete data.
- Right to erasure (Art. 17) — Request deletion of your data (“right to be forgotten”).
- Right to restriction (Art. 18) — Limit how we process your data.
- Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
- Right to object (Art. 21) — Object to processing based on legitimate interests.
- Right to withdraw consent — Withdraw consent at any time without affecting prior lawful processing.
- Right to lodge a complaint — File a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.
To exercise any of these rights, please email info@childrensjoy.io with your request. We will respond within 30 days, as required by GDPR.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS/SSL encryption for all website traffic
- Secure password policies and two-factor authentication for administrative accounts
- Regular software updates and security patches
- Restricted access to personal data on a need-to-know basis
- Encrypted backups stored securely
- Payment processing through PCI-DSS compliant providers (Stripe, PayPal)
Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we work continuously to protect your information.
11. Children’s Privacy
Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children without verifiable parental consent.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@childrensjoy.io and we will delete such information promptly.
The educational content we provide (coloring books, workbooks) is designed for children but is intended to be downloaded and used by parents, teachers, and guardians on the child’s behalf.
12. Third-Party Links
Our website may contain links to third-party websites (e.g., Google for Nonprofits, partner organizations). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The updated version will be posted on this page with a revised “Last updated” date.
For significant changes, we will notify you via email (if we have your address) or through a prominent notice on our website at least 30 days before the changes take effect.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Children’s Joy
Email: info@childrensjoy.io
Phone: +47 46 41 27 93
Address: Elveveien 152A, 3267 Larvik, Norway
You also have the right to lodge a complaint with the Norwegian Data Protection Authority:
Datatilsynet
Postboks 458 Sentrum, 0105 Oslo, Norway
Website: www.datatilsynet.no
Email: postkasse@datatilsynet.no
This Privacy Policy was last updated on 15 May 2026. By using our website, you acknowledge that you have read and understood this policy.