Privacy Policy
Last updated: April 22, 2026
1. Who we are
Bay Island Wings Foundation ("we," "us," "our") is a 501(c)(3) nonprofit organization based in Roatán, Bay Islands, Honduras. We operate the website at bayislandwings.org ("the Site") to share our mission, organize fundraising events, and accept ticket purchases and donations.
2. Information we collect
2.1 Information you give us directly
We collect information you choose to share with us:
- When you buy a ticket or donate: Stripe or PayPal collects your payment details on their own secure pages — we never see your card number, bank account, or PayPal credentials. After a successful payment, we receive a confirmation containing your name, email address, the amount, and a payment reference. We store this in our records to issue receipts and for nonprofit reporting.
- When you contact us: If you email or message us via WhatsApp, we keep that correspondence to respond to you and for our records.
2.2 Information collected automatically
When you visit the Site, our hosting provider (Cloudflare) automatically logs basic technical information for security and reliability:
- IP address
- Browser type and version
- Pages requested and timestamps
- Referring website
We do not use third-party analytics, advertising trackers, or social-media pixels on the Site.
2.3 Cookies
Our public pages do not set marketing or tracking cookies. Cloudflare may set a
small number of strictly-necessary cookies to protect the Site against attack. The
administrative section (/admin) uses browser local storage to keep an
authenticated session — this is only relevant to our staff.
3. How we use your information
We use the information we collect only for the following purposes:
- To process ticket purchases and donations and send you confirmations.
- To produce financial records required for our 501(c)(3) reporting and audits.
- To respond to your questions and requests.
- To detect, investigate, and prevent fraud or abuse of the Site.
We do not sell, rent, or trade your personal information.
4. Service providers we rely on
We use a small number of trusted third-party providers to operate the Site. Each has its own privacy policy that you should review:
| Provider | Purpose | Privacy policy |
|---|---|---|
| Stripe, Inc. | Card payment processing | stripe.com/privacy |
| PayPal Holdings, Inc. | PayPal payment processing | paypal.com/privacy |
| Supabase, Inc. | Database, file storage, admin authentication | supabase.com/privacy |
| Cloudflare, Inc. | Website hosting, CDN, DDoS protection | cloudflare.com/privacypolicy |
5. International data transfers
Our service providers operate servers in the United States and other countries. When you use the Site or make a payment, your information may be processed outside of Honduras. We rely on each provider's standard contractual safeguards for these transfers.
6. How long we keep your information
- Payment records: Retained for at least seven (7) years to meet nonprofit accounting and tax obligations.
- Email correspondence: Retained while it is needed to respond to you, then archived or deleted.
- Server logs: Cloudflare retains technical logs per their published policy (typically a few weeks).
7. How we protect your information
- All connections to the Site use HTTPS encryption.
- Card data never touches our servers — it is handled exclusively by Stripe and PayPal under PCI-DSS compliance.
- Our database uses row-level security so that public visitors cannot read or modify private records.
- Administrative access requires an authenticated account.
8. Your rights
You may contact us at any time to:
- Request a copy of the personal information we hold about you.
- Ask us to correct information that is inaccurate.
- Ask us to delete your information, subject to our legal obligation to retain payment records for tax and audit purposes.
- Withdraw consent for future communications.
See the contact details at the bottom of this page.
9. Children's privacy
The Site is intended for adults who are interested in supporting our work. We do not knowingly collect personal information from children under 13. If you believe a child has provided information through the Site, please contact us and we will promptly delete it.
Our programs benefit youth in the Bay Islands, but their participation is managed in person and never through this Site. Information about students and program beneficiaries is collected separately and is not covered by this policy.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be highlighted on the home page for at least 30 days.
11. Contact us
For any privacy-related question or request, please reach us at:
- Email: info@bayislandwings.org
- Address: Bay Island Wings Foundation, Roatán, Bay Islands, Honduras