Privacy Policy

Effective Date: 3/12/2026

Introduction

Voice of Elijah, Inc., a nonprofit religious organization (“we,” “us,” or “our”), is the data controller (responsible party) for your personal information. We are committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and how we keep it safe. By using our website or services, you agree to this policy.

We may update this policy from time to time. If we make significant changes, we will notify you with a notice on our website along with a revised “last updated” Privacy Policy date.

1. Information We Collect

We only collect the information we need to fulfill your requests, deliver services, and improve your experience.

You may provide us with:

• Your name and email address (e.g., when signing up for emails or contacting us)
• Your shipping address (when requesting items or placing orders)
• Your telephone number (when placing orders)
• Contribution information (amount and frequency for recurring contributions)

We do not collect or store your payment information. That is handled securely by trusted third-party providers.

Sensitive Data

We do not intentionally collect or process special categories of personal data, such as health information, racial or ethnic origin, political opinions, or biometric data. Any information inferred from interaction with religious content is not used for profiling or marketing purposes.

2. How We Use Your Information

We use your personal information to:

• Process contributions and fulfill your orders
• Communicate with you about your requests, subscriptions, or contributions
• Send requested emails and updates
• Improve our website and user experience
• Maintain legal and financial records as required by law

We do not sell your personal data.

We do not engage in automated decision-making or profiling.

Unsubscribing From Emails

You can unsubscribe from our email communications at any time by clicking the “Unsubscribe” link at the bottom of any email we send you, or by contacting us directly at [email protected].

3. Legal Bases for Processing Your Data

We collect and use personal data only when we have a lawful reason to do so, including:

• Consent (e.g., when you sign up for emails or interact with non-essential embedded media such as playing an embedded Vimeo video)
• Contract (to fulfill your orders or deliver services you request)
• Legal obligation (to meet tax, financial, or regulatory requirements)
• Legitimate interest (to improve services or prevent fraud, where your rights do not override our purpose)

4. How Orders and Payments Are Handled

We use third-party platforms to handle transactions:

• Ecwid collects your shipping information, which we use to fulfill orders (e.g., Bibles or printed materials)
• Stripe processes all payments securely. We do not see or store your credit card details. Stripe is PCI DSS Level 1 certified.
• Stamps.com provides shipping label and postage services. We share your name, shipping address, email address (for delivery notifications), and order details as necessary to create shipping labels and deliver your order.

5. Cookies and Tracking Technologies

We use cookies and similar technologies only to support essential website functionality and features you choose to use.

We do not use cookies for behavioral advertising, retargeting, or cross-site tracking.

Types of cookies we use:

• Essential cookies—Required for core site functionality (e.g., shopping carts, secure sessions, payment processing)
• Embedded Media technologies—Used by Vimeo to provide video playback and player functionality

Third-party services that may set cookies or receive data:

Matomo Cloud is configured in cookieless and IP-anonymized mode. We do not track individuals and only analyze aggregated usage to improve site performance.

6. Cookie Consent and Preferences

We only use essential cookies required for core functionality, such as shopping cart operations (via Ecwid), secure payment processing (via Stripe), and session management.

Embedded Vimeo Videos

Our website includes embedded videos hosted by Vimeo, Inc. When a page containing a Vimeo embed is loaded, your browser connects directly to Vimeo’s servers. Vimeo may collect personal data such as your IP address, device and browser information, and interaction data (for example, when you press “Play”).

We configure Vimeo embeds to limit tracking features where possible; however, Vimeo processes data according to its own privacy policy. Vimeo acts as an independent data controller for information it collects through its player.

Social Sharing Buttons

If you use the AddToAny share buttons (such as Facebook, X, or email, etc.), your browser will connect to AddToAny and the selected platform. Those platforms may collect information according to their own privacy policies. We do not track or store personal data through these buttons.

How to manage cookies and embedded content:

• Avoid interacting with embedded Vimeo videos if you do not wish to share data with Vimeo.
• Do not use social sharing buttons if you do not wish to interact with third-party platforms.
• Adjust your browser settings to block or delete cookies.
• Use tools such as Global Privacy Control (GPC), where supported.

For more information, please visit our Cookie Policy.

7. California Privacy (CCPA/CPRA)

We do not sell or share your personal information.

When a page containing an embedded Vimeo video is loaded or played, Vimeo may collect information such as IP address, device identifiers, and interaction data. This may be considered a “sharing” of personal information under California law. You may limit this by not interacting with embedded videos.

Notice at Collection

This Privacy Policy serves as our notice at collection by describing the categories of personal information collected, the purposes for collection, and retention practices.

8. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Receive a copy of your data (data portability)
• Object to certain processing activities
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at: [email protected]

We typically respond within 30 days and may take reasonable steps to verify your identity.

California Residents—Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require written authorization and identity verification.

Right to Contact Authorities

If you are located in a region with privacy laws (e.g., EU, UK, Brazil, Canada, Australia), you may contact your local data protection authority if you believe your privacy rights have been violated.

9. Who We Share Your Information With

We only share personal data with service providers who help us operate our website or fulfill services. These providers are contractually required to protect your data and use it only as instructed.

10. International Data Transfers

If you are located outside the United States, your personal data may be transferred to and processed in the U.S. or other countries with different privacy laws.

We use appropriate safeguards for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Limiting processing to what is necessary for service delivery

11. EU/UK Representation

We do not regularly or intentionally offer services to individuals in the EU or UK and have not appointed a representative or Data Protection Officer. If this changes, we will update this policy.

12. Children’s Privacy

We do not knowingly collect personal data from children under 13 (or the minimum legal age in your jurisdiction). If we become aware that a child has submitted personal information without appropriate consent, we will delete it promptly.

13. How We Protect Your Data

We use industry-standard safeguards, including:

• SSL encryption
• PCI DSS-compliant payment processing (via Stripe)
• Restricted internal access controls
• Secure system monitoring

We do not store credit card information on our servers.

14. Data Retention

We retain personal data only as long as necessary to:

• Fulfill requests or services
• Meet legal or financial obligations
• Maintain support and administrative records

If you request deletion, we will remove your data within 30 days unless legally required to retain it longer. Encrypted backups are retained for up to 30 days.

15. Data Breach Procedures

If a data breach affects your personal information, we will notify affected individuals and relevant authorities as required by law and take prompt corrective action.

16. Terms of Use

This Privacy Policy forms part of our Terms of Service. By using our website or services, you agree to both.

17. Contact Us

If you have questions or concerns about how we handle your personal data, or if you wish to exercise your rights, please contact us:

If you are located in a region with privacy laws (e.g., EU, UK, Brazil, Canada, Australia), you may also contact your local data protection authority.