Privacy Policy

Who is responsible

Plan di Mayor Aruba is the data controller for personal data submitted through plandimayor.org and our online forms. For privacy questions or requests, contact us at plandimayoraruba@gmail.com.

What we collect

Depending on which form you submit, we may collect:

• Contact details you provide, such as name, email address, and phone number.
• Information about the parent or guardian and the child or children relevant to a registration or request, such as names, dates of birth, and family or custody details.
• Health, allergy, or other safety-related information when you choose to share it so we can care for a child safely.
• Any documents you choose to upload to support a registration or request.
• Consent choices you select on our forms (for example, participation permission and privacy consent).
• Technical data such as IP address, browser type, submission time, and language preference, used for security, fraud prevention, and service operation.

Why we use your data

We process personal data only for clear purposes, including:

• Registering participants for our programs and events.
• Contacting you about your registration, payment, scheduling, or safety needs.
• Evaluating intake submissions and providing Plan di Mayor services.
• Managing cases, appointments, and follow-up with families.
• Keeping records required for our operations and safeguarding children.
• Protecting our systems against abuse and unauthorized access.

We rely mainly on your consent (where you tick a consent box), performance of steps at your request before entering a service, and our legitimate interests in operating a safe, effective family-support organization—always balanced against your rights and the best interests of children.

How long we keep your data

We do not keep personal data longer than necessary. Typical retention periods:

• Event and program registrations: up to 12 months after the event ends, unless a longer period is needed to resolve a payment, safety, or legal matter.
• Intake and assessment submissions: while your case is active, then up to 7 years after closure for operational, safeguarding, and legal record-keeping purposes.
• Uploaded documents and attachments: for as long as needed for the purpose above, then deleted or securely archived according to our internal schedule.
• Technical logs (such as IP address and browser type): generally up to 12 months for security and audit purposes.

When data is no longer needed, we delete it or anonymize it where possible. Encrypted backups may be retained for a limited period as part of our disaster-recovery process, then rotated out according to our backup retention settings.

Your rights (parents and guardians)

Under applicable data-protection law, you may have the right to:

• Request access to the personal data we hold about you or your child.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete data when it is no longer needed or when you withdraw consent (where consent was the legal basis).
• Object to or restrict certain processing in specific circumstances.
• Withdraw consent at any time (this does not affect processing that already took place).
• Lodge a complaint with the relevant data-protection authority in Aruba.

To exercise any of these rights, email plandimayoraruba@gmail.com. We may need to verify your identity before responding. We aim to reply within 30 days.

Sharing and processors

We do not sell your personal data. We may share data with trusted service providers who help us operate the website, send notifications, or store data securely (for example, hosting and email providers), only under contracts that require them to protect your data. We may also share information when required by law or when necessary to protect a child’s safety.

Security

We use technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access controls for staff systems, and rate limiting on public forms. No method of transmission or storage is completely secure; please use our official website and forms only.

Cookies and similar technologies

Our public website uses a small number of browser storage features. We do not use advertising cookies or third-party marketing trackers (such as Google Analytics or social-media pixels).

• Anonymous analytics (session storage): when you browse the site, we store a random session identifier in your browser’s session storage for that tab only. This helps us understand general site use (for example, pages visited and link clicks). We do not store your name, email, or IP address in these analytics events.
• Form draft saving (local storage): if you start filling in a form, we may save your progress locally in your browser so you can continue later on the same device. Draft data is cleared after a successful submission. It is not sent to us until you submit the form.
• YouTube (third party): some pages offer embedded videos. The video player loads only after you choose to play it. If you play a video, YouTube may set its own cookies or similar technologies according to Google’s privacy policy.

You can clear session storage and local storage at any time through your browser settings. Blocking these features may affect form draft saving or our ability to measure anonymous site use, but you can still submit forms.

Children’s data

Our services concern children and families. Personal data about children is collected from parents or legal guardians, not directly from children under 16 without parental involvement. We collect only what is needed for registration, safety, and our programs.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of our forms after an update means you should review the revised policy.