Privacy Policy

Effective Date: May 20, 2025

Brain Drain Unlimited Foundation (“Organization,” “we,” “us,” or “our”) is committed to protecting the privacy and security of the personal data we collect from our applicants, donors, volunteers, and website visitors. This Privacy Policy describes the types of information we collect, how we use it, the security measures we employ to protect it, and your rights regarding your data. Our principal website address is https://braindrainfoundation.org.

1. Information We Collect

We collect information necessary to fulfill our non-profit missions, provide legal assistance, manage our programs, and connect with our community.

A. Personal Data

We collect personal data that you voluntarily provide to us, including but not limited to:

  • Names
  • Addresses (mailing and email)
  • Phone numbers

This data is primarily collected for marketing and communication purposes, allowing us to inform you about our programs, news, events, and opportunities for support.

B. Financial Information

We do not collect or store your financial information, such as credit card numbers or bank details, directly on our site or within our systems. All financial transactions are processed through authorized and secure payment gateways, such as Stripe and Zeffy. They are responsible for processing and storing your payment information in accordance with their respective privacy policies and security standards.

C. Sensitive Information

We do not collect medical data or other highly sensitive information directly through the public-facing sections of our website. However, in the process of providing immigration legal assistance, our licensed attorneys and accredited BIA representatives may receive and process sensitive information, including but not limited to details of your personal history, marital status, financial situation, and other sensitive data necessary for the proper representation of your case. All such information is handled with adherence to attorney-client privilege and in strict accordance with applicable laws, ethical rules of legal practice, and our internal “Applicant Interaction Workflow,” which ensures its confidentiality and security.

D. Usage and Tracking Information

We use Google Analytics to collect information about how visitors use our website. This helps us analyze site traffic and improve its functionality and content. We collect anonymized, aggregated data about site usage (e.g., number of visitors, pages visited, time spent on site). We do not track individual users or link this information to your personal data. We do not use third-party cookies for tracking individual user activities.

E. Children’s Privacy

Our website and services are not intended for use by individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have received personal data from a child under 13 without verifiable parental consent, we will take steps to remove such information from our records.

2. How We Use Your Information

We use the collected data for the following purposes:

  • Providing Legal Assistance: To process applications, conduct initial assessments, provide legal consultations, and file petitions/applications with USCIS, as described in our “Applicant Interaction Workflow.”
  • Communication: To communicate with you regarding your applications, donations, organizational news, and relevant immigration matters.
  • Marketing and Outreach: To send newsletters, event invitations, and updates about our activities.
  • Improving Our Services: To analyze website usage and feedback to enhance our programs and user experience.
  • Advocacy and Community Development: To support our “Community Bridges and Development” and “Community of Opportunities” programs, including conducting educational initiatives and networking events.

Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

  • Your Consent: For marketing and communication purposes, when you provide us with explicit consent.
  • Contractual Necessity: For providing legal services and managing programs, which are part of our contractual obligations to you.
  • Legitimate Interest: For improving our services, protecting our rights and interests, and for website analytics, provided that these interests do not override your rights and freedoms.
  • Compliance with Legal Obligations: When data processing is required to fulfill our legal obligations.

3. Data Security and Retention

We take the security of your data seriously and implement comprehensive measures to protect it from unauthorized access, alteration, disclosure, or destruction.

A. Security Measures

  • Multi-Factor Authentication (2FA): We standardize the use of 2FA for all our accounts containing sensitive information.
  • Access Control: Access to personal data is restricted to only those employees, volunteers, and attorneys who require it to perform their duties.
  • Encryption: Sensitive data transmitted via our website is encrypted using industry-standard security protocols.
  • Employee Training: All staff and volunteers receive regular training on privacy policies and data security best practices.
  • Security Plans: The Organization is committed to developing and implementing an official security plan and disaster recovery plan for internal legitimacy and resilience.

B. Data Retention Period

  • Marketing Data: Data used for marketing and communications is retained indefinitely unless the user opts out.
  • Applicant Data: Data related to the provision of legal assistance is retained in accordance with applicable laws, professional rules of attorney ethics, and internal archiving policies.

4. Your Rights and Data Management (Opt-Out Rights)

You have the right to access, correct, and delete your personal data that we hold.

A. Access, Correction, and Deletion (Opt-Out)

If you wish to request access to your data, make corrections, or delete your information from our marketing lists or databases, please contact us through the official channels listed on our website: https://braindrainfoundation.org/contact/. You can also opt out of receiving our marketing emails by clicking the “unsubscribe” link included in each such email. We will process your request in accordance with applicable law.

5. Compliance with Legislation

Our Organization is committed to full compliance with applicable data privacy legislation.

A. Applicable Legislation

We are committed to complying with:

  • U.S. Federal Laws: Including, but not limited to, laws governing non-profit organizations, fundraising, and data protection.
  • Delaware State Laws: As we are incorporated in the State of Delaware.
  • CCPA (California Consumer Privacy Act): While this is a California state law, we strive to adhere to its principles when handling consumer data.
  • GDPR (General Data Protection Regulation): Although GDPR is a European regulation and does not directly apply to us, we strive to comply with its core principles to ensure a high level of data protection for all our users.

B. Ensuring Compliance

We ensure compliance with legal requirements through:

  • Internal Policies and Procedures: Regularly updating and implementing internal data processing policies and procedures, including our “Applicant Interaction Workflow,” to ensure compliance with legislation.
  • Staff Training: Providing ongoing training to our staff and volunteers on data privacy matters and legal norms.
  • Legal Consultations: Regularly consulting with attorneys specializing in data privacy and non-profit law to ensure the relevance and completeness of our policies.
  • Technical Measures: Implementing appropriate technical and organizational security measures to protect data.
  • Transparency: Maintaining transparency in our data collection and processing activities, as reflected in this Privacy Policy.

6. International Data Transfers

Brain Drain Unlimited Foundation is an organization incorporated and based in the United States of America. Your information, including personal data, will be stored and processed on servers located in the U.S. When transferring your data outside the European Economic Area (EEA) or other regions with comprehensive data protection laws, we will take reasonable steps to ensure an adequate level of data protection using mechanisms approved by relevant regulatory authorities (e.g., standard contractual clauses). By providing us with your information, you consent to its transfer and processing in the U.S.

7. Links to Third-Party Websites

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every website you visit.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the updated version on our website with a new effective date. We encourage you to review this page regularly for the latest information on our privacy practices.

9. Contact Information

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

Brain Drain Unlimited Foundation
8 The Green, Suite 8426
Dover, DE 19901

Phone: +1 (302) 554-7211

Email: info@braindrainfoundation.org

Scroll to Top