Your Privacy, in Plain English

1. Who we are

Helmet Heroes is a small non-profit. We hand out TIS-certified motorcycle helmets to kids in Thailand and teach road safety in schools. Donations from supporters around the world pay for the helmets.

If you visit this website, donate, or send us a message, this page explains what happens to your information.

2. What we collect

Only what we actually need:

• Your name and email — when you donate or write to us.
• Payment details — your card info goes straight to Stripe. We never see your full card number, only that the payment cleared.
• The student you're sponsoring — first name, last-name initial, grade, and class team, so we put the right helmet on the right kid.
• Your message to the student — if you wrote one with your donation.
• Basic visit info — your IP address, browser, and which pages you looked at. This is just standard web-server stuff, the same as every site.

We don't ask for ID numbers, health information, or anything else we don't need.

3. What we do with it

• Process your donation — charge your card and link the gift to the right student.
• Email your certificate — we send you a PDF Superhero Award through Brevo.
• Update the leaderboard — only the student's first name, last-name initial, and grade appear publicly. Never any donor info.
• Run the campaign — keep records of donations, verify PromptPay transfers, track progress.
• Reply when you write to us.
• Keep records the law says we have to keep.

We never sell, rent, or trade your data. Not to marketers, not to anyone.

4. Who else sees it

We use a few well-known tools to keep things running. Each has its own privacy practices, linked below:

• Stripe handles all card payments. Stripe is the same company most of the internet uses for this. stripe.com/privacy
• Google Firebase stores our donation records securely in the cloud. firebase.google.com/support/privacy
• Brevo sends your certificate email. brevo.com/legal/privacypolicy
• Google Fonts serves the typefaces you see. policies.google.com/privacy

Each of these handles your data only to do the specific job we hired them for.

5. How long we keep it

Donation records (your name, email, the amount, and which student) stay on file for at least five years after each campaign ends — we need them for accounting and tax records. After that, we delete what we no longer need.

Leaderboard info (the student's first name, last-name initial, helmets funded) sticks around for the campaign and a bit afterwards for our records. None of it is connected to anyone's email in the public view.

Want your data deleted? Just ask — details in section 6. We'll honour it unless the law forces us to keep something.

6. Your rights

You can ask us, at any time, to:

• Show you what data we have on you
• Fix anything that's wrong
• Delete it (with the usual legal exceptions)
• Stop using it for any particular purpose
• Send you a copy in a portable file

In Thailand, you get these rights through the PDPA (Personal Data Protection Act, 2562). In Europe, the GDPR. Either way, the answer is yes — just email us.

Reach us at legal@helmetheroesthailand.org. We'll get back to you within 30 days, usually a lot sooner.

7. Cookies

We don't use tracking cookies. We don't run ads. The campaign pages do use your browser's local storage to cache the leaderboard so the page loads faster — nothing personal in there, and nothing sent anywhere.

Stripe and Google Fonts may set their own cookies through the embedded payment form and fonts. That's covered by their privacy policies linked above.

8. Children

The donation form is for adults. We don't knowingly collect data from anyone under 13. The student info that goes into the form (first name, last-name initial, grade) is entered by the grown-up donor — and we keep it to the bare minimum needed to credit the helmet correctly.

If you think a child's data ended up here by mistake, email legal@helmetheroesthailand.org and we'll delete it.

9. Updates to this page

If anything changes about how we handle your data, we'll update this page and bump the "Last updated" date at the top. Worth checking once in a while.

10. Get in touch

Questions, concerns, or just want to know what we have on file for you? Drop us a line: