Privacy Policy

The Defend the Constitution Platform ("DCP", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website at www.dcpzim.com and related services.

1. Information We Collect

We may collect and process the following personal information:

• Account Information: Name, email address, and password when you create an account or sign in with Google.
• Membership Applications: Full name, email, phone number, national ID number, province, and other details submitted through membership application forms.
• Volunteer Applications: Name, email, phone number, skills, availability, and motivation provided when applying to volunteer.
• Petition Signatures: Name, email, and any comments submitted when signing petitions.
• Contact Information: Name, email, and message content submitted through our contact form.
• Donation Information: Name, email, and payment details processed securely through Stripe. We do not store your full credit card details on our servers.
• Newsletter Subscriptions: Email address when you subscribe to our newsletter.
• Survey Responses: Answers and data submitted through our surveys.
• Device and Usage Data: Browser type, IP address, pages visited, and interaction data collected automatically for analytics and service improvement.

2. How We Use Your Information

We use your personal information for the following purposes:

• To create and manage your user account.
• To process membership and volunteer applications.
• To process donations and issue receipts.
• To manage petition signatures and civic engagement activities.
• To send you updates, newsletters, and communications related to DCP activities (with your consent).
• To respond to your enquiries and provide support.
• To improve our website, services, and user experience.
• To comply with legal obligations.

3. Data Storage and Security

Your data is stored securely using Google Firebase (Firestore) with appropriate security rules and access controls. We implement industry-standard security measures including encrypted connections (HTTPS/SSL), Firebase Authentication, and role-based access controls to protect your personal information from unauthorised access, alteration, or disclosure.

4. Third-Party Services

We use the following third-party services to operate our platform:

• Google Firebase: Authentication, database, and file storage.
• Stripe: Secure payment processing for donations and purchases.
• Resend: Email delivery for transactional and communication emails.
• Vercel: Website hosting and deployment.

These services have their own privacy policies and we encourage you to review them. We do not sell, trade, or rent your personal information to any third party.

5. Cookies and Tracking

Our website may use cookies and similar technologies to enhance your browsing experience, remember your preferences, and track usage patterns. These include essential cookies required for authentication and session management. You can control cookie settings through your browser preferences.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal obligations.
• Withdrawal of Consent: Withdraw consent for communications at any time by unsubscribing or contacting us.
• Data Portability: Request your data in a structured, commonly used format.

To exercise any of these rights, please contact us using the details below.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Membership and volunteer application data is retained for the duration of your relationship with DCP. You may request deletion of your account and associated data at any time.

8. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us: