Privacy policy

We are committed to respecting the privacy rights of all donors and visitors to our website. The following information details Mercy Corps' collection, protection, and use of the data we receive from donors and visitors to this website.

Our general policy

Mercy Corps recognizes the importance of protecting information we may collect from donors and visitors to our website. We maintain appropriate security measures to keep this information private and secure. 

Mercy Corps follows industry standards on information security based on CIS (Center for Internet Security) controls to safeguard sensitive information including strong passwords, multi-factor authentication, data encryption, and security awareness training for all team members. As a PCI DSS compliant organization we perform quarterly security scans and yearly security audits by a third party qualified security assessor.

Personally Identifiable Information (PII) is accessible only to staff and volunteers who need it for a business purpose.  Confidential data, including PII, is protected via role-based access controls to ensure that it is not improperly disclosed, modified, deleted, or rendered unavailable.   Access to systems or applications that manage confidential data requires approval by Mercy Corps’ Information Security Department. All sensitive and confidential data, regardless of storage location, will be retained only as long as required for legal, regulatory, and business requirements. All media containing PII data is wiped and destroyed at the end of its life cycle. Mercy Corps team members are required to read and sign Mercy Corps’ Information Security Awareness and Communications Acceptable Use Policy which outlines best practices in this area, and acknowledge and adhere to Mercy Corps’ Responsible Data Policy.

If you choose to give us personal information via the Internet for the purposes of correspondence, processing a donation or subscribing to our email newsletter, then it is our intent to let you know how we will use such information.

Mercy Corps will remove your name from our mailing list, email list or telephone solicitation list at any time, at your request. We will not sell, rent or trade your email address to a third party.

If you'd like more detail about our privacy policy please visit mercycorps.org/who-we-are/privacy-policy