Privacy policy
Effective date: January 1, 2026 | Jireh One Inc. (operating as Helping Hungry Hearts)
1. Who we are
This Privacy Policy applies to Jireh One Inc., an Alberta-registered corporation operating as Helping Hungry Hearts through the website kokoy.org. Our registered address is Calgary, Alberta, Canada.
We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.
2. Information we collect
We may collect the following personal information:
- Contact information: Name, email address, mailing address, phone number
- Donation information: Donation amount, payment method (processed via Stripe — we do not store card numbers), donation history
- Volunteer/partner information: Location, availability, skills, organization name
- Communications: Messages you send through our contact form or by email
- Technical data: IP address, browser type, pages visited, referral source (via Google Analytics)
3. How we use your information
We use your information to:
- Process donations and issue donation confirmations
- Communicate with you about your donation, inquiry, or volunteer application
- Send you updates about our work if you have opted in (CASL-compliant)
- Improve our website and understand how visitors use it
- Fulfill our legal obligations as a registered corporation
4. Donor information policy
We treat donor information with the utmost care and confidentiality.
Donor names and giving history are used only for the purposes described in this policy. We will not acknowledge gifts publicly without explicit donor consent. Anonymous donations are honoured.
5. CASL compliance — email communications
Canada's Anti-Spam Legislation (CASL) governs how we send commercial electronic messages. We comply fully with CASL:
- We only send emails if you have provided express or implied consent
- Every email includes an unsubscribe mechanism
- Unsubscribe requests are honoured within 10 business days
- Transactional emails (tax receipts, form confirmations) are exempt from CASL
6. Storage and protection
Your personal information is stored using industry-standard security measures:
- Form submissions and contact messages are stored in Firebase Firestore (Google Cloud), protected by strict security rules
- Payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. We never store payment card information
- Access to personal data is restricted to authorized personnel only
- Our website uses HTTPS encryption for all data in transit
7. Cookies
Our website uses cookies and similar tracking technologies for the following purposes:
- Analytics: Google Analytics to understand how visitors use our site (anonymized data)
- Functionality: Session cookies for form functionality
You can disable cookies in your browser settings. Doing so may affect some site functionality.
8. Third-party services
We use the following trusted third-party services:
- Stripe — payment processing (privacy policy at stripe.com/privacy)
- Firebase / Google Cloud — data storage and hosting infrastructure
- Google Analytics — website analytics (anonymized)
These services operate under their own privacy policies. We select partners with strong privacy practices.
9. Your rights
Under PIPEDA and applicable laws, you have the right to:
- Access your personal information held by us
- Correct inaccurate personal information
- Withdraw consent for communications at any time
- Request deletion of your personal information (subject to legal retention requirements)
To exercise any of these rights, contact us at hello@kokoy.org.
10. Data retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, and to meet legal, accounting, and CRA reporting obligations. Donation records are retained for a minimum of seven (7) years in accordance with Canadian charitable reporting requirements.
11. Children's privacy
Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us immediately.
12. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will be updated accordingly. We encourage you to review this policy periodically.
13. Contact us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact: