Privacy Policy
Effective date: August 25, 2026 · Applies to globaldoinggood.org and all Global Doing Good programs
1. Who we are
Global Doing Good is an independent, registered 501(c)(3) nonprofit based in Bozeman, Montana. We run programs that help students make a difference in their communities, including The Benjamin Project (student-led community service funded by prepaid project cards), travel scholarships for middle-school students, and service-learning trips. This policy explains what personal information we collect through our website and programs, why we collect it, and the choices you and your family have.
2. What we collect, and when
The Benjamin Project — student registration
Date of birth is asked once, at the age gate, to determine whether parental consent is required. It is used for that calculation and never stored.
For students under 18: before the student can register, we collect a parent or guardian's first name, last name, and email address so we can send them a consent request. We record when consent was given and issue a consent code.
Registration details: the student's first and last name, a username, a password (stored only in encrypted, hashed form), an email address (required for adults, optional for minors), and the last four digits and lot number of their prepaid project card so we can match them to it. We never collect a full card number.
The Benjamin Project — student portal
When a student shares their project experience: their written reflection, and optionally photos or documents they choose to upload, where they spent their project funds, any organization they donated to, and extra funds they raised.
An optional, separate consent to share their story publicly (see Section 4).
Travel scholarship applications
Student name, email, grade, and home address; a parent or guardian's name, email, and phone number; school information; details of the planned trip and its group leader; an application essay; and any need-based details the family chooses to share. Applications by students under 18 also go through the parental-consent step described above.
Educator and visitor forms
Participation interest form: name, email, phone, role, school and district information, and comments.
Contact form: name, email, phone, subject, and comments.
Donations
Donations are handled by a dedicated donation processor. Your payment details go directly to them and are never received or stored by Global Doing Good.
Collected automatically
Necessary cookies that keep you signed in and keep our forms working securely.
Analytics cookies (Google Analytics) that show us, in aggregate, how the site is used — pages visited, device type, general region. They are not used to identify you.
A spam check (Google reCAPTCHA) on our public forms that tells people apart from bots; Google handles those signals under its own privacy policy.
Routine technical logs of visits, kept for security and troubleshooting.
3. How we use it
To run the programs: matching students to their project cards, funding and activating cards, sending account emails (like the set-your-password link), and requesting and recording parental consent.
To review and administer scholarship applications.
To follow up with educators and visitors who ask to participate or contact us.
To understand program impact, using aggregate numbers that don't identify individual students.
To keep the site and its data secure.
We do not sell personal information. We do not use it for advertising. We never will.
4. Children's privacy and parental consent
Most of our participants are students, and many are under 13. We take that seriously, and the programs are built around it:
Consent comes first. A student under 18 cannot register until a parent or guardian receives our consent email, reviews what we collect and how it's used, and agrees. The student then enters the consent code their parent received.
Consent links expire. The emailed consent link works once and expires after 7 days. If a parent never responds, the parent's contact details are automatically deleted after those 7 days.
We collect the minimum. A registered student is a name, a username, an optional email, and a card match. We never store dates of birth.
Public sharing is opt-in, and limited. A student's story, photos, or videos are only used in our publications or social media if they check the optional sharing box — and then only a first name and city are ever shown, never a full name or school.
Parents stay in control. A parent or guardian may review their child's information, correct it, withdraw sharing consent, or ask us to erase it at any time, using the contact details in Section 9.
5. When we share information
The companies that help us operate, only to the extent needed: the services that host our website and store uploaded photos, deliver our email, process donations, help us measure site usage and block spam (Google), and our prepaid-card partner, which funds and activates project cards.
Schools and educators. The Benjamin Project runs through participating schools, so the educator who distributes project cards naturally knows which of their students participate.
Published stories, only with the student's opt-in consent, limited as described in Section 4.
Legal requirements, if we are required to disclose information by law or to protect the safety of a child.
We do not share personal information with anyone else, and we do not allow our service providers to use it for their own purposes.
6. How long we keep it
We keep personal information while a student, family, or educator is participating in a program and for the administration that follows (like confirming card funding and program reporting).
When personal information is no longer needed — or when a parent asks — we anonymize the record: names, email addresses, and passwords are erased, while non-identifying program statistics (like funds raised) are kept so our impact reporting stays accurate.
Parent contact details collected for a consent request that never receives consent are deleted automatically after 7 days.
7. How we protect it
Everything you do on our site travels over an encrypted connection.
Passwords are scrambled in a way that even we can't read.
Consent and account-setup links work once and expire — they can't be reused or guessed.
Access to program records is limited to Global Doing Good staff who need it to run the programs.
No method of transmission or storage is 100% secure, but we design for the sensitivity of the data we hold.
8. Your choices
Cookies: you can block or delete cookies in your browser. The site works fine without analytics cookies; the necessary ones are only needed for signing in and submitting forms.
Analytics: you can opt out of Google Analytics entirely with Google's browser opt-out.
Story sharing: a student or their parent can withdraw sharing consent at any time and we will stop using the story in new publications.
Access, correction, and erasure: contact us to review, correct, or erase personal information we hold about you or your child.
9. Contact us
Questions about this policy, or requests about your family's information:
10. Changes to this policy
If we change this policy, we will post the new version here with an updated effective date. For material changes to how we handle children's information, we will notify the parents and guardians we have on record before the change takes effect.