Privacy Policy

Effective Date: May 12, 2026  |  Last Updated: October 22, 2026

1. Introduction

Hope58 ("Hope58," "we," "our," or "us") is a Christ-centered ministry partnering with the local church in Bulesa, Uganda. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website at hope58.org (the "Site"), make a donation, subscribe to updates, contact us, apply to participate in a mission trip, or otherwise interact with the ministry.

Hope58 serves a global community of supporters, partners, and beneficiaries. Because our donors and visitors may reside in many jurisdictions, this policy is written with reference to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"), the European Union's General Data Protection Regulation ("GDPR"), the United Kingdom's UK GDPR, and similar privacy laws.

2. California Notice at Collection

The following summary describes the categories of personal information we may collect, the purposes, whether each category is sold or shared, and how long it is retained. Full details appear in the sections that follow.

Identifiers (name, email, phone, mailing address, IP, device IDs)

• Purpose: respond to inquiries, send ministry updates, process donations.
• Sold or shared? Not sold. Shared only with service providers as needed to operate the ministry (see Section 7).
• Retention: see Retention section.

Donor and supporter records (donation amounts, payment details, giving history)

• Purpose: process donations, deliver tax acknowledgments, communicate with supporters.
• Sold or shared? Not sold. Shared with our payment processor and giving platform to complete transactions.
• Retention: 7 years for IRS or equivalent tax reporting purposes.

Mission trip and volunteer information

• Purpose: coordinate trip logistics, manage volunteer applications, deliver pastoral and ministry care.
• Sold or shared? Not sold. Shared with trip coordinators, hosts, and partners as needed.
• Retention: per the term of the program, plus a reasonable period after.

Internet or network activity (pages requested, server logs)

• Purpose: run and secure the Site. We do not use analytics or advertising tools on the Site.
• Sold or shared? Not sold or shared.
• Retention: see Section 10.

3. Categories of Personal Information We Collect

Categories of personal information defined by California law that we may collect:

• Identifiers: name, email address, phone number, mailing address, IP address, online identifiers.
• Donor records: information you provide when making a donation, including payment information processed by our payment partners.
• Volunteer and mission trip records: contact details, emergency contacts, dietary needs, medical or accessibility information you choose to share for the safe operation of trips and programs.
• Internet or network activity: pages requested on our Site and the technical details in server logs. Before we removed Google Analytics and our cookie consent manager, this also included pages viewed, referring URLs, interaction with our content, and information collected through cookies.
• Geolocation data: approximate location derived from IP address.
• Sensitive information: religious beliefs and practices are inherent to our purpose as a Christ-centered ministry. We may also receive other sensitive information you choose to share, such as health or accessibility needs for a mission trip. We treat this information with discretion and use it only for the ministry purposes for which you provided it.

4. Sensitive Personal Information

We do not intentionally request Sensitive Personal Information through the Site. However, you may choose to provide limited health, medical, dietary, or accessibility information when applying for a mission trip, volunteering, or requesting prayer. We use that information only to fulfill your request and to provide reasonable care during the program. If our practices change, we will update this policy and offer the Right to Limit Use of Sensitive Personal Information where applicable.

5. Sources of Information

• Directly from you when you donate, subscribe to updates, apply for a mission trip, contact us, or otherwise interact with us.
• Automatically from your device and browser when you visit the Site, through server logs, and before we removed them, through cookies, Google Analytics, and our cookie consent manager.
• From our service providers, including donation processors and email service providers.
• From parents or guardians when minors are registered for ministry activities or mission trips.

6. How We Use Your Information

We use personal information to:

• Process donations and issue receipts or tax acknowledgments as required.
• Communicate with you about the ministry, updates from the field, prayer requests, and ways to support the work.
• Coordinate mission trips and volunteer programs.
• Respond to inquiries and provide pastoral or ministry care.
• Improve our Site, content, and donor experience.
• Detect and prevent fraud and protect Site security.
• Comply with legal, tax, and reporting obligations in the jurisdictions where we operate.

7. Service Providers and Ministry Partners

We share personal information with trusted service providers and ministry partners who help us operate. The list below is representative and not exhaustive. We may add, change, or replace providers from time to time, provided the new provider serves an equivalent purpose under similar confidentiality and security obligations. Examples of categories and current providers include:

• Website hosting and infrastructure providers, including GoDaddy, which hosts the Site.
• Online giving platforms, including Givebutter and GoMission.church, or any similar platform we may use.
• Email and communication platforms, including Mailchimp, which delivers our newsletter and ministry updates, or any similar platform we may use.
• Osano, the cookie consent manager our Site used until October 2026, which keeps the records of cookie choices visitors made while it ran.
• Google, which keeps the Google Analytics data collected before we removed it from the Site.
• Mission trip coordination and logistics partners on the ground in Uganda and elsewhere.
• Missionary sending agencies, including MESA Global, which administers the personal support accounts of our founders Matt and Shelley Actis. Gifts you make to support Matt and Shelley personally are processed by MESA Global under MESA Global's own privacy practices and donor receipt policies, which are separate from Hope58's.
• Parent organization, denominational body, or fiscal sponsor where applicable, for accounting, oversight, and ministry coordination.

8. Third Parties and Advertising

We do not use Google Analytics or any other analytics or advertising tool on our Site.

We do not sell personal information for monetary consideration. We do not currently engage in cross-context behavioral advertising or build remarketing audiences from our website visitors. If we engage in such activity in the future, we will:

• Update this Privacy Policy to reflect that activity.
• Add a cookie consent banner first, and load any such tracking only after a visitor opts in.
• Provide a clearly labeled "Do Not Sell or Share My Personal Information" opt-out link in our website footer.
• Honor Global Privacy Control (GPC) signals as automatic opt-out requests.

We may share information with professional advisors (accountants, auditors, attorneys), government or licensing authorities when required by law, by subpoena or court order, or to protect our legal rights. We may also share information with successor entities in connection with a merger, dissolution, ministry transfer, or organizational restructure.

9. Cookies and Tracking Technologies

Our pages set no cookies of their own. The Site runs no analytics, advertising, pixel, or session-replay tools, and it shows no cookie consent banner because nothing on it needs your consent.

Display preferences. The display preferences button on each page lets you change text size, switch to a dark appearance, or stop site animations. If you change a setting, your browser saves it in its local storage on this device so it applies on later pages. This is not a cookie, and the setting is never sent to us or to anyone else. Use Reset preferences in that panel, or clear this site’s data in your browser, to remove it.

Embedded videos. Our home, About, Bible Training, and Girls Skills Center pages offer videos hosted on YouTube, a Google service. Nothing loads from YouTube when a page opens. The player has no address until you click play, and the preview images you see are served from our own site, not from Google. When you click play, we load the YouTube player from youtube-nocookie.com, which is YouTube’s privacy-enhanced mode and limits the cookies YouTube uses for personalized advertising. Google then receives your IP address and basic device and browser information, and may set cookies in your browser. Google’s use of that information is governed by Google’s own privacy policy. If you never start a video, your browser makes no request to Google for it and sends no data to it.

Do Not Track. Some browsers send a “Do Not Track” signal. This site does not change what it does when it gets that signal. It runs no analytics or advertising tools, so the signal has nothing to switch off. If you press play on a video, YouTube handles that request under its own rules.

Former analytics and consent tools. Until October 19, 2026, this site used Google Analytics and the Osano consent tool. Osano showed a cookie banner and stored your cookie choices in a cookie. If you accepted analytics cookies, Google Analytics set cookies that held a random identifier for your browser and collected how you used the Site, such as the pages you viewed, your approximate location, and your device and browser type. Our pages no longer load either tool or contact Google Analytics or Osano. Google keeps the data collected before then as described in Section 10. If your browser kept a cookie from an earlier visit, clearing this site’s data in your browser removes it.

10. Retention

We retain personal information only as long as needed for the purposes described in this policy, to comply with legal and tax obligations, and to maintain accurate ministry records. Typical retention periods:

• Donor and gift records: retained as required for tax reporting purposes, generally 7 years.
• Volunteer and mission trip records: retained for the term of the program, plus a reasonable period after.
• Newsletter and communication contacts: until you unsubscribe, plus a suppression record to honor your opt-out.
• Site analytics collected before October 19, 2026: Google Analytics keeps event data, and data tied to your browser’s identifier, for no more than 14 months after your last visit. Summary reports that do not identify a browser are kept longer.
• Server logs and security data: up to 12 months.

11. International Data Transfers

Hope58 operates internationally, with ministry activities in Uganda and a global donor base. When you interact with our Site or the ministry, your personal information may be transferred to and processed in countries other than your country of residence, including the United States, Uganda, and the jurisdictions where our service providers operate. The privacy laws of these countries may differ from the privacy laws of your country.

For transfers of personal information from the European Economic Area, United Kingdom, or Switzerland to other countries, we rely on lawful transfer mechanisms such as Standard Contractual Clauses, adequacy decisions, or other appropriate safeguards. By interacting with the ministry, you acknowledge that your information may be transferred internationally for the purposes described in this policy.

12. Your Privacy Rights

Depending on where you reside, you may have the following rights regarding your personal information.

California residents (CCPA/CPRA)

• Right to Know: request that we disclose the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we have shared the information.
• Right to Delete: request that we delete personal information we have collected from you, subject to legal exceptions.
• Right to Correct: request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: direct us not to sell or share your personal information for cross-context behavioral advertising. As noted above, we do not currently engage in such activity.
• Right to Limit Use of Sensitive Personal Information: this right is preserved if we begin processing Sensitive PI in a way that requires this option.
• Right to Data Portability: receive a copy of your personal information in a portable format.
• Right to Non-Discrimination: we will not discriminate against you for exercising these rights.

European Economic Area, United Kingdom, and Switzerland residents (GDPR / UK GDPR)

• Right of Access: request a copy of your personal information.
• Right to Rectification: request correction of inaccurate or incomplete data.
• Right to Erasure: request deletion of your personal information, subject to legal and tax recordkeeping obligations.
• Right to Restrict Processing: request that we limit how we process your data.
• Right to Data Portability: receive your data in a structured, commonly used, machine-readable format.
• Right to Object: object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: where processing is based on consent, you may withdraw that consent at any time.
• Right to Lodge a Complaint: file a complaint with your national data protection authority.
• Right Not to Be Subject to Automated Decisions: not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significant effects. We make no decisions of that kind.

Lawful basis for processing (GDPR): we process personal information based on your consent (for marketing communications), the performance of a contract (donations, trip participation), our legitimate interests (operating the ministry, responding to inquiries, communicating with supporters), and legal obligations (tax and accounting recordkeeping).

13. How to Submit a Request

To exercise any of your rights, contact us using one of the methods below:

• Email: mactis@mesaglobal.co
• Mail: Hope58, PO Box 1341, Clovis, CA 93613, United States

We will verify your identity before responding to a request involving specific personal information. We aim to respond within 30 days for GDPR/UK GDPR requests and within 45 days for CCPA requests. If we need more time, we will notify you and may extend as permitted by law.

Authorized agents (CCPA): you may designate an authorized agent to submit a request on your behalf. We will require the agent to provide written, signed authorization from you and verify your identity directly.

14. Children's Privacy

Our Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site. Where minors are involved in ministry activities or mission trips, registration is completed by a parent or guardian, who provides the child's name, age, and any other information needed for the safe operation of the activity.

We follow the Children's Online Privacy Protection Act (COPPA) and California's protections for minors. We do not knowingly sell or share the personal information of consumers under 16. For visitors from the European Economic Area, we do not knowingly process the personal data of children under 16 (or the age of digital consent in their country, as applicable) without parental consent.

15. Beneficiary Imagery and Storytelling

Hope58 publishes photos and stories of the children, young women, pastors, and families we serve in Uganda to communicate the ministry's work to supporters and to invite others to participate. We seek the informed consent of the individuals featured, and parental or guardian consent in the case of minors, before publishing.

We aim to represent beneficiaries with dignity, accuracy, and respect for their agency, consistent with widely recognized standards for development and missions imagery, including the Dochas Code of Conduct on Images and Messages. We use first names only, or first name plus initial, for minors. We avoid publishing combinations of identifying details (full name, photo, age, and specific village or school) that could compromise the safety of any beneficiary.

If you or a person you are responsible for is featured in Hope58 content and you wish to have a photo or story removed or updated, contact us using the information in Section 20 and we will respond promptly.

16. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. Our service providers maintain their own security measures. No method of transmission or storage is fully secure, so we cannot guarantee absolute security. Notify us immediately if you suspect a security issue with your account or information.

17. Links to Third-Party Sites

Our Site may link to third-party websites and services, including but not limited to donation platforms, social media, partner ministry sites, and similar third parties we may add or change over time. The privacy practices of any linked third party are governed by their own privacy policies, not ours.

18. Religious Mission

As a Christ-centered ministry, our purpose is to serve, disciple, and care for our community in Uganda and to support the donors and partners who make the work possible. Information you share with us as part of ministry participation is used to support that mission. We will not knowingly use personal information in ways inconsistent with our calling or your trust.

19. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised Last Updated date. Material changes will be communicated by a notice on our Site or by email where appropriate.

20. Contact Us

If you have questions about this Privacy Policy or our privacy practices:

Hope58
PO Box 1341
Clovis, CA 93613
United States
Email: mactis@mesaglobal.co

Do Not Sell or Share My Personal Information

California residents may opt out of the sale or sharing of personal information for cross-context behavioral advertising. As stated in Section 8, we do not currently sell or share personal information for these purposes, so there is nothing to opt out of and no opt-out control on our Site. Some browsers send a Global Privacy Control (GPC) signal, which is a request not to sell or share. Because we do neither, that request is already met on our Site. If we engage in such activity in the future, we will update this policy first, add a clearly labeled opt-out link to our website footer, and honor GPC signals as opt-out requests for the browser or device sending the signal.