Privacy Policy

1. Information we collect

• Contact info you give us — name, email, postal address, and phone number when you donate, volunteer, sign up for a program, or contact us through a form.
• Donation info — donation amount, frequency, and the masked information our payment processor passes back (last 4 digits of card, payment processor receipt ID). We never store full card numbers on our servers.
• Program enrollment info — information relevant to placing a participant in the right program (e.g., age, accessibility needs, parent/guardian contact for minors).
• Site analytics — basic, privacy-respecting analytics on which pages are viewed, referring source, and approximate region. No third-party advertising cookies.

2. How we use information

• To enroll participants and schedule programs.
• To process donations and issue tax-deduction receipts (once IRS determination is finalized).
• To send program updates, volunteer logistics, and donor communications you have opted into.
• To comply with legal, tax, and grant-reporting obligations.

We do not sell, rent, or share donor or participant data with third-party advertisers.

3. Third-party services

We use a small number of vendors to operate the Site and the Foundation. Each receives only the data needed for its function:

• Vercel Inc. — web hosting, CDN, request logs.
• Cloudflare Inc. — DNS, edge security, DDoS protection.
• Payment processor (e.g., Stripe, PayPal) — donation processing. Card data goes directly to the processor; we receive only the receipt.
• Email infrastructure — for transactional email (receipts, program confirmations) and any donor newsletter you opt into.

4. Data retention

We retain donor and participant records for as long as we are legally required (typically 7 years for donation records). Email contacts who unsubscribe are removed from active mailing lists within 10 business days. You may request deletion of non-tax-record data at any time.

5. Your rights

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate data.
• Deletion — ask us to delete data we are not required by law to retain.
• Unsubscribe — every email from us has an unsubscribe link; you can also email us to opt out.

California residents have additional rights under the CCPA. Contact us using the email below to exercise them.

6. Security

We use industry-standard safeguards including TLS in transit, encrypted storage at rest, and least-privilege access. No system is perfectly secure; we will notify affected parties promptly in the event of a breach involving their data.

7. Children

Many of our programs serve minors. We collect information about minor participants only with the consent and on behalf of a parent or guardian. We do not knowingly collect personal information directly from children under 13 through the Site.

8. Changes to this Policy

We may update this Policy from time to time. Material changes will be announced on the Site and the effective date above will be updated.

9. Contact

Let's Go Paint Foundation
1065 Pacific Coast Hwy
Seal Beach, CA 90740
hello@letsgopaint.org