Central Carolina Community Foundation (“Central Carolina Community Foundation,” “we,” “us,” or “our”) operates the website https://www.yourfoundation.org/ (the “Site”). This Privacy Policy explains what information we collect from visitors, donors, and account holders; how we use and share it; and the choices and rights you have. By using the Site, you agree to the practices described below.
1. Information we collect
We collect information you provide to us directly, information collected automatically when you use the Site, and information from third parties such as payment processors and analytics providers.
a. Information you provide
Contact & inquiry forms: name, email address, phone number, organization, and the contents of your message.
Newsletter sign-ups: email address and, optionally, name and interest preferences.
Donations: name, billing address, email, phone number, donation amount, and any tribute or dedication information. Payment-card details are submitted directly to our payment processor and are not stored on our servers.
Accounts: if you create an account, your username, password (stored in hashed form), email address, profile information you choose to provide, and your activity within the account (such as donation history, saved preferences, and content you submit).
Volunteer, event, or program applications: any information requested in the relevant form, such as background, availability, and references.
Correspondence: records of communications you send to us, including emails, support tickets, and survey responses.
b. Information collected automatically
Device & usage data: IP address, browser type and version, operating system, device identifiers, referring/exit pages, pages viewed, links clicked, time spent on pages, and approximate location derived from IP address.
Cookies and similar technologies: See "cookies & analytics" listed below.
Log files: standard server logs that record requests to the Site for security, troubleshooting, and analytics purposes.
c. Information from third parties
Payment processors provide us with confirmation of donations, last four digits of cards, and transaction identifiers.
Social media platforms, if you interact with our pages or sign in via a social account, may share information you have authorized them to share.
Service providers and analytics partners may share aggregate or pseudonymous data about your use of the Site.
2. How we use information
We use the information we collect to:
Operate, maintain, and improve the Site and our programs.
Process donations, issue receipts, and acknowledge gifts.
Create and manage your account and authenticate logins.
Respond to inquiries, requests, and applications.
Send newsletters, program updates, fundraising appeals, and event invitations (where permitted).
Personalize content and measure the effectiveness of our communications.
Conduct research, analytics, and reporting (including impact reporting to funders, in aggregate or de-identified form).
Detect, prevent, and respond to fraud, abuse, security incidents, and unlawful activity.
Comply with legal obligations and enforce our terms.
3. Cookies & analytics
We use cookies, pixels and similar technologies to operate the Site, remember your preferences, understand how visitors use the Site, and support fundraising and outreach.
You can control cookies through your browser settings and, where available, through any cookie banner or preference center on the Site. Blocking some cookies may affect Site functionality. To opt out of Google Analytics, you may install the Google Analytics Opt-out Browser Add-on.
4. How we share information
We do not sell your personal information for money. We share information only as described below:
Service providers: vendors that help us operate the Site and our programs, including web hosting, email delivery, customer relationship management (CRM), donor management, payment processing, analytics, and IT support. These providers are contractually required to protect your information and use it only on our behalf.
Affiliates and partner organizations: if you specifically register or donate in connection with a joint program, we may share information necessary to fulfill that program.
With your consent: in any other case where you have given us permission, including donor recognition or testimonials.
Aggregated or de-identified information: we may share information that cannot reasonably be used to identify you (for example, in impact reports, grant applications, or research).
5. Donations & payments
Online donations are processed by third-party payment processors. When you make a donation, your payment-card information is transmitted directly to the processor over an encrypted connection. We receive a confirmation of the transaction together with information necessary for receipting and acknowledgment (such as your name, billing address, email, and donation amount), but we do not store full payment-card numbers on our servers.
If you donate by check or by mail, we collect the information you provide on the donation form. We use donation information to process and acknowledge your gift, comply with tax and accounting requirements, send you receipts and updates, and recognize donors where appropriate (and only with your consent for any public recognition).
6. Accounts & user-generated content
If you create an account with us, you are responsible for maintaining the confidentiality of your credentials and for all activity under your account. You may update or correct your account information at any time by signing in, or by contacting us using the details below. We will retain account information for as long as your account is active and as needed for the purposes described in this policy.
7. Email & newsletter
If you sign up for our newsletter or other communications, we will use your email address to send you the messages you have requested and related updates about our work. Every marketing email contains an “unsubscribe” link, and you can opt out at any time. Even if you opt out of marketing messages, we may still send you transactional or service messages (for example, donation receipts, account-related notices, or responses to your inquiries).
8. Data security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit (TLS), restricted access to systems and data, hashed storage of passwords, vendor due diligence, and regular reviews of our security practices. No method of transmission or storage, however, is completely secure, and we cannot guarantee absolute security.
9. Data retention
We keep personal information for as long as necessary to fulfill the purposes for which it was collected, to provide our services, to maintain accurate financial and donor records, and to comply with our legal obligations (for example, tax and accounting requirements applicable to charitable organizations). When information is no longer needed, we delete or de-identify it.
10. Children’s privacy
The Site is intended for adults. We do not knowingly collect personal information from children under 13 in violation of the Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, please contact us so we can delete it.
11. Third-party links
The Site may contain links to third-party websites and services that are not operated by us. We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies before providing any personal information.
12. Do Not Track
Some browsers transmit a “Do Not Track” (DNT) signal. There is no consistent industry standard for responding to DNT signals, and our Site does not currently respond to them. We do, however, honor opt-out preferences communicated through cookie banners and the Global Privacy Control (GPC) signal where required by applicable law.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date and, where appropriate, provide additional notice (for example, by posting a notice on the Site or sending an email). Your continued use of the Site after changes become effective constitutes your acceptance of the revised policy.
16. Contact us
If you have questions, comments, or requests regarding this Privacy Policy or our privacy practices, please contact us.