Privacy Policy

Creighton Community Foundation, Inc. ("CCF", "we", "our") publishes this Privacy Policy to explain what information we collect when you visit creightoncommunityfoundation.org, donate, register to volunteer, or correspond with us, and how we use it.

CCF is a 501(c)(3) tax-exempt nonprofit organization based in Phoenix, Arizona. Our mailing address is 3219 E Camelback Rd, #376, Phoenix, AZ 85018. Questions about this policy: [email protected] or 602.888.3770.

1. What we collect

From every visitor. Page views and engagement metrics via Google Analytics 4 and other tags loaded through Google Tag Manager (container GTM-WR5ZNFG). These include your IP address (truncated by GA4 before storage), browser and device type, referring page, and time on page. Advertising-related identifiers may be set by tags fired through GTM, including for Google Ads and Meta (Facebook) advertising; these can be used for ad attribution and remarketing.

From donors. Name, email address, and any optional address or message you provide on the donation form. Payment card details go directly to Stripe (our payment processor) — CCF does not see, store, or transmit your card number.

From volunteers. Name, email, phone, employer or school affiliation, the signup-specific fields for the event you register for, and the names and ages of any children you bring. When event-specific permission documents (waivers, photo releases, medical forms) are required, your acceptance is recorded with the timestamp, the IP address of the device used, the email confirmed, and the method of acceptance.

From newsletter subscribers. Email address, captured via Sendy.

From forms and email contact. Whatever you choose to send us.

2. How we use it

• To deliver the service you requested — process your donation, register you for a volunteer event, send our newsletter, respond to your inquiry.
• To issue donation receipts as required by IRS rules.
• To improve our website and content based on aggregated analytics.
• To measure the effectiveness of our outreach campaigns, including via advertising-platform attribution.
• To send you operational communications (e.g. event reminders) when you've signed up.

We do not sell or rent your personal information. Ever.

3. Who we share it with

CCF uses a small set of service providers to operate the site. Each one receives only the information needed for its function and is bound by its own published privacy commitments:

• Stripe — payment processing for donations
• Cloudflare — site hosting, content delivery, and email routing
• Sanity — content management (the back end CCF staff uses)
• Sendy on DigitalOcean — newsletter delivery
• Amazon Web Services — static asset hosting
• Google (Tag Manager, Analytics 4, Ads) and Meta — analytics and advertising measurement
• Google Workspace — staff email and document collaboration

We may also share information when required by law, to enforce our Terms of Service, or to protect CCF's rights and safety.

4. Cookies and tracking

We use cookies and similar technologies to make the site work and to understand how visitors use it. There are two categories:

• Strictly necessary — cookies needed for basic operation (donation-form security, authentication when staff edit content). These cannot be disabled without breaking the site.
• Analytics and advertising — cookies set by Google Analytics 4, Google Ads, and Meta tags. These help us understand traffic and measure ad campaign effectiveness.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can opt out of personalized Google advertising at adssettings.google.com and Meta advertising at facebook.com/adpreferences. Most browsers also let you block or delete cookies entirely; doing so may break parts of the site.

We do not respond to "Do Not Track" browser signals because no standard for honoring them has been adopted in the United States.

5. Children's privacy

CCF does not knowingly collect personal information from children under 13. The one path by which a child's name and age may reach us is the volunteer event signup form, which is completed by a parent or guardian who provides the child's name and age so we can accommodate them at the event. If you believe we have collected information from a child under 13 in any other way, email [email protected] and we will delete it.

6. Your rights

You can request a copy of the personal information we hold about you, a correction, or its deletion by emailing [email protected]. We will respond within 30 days.

Arizona does not currently have a general consumer privacy statute. Residents of California, Colorado, Virginia, and other states with consumer privacy laws have specific statutory rights under those laws. We voluntarily honor access, correction, and deletion requests from any U.S. resident on the same terms.

7. How long we keep your information

• Donation records — 7 years, as required for IRS substantiation.
• Volunteer registrations — 3 years from the event date.
• Newsletter subscription — until you unsubscribe.
• Analytics data — subject to the retention configuration of the underlying analytics platform.

8. Security

We use HTTPS in transit, encrypted-at-rest storage where our vendors support it, and OAuth-gated authentication for staff access to back-office tools. No security is absolute; we cannot guarantee that an unauthorized party will never access information stored with us or our vendors. If we discover a material breach affecting your information, we will notify you in accordance with applicable Arizona law.

9. Changes to this policy

We may update this policy. The effective date at the top of the page tracks the current version. Material changes will be announced via our newsletter and, where appropriate, by email to donors of record.

10. Contact

Privacy questions, requests, or complaints: [email protected] or 602.888.3770. Unresolved concerns may also be raised with the Office of the Arizona Attorney General.