This Privacy Policy explains how donateacar4breastcancer.org (the “Website”) and Cancer Journeys Foundation (“we,” “us,” “our”) collect, use, and protect information when you visit the Website, interact with our content, contact us, or use our services (including SMS/text messaging where applicable).

By using this Website or providing us with your information (including via online forms, email, phone, or SMS), you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

You may provide information when you:

• Submit a contact form or request information

• Communicate with us by email, phone, or SMS/text message

• Subscribe to newsletters or marketing communications (if offered)

• Create or update a user account (if applicable)

• Submit information related to a vehicle donation inquiry (if applicable)

Information you provide may include:

• Name

• Email address

• Phone number (including mobile number)

• Vehicle-related information you choose to submit (e.g., make/model/year/condition, location)

• Any content you submit (form messages, attachments, etc.)

1.2 Comments (If Enabled)

If visitors leave comments on the Website, we may collect:

• The data shown in the comments form

• The visitor’s IP address

• Browser user agent string (to help with spam detection)

Visitor comments may be checked through an automated spam detection service.

In some cases, an anonymized string (hash) created from your email address may be used by security or analytics tools to help detect abuse and understand site usage.

1.3 Media Uploads (If Enabled)

If you upload images to the Website, avoid uploading images with embedded location data (EXIF GPS). Visitors may be able to download and extract location data from images displayed on the Website.

2. SMS/Text Messaging

If you provide your mobile number (for example through a form or by texting/calling us), we may send SMS/text messages related to:

• Responding to inquiries

• Scheduling or pickup coordination (if applicable)

• Donation confirmations, acknowledgments, and receipts (if applicable)

• Service or account-related notifications

• Informational or marketing messages, where permitted by law and consistent with your preferences

2.1 How You Consent to SMS

You consent to receive SMS/text messages when you:

• Submit a Website form that includes a mobile number and an SMS consent disclosure;

• Contact us by phone or SMS and provide your number for communication; or

• Otherwise provide your mobile number and indicate you would like to receive updates or information.

Message frequency varies. Standard message and data rates may apply.

2.2 How to Opt Out

You can opt out at any time by replying:

• STOP to unsubscribe, or

• HELP for assistance.

Even if you opt out of marketing messages, we may still send limited transactional or service-related messages where permitted by law (for example, confirmations you requested or critical service notices).

3. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember preferences (such as form state or display preferences)

• Improve Website performance and user experience

• Understand how visitors use the Website

• Support security and fraud prevention

3.1 Cookies Related to Comments and Login (If Enabled)

If you leave a comment, you may choose to save your name, email address, and website in cookies for convenience. These cookies typically last for one year.

If the Website includes a login feature:

• A temporary cookie may be set to check whether your browser accepts cookies; it contains no personal data and is discarded when you close your browser.

• Login cookies typically last two days. Screen preference cookies may last up to one year.

• Selecting “Remember Me” may keep you logged in for about two weeks. Logging out removes login cookies.

• If you edit or publish content (if applicable), an additional cookie may store the post ID; it generally expires after one day and does not store personal data.

3.2 Analytics and Performance

We may use analytics tools (such as Google Analytics) to help us understand Website usage and improve our content and services. These tools may collect:

• IP address (which may be truncated or processed in a de-identified manner depending on configuration)

• Device/browser information

• Pages visited and actions taken

• Time spent on pages

You can manage cookies in your browser settings. You may also be able to limit certain analytics through provider opt-out tools.

4. Embedded Content from Other Websites

Pages on this Website may include embedded content (e.g., videos, images, articles, social widgets). Embedded content behaves as if you visited the third-party site directly. These third parties may:

• Collect data about you

• Use cookies or similar tracking

• Monitor your interaction with embedded content (especially if you are logged in to that third-party site)

We do not control third-party data collection practices and encourage you to review their privacy policies.

5. How Long We Retain Your Data

We retain personal data only as long as reasonably necessary for the purposes described in this Policy, or as required by law.

Examples:

• Comments (if enabled): Comments and metadata may be retained indefinitely to help recognize and approve follow-up comments.

• User accounts (if any): We store information in your user profile. Users can typically edit or delete profile information (except username). Administrators may also access and edit profiles.

• Contact forms / inquiry submissions: We may retain entries for a reasonable period for customer service, record-keeping, fraud prevention, and legal compliance.

6. Who We Share Your Data With

We do not sell your personal data. We may share information with:

• Service Providers: Vendors that help operate the Website and services (hosting, analytics, email/SMS delivery, CRM tools, security). These providers are permitted to access data only as needed to perform services for us and are expected to protect it.

• Security and Spam Detection: Tools used to detect spam, abuse, or security threats.

• Legal and Compliance: When required by law, regulation, subpoena, court order, or when necessary to protect rights, property, or safety.

7. Your Rights Over Your Data

Depending on your location and applicable law, you may have rights to:

• Access the personal data we hold about you

• Correct inaccurate or incomplete data

• Delete certain personal data (subject to legal/administrative/security retention requirements)

• Object to or restrict certain processing (including marketing communications)

To exercise these rights, contact us using the details below. We may need to verify your identity before processing requests.

8. Where We Send or Store Your Data

Visitor comments may be checked through automated spam detection services that may be hosted in other countries.

We and our service providers may process or store data on servers located in jurisdictions outside your state or country. Where required, we take steps designed to support appropriate safeguards for cross-border transfers.

9. How We Protect Your Data

We use reasonable administrative, technical, and physical safeguards intended to protect personal data, such as:

• Secure hosting environments

• Access controls and authentication

• Regular updates and security patches

No internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security.

10. Data Breach Procedures

If we become aware of a data breach that may compromise your personal information, we will:

• Investigate and take appropriate remedial steps

• Notify affected individuals where required by law

• Coordinate with relevant authorities and service providers as appropriate

11. Third-Party Data and Automated Decision-Making

Third-Party Data: In limited cases, we may receive information from third parties (e.g., analytics or security providers) to help understand Website usage or detect abuse/fraud.

Automated Decision-Making: We do not engage in automated decision-making that produces legal or similarly significant effects solely based on automated processing. Security and spam tools may automatically flag suspicious activity, but this is not used to make legal/financial determinations about you.

12. Industry and Regulatory Disclosures

If specific regulations apply to the Website or its operators, we will comply and may update this Policy to reflect additional obligations.

13. Contact Information

If you have questions about this Privacy Policy or your rights, contact:

donateacar4breastcancer.org

Email: support@donateacar4breastcancer.org

Organization: Cancer Journeys Foundation