The Brickers Foundation ("we," "our," or "us") is committed to protecting your privacy. This Privacy Notice explains how we collect, use, disclose, and protect personal information in connection with our charitable programs and services, and describes the rights available to you under applicable privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and the General Data Protection Regulation (GDPR).
Who We Are
We are a fully remote nonprofit organization providing charitable programs and services accessible via our website. As a remote organization, all of our operations, communications, and programs are conducted online.
For GDPR purposes, the Brickers Foundation is the data controller of your personal data.
Information Collection
Information You Provide
We collect personal information that you voluntarily provide to us, which may include:
Name and contact details (email address, phone number, mailing address).
Volunteer application information (background, skills, and areas of interest).
Donation-related information (excluding full payment card numbers, which are handled directly by our payment processor).
Communications you send us, such as inquiries or feedback.
Visual Media
We may collect photos or videos that you voluntarily provide for use in scholarship recognition, volunteer features, or promotional materials. We will always obtain your consent before using such media publicly.
Children’s Online Privacy Protection Act (COPPA)
Our website and programs are not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 as a general matter. An exception is our scholarship program, which may involve eligible students under age 13. In those cases, we collect only the information reasonably necessary to administer eligibility, participation, and program coordination and only after verified parental or guardian consent has been obtained through a signed digital consent form.
Parents or legal guardians may at any time:
Review the personal information we have collected about their child.
Request correction or deletion of that information.
Revoke their consent for future data collection.
To exercise these rights, please contact us using the information in the "Contact Us" section below.
Automatically Collected Data
When you visit our website, our service providers (such as Squarespace and Google Analytics) automatically collect certain technical information. This may include IP addresses, browser type, device identifiers, and cookie data.
Google Analytics is a web analysis service provided by Google. Google utilizes the data collected to track and examine the use of a website, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network.
Personal data collected: Cookie and Usage Data. Place of processing: USA.
A cookie is a piece of data stored on a site visitor’s hard drive to help us improve your access to our site and identify repeat visitors to our site. This information is used to understand website traffic, ensure security, and improve our services. Usage of a cookie is in no way linked to any personally identifiable information on our site.
You can manage or decline cookies through your browser settings or by using opt-out tools provided by our analytics providers. For more information, please see your browser's help documentation or visit optout.aboutads.info.
Categories of Personal Information (CCPA/CPRA)
In addition to the descriptions above, we categorize the personal information we collect as follows, as required by California law:
Identifiers: Such as name, email address, phone number, mailing address, and IP address.
Personal Information Categories under Cal. Civ Code §1798.80(e): Such as information provided in volunteer applications, scholarship submissions, and communications with us.
Internet or Other Electronic Network Activity: Such as browser type, device information, and interactions with our website collected through cookies and analytics tools, including Google Analytics.
Inferences: Such as general preferences or engagement trends based on your interactions with our website or communications.
These categories of personal information are collected directly from you or automatically through your use of our website and are used and disclosed for the business and operational purposes described in this Privacy Notice. We do not sell or share personal information as those terms are defined under California law.
How We Use Your Information
We use personal information only for the following purposes:
Sending communications, newsletters, and program updates.
Processing donations and acknowledging supporters.
Managing volunteer applications and coordinating programs.
Administering our scholarship program, including verifying eligibility and coordinating awards.
Complying with IRS, tax, and other regulatory reporting requirements.
Responding to inquiries and supporting our charitable mission.
Ensuring the security and functionality of our website.
Legal Bases for Processing (GDPR)
For individuals located in the European Economic Area (EEA) or United Kingdom, we process personal data under the following legal bases:
Consent: For marketing communications, newsletters, and the collection of scholarship-related data from minors.
Contractual Necessity: To process donations or fulfill volunteer program agreements.
Legitimate Interests: For organizational operations, communications, and website security, where not overridden by your rights.
Legal Obligations: For tax, accounting, and nonprofit compliance requirements.
Sharing of Information
We do not sell, rent, or trade your personal information. We share personal information only with trusted third-party service providers that support our operations, under appropriate confidentiality agreements:
Payment Processors (e.g., Stripe): To securely process donations.
Website Hosting (e.g., Squarespace): To maintain our online presence.
Communication Tools: For email newsletters, program coordination, and internal operations.
Donor Privacy Guarantee: We will never sell, share, or trade our donors' names or personal information with any other entity, nor will we send mailings to our donors on behalf of other organizations. We do not share data for cross-context behavioral advertising.
International Data Transfers
As a remote organization using U.S.-based service providers, your data may be transferred to and stored in the United States. Where we transfer personal data from the EEA, UK, or other jurisdictions with data transfer restrictions, we use appropriate safeguards such as Standard Contractual Clauses or reliance on the EU-U.S. Data Privacy Framework (DPF), where applicable, to ensure your data remains protected.
Data Storage and Security
We implement reasonable administrative, technical, and organizational safeguards including encryption, access controls, and secure cloud storage platforms to protect your personal information against unauthorized access, loss, or misuse.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Notice, or as required by applicable law, tax regulations, and nonprofit compliance obligations. When personal information is no longer needed, we securely delete or anonymize it.
Your Privacy Rights
California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights:
Right to Know: Request disclosure of the personal information we have collected about you.
Right to Correct: Request correction of inaccurate personal information.
Right to Delete: Request deletion of your personal information, subject to legal retention obligations.
Right to Opt-Out: While we do not sell personal information, you may object to certain processing.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
EEA and UK Residents (GDPR/UK GDPR)
If you are located in the EEA or UK, you have the following rights:
Right of Access: Obtain a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal obligations.
Right to Restrict Processing: Ask us to limit how we use your data in certain circumstances.
Right to Data Portability: Receive your data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority (e.g., the ICO in the UK, or the relevant EU supervisory authority).
Other U.S. State Residents
Residents of Virginia, Colorado, Connecticut, Texas, and other states with active privacy laws may have similar rights to access, correct, delete, and opt out of certain uses of their personal data. Please contact us to exercise any of these rights.
Third Party Links
This website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.
Updates
Our Privacy Policy may change from time to time and all updates will be posted on this page.
Contact Us
To exercise your privacy rights, ask questions about this Privacy Notice, or submit a request regarding your personal information, please contact us:
