Privacy Policy & Terms of Use

Privacy Policy
Effective Date: December 12, 2025

Carry the Cross Foundation ("Foundation," "we," "us," or "our") is a 501(c)(3) nonprofit organization dedicated to providing compassionate care, spiritual companionship, and advocacy for elderly individuals. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit our website at www.carrythecrossfoundation.org (the "Website"), interact with our services, or engage with us through email, phone, text message, social media, or other channels. It also explains our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect on the Website and through our services, but not to information collected offline or through third-party websites, even if linked from our Website. By accessing or using the Website or our services, you agree to this Privacy Policy. If you do not agree, please do not use the Website or our services. We may update this policy from time to time; your continued use after changes constitutes acceptance. Please review it periodically.

We are not a medical provider and are not a "covered entity" under laws governing the privacy of medical records, such as the Health Insurance Portability and Accountability Act (HIPAA).

Donor Privacy Commitment: We will not sell, share, or trade donors' names or personal information with any other entity, nor send mailings to donors on behalf of other organizations. This applies to all information received by the Foundation, whether online, offline, or through electronic, written, or oral communications.

1. Information We Collect

We collect several types of information to support our mission, including:

• Personal Information: Data by which you may be identified, such as name, postal address, email address, telephone number, mobile phone number, or any other identifier (e.g., from donation forms, volunteer sign-ups, contact inquiries, or grant applications).
• Donation and Financial Information: Billing details for donations or contributions, processed securely by third-party providers (we do not store payment card information).
• Demographic and Preference Data: Age, location, or preferences voluntarily provided to tailor our support or communications.
• Usage and Device Data: IP address, browser type, operating system, pages visited, and device information collected automatically.
• Sensitive Information: In limited cases, such as grant applications or advocacy requests, we may collect sensitive data like health-related details or financial hardship information if voluntarily provided to determine eligibility or coordinate support. We handle this with heightened care and do not store it longer than necessary.
• Aggregated or Anonymized Data: Non-identifiable information used for analytics or reporting.

We do not knowingly collect personal information from children under 18. If we learn we have done so without parental consent, we will delete it. Contact us if you believe we have such information.

2. How We Collect Information

• Directly from You: When you submit forms for donations, volunteering, newsletters, grant applications, story submissions, or inquiries; or when you interact via email, phone, text message, postal mail, or social media.
• Automatically: Through cookies, web beacons, and similar technologies to track usage, improve the Website, and remember preferences. This may include visit details, traffic data, and device information.
• From Third Parties: Limited data from service providers (e.g., analytics tools like Google Analytics) or partners involved in our programs, only as necessary and with appropriate safeguards.

3. Information Collected Through Automatic Technologies

As you navigate the Website, we may use technologies like:

• Cookies: Small files stored on your device for functionality, preferences, and analytics. You can refuse cookies via browser settings, though this may limit access to parts of the Website.
• Web Beacons and Local Storage: To collect data on visits, emails opened, and navigation patterns.
• Third-Party Tracking: Some content may involve third parties (e.g., advertisers or analytics providers) that use their own cookies or tracking. We do not control these; refer to their policies for opt-out options.

For more details, see our Cookie Policy (if separate) or contact us.

4. How We Use Your Information

We use information solely to further our mission, including to:

• Process donations, grants, and transactions.
• Communicate updates, newsletters, volunteer opportunities, or program information via email, phone, or text message.
• Provide or coordinate support for seniors (e.g., advocacy or referrals).
• Improve the Website, services, and operations through analytics.
• Fulfill legal obligations, such as issuing tax receipts or complying with reporting requirements.
• Share anonymized stories or data for advocacy (with consent where identifiers are involved).

We do not use your information for unrelated marketing or sell it to third parties.

Text Messaging (SMS) Consent
By providing your mobile phone number to the Foundation—whether through our Website forms, donation process, volunteer sign-up, or by initiating contact with us via text—you provide implied consent to receive text messages from Carry the Cross Foundation. These messages may include donation confirmations, program updates, volunteer opportunities, advocacy information, and other mission-related communications.

Message frequency varies. Standard message and data rates may apply. Consent is not a condition of making a donation, receiving support, or participating in any Foundation program.

You may opt out of text messages at any time by replying STOP to any message you receive from us. For help, reply HELP. After opting out, you may still receive important transactional messages related to a specific donation or request you initiated.

5. Disclosure of Your Information

We may disclose aggregated or anonymized data without restriction. Personal information is shared only as necessary:

• To Service Providers: Third parties (e.g., payment processors like Stripe or PayPal, email and SMS services) bound by confidentiality agreements and using data only for the purposes we specify.
• To Partners: With organizations involved in our programs for support coordination, only with your explicit consent.
• For Legal Reasons: To comply with court orders, laws, or regulatory requests; or to protect the rights, property, or safety of the Foundation, users, or others.
• In Business Transfers: To a successor in the event of a merger, acquisition, or asset sale.

We may transfer data internationally (e.g., to U.S. servers). For EU/UK residents, we use safeguards like Standard Contractual Clauses to comply with GDPR.

6. Data Security and Retention

We implement reasonable security measures, including encryption, firewalls, access controls, and regular audits, to protect against unauthorized access, loss, or alteration. However, no system is completely secure, and we cannot guarantee absolute protection. Transmissions over the internet are at your own risk.

We retain information only as long as necessary for our purposes, legal requirements (e.g., IRS rules require donor records for 7 years), or to resolve disputes, then securely delete or anonymize it.

7. Your Rights and Choices

You have options regarding your information:

• Access, Correct, or Delete: Request a copy of your data, updates, or deletion by emailing info@carrythecrossfoundation.org. We may retain data as required by law.
• Opt-Out: Unsubscribe from communications via links in emails, by replying STOP to text messages, or by contacting us. Withdraw consent for processing at any time.
• Cookies and Tracking: Manage via browser settings or tools like Google Analytics opt-out. We honor Do Not Track signals where feasible.
• State-Specific Rights: Residents of certain states (e.g., California under CCPA/CPRA, Colorado, Connecticut, Virginia, Utah, and others with comprehensive privacy laws) may have rights to confirm processing, access/delete/port correct data, data portability, opt out of targeted advertising/sales/profiling. We do not "sell" data or engage in targeted advertising based on sensitive information. To exercise rights or appeal decisions, submit a verifiable request via email or mail. We respond within 45 days (extendable).
• GDPR Rights: EU/UK residents may access, rectify, erase, restrict, or object to processing, or request portability. Contact us to exercise these.

California's "Shine the Light" law allows requests for third-party marketing disclosures (we do not share for such purposes). Nevada residents: We do not sell data triggering opt-out requirements.

8. Changes to This Policy

We may revise this policy to reflect changes in our practices or laws. Material changes will be notified via email (if we have your address) or a prominent Website notice. The updated policy will be posted with a new effective date.

9. Contact Us

For questions or requests, email info@carrythecrossfoundation.org, call or text 972-846-9640, or write to:
Carry the Cross Foundation
5473 Blair Rd Ste 100 Num 309571
Dallas, TX 75231