This policy explains what personal information the DeGregorio Family Foundation (“the Foundation,” “we,” “us”) collects through degregorio.org, why we collect it, who we share it with, and the choices you have. We collect only what we need to respond to you, process your gifts, and run our grant program. We do not sell, rent, or trade your personal information, and we do not use advertising or analytics tracking on this site.
Who we are
DeGregorio Family Foundation
A 501(c)(3) public charity · EIN 83-0465493
PO Box 236, Pleasantville, NY 10570
Email: lynn@degregorio.org · Phone: (212) 616-7755
The Foundation is responsible for the personal information described in this policy. Questions or requests can be sent to the email or mailing address above.
Information you give us
| When you… | We collect | We use it to |
|---|---|---|
| Send a message through the Contact form | Name, email address, your message | Read and reply to your message |
| Make a donation | Name, email address, company name (if any), gift amount and frequency, dedication details (honoree name), and, if you ask us to send an eCard, the recipient’s name, email and your message | Process your gift, send your receipt and thank-you letter, keep required tax and accounting records, and send the eCard you requested |
| Make a gift in memory of someone | Your name and email, gift amount, your optional message, and, if you provide them, the name and email of a family member to notify | Process your gift, send your receipt, and let the family know a gift was made in their loved one’s memory |
| Buy gala tickets (when ticket sales are open) | Name, email, phone number, and the names of your guests | Process your order, prepare the guest list, and contact you about the event |
| Submit a grant application | Name, email, phone number, institution, the documents you upload, and any comments | Review your application. Applications are shared in confidence with members of our Scientific Advisory Board, who score them, and with our Board of Directors, who make award decisions. If you receive a grant, we may publicly announce your name, institution, project title and photo. |
Card details. Payments are processed by Stripe on a secure payment form. Your card number is sent directly to Stripe and never passes through or is stored on our servers. We receive only a record of the payment (for example, the amount, date, and the last four digits of your card).
Information about other people. If you give us someone else’s details (an honoree, an eCard recipient, a family member to notify, or a gala guest), please make sure they would be comfortable with that. We use those details only for the purpose you gave them to us.
Information collected automatically
- Security and hosting data. Our site is hosted by Cloudflare. Like any website, it receives your IP address, browser type and the pages you request. Cloudflare uses this to deliver the site and protect it from attacks. Our forms also use Cloudflare Turnstile, a privacy-focused “verify you are human” check, and we briefly record your IP address (for about one minute) to stop automated spam.
- Fraud prevention. On pages with a payment form, Stripe collects device and browser information to detect fraud.
- No analytics or advertising. We do not use Google Analytics, advertising pixels, or any other tool that tracks you across the web.
See our Cookie Policy for details.
Donor recognition
We may thank donors and gala patrons by name, for example in gala programmes, on event signage, or on this website. If you do not want to be named, tick the “anonymous” box when you give, or email us and we will not list you.
Who we share information with
We share personal information only with service providers who help us run the Foundation, and only as needed for them to do that work:
- Stripe: payment processing (Stripe Privacy Policy)
- Cloudflare: website hosting, security, and the Turnstile human check (Cloudflare Privacy Policy)
- Resend: delivery of form notifications, receipts, and confirmation emails (Resend Privacy Policy)
- Google: web fonts on every page, and YouTube videos only if you press play (Google Privacy Policy)
- Dropbox: streams one video on our Video page, only if you press play (Dropbox Privacy Policy)
- Our email and office software providers, our accountants and auditors, and our Scientific Advisory Board (grant applications only)
We may also disclose information if required by law, to respond to legal process, or to protect the rights and safety of the Foundation or others.
How long we keep information
We keep donation and payment records for as long as required for tax, audit and accounting purposes (generally at least seven years). We keep grant application materials for the duration of the grant cycle and, for funded grants, for the life of the grant and our reporting obligations. Contact messages are kept only as long as needed to respond and follow up. When information is no longer needed, we delete it or make it anonymous.
How we protect information
The site is served only over encrypted HTTPS connections. Card payments are handled by Stripe, which is certified to PCI DSS Level 1. Access to the information we hold is limited to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you if required by law in the event of a breach.
Your choices and rights
You may ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct information that is wrong;
- delete your information (we may need to keep records the law requires, such as donation records); or
- stop listing your name in donor recognition.
To make a request, email lynn@degregorio.org or write to us at the address above. We will respond within 30 days and may need to confirm your identity first. We do not send marketing emails from this website. If we ever do, we will ask for your permission separately, and every message will include a way to unsubscribe.
United States residents. We do not sell personal information or share it for targeted advertising. We will honor the requests above no matter which state you live in.
Visitors from the European Economic Area, United Kingdom and Switzerland. We process your information to perform a request you make, such as a donation or grant application (contract); to meet legal and tax obligations (legal obligation); and to run and secure our charity and website (legitimate interests). You also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority. The Foundation and its service providers are based in the United States, so your information will be processed there. Where required, our providers transfer data under the EU Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
Children
This website is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us information, contact us and we will delete it.
Links to other websites
Our site links to other websites, such as social media, charity rating sites, race registration and news articles. Those sites have their own privacy policies, and we are not responsible for their practices.
Changes to this policy
We may update this policy from time to time. The effective date at the top shows when it last changed. Significant changes will be highlighted on this page.