Privacy Policy

Introduction

Love Utah's Lunch Fund ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website loveutah.com and make donations through our platform.

By using our website and services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Personal Information

When you make a donation, we collect the following personal information:

• Full name
• Email address
• Phone number (optional)
• Mailing address (for tax receipt purposes)
• Payment information (processed securely through Stripe)
• Donation amount and school selection

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on pages
• Geographic location (general, not precise)

How We Use Your Information

We use the information we collect for the following purposes:

• Process and complete your donation transactions
• Send donation receipts and tax documentation
• Distribute funds to the schools you selected
• Communicate with you about your donation and our mission
• Send periodic updates about the impact of your donation (you may opt out at any time)
• Improve our website and services
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations and reporting requirements

Payment Processing

All payment transactions are processed through Stripe, a third-party payment processor. We do not store your complete credit card information on our servers. Stripe maintains PCI-DSS compliance and uses industry-standard encryption to protect your payment information.

For more information about how Stripe handles your data, please review Stripe's Privacy Policy at https://stripe.com/privacy.

Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website, processing payments (Stripe), managing our database (Supabase), and communicating with donors, provided they agree to keep your information confidential.
• Legal Requirements: When required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• School Districts: We may share aggregate donation information (not personal details) with school districts to facilitate fund distribution.
• Investment Managers: Morgan Stanley, who manages our endowment fund, receives only aggregate financial data and does not receive donor personal information.

Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure database storage with access controls
• Regular security audits and updates
• Limited employee access to personal information

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You may request access to the personal information we hold about you.
• Correction: You may request that we correct any inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Opt-Out: You may opt out of receiving promotional communications from us by following the unsubscribe instructions in those communications or contacting us directly.

To exercise any of these rights, please contact us at the email address provided below.

Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small data files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Donation records are retained for tax and legal compliance purposes for a minimum of seven years.

International Users

Our services are operated in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our services, you consent to the transfer of your information to the United States.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: