Privacy policy

How to Make Your Current Website Compliant

1) Who We Are

BeneFund Foundation (“we”, “us”, or the “Foundation”) is a registered 501(c)(3) nonprofit organization dedicated to promoting ethical capitalism by transforming business commissions into charitable impact through our Fund It Forward program. We operate (the “Site”). Contact for Privacy Matters Email: [privacy@slategrey-toad-295310.hostingersite.com] Address: [full mailing address] Phone: [number]

2) Scope

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our Site or interact with the Foundation—such as through contact forms, newsletter sign-ups, partner inquiries, or donations.

3) Information We Collect Information you provide:

name, email, phone number, mailing address, organization or partner affiliation, message contents, preferences, and—if you make a donation—amount and payment method. (We do not store full payment card numbers; our secure payment processor handles all sensitive payment data.) Automatically collected information: IP address, browser type, device information, pages visited, referring websites, and timestamps. Cookies and similar technologies: used for essential Site functions and analytics (see §7).

4) How We Use Information

 We use personal information to:

• Respond to questions and provide information about the Foundation’s programs, initiatives, and partnerships.

• Manage newsletters and communications (you may unsubscribe at any time).

• Process donations, issue receipts, and acknowledge supporters.

• Improve and secure the Site, perform analytics, and prevent fraud or abuse.

• Comply with legal, accounting, and audit requirements applicable to U.S. nonprofits.

5) Legal Bases (where GDPR/UK GDPR apply)

For individuals in applicable jurisdictions, we process data based on consent (e.g., marketing communications), legitimate interests (e.g., Site functionality and improvement), legal obligations (e.g., donation recordkeeping), and/or performance of a relationship with you (e.g., responding to requests).

6) How We Share Information

• Service providers: We work with vetted providers for website hosting, communications, analytics, and donation processing. They act on our behalf and maintain strict data protection measures.

• Legal reasons: We may disclose information to comply with law, enforce our policies, or protect the Foundation’s rights, safety, and operations. We do not sell or trade personal information.

7) Cookies & Analytics

We may use first- and third-party cookies (such as Google Analytics) to measure Site performance and understand engagement.

• Manage cookies through your browser settings.

• To opt out of Google Analytics, visit:

• If a cookie consent banner is deployed on the Site, link it to this Policy.

8) Donations & Payments

Donations come from business commissions, not direct donor payments. All commission transactions are securely processed by business partners under their own privacy policies.

9) Data Retention

We retain personal information only as long as necessary for the purposes described or as required by law (including IRS nonprofit recordkeeping requirements).

Data is securely deleted or anonymized thereafter.

10) Security

We employ reasonable administrative, technical, and organizational safeguards—including HTTPS encryption and access controls—to protect your information. However, no data transmission or storage method is entirely secure.

11) Your Rights & Choices

Depending on your location, you may have the right to access, correct, update, delete, or restrict processing of your personal information. You may also:

• Unsubscribe from communications at any time.

• Withdraw consent where processing is based on consent.

• Submit requests to [privacy@slategrey-toad-295310.hostingersite.com]. We may verify your identity before responding. Region-specific notices:

• California (CCPA/CPRA): We do not sell or share personal information for cross-context behavioral advertising. California residents may request access or deletion of their data by contacting us.

• EU/EEA & UK (GDPR): Where data is transferred outside your region, we implement appropriate safeguards (e.g., Standard Contractual Clauses). You may lodge a complaint with your local data protection authority.

12) Children’s Privacy

Our Site is not directed toward children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted information, please contact us so we can delete it.

13) Third-Party Links

Our Site may include links to third-party websites or donation platforms. Please note that we are not responsible for their content or privacy practices. Review their respective privacy policies before providing any information.

14) Changes to This Policy

We may update this Policy periodically. Updates will be posted on this page with the date of the latest revision. Significant changes will be communicated prominently.