This includes information you voluntarily submit, such as:

• Name, email address, phone number, and mailing address
• Donation information (amount, date, payment method type) and billing address
• Event registrations or newsletter signups
• Stories, photos, or other content you choose to submit
• Any information you send via email or contact forms

We do not collect or store full credit card numbers, CVV codes, or bank account numbers. All payment information is processed by PCI‑compliant third‑party payment processors.

We collect only the personal information that is reasonably necessary to fulfill the purposes described in this Privacy Notice.

When you visit the Site, we automatically collect:

• IP address
• Browser type and version
• Device identifiers
• Pages visited and referring URLs
• Time and date of visits
• Cookie and tracking information

We use this information to operate, secure, and improve the Site.

We do not link IP addresses to personally identifiable information unless required for security or legal compliance.

We may use analytics tools (such as Google Analytics or similar services) to understand how visitors use the Site. These tools may collect information sent by your browser as part of a web request.

We use cookies and similar technologies to:

• Store user preferences
• Maintain session information
• Analyze Site usage
• Improve functionality

You may disable cookies through your browser settings. Some features of the Site may not function properly if cookies are disabled.

• Processing donations and issuing acknowledgments
• Communicating with you about events, updates, and organizational activities
• Responding to inquiries
• Operating, maintaining, and improving the Site and Activities
• Protecting the security and integrity of our systems
• Complying with legal obligations
• Supporting our mission and organizational operations

We may share information with trusted third‑party vendors who assist with:

• Payment processing
• Email communications
• Device identifiers
• Pages visited and referring URLs

These providers may only use information as necessary to perform services for us.

We may disclose information:

• When required by law or legal process
• To comply with government investigations
• To enforce our Terms & Conditions at heartstohomes.org/terms
• To protect against misuse or unauthorized use of the Site
• To protect the rights, safety, or property of Hearts to Homes, our users, or others

These providers may only use information as necessary to perform services for us.

We may share information for any purpose you explicitly authorize.

If you reside in California, you may have the right to:

• Know what personal information we collect and how we use it
• Request deletion of personal information
• Request correction of inaccurate information
• Opt out of the sale or sharing of personal information (we do not sell personal information)
• Limit the use of sensitive personal information
• Not be discriminated against for exercising your rights

Sensitive personal information under California law includes government identifiers, financial account access data, precise geolocation, racial or ethnic origin, religious beliefs, union membership, genetic data, biometric identifiers, health information, and sexual orientation. Hearts to Homes does not collect or use sensitive personal information.

To exercise these rights, contact us at privacy@heartstohomes.org.

If you are located in the European Union or the United Kingdom, you may have the right to:

• Access your personal information
• Request correction or deletion
• Object to or restrict processing
• Withdraw consent
• Data portability
• Lodge a complaint with a supervisory authority

Our legal bases for processing include consent, legitimate interests, and compliance with legal obligations.

Your information may be transferred to and processed in the United States. We rely on your consent, contractual necessity, or our legitimate interests as permitted under GDPR for such transfers.