Privacy Policy

1. Information We Collect

The Newport Beach Police Foundation ("NBPF," "we," "our") is a 501(c)(3) non-profit organization (EIN: 46-3322480). We collect limited personal information through our website to serve our mission of supporting the Newport Beach Police Department.

Contact Forms: When you submit our contact form, we collect your name, email address, phone number (optional), and message content. This information is used solely to respond to your inquiry.

Donation and Sponsorship Information: When you make a donation or purchase a sponsorship, we collect your first name, last name, email address, and billing address through our payment processor, Stripe. We retain donor records (name, email, donation amount, date, and sponsorship tier) for tax reporting, acknowledgment letters, and IRS compliance. We do not store credit card numbers, bank account details, or other payment credentials on our servers.

Automatically Collected Information: When you visit our website, we may automatically collect certain technical data through cookies and analytics tools, including IP address, browser type, device type, operating system, referring URL, pages visited, and time spent on each page.

2. How We Use Your Information

• To process donations, sponsorships, and issue tax-deductible receipts
• To respond to contact form inquiries
• To send event notifications and updates about NBPF programs (with your consent)
• To comply with IRS reporting requirements for 501(c)(3) organizations
• To improve our website, content, and user experience
• To analyze aggregate website traffic and usage patterns

3. Donor Information Policy

We respect the privacy of our donors. NBPF will not sell, share, or trade donor personal information (including names, addresses, email addresses, phone numbers, and donation history) with any third party, except as required by law or as necessary to process your donation through our payment processor.

Donor information may be used internally for the following purposes only: processing and acknowledging gifts, maintaining accurate records for IRS compliance, providing year-end tax statements, and communicating Foundation news and event invitations (donors may opt out at any time).

We retain donor records for a minimum of seven (7) years to comply with IRS record-keeping requirements for charitable organizations.

4. Third-Party Services

Stripe (Payment Processing): All online donations and sponsorship payments are processed by Stripe, Inc. Stripe is PCI-DSS Level 1 compliant and uses industry-standard encryption. Your payment information is transmitted directly to Stripe and is never stored on the NBPF website. Stripe's privacy policy is available at stripe.com/privacy.

Google Analytics (GA4): We use Google Analytics 4 to collect anonymized website usage data. GA4 uses first-party cookies to measure user interactions. Data collected includes pages visited, session duration, traffic sources, device/browser information, and approximate geographic location (city-level). GA4 does not collect personally identifiable information by default. Google's privacy policy is available at policies.google.com/privacy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.

Formspree (Contact Forms): Contact form submissions may be processed through Formspree, which transmits your information to our email. Formspree does not store your data long-term or share it with third parties.

Google Maps: Our contact page includes an embedded Google Map. Google may collect usage data through this embed in accordance with its privacy policy.

Netlify (Hosting): Our website is hosted on Netlify. Netlify may collect server logs including IP addresses and request data for security and performance purposes. Netlify's privacy policy is available at netlify.com/privacy.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for basic site functionality (session management, security).
• Analytics cookies: Google Analytics 4 first-party cookies (_ga, _ga_*) used to distinguish users and measure site traffic. These cookies expire after 2 years of inactivity.

We do not use advertising cookies or retargeting pixels. You can manage cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the website.

6. Data Security

We take reasonable measures to protect your personal information. Our website uses HTTPS (TLS) encryption for all data in transit. Payment processing is handled by PCI-compliant third parties. Access to donor records is restricted to authorized NBPF personnel. However, no method of electronic transmission or storage is 100% secure. If you have concerns about data security, please contact us.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions (such as IRS record-keeping requirements for charitable contributions).
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: NBPF does not sell or share personal information for cross-context behavioral advertising. No opt-out is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at info@newportbeachpolicefoundation.org or call (949) 875-NBPF (6273). We will respond to verifiable requests within 45 days.

Categories of personal information collected in the preceding 12 months: Identifiers (name, email, mailing address, IP address), financial information (donation amounts processed via Stripe), and internet activity (pages visited, browser type via Google Analytics).

8. Your General Privacy Rights

All visitors, regardless of location, have the right to:

• Request access to personal information we have collected about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Opt out of marketing emails at any time by contacting us or using the unsubscribe link
• Opt out of Google Analytics tracking via browser settings or the opt-out add-on

9. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy. Donor records are retained for a minimum of seven (7) years for IRS compliance. Contact form submissions are retained for up to two (2) years. Analytics data is retained according to Google Analytics default settings (14 months for GA4). You may request earlier deletion of your personal information by contacting us.

10. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. Links to External Websites

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any external sites before providing your personal information.

12. Contact Us

If you have questions about this privacy policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:

13. Policy Updates

We may update this privacy policy to reflect changes in our practices or applicable laws. Material changes will be noted by updating the "Last Updated" date below. Your continued use of our website after changes are posted constitutes acceptance of the updated policy.