Privacy Policy

Effective Date: [EFFECTIVE DATE]

Legacy Athletic Fund, Inc. ("LAF," "we," "us," or "our") is a tax-exempt 501(c)(3) public charity classified under Section 170(b)(1)(A)(vi) of the Internal Revenue Code, with its principal office located at 401 S Mount Juliet Rd, Ste 235, Mt. Juliet, TN 37122 (EIN: 99-2543373). We are committed to protecting and respecting the privacy of every individual who visits our website, makes a donation, volunteers, or otherwise interacts with our organization.

This Privacy Policy explains what information we collect, how we use and protect that information, with whom we may share it, and what choices you have regarding your personal data. By accessing or using our website at legacyathleticfund.org (the "Site"), you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We may collect personally identifiable information ("Personal Information") that you voluntarily provide when you:

• Make a one-time or recurring donation through our website or payment processing partner;
• Sign up for our email newsletter or mailing list;
• Register for events, programs, or volunteer opportunities;
• Complete a contact form, survey, or other inquiry on our Site;
• Communicate with us via email, phone, or social media;
• Apply for participation in any LAF program, including the Pro Cycle.

The types of Personal Information we may collect include, but are not limited to:

• Full name (first and last);
• Email address;
• Mailing address;
• Phone number;
• Donation amount, date, and frequency;
• Payment method details (processed securely by our third-party payment processor; we do not store full credit card numbers);
• Employer name and title (if provided for matching gift or professional purposes);
• Any other information you choose to provide.

1.2 Information Collected Automatically

When you visit our Site, certain information may be collected automatically through cookies, web beacons, pixels, and similar technologies. This may include:

• Internet Protocol (IP) address;
• Browser type and version;
• Operating system;
• Device type (desktop, mobile, tablet);
• Referring URL and exit pages;
• Pages visited, date and time of visit, and time spent on each page;
• Click-through data and interaction patterns;
• Geographic location (general, based on IP address).

1.3 Information from Third Parties

We may receive information about you from third-party sources, including our payment processing partner Zeffy, social media platforms, event registration platforms, and publicly available sources. This information may be combined with other information we hold about you to improve our services, outreach, and communications.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing Donations: To process and acknowledge your charitable contributions, issue tax receipts, and maintain accurate financial records as required by the Internal Revenue Service (IRS).
• Communication: To send you donation confirmations, tax acknowledgment letters, newsletters, event invitations, program updates, fundraising appeals, and other communications related to our mission.
• Program Administration: To administer our programs, events, and volunteer activities, and to evaluate applicants for LAF programs.
• Website Improvement: To analyze Site usage, improve navigation and content, optimize the user experience, and troubleshoot technical issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to protect our rights, property, and safety, and those of our donors, volunteers, and program participants.
• Donor Stewardship: To recognize and thank donors, maintain donor records, and provide appropriate acknowledgments of support.
• Fraud Prevention: To detect, prevent, and respond to fraud, security breaches, and other potentially prohibited or illegal activities.

3. Third-Party Services

3.1 Zeffy (Payment Processing)

We use Zeffy as our third-party payment processing platform for online donations. When you make a donation, your payment information is collected, processed, and stored by Zeffy in accordance with their privacy policy and PCI Data Security Standards (PCI-DSS). We do not have access to or store your full credit card number, CVV, or other sensitive payment credentials. We encourage you to review Zeffy's privacy policy for details on how they handle your payment information.

3.2 Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC, to help us understand how visitors use our Site. Google Analytics uses cookies and similar technologies to collect information about your interactions with the Site. This information is transmitted to and stored by Google on servers in the United States. Google may use this data to evaluate your use of the Site, compile reports on website activity, and provide other services related to website and internet usage. Google's ability to use and share information collected by Google Analytics about your visits to our Site is governed by the Google Analytics Terms of Service and the Google Privacy Policy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-on.

3.3 Other Third-Party Services

We may also use other third-party services for email marketing, event management, social media integration, and website hosting. Each of these services has its own privacy policy governing how they collect, use, and protect your information. We only share the minimum amount of data necessary for these services to function on our behalf.

4. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience and collect usage data. Cookies are small text files placed on your device by your web browser.

We use the following types of cookies:

• Essential Cookies: Necessary for the Site to function properly, such as maintaining session state and enabling security features.
• Analytics Cookies: Help us understand how visitors interact with the Site by collecting information anonymously (e.g., Google Analytics cookies).
• Functional Cookies: Allow the Site to remember choices you make (such as language or region) to provide enhanced, personalized features.

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is being set. Please note that disabling cookies may affect the functionality of certain parts of the Site.

5. Donor Privacy

Legacy Athletic Fund is committed to respecting the privacy of our donors. We adhere to the following donor privacy principles:

• We will not sell, trade, rent, or otherwise share donor names, addresses, email addresses, phone numbers, or any other Personal Information with any third party for their own marketing purposes, unless we have the donor's explicit written consent.
• We will only share donor information with third-party service providers who are acting on our behalf to process donations, send communications, or perform other functions directly related to LAF's mission, and only to the extent necessary for them to perform those functions.
• All donor information is maintained in a secure database with restricted access limited to authorized LAF personnel and agents who need the information to perform their duties.
• Donors may request at any time to be removed from our mailing list, to have their personal information updated or corrected, or to make their donation anonymous.
• We will honor donor requests for anonymity in all public recognition, publications, annual reports, and other materials.
• Any donor information disclosed to a third party will be subject to a confidentiality agreement or similar contractual obligation.

6. Children's Privacy (COPPA Compliance)

Legacy Athletic Fund is committed to protecting the privacy of children. Our Site is not directed at children under the age of thirteen (13), and we do not knowingly collect Personal Information from children under 13 without verified parental consent, in compliance with the Children's Online Privacy Protection Act ("COPPA").

If we learn that we have inadvertently collected Personal Information from a child under 13 without appropriate parental consent, we will take reasonable steps to delete that information as promptly as possible. If you believe that we may have collected information from a child under 13, please contact us immediately at info@legacyathleticfund.org or call us at (270) 300-6922 so that we can take appropriate action.

For programs that serve youth participants, we collect only the information necessary to administer the program and require parental or guardian consent before collecting any personal data from minors.

7. Data Security

We take the security of your Personal Information seriously and implement commercially reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Encryption of data in transit using Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols;
• Secure storage of donor and financial records with access controls and authentication requirements;
• Regular review and updating of our security practices and procedures;
• Limiting access to Personal Information to authorized personnel who have a legitimate need to access such information;
• Use of PCI-DSS compliant third-party payment processors for all financial transactions.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your Personal Information, we cannot guarantee its absolute security. In the event of a data breach that affects your Personal Information, we will notify you and any applicable regulatory authority as required by law.

8. California Privacy Rights (CCPA)

If you are a California resident, you may have certain additional rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"). While nonprofit organizations are currently exempt from many CCPA provisions, Legacy Athletic Fund voluntarily extends the following rights to California residents as a matter of good practice:

• Right to Know: You have the right to request information about the categories and specific pieces of Personal Information we have collected about you, the purposes for which we collected it, and the categories of third parties with whom we have shared it.
• Right to Delete: You have the right to request deletion of your Personal Information, subject to certain legal exceptions (e.g., information necessary for tax reporting, completing a transaction, or complying with legal obligations).
• Right to Opt Out of Sale: We do not sell your Personal Information. However, if our practices change in the future, we will provide you with the right to opt out of any sale of your data.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights. You will continue to receive equal service and access to our programs regardless of any privacy choices you make.

To exercise any of these rights, please contact us using the information provided in Section 12 below. We will respond to verifiable requests within forty-five (45) days of receipt.

9. Data Retention

We retain your Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Specifically:

• Donor Records: Donation records, including donor names, addresses, amounts, and dates, are retained for a minimum of seven (7) years in compliance with IRS record-keeping requirements for 501(c)(3) organizations.
• Tax Receipts and Acknowledgments: Copies of written acknowledgments for contributions of $250 or more are retained for a minimum of seven (7) years.
• Communication Records: Email and mailing list subscriptions are retained until you request removal or unsubscribe.
• Website Analytics Data: Aggregate, anonymized analytics data may be retained indefinitely for historical reporting and trend analysis.
• Program Records: Information related to program participants is retained for the duration of the program and a reasonable period thereafter.

When your Personal Information is no longer needed for the purposes described above, we will securely delete or anonymize it in accordance with applicable data protection laws.

10. Your Choices and Rights

You have the following choices regarding your Personal Information:

• Opt Out of Communications: You may opt out of receiving non-essential communications (such as newsletters and fundraising appeals) at any time by clicking the "unsubscribe" link in any email we send or by contacting us directly. Please note that even if you opt out, we may still send you transactional or administrative communications, such as donation receipts and tax acknowledgment letters.
• Access and Correction: You may request access to the Personal Information we hold about you and request corrections to any inaccurate or incomplete data by contacting us at the address below.
• Deletion: You may request deletion of your Personal Information, subject to any legal obligations we may have to retain certain records.
• Anonymity: You may request that your donation be made anonymously and that your name not be included in any public donor recognition.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify you by email or through a prominent notice on our Site. Your continued use of the Site after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your Personal Information, please contact us:

Legacy Athletic Fund, Inc.
401 S Mount Juliet Rd, Ste 235
Mt. Juliet, TN 37122
Phone: (270) 300-6922
Email: info@legacyathleticfund.org
Website: legacyathleticfund.org

We will make every reasonable effort to respond to your inquiry within a timely manner and in accordance with applicable law.