Privacy Policy

1. Who We Are

360 Responder Foundation ("360 Responder," "we," "us," or "our") is a 501(c)(3) nonprofit organization registered in Oregon that raises and directs funds toward scientific research on the health, medical outcomes, safety, and wellness of first responders.

This policy explains what personal information we collect through our website at 360responder.org, why we collect it, who we share it with, and what choices you have.

2. Scope

This policy covers information collected through our website, our email communications, and our donation and inquiry forms. It does not cover:

• Information you provide directly to a third party (for example, a payment processor's own checkout page), which is governed by that party's privacy policy.
• Information handled by grant recipients or research institutions we fund.

3. Information We Collect

Information you give us directly

• When you make a donation: your name, email address, donation amount, whether the gift is recurring, and billing information. Payment card details are entered into and processed by our payment processor. We do not receive, store, or have access to your full card number.
• When you submit a grant inquiry: your name, email address, your stated role (university researcher, hospital, independent researcher, institution, or other), and the content of your message.
• When you contact us: your name, email address, your stated inquiry type, and the content of your message.
• When you subscribe to updates: your email address and any preferences you select.

Information collected automatically

When you visit the site, our hosting provider and analytics tools may automatically collect:

• IP address and approximate location derived from it
• Browser type, device type, and operating system
• Pages visited, time on page, and referring website
• Cookie and similar identifiers

Sensitive information

Please do not send us medical records, diagnoses, treatment details, workers' compensation case files, or other sensitive health or legal information through our web forms. Our forms are not a secure channel for that information, and we do not operate as a healthcare provider or a HIPAA covered entity. If you need to share sensitive information with us, contact us first and we will arrange a secure method.

If you voluntarily include health, mental health, or other sensitive information in a message to us, we will treat it as confidential and use it only to respond to you.

4. How We Use Your Information

We use personal information to:

• Process donations and issue tax receipts and acknowledgments
• Respond to grant inquiries and administer our grant review process
• Respond to questions and messages you send us
• Send updates about our research funding, impact, and organizational news, where you have asked to receive them
• Maintain records required for nonprofit accounting, tax filings, and audits
• Operate, secure, and improve our website
• Comply with legal obligations and enforce our terms

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

5. We Do Not Sell Your Personal Information

We do not sell, rent, trade, or exchange donor lists, email lists, or any personal information with other organizations for their own marketing purposes. We do not sell personal information as that term is defined under U.S. state privacy laws.

We do not use your personal information for targeted advertising.

6. How We Share Your Information

We share personal information only in these circumstances:

Service providers.

We use third-party vendors to run the organization. They may access your information only to perform services for us and are contractually restricted from using it for their own purposes. Our current providers include:

Legal requirements.

We may disclose information if required by law, subpoena, court order, or government request, or where we believe disclosure is necessary to protect the safety of any person, investigate fraud, or protect our legal rights.

Organizational changes.

If 360 Responder merges with, is acquired by, or transfers assets to another nonprofit organization, donor and contact information may transfer as part of that change. We will notify you before your information becomes subject to a materially different privacy policy.

With your direction.

We will share information with anyone else only with your explicit permission.

7. Public Recognition of Donors

We do not publish donor names, donation amounts, or any information identifying you as a donor. If we later create a donor recognition program, we will ask for your written permission before including you, and participation will always be optional. We never sell, trade, or share donor lists with other organizations.

8. Cookies and Tracking

Our website uses cookies and similar technologies for:

• Strictly necessary purposes — keeping the site functioning, securing forms, and preventing fraud. These cannot be turned off.
• Analytics — We use Google Search Console and Squarespace's built-in traffic dashboard to see aggregate information about how people find our site, such as which search terms lead to us and which pages are most visited. This reporting does not set cookies on your device and does not identify you as an individual.

You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent donation and inquiry forms from working.

Global Privacy Control. We honor the Global Privacy Control (GPC) browser signal where our systems are able to detect it.

Do Not Track. Browser "Do Not Track" signals are not standardized, and we do not currently respond to them.

9. Email and Text Communications

If you subscribe to updates, you can unsubscribe at any time using the link in any email or by contacting us. We will still send transactional messages related to donations you have made, such as receipts and tax acknowledgments, because we are required to.

10. How Long We Keep Information

• Donation records: retained for at least seven years to meet IRS, state charitable registration, and audit requirements.
• Grant inquiries and applications: retained for seven years after the review cycle closes.
• General contact messages: retained for seven years, then deleted.
• Email subscribers: retained until you unsubscribe, plus three months to honor your opt-out.
• Analytics data: retained for three months per our provider's settings.

We delete or de-identify information when it is no longer needed for the purpose it was collected for, unless a longer retention period is required by law.

11. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted transmission (HTTPS), restricted staff access, and use of PCI-compliant payment processors.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we experience a breach affecting your personal information, we will notify you and the appropriate authorities as required by Oregon law and any other applicable state breach notification statutes.

12. Your Rights and Choices

Regardless of where you live, you may contact us to:

• Access the personal information we hold about you
• Correct information that is inaccurate
• Delete your information, subject to record-retention obligations for donations
• Opt out of marketing emails
• Give anonymously or have your name removed from public recognition

To exercise any of these, contact us using Section 15. We will respond within 45 days. If we need more time, we will tell you why and how long we need. We will not discriminate against you or treat your inquiry differently for exercising these rights.

Residents of Oregon, California, Colorado, Connecticut, Virginia, Washington, and other states with comprehensive privacy laws may have additional statutory rights, including data portability and appeal rights. Some of these laws exempt nonprofit organizations; others do not. We extend the rights listed above to everyone who asks, regardless of whether a specific law applies to us.

Appeals. If we decline a request, you may appeal by writing to us at the address in Section 15 with "Privacy Appeal" in the subject line. If we deny your appeal, you may contact the Oregon Department of Justice at justice.oregon.gov/consumercomplaints, or your own state's attorney general.

13. Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we will delete it. We do not knowingly process the personal data of anyone under 16 for targeted advertising or sale, because we do not engage in either.

14. Third-Party Links

Our site links to third-party websites, including our payment processor and any social media accounts. We are not responsible for their privacy practices. Read their policies before providing information to them.

15. Contact Us

Questions about this policy, or requests about your information:

16. Changes to This Policy

We may update this policy. When we do, we will change the "Last updated" date at the top. If we make material changes to how we use or share your information, we will notify you by email and post a notice on our homepage for at least 30 days before the change takes effect.