Privacy Policy

Effective Date: 06/19/2026

Last Updated: 06/19/2026

The Copious Heart of Central New York, Inc. (referred to as “we,” “us,” “our,” or the “Organization”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.thecopiousheart.org (the “Site”), donate, register for events, volunteer, or interact with us online or offline.

By using our Site or providing information to us, you consent to the practices described in this policy.

1. Information We Collect

We may collect the following types of information:

a. Personal Information You Provide Voluntarily

Contact & Identity Data: Name, email address, mailing address, phone number.
Donation Data: Payment information (processed by third‑party payment processors; we generally do not store full credit card numbers), donation amount, date, and designation (e.g., specific program).
Event & Volunteer Data: Emergency contact, dietary restrictions, skills/interests, t‑shirt size, or other details needed for participation.
Communications: Inquiries, feedback, survey responses, or subscription preferences.

b. Automatically Collected Information

When you visit our Site, we may automatically collect:

Technical Data: IP address, browser type and version, time zone setting, browser plug‑in types, operating system.
Usage Data: Pages visited, time spent on pages, clickstream data, referring/exit pages.
Cookies & Tracking Technologies: See Section 5 below.

c. Information from Third Parties

We may receive information about you from payment processors (e.g., PayPal, Stripe), social media platforms (if you interact with our social media accounts), or public databases, but only to the extent permitted by law.

2. How We Use Your Information

We use your information for legitimate nonprofit purposes, including:

Processing Donations: To receive, receipt, and acknowledge contributions; to issue tax receipts (where required).
Communicating With You: Sending newsletters, impact reports, event invitations, volunteer opportunities, and responses to your inquiries. You may opt out of marketing emails at any time (see Section 8).
Managing Events & Volunteers: Registration, scheduling, safety communications, and post‑event follow‑up.
Improving Our Services: Analyzing Site usage, troubleshooting technical issues, and understanding donor/volunteer demographics.
Legal Compliance: To comply with applicable laws (e.g., charity reporting, anti‑fraud, tax regulations).

We will not sell, rent, or trade your personal information to third parties for their own marketing purposes.

3. How We Share Your Information

We may share your information only in the following limited circumstances:

Service Providers: Third parties that help us operate (e.g., email platforms like Mailchimp, donation processors, CRM software). They are contractually bound to use your data only for services to us and to protect it.
Legal Obligations: If required by law, court order, or government regulation (e.g., subpoena, tax audit).
Protection of Rights: To enforce our Terms and Conditions or to protect the safety, rights, or property of our organization, staff, volunteers, or the public.
With Your Consent: For any other purpose where you have given explicit permission (e.g., sharing your name publicly as a donor, unless you choose “anonymous”).

Public Testimonials: If you provide a testimonial, we may publish it on our Site with your first name and last initial, unless you request otherwise.

4. Donor Privacy (Special Note)

We respect donor confidentiality. We do not share donor personal information with other organizations for fundraising purposes. Donor names and gift amounts may be included in our annual report or public donor list only if you opt in or are a major donor with separate agreement. You may always request anonymity.

5. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience. Cookies are small text files stored on your device.

Essential Cookies: Required for Site functionality (e.g., donation form).
Analytics Cookies: We use services like Google Analytics to understand how visitors use our Site. These providers may set their own cookies.
Your Choices: You can disable cookies through your browser settings, but some Site features may not work properly.

For more information on Google Analytics’ data practices, see Google’s Privacy Policy.

6. Third‑Party Links

Our Site may contain links to external websites (partners, social media, etc.). This Privacy Policy does not apply to those sites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information (e.g., SSL encryption for donation pages, limited staff access). However, no transmission over the Internet or electronic storage is 100% secure. You provide information at your own risk.

8. Your Privacy Rights & Choices

Depending on your location, you may have certain rights:

Access & Correction: Request a copy of the personal information we hold about you or ask us to correct inaccuracies.
Deletion: Request that we delete your personal information, subject to legal retention requirements (e.g., donation records for tax purposes).
Opt‑Out of Marketing: Use the “unsubscribe” link in any email or contact us directly. Even if you opt out, we may still send non‑marketing communications (e.g., donation receipts, event confirmations).
Cookie Consent: Many browsers allow you to manage cookie preferences. For EU/UK users, we obtain consent before placing non‑essential cookies.

To exercise your rights, please contact us at contact@thecopiousheart.org. We will respond within the timeframes required by applicable law (typically 30 days).

Additional Rights for Specific Jurisdictions:

GDPR (Europe): You have the right to data portability, to restrict processing, and to lodge a complaint with your local data protection authority.
CCPA/CPRA (California): California residents may request disclosure of categories of personal information collected/sold (we do not sell personal information) and opt out of “sharing” for cross‑context behavioral advertising.
Canada (PIPEDA): You may request information about our data handling practices.

9. Children’s Privacy

Our Site is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. International Data Transfers

We operate primarily from the United States. If you are located outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Site, you consent to such transfers. We will take steps to ensure adequate protections.

11. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations (e.g., 7 years for donation records in the U.S.), resolve disputes, and enforce our agreements.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Effective Date” at the top will reflect when changes are made. If we make material changes, we will notify you by posting a notice on our Site or by email (if we have your address). Your continued use of the Site after changes means you accept the revised policy.

13. Contact Us

For questions, to exercise your privacy rights, or to report a concern:

The Copious Heart of Central New York, Inc
P. O. Box 8122 Utica, New York 13505
contact@thecopiousheart.org
(315) 982-7358

Privacy Policy

​

Privacy Policy

​