Privacy Policy
Effective date: October 14, 2026. Last updated: October 14, 2026.
Together We Rise, doing business as Foster Love (“Foster Love,” “we,” “us,” or “our”), respects the privacy of donors, supporters, volunteers, program participants, applicants, and website visitors. This policy explains how we collect, use, disclose, and protect personal information, and how you can exercise your choices.
This policy covers Foster Love’s handling of personal information on fosterlove.com, my.fosterlove.com, scholarships.fosterlove.com, checkout.fosterlove.com, impact.fosterlove.com, and the Foster Love Shop at shop.fosterlove.com. It also covers other Foster Love websites, forms, and services that collect personal information, along with related communications and information we collect offline. For Foster Love’s handling of Shop information, this policy governs; separate Shop notices may provide additional details but do not replace the protections and choices described here. Shopify and other service providers may also process information for their own purposes under their own privacy notices. Other Foster Love services with a separate privacy notice are governed by that notice for the practices it describes. Our Terms of Service govern use of our online services.
Information we collect
We collect information you provide when you create an account, make a donation or purchase, apply for or participate in a program, volunteer, request information, share a story, or contact us. Depending on the activity, this may include:
- Contact and account information, such as your name, email address, telephone number, mailing address, and sign-in information.
- Donation, purchase, and payment-related information, such as contribution amounts, transaction records, recurring donation preferences, and payment identifiers supplied by our payment providers.
- Program and application information, such as eligibility details, education information, supporting documents, and information supplied by an authorized parent, guardian, agency, or other representative.
- Communications, preferences, feedback, and content you choose to submit, including stories, photographs, and videos.
- Website and device information, such as IP addresses, browser and device details, cookie identifiers, pages visited, interactions, and approximate location derived from technical information.
We may also receive information from people authorized to act for you, program partners, payment and other service providers, and advertising or analytics platforms, as appropriate to the activity and applicable law. We request only information reasonably needed for the purpose described when it is collected. Please do not submit sensitive documents or information unless we request them for a specific purpose.
How we use and disclose information
We use personal information to operate accounts and programs, process gifts and purchases, communicate about services and fundraising, administer applications, verify eligibility, maintain records, improve our services, understand campaign performance, protect against fraud, and meet legal obligations. Advertising and marketing uses are explained below.
We do not sell, rent, or trade donor contact lists with other organizations for their fundraising or direct marketing. We may provide hashed contact information to advertising platforms for audience matching, as described below, and you can ask us to exclude your contact information from audiences we manage. We may disclose information to payment processors, hosting and database providers, communications vendors, and other providers working on our behalf; to authorized program partners where necessary to deliver or administer services; and when required by law or reasonably necessary to address fraud, safety, security, or legal claims. Advertising platforms may receive information as described in the next section.
We may use or disclose appropriately aggregated or de-identified information for reporting, research, program evaluation, and service improvement. Information that can reasonably identify a person is handled as personal information, even if an identifier has been hashed or replaced with a code.
Cookies, analytics, and advertising
We use cookies, pixels, and similar technologies for website functionality, analytics, campaign measurement, and advertising. Essential technologies support functions such as sign-in, security, and transaction processing. Other technologies help us understand website use, measure fundraising campaigns, personalize communications, and show relevant advertising.
We may work with advertising platforms and data providers to reach adult donors and supporters through retargeting, social media audience matching, email, display advertising, and direct mail. For example, a platform may recognize a previous website visitor or match a contact identifier to a platform account. Information used for these activities can include browsing activity, device or cookie identifiers, and contact information or hashed contact identifiers. These activities are not necessarily anonymous, and hashing an identifier does not by itself make the information anonymous.
We also use session replay and heatmap tools, including Zoho PageSense, to understand how people navigate and interact with our pages. These tools can collect page content, clicks, scrolling, navigation, and interactions with on-site forms, and can provide reconstructed sessions and interaction summaries for analysis. Depending on the page and configuration, collected information may include text visible on the page or information entered into on-site fields. Replay and heatmap information is handled as personal information when it identifies or can reasonably be linked to a person. Our session-replay privacy requirements include masking or excluding checkout form fields and sensitive information. These controls depend on the page and recording configuration. Do not place confidential case information or full payment credentials in free-text fields; use the designated submission or payment-provider fields for requested information.
Call-tracking technology, including CallRail, can associate telephone calls with the website visit or campaign that led to them and may process caller numbers, call timing, duration, routing, and related attribution information. We use CallRail to record calls handled by recording-enabled tracking lines. Recordings can include voices and personal information discussed during a call; transcripts may also be generated where that feature is enabled. We use these communications records for handling inquiries, service quality, and related reporting, subject to our information-handling and retention rules. Recording must be governed by the call-specific notice and any consent required by law. Providing your number or accepting our Terms does not replace legally required recording consent. You may contact us by email instead of making a recorded call.
Our advertising approach allows adults to opt out, subject to any consent or other requirements that apply by law. Accepting our Terms of Service does not provide a separate consent where one is legally required. Our policy excludes known minors’ personal information and sensitive youth, program, or application information from behavioral advertising and customer-matching audiences. We do not authorize use of case documents, foster status, eligibility records, or children’s photographs to build advertising audiences.
You can contact us to request exclusion of your contact information from audiences we manage. You can also use your browser’s cookie controls, advertising platforms’ own privacy settings, Google’s analytics opt-out tool, and the Digital Advertising Alliance’s choices. Blocking cookies may affect some website functions. Platform and browser choices may apply only to the relevant browser, device, account, or platform; they do not necessarily remove information already disclosed. We honor legally required opt-out preference signals where applicable.
Third party platforms may process information under their own privacy notices. We review advertising and analytics practices and require appropriate protections for providers processing information on our behalf. Contact us if you need help understanding or exercising an advertising choice.
Your privacy choices and California rights
We offer people in every state a way to request access to their personal information, correct inaccurate information, request deletion, and change communication or advertising preferences. These choices are subject to reasonable verification, the rights of other people, and applicable legal and recordkeeping requirements. Exercising a privacy choice does not by itself disqualify you from receiving eligible program services.
California and other jurisdictions may provide additional rights, including rights to know, access, correct, or delete information, opt out of certain sale or sharing, limit certain uses of sensitive information, and receive protection against unlawful discrimination. Rights and obligations depend on the law’s applicability. The California Consumer Privacy Act generally does not apply to nonprofit organizations; the choices we offer here do not limit any rights you have under applicable law.
California residents under 18 who are registered users may request removal of content or information they personally posted to our services. Identify the account and the content or its location when contacting us. Removal may not eliminate copies reposted by others or records retained as permitted or required by law, and legal exceptions may apply.
Where law requires affirmative authorization before selling or sharing a known minor’s information, account creation or an age attestation does not provide that authorization. We do not charge for ordinary privacy requests; any lawfully permitted exception will be explained before a charge is applied.
Information security and service providers
We use reasonable administrative, technical, and organizational safeguards appropriate to the information we handle. Our information-handling rules restrict access to sensitive donor, youth, and applicant records to people with a legitimate work-related need. We require providers processing personal information on our behalf to protect it and use it only for authorized purposes, subject to their contractual and legal obligations.
Payment providers process payment information for donations and purchases. We may receive transaction details and limited payment identifiers needed for receipts, reconciliation, and recurring contribution administration. The provider’s privacy notice also explains its processing practices.
No method of transmission or storage is completely secure. We assess suspected security incidents and provide notifications when required by applicable law. Do not send identity documents, financial account details, or confidential case records through ordinary communications unless an appropriate submission method has been provided.
Foster Love is based in the United States. Information may be processed in the United States and in other locations where our providers operate. Applicable legal requirements govern transfers and processing; protections in those locations may differ from those where you live. External websites and services may have separate privacy practices, so review their notices when using them.
Submitted content and public recognition
You retain ownership of stories, photographs, videos, and other content you submit. As described in our Terms of Service, you grant Foster Love a nonexclusive license to host, reproduce, display, and process content as reasonably necessary for the feature or program for which it was submitted. Submitting account information, an application, or a sensitive document does not grant unrestricted rights to publish it or use it in advertising.
Promotional use that requires a media release or specific permission is governed by that separate permission and applicable law. We obtain permission before publicly recognizing a donor by name or gift amount, and donors may request anonymous recognition. Declining optional publicity or marketing does not affect eligibility for program assistance.
When content concerns a child, the consenting adult must have the necessary authority. Any applicable agency restrictions, court orders, confidentiality obligations, and other permissions must be respected. Contact us about content removal or changes to your publicity preferences. Previously distributed materials and third-party copies may not be completely recoverable, but privacy rights and any applicable withdrawal terms remain in effect.
Information retention and deletion
We retain personal information for the purposes for which it was collected and for necessary program administration, accounting, security, and legal obligations. Our retention schedule uses the following standard targets:
- Donation and accounting records: seven years after the end of the relevant fiscal year, subject to applicable accounting, tax, grant, and legal requirements.
- Unsuccessful program applications: twelve months after selection and any appeal period close, unless a specific program or legal requirement calls for another period.
- Sensitive identity and eligibility document copies: deletion within thirty days after verification and any appeal or review need ends, unless a grant, audit, safeguarding, or legal obligation requires retention. We may retain the necessary verification result without keeping the full document.
- Routine technical logs: ninety days, with documented exceptions for security investigations or other necessary purposes.
- Routine backup copies: a target rolling retention period of ninety days, subject to recovery needs, separate archival requirements, and legal holds.
Successful program records have a program-specific schedule based on administration, funding agreements, safeguarding obligations, and applicable law. Account information and communication preferences are kept while reasonably needed to provide services and honor your choices; inactive records are reviewed for deletion or minimization. Retention targets guide our review and deletion processes and are not a guarantee that every legacy record or backup disappears on a particular day.
When a deletion request is approved, we take appropriate steps to delete or de-identify covered information from active systems and request corresponding action from providers processing it for us. We may retain records needed to document gifts, comply with law or funding requirements, resolve disputes, address fraud or safety issues, or honor an opt-out. We explain relevant exceptions when responding to your request. Minimal suppression records may be kept to avoid adding you back to marketing lists.
Deleted information may remain temporarily in restricted backups until their applicable expiry or removal process. Such copies are not used for routine marketing or program decisions. If a backup is restored, applicable deletion and opt-out requests must be reapplied.
Children and sensitive program information
Foster Love accounts are for people age thirteen and older. Anyone signing up attests that they are at least thirteen. Users below the age of legal majority must have permission from a parent, legal guardian, or other adult or agency with actual legal authority for the activity, as described in our Terms of Service. Children under thirteen may not create or use their own accounts.
We may receive information about younger children from an authorized parent, legal guardian, agency, or other adult to provide eligible program services. This differs from collecting information directly from a child through account registration. We use such information for the relevant program, administration, safety, and necessary reporting, subject to appropriate permissions and confidentiality obligations. Our policy protects children’s case information, foster status, addresses, documents, and identifying media from unrelated publicity and advertising uses.
We do not knowingly collect personal information directly from children under thirteen through account registration. If we learn that an account belongs to a child under thirteen, we will restrict or disable it, stop further collection through it, and take appropriate steps to delete information collected through the account, subject to applicable legal requirements. An inaccurate age attestation is not permission to continue collecting, using, or disclosing that child’s information.
A parent, guardian, or other person who believes a child under thirteen has created an account or directly submitted personal information should contact us. We may reasonably verify identity and authority before providing access or taking action; we request only information needed for that verification. Any required parental consent or other specific authorization must be obtained separately. This policy does not waive protections under COPPA or applicable California or other privacy laws.
Email, phone, and fundraising communications
When you donate, create an account, subscribe, take an advocacy action, share a story, complete a form, or otherwise provide your contact information, we may use it to communicate about Foster Love programs, news, events, opportunities, and fundraising. We may also contact you by postal mail. We may include information about organizations or companies with related missions without giving them our donor contact lists.
If you provide a telephone number, we may call or text you about programs or to seek donations, only as permitted by applicable law. Providing a number or accepting our Terms of Service does not replace any separate consent required for automated calls, marketing texts, or other communications. We obtain required consent and respect applicable restrictions and opt-outs.
You can unsubscribe from fundraising and promotional email using the unsubscribe link, ask us to stop promotional calls or mail, and use the opt-out instructions in a text message, including replying STOP where supported. These choices do not stop necessary receipts, account security notices, or communications reasonably required to administer a service you requested. Those messages are kept separate from promotional solicitations.
We aim to apply automated marketing opt-outs immediately and manual requests within two business days, and comply with any applicable legal deadlines. We may retain minimal contact information to honor your opt-out. Our donor-list policy and advertising audience-matching practices are described above. Do not send sensitive program information in response to marketing messages.
Requests and contacting Foster Love
To request access, correction, deletion, removal of content, or a change in communications or advertising preferences, email info@fosterlove.com with the subject Privacy Request, use our Contact Us form, call (714) 784-6760, or write to:
Together We Rise dba Foster Love
Privacy Requests
560 W Lambert Rd.
Brea, CA 92821
Identify the request and provide enough information to locate the relevant account or record. Do not include unnecessary sensitive information. We may ask for proportionate verification and, where relevant, proof of authority to act for another person. Simple marketing opt-outs do not require a new account or identity documents.
We aim to acknowledge privacy requests within five business days and complete access, correction, or deletion requests within thirty calendar days. If additional time is needed, we explain the reason and any extension allowed by applicable law. We comply with applicable legal deadlines, including any shorter deadline for an opt-out or other request. Requests involving retained records or another person’s information may require a qualified response rather than complete deletion.
Policy updates and Terms of Service
We review this policy and relevant provider practices at least annually and when material changes occur. We update the date above and provide notice of material changes through an appropriate channel. Where law requires renewed consent, we obtain it; continued use does not supply a consent that must be obtained separately.
Our current Terms of Service address account eligibility, acceptable use, content permissions, payments, and other service terms. This Privacy Policy describes our information practices and available privacy choices. Neither document limits rights that cannot lawfully be waived.