Privacy Policy for Light of Grief

Effective Date: October 18, 2025.

Light of Grief ("we," "us," or "our") is committed to protecting the personal information of our volunteers, donors, and website users while ensuring compliance with applicable laws, including the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA). Although nonprofits like ours may not be directly subject to these laws, we voluntarily comply with their standards to promote transparency and trust.

This Privacy Policy explains how we collect, use, share, and protect your personal information. By using our website (lightofgrief.com) or participating in our programs, you agree to the terms outlined in this Privacy Policy. If you do not agree, please refrain from using our website or providing your personal information.

Scope of Privacy Policy for Light of Grief

This Privacy Policy applies to personal information we collect when you:

Visit our website (lightofgrief.com) or interact with its features, including donation platforms and volunteer signup forms;
Make a donation to our nonprofit;
Apply or register to volunteer with us;
Subscribe to our newsletter;
And otherwise interact with Light of Grief.

We collect and use personal information solely to further our charitable mission as a California public benefit nonprofit organization under Section 501(c)(3) of the Internal Revenue Code.

Information We Collect

We may collect the following categories of personal information, as defined under applicable California privacy laws:

Donor Information. We collect certain types of personal information, including identifiers such as your name, mailing address, email address, phone number, and other contact details. We may also collect financial information, including payment card details, bank account information, and transaction history, which are processed securely through our third-party payment processors. Additionally, we maintain donation records and preferences, such as the amounts contributed, your donation history, and any designations or restrictions you specify for your contributions.

Volunteer Information. For volunteers, we collect contact information including name, email address, phone number, and mailing address. We may also gather professional or employment-related information, such as resumes, skills, qualifications, and background checks when required for certain positions. In some cases, we collect emergency contact information, including the name and phone number of your designated emergency contact.

Sensitive Personal Information. In addition, users may voluntarily choose to share sensitive information related to grief experiences or personal circumstances. Light of Grief does not require you to share this type of information, and you may use our services and/or make donations without doing so.

If you choose to provide such information, we will treat it as confidential and only use it for the limited purpose of providing resources, support, or services you have requested.

Information provided through volunteer or contact forms is collected and transmitted to us by email and may also be stored in our website’s administrative dashboard.

Light of Grief is a nonprofit support/donation platform, not a provider of medical services, and thus is not a “covered entity” under HIPAA or California’s Confidentiality of Medical Information Act (CMIA).

While HIPAA does not apply to us, we recognize that information you may share (including grief experiences, family details, or health-related information) is sensitive. We safeguard such information in accordance with California privacy laws, including the California Consumer Privacy Protection Act (CCPA) and the California Privacy Rights Act (CPRA).

We do not disclose any such sensitive information except as described in this Privacy Policy or as required by law.

Internet or Other Electronic Network Activity. When you use our website, we may automatically collect certain Internet or other electronic network activity information, such as IP addresses, browser types, and device identifiers. We also collect information about your interactions with our website, including pages viewed and links clicked, as well as data gathered through cookies and similar tracking technologies (see “cookies and website tracking technologies” below). This information is collected to enhance user experience, ensure security, and analyze website traffic.

Children’s & Minors’ Information. We also take special care when it comes to children’s and minors’ information. In compliance with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect, use, or disclose personal information from children under the age\ of 13 without verified parental consent. If we learn that we have inadvertently collected information from a child under 13 without parental consent, we will promptly delete it. Parents or guardians may review their child’s information, request its deletion, or refuse further collection by contacting us at sadaff@lightofgrief.com.

Minors aged 13 to 17 may use our services; however, we encourage parents or guardians to supervise their participation. Any personal or grief-related information provided by minors may be considered sensitive personal information under California privacy laws, and we treat this data with heightened care.

How We Use Your Information

We use the personal information we collect for several purposes. This includes processing and acknowledging donations by issuing donation receipts, securely processing payments, and communicating with donors about their contributions. We also use personal information to manage our volunteer programs by facilitating volunteer applications, matching volunteers to opportunities, and providing updates on volunteer activities. Additionally, we use the information to improve our website and services, enhance user experience, maintain website functionality, and analyze usage patterns.

We also process information to meet our legal and regulatory obligations, including compliance with applicable laws, tax reporting requirements, and nonprofit accountability standards. Finally, we use personal information to communicate with you by sending newsletters, updates, and information about our programs, events, and impact, with options available for you to opt out of such communications.

We will never sell your personal information.

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share limited data with trusted entities for specific, legitimate purposes. These include sharing information with service providers who help us operate our organization, such as donation payment processors, email marketing and communication platforms used for newsletters or event invitations, and background check services for volunteers when legally required.

Our website relies on third-party service providers including, but not limited, GoDaddy (hosting), Stripe (donation processing), and GiveWP (donation form and information management). These services maintain their own privacy practices, and we encourage you to review them. Please note that we are not responsible for the privacy practices of these third parties, and their policies will govern your interactions with them.

We may also share information when necessary to comply with legal and regulatory obligations, such as responding to subpoenas, court orders, or tax requirements. In emergency situations, we may disclose information to protect individuals’ safety, rights, or property. Additionally, we may share user testimonials or related content on our social media platforms with your consent.

All entities with whom we share data are contractually required to maintain the confidentiality and security of your information.

Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have specific rights regarding your personal information under California law. You have the “Right to Know”, which allows you to request information about the categories and specific pieces of personal information we have collected about you within the past 12 months. You also have the “Right to Delete”, enabling you to request that we delete personal information we have collected about you, subject to certain legal exceptions such as compliance with tax reporting obligations.

Additionally, you have the “Right to Correct”, which permits you to request the correction of any inaccurate personal information we maintain. While we do not sell personal information, you also have the “Right to Opt-Out of Sale or Sharing”, meaning you may choose to opt out of any data-sharing practices that could be interpreted as a “sale” under California law. Finally, you have the “Right to Non-Discrimination”, ensuring that you will not be treated differently or denied services for exercising your privacy rights.

To exercise these rights, please contact us at sadaff@lightofgrief.com. Provide sufficient information to verify your identity and process your request.

Data Retention Policy

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with applicable legal obligations. Once personal information is no longer needed, it is securely deleted or anonymized to protect your privacy.

For example, donation records are retained for a minimum of seven years to ensure compliance with IRS regulations. Volunteer records are maintained for program accountability and administrative purposes during your involvement with our organization.

If you choose to make an automatic recurring donation (such as monthly, quarterly, or annually), we will collect and process the information necessary to manage your subscription, including your payment method and billing details, billing frequency and schedule, transaction history, contact information, and notification preferences. Before enrolling you in a recurring donation, we will clearly present the terms and require your express affirmative consent.

We will retain records of your consent to any recurring donation or subscription terms for at least three years, or one year after the recurring donation is terminated, whichever is longer, in accordance with California law. You may cancel your recurring donation at any time. If you enrolled through our website, you may cancel online, and the cancellation process will be no more burdensome than the method by which you enrolled.

Cookies and Website Tracking Technologies

Cookies. Our website uses cookies to enhance user experience and gather analytics. A “cookie” is a small piece of data sent to your browser from Light of Grief’s web server and stored on your computer’s hard drive. Cookies are used to collect non-identifying information about the user, such as web surfing behavior or user preferences for a specific website. Light of Grief uses multiple types of cookies, including:

Essential Cookies: These cookies are necessary for the website to function properly. They enable core features such as security, accessibility, and navigation.
Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting information about traffic, user behavior, and performance. This data is anonymized and used to improve our website.
Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences or login details.
Advertising Cookies: These cookies may be used to deliver relevant advertisements and track the effectiveness of our campaigns. We do not sell your personal information.

You can control cookies through your browser settings. However, disabling cookies may impact website functionality. We use cookies to enhance your browsing experience and provide personalized content; analyze website traffic and usage to improve our services; and support our nonprofit mission by understanding user engagement and preferences.

Website Tracking Technologies. Our website does not respond to “Do Not Track” browser settings or signals.

Security Measures

We adopt reasonable administrative, technical, and physical safeguards to protect your personal information. Specific measures include:

Encryption of payment data using industry-standard protocols.
Restricted access to sensitive information on a need-to-know basis.
Ongoing monitoring for potential cybersecurity threats.

While we strive to protect your personal information, no method of transmission over the internet is entirely secure. We cannot guarantee absolute security.

Data Breach Notification Policy

In the event of a data breach, we will take immediate steps to protect your information and comply with applicable legal requirements. We will promptly notify affected individuals in accordance with California law and provide clear information about the nature of the breach, including the type of data that may have been involved. When appropriate, we will also offer resources to help mitigate potential harm, such as credit monitoring services or guidance on protective measures.

Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or regulatory requirements. Updates will be posted with a revised "Effective Date" at the top of this document. We encourage you to review this policy periodically.

Contact Information

If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal information, please email us at sadaff@lightofgrief.com.

If you would like to opt out of general communications, please email us at sadaff@lightofgrief.com with "Unsubscribe" in the subject line.

Thank you for your trust and support.