The Roy Foundation — Privacy Policy

Last Updated: August 01,2026

The Roy Foundation ("we," "us," "our," or "the Foundation") is committed to protecting the privacy of our donors, patients, and website visitors. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using our website (theroyfoundations.org) or making a donation, you agree to the terms of this Privacy Policy.

1. Information We Collect

Information You Provide Directly

• Donation information: Name, email address, mailing address, and payment details when you make a donation.

• Contact information: Name and email address if you sign up for updates, contact us, or subscribe to communications.

• Communications: Any information you provide when you email us or fill out a form on our site.

Information Collected Automatically

• Usage data: Pages visited, time spent on the site, browser type, device type, and general location (city/region level), collected through standard website analytics.

• Cookies: We may use cookies or similar technologies to improve site functionality and understand how visitors use our website. You can disable cookies through your browser settings.

Payment Information

We do not directly store your credit card or full payment information. All donations are processed through Stripe, a third-party payment processor. Stripe collects and stores payment details in accordance with its own privacy policy and PCI-DSS compliance standards. We recommend reviewing Stripe's Privacy Policy for details on how they handle your payment data.

2. How We Use Your Information

We use the information we collect to:

• Process and acknowledge your donations

• Send you a receipt for tax and record-keeping purposes

• Share updates about the patient(s) you've helped fund, if you've opted in to receive them

• Communicate with you about the Foundation's work, upon your request

• Respond to inquiries you send us

• Improve our website and donation experience

• Comply with legal and financial reporting obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Patient Stories and Updates

When you fund a patient through The Roy Foundation, we may share that patient's story and recovery updates with you. Patient information shared in this context is provided with the consent of the patient or their guardian, and is shared solely for the purpose of donor transparency. We take reasonable steps to protect patient dignity and privacy, and we do not share more identifying detail than necessary to demonstrate the impact of your donation.

If you have concerns about how a specific patient's information is shared, please contact us directly.

4. Third-Party Service Providers

We work with trusted third-party providers to operate our website and process donations, including:

• Stripe — payment processing

• Hostinger — website hosting and email services

These providers only receive the information necessary to perform their specific function and are contractually or legally obligated to protect your data in accordance with applicable privacy laws.

5. Data Security

We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain donor and donation records for as long as necessary to comply with legal, tax, and accounting obligations, and to maintain accurate records of the Foundation's charitable activities. You may request that we delete your personal information at any time, subject to our legal recordkeeping requirements (see Section 8).

7. Children's Privacy

Our website is not directed at children, and we do not knowingly collect personal information from children under 13. Any patient information shared on our site regarding minors is provided with the consent of a parent or legal guardian, solely for the purpose of donor transparency and impact reporting.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your personal information (subject to legal recordkeeping requirements)

• Opt out of receiving communications from us at any time

• Request a copy of your donation history

California Residents: If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. To exercise these rights, contact us using the information below.

To exercise any of these rights, please contact us at info@theroyfoundations.org.

9. Tax-Deductibility Notice

The Roy Foundation is a [state-registered nonprofit / currently applying for 501(c)(3).Donations made to The Roy Foundation are not currently tax-deductible, as the Foundation's federal tax-exempt status is pending. We will update this policy and donor communications once 501(c)(3) status is granted by the IRS.]

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or how your information is handled, please contact us:

The Roy Foundation Email: info@theroyfoundations.org

This Privacy Policy is provided as a general template and does not constitute legal advice. We strongly recommend having this document reviewed by an attorney familiar with nonprofit, data privacy, and charitable solicitation law in your state before publishing it, particularly given the handling of donor payment data and any patient-related information