Homefront Honor Foundation Privacy Statement

This Privacy Statement explains how Homefront Honor Foundation (“HHF,” “we,” “our,” or “us”) may collect, use, retain, disclose, and protect information when you:

• Visit our website
• Contact or communicate with us
• Request assistance or resource information
• Participate in a program, event, or survey
• Apply to volunteer or serve with HHF
• Make a monetary or in-kind donation
• Communicate through email, telephone, or SMS
• Interact with an authorized HHF system or provider

This statement applies to HHF-controlled information-handling activities. Independent third-party organizations maintain their own privacy practices.

Homefront Honor Foundation is a developing nonprofit organization. Certain programs, application processes, referrals, forms, payment options, communication features, or activities described on this website may not be available at all times or in every location.

The categories listed in this Privacy Statement identify information HHF may collect when a particular service or interaction is available and used. Their inclusion does not mean that HHF currently offers every described service or collects every category from every person.

Information actually collected depends on:

• The available program or service
• The nature of your interaction
• The information you voluntarily provide
• The form or communication method used
• What is reasonably necessary to respond
• Legal, financial, security, contractual, and insurance requirements

Information you provide

Depending on your interaction, HHF may collect:

• Name and contact information
• Email address and telephone number
• Mailing address, county, ZIP code, or general location
• Preferred communication method
• Veteran, widow, caregiver, or military-family status
• General information regarding a request or need
• Volunteer, employment, contractor, board, or partnership information
• Event registrations and attendance records
• Donation, acknowledgment, and transaction-related information
• Questions, feedback, complaints, and correspondence
• Consent, authorization, acknowledgment, and opt-in records

Technical information

When website security, analytics, hosting, cookies, or similar technologies are active, HHF or its authorized providers may receive limited technical information such as:

• Internet Protocol address
• Browser, operating-system, and device type
• Date and time of access
• Pages viewed and referring pages
• Approximate geographic region
• Website-performance and security information

Not every technology or category is necessarily enabled or collected at all times.

Depending on an available program or interaction, HHF may receive sensitive information such as:

• Date of birth or age
• Government-identification information
• Financial-hardship, housing, employment, or benefits information
• Disability or service-connected-condition information
• Limited health or healthcare-related information
• Information needed to coordinate an authorized referral

HHF seeks to collect sensitive information only when reasonably necessary for an available program, referral, legal requirement, or legitimate organizational purpose.

HIPAA and Protected Health Information

The receipt of health-related information does not, by itself, mean that HHF is a HIPAA-covered entity or business associate, or that every health-related record received by HHF is Protected Health Information under HIPAA.

If HHF becomes subject to HIPAA through a covered program, contract, partnership, or business-associate relationship, HHF will implement the requirements applicable to that role, including appropriate agreements, safeguards, training, documentation, and breach-response procedures.

Regardless of legal classification, HHF intends to treat individually identifiable health information as sensitive and restricted.

HHF may use information to:

• Respond to questions, requests, and communications
• Provide resource navigation or authorized referrals
• Communicate about available programs and services
• Schedule or confirm meetings, events, or activities
• Manage volunteers, personnel, board members, contractors, and partners
• Process, document, and acknowledge donations
• Maintain consent, authorization, participation, and training records
• Operate, secure, maintain, and improve our systems
• Detect suspected fraud, abuse, threats, or unauthorized access
• Maintain financial and organizational records
• Comply with legal, tax, contractual, insurance, and regulatory obligations
• Protect the safety, rights, systems, and property of individuals and HHF
• Evaluate organizational needs and program effectiveness

HHF may use low-volume, conversational SMS messaging for:

• Responses to questions or inquiries
• Assistance-request follow-up
• Resource-referral coordination
• Meeting or appointment confirmations
• Volunteer and administrative communication
• Other communications requested or authorized by the recipient

Consent to receive SMS messages is optional and is not required as a condition of donating, volunteering, requesting assistance, or participating in an HHF program.

Message frequency varies. Message and data rates may apply.

Reply HELP for assistance. Reply STOP to unsubscribe.

Authorized telecommunications, platform, cloud, and technical providers may process limited information solely as necessary to transmit, deliver, secure, document, or maintain the SMS service.

For SMS-specific rules, review the Homefront Honor Foundation SMS Terms and Conditions .

SMS is not continuously monitored and should not be used for emergencies. Call 911 for immediate emergencies.

Monetary donations may be processed through an authorized third-party fundraising or payment provider, including Zeffy and its payment-service providers.

The payment provider may collect payment-card, bank-account, billing, transaction, or authentication information directly under its own privacy and security practices.

HHF may receive limited donor and transaction information, including:

• Donor name and contact information
• Donation amount and date
• Transaction or payment status
• Receipt and acknowledgment information
• Campaign or fundraising-form information
• Recurring-gift preferences

HHF does not intend to directly collect or store complete payment-card numbers, security codes, online-banking credentials, or complete bank-account credentials.

The website may use first-party cookies, browser local storage, and similar technologies for security, functionality, visitor preferences, fraud prevention, analytics, performance, and website administration.

Website acknowledgment record

When a visitor accepts the website-development acknowledgment notice, the visitor’s browser may store:

• The applicable notice identifier
• The notice version accepted
• The date and time of acceptance
• The intended storage period

This acknowledgment is stored through browser local storage and a first-party cookie for up to approximately 180 days.

The acknowledgment record does not intentionally contain the visitor’s name, email address, telephone number, payment information, or other directly identifying account information.

It is a browser-based acknowledgment record and is not an identity-verified electronic signature. Clearing browser data, using private browsing, changing devices, or changing the notice version may require acceptance again.

Browser choices

Most browsers allow users to block or delete cookies and local-storage records. Disabling these technologies may affect website features or require repeated acknowledgment.

HHF may disclose limited information when reasonably necessary to operate, secure, and administer the organization or to fulfill an authorized request.

Recipients may include:

• Website, hosting, email, cloud, telephone, and technology providers
• Microsoft and other authorized service providers
• Telecommunications carriers and messaging providers
• Fundraising platforms, payment processors, and financial institutions
• Accountants, auditors, insurers, attorneys, and other professional advisers
• Government authorities when disclosure is legally required
• Community or referral organizations when authorized by the individual
• Security, fraud-prevention, records-management, and operational vendors

Service providers may use information only for the services they are authorized to perform, subject to applicable agreements, laws, and provider terms.

HHF does not sell personal information for monetary compensation.

Mobile information, SMS opt-in data, and SMS consent records are not shared with third parties or affiliates for their marketing or promotional purposes.

Information may also be disclosed when reasonably necessary to comply with law, protect safety, investigate suspected misconduct or security incidents, prevent fraud, or protect legal rights.

When you request help connecting with another organization, HHF may ask for permission to share limited information necessary to make or coordinate the referral.

Whenever appropriate, HHF will seek authorization before disclosing nonpublic information to an unrelated referral organization.

Third-party organizations maintain their own eligibility requirements, privacy practices, security procedures, service availability, and records.

HHF is not responsible for the independent privacy or security practices of another organization after information has been lawfully provided to that organization.

Links to government agencies, social-media services, nonprofit organizations, fundraising platforms, and other websites are governed by the privacy practices of those independent providers.

Data minimization

HHF seeks to limit collection, use, access, retention, and disclosure to information reasonably necessary for legitimate purposes.

Retention

Retention periods may depend on:

• The nature and sensitivity of the information
• The purpose for which it was collected
• Legal, tax, insurance, contractual, and reporting requirements
• Security and fraud-prevention needs
• Consent or authorization provided
• Applicable records-management procedures

Information may be deleted, anonymized, or securely destroyed when no longer reasonably required, subject to applicable recordkeeping obligations.

Security safeguards

HHF uses reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Safeguards may include:

• Access controls and least-privilege permissions
• Multifactor authentication
• Managed devices and encryption
• Secure email and file-sharing tools
• Security monitoring and logging
• Confidentiality requirements
• Privacy and cybersecurity training
• Incident-reporting and response procedures

No website, mobile carrier, network, email system, cloud service, storage platform, or electronic transmission can be guaranteed to be completely secure.

HHF does not knowingly collect personal information online directly from children under 13 without appropriate permission from a parent or legal guardian.

If HHF offers a program involving minors, additional consent, authorization, supervision, and information-handling procedures may apply.

A parent or guardian who believes a child has submitted personal information without appropriate permission may contact HHF at privacy@homefronthonorfoundation.org .

Depending on the circumstances, you may:

• Decline to provide optional information
• Choose not to receive SMS messages
• Reply STOP to opt out of SMS
• Unsubscribe from optional email communications
• Request correction of inaccurate contact information
• Ask how information is handled
• Request deletion of certain information

Requests may be limited by legal, tax, financial, insurance, security, contractual, operational, or record-retention requirements.

Depending on applicable law and jurisdiction, additional rights involving access, correction, deletion, restriction, or disclosure may apply. Not every right applies to every nonprofit, record, jurisdiction, or category of information.

HHF may need to verify identity before responding to certain privacy requests.

Opting out of SMS does not prevent you from contacting HHF through another available method.

HHF may update this Privacy Statement to reflect changes in programs, staffing, technology, vendors, services, contracts, legal obligations, or information-handling practices.

Updates will be posted on this page with a revised “Last Updated” date. Material changes may also be communicated through another appropriate method.