Privacy Policy

The short version

The Legislative for Life Foundation runs a small public website at legislateforlife.org. We collect personal information only when you give it to us through one of our forms (the contact form or an application form), and we use it only to respond to you and run our work as a foundation.

We do not sell personal information. We do not share it with advertisers. We do not currently use analytics or tracking cookies. The full details, including who processes information on our behalf and what your rights are, are below.

If you have questions about anything in this policy, email legislateforlife@gmail.com with the subject “Privacy.”

What this policy covers

This policy describes how The Legislative for Life Foundation(“we,” “us,” or “the foundation”) collects, uses, and protects information when you visit legislateforlife.org or use our forms.

It does not cover services we link to but do not run, including our social media accounts on Instagram, TikTok, and LinkedIn. Those services have their own privacy policies, which we encourage you to read.

Information we collect

Information you give us through our forms

When you use our contact form, we collect:

• Your name
• Your email address
• The subject and content of your message

When you apply for a role through our application form, we collect:

• Your name
• Your email address
• Your phone number
• A link to your resume or CV (you choose where to host it; we do not store the document itself)
• Your description of relevant experience
• Your reasons for wanting to join the foundation
• The role you applied for

You always choose what to send us through these forms.

Information collected automatically

When you visit the site, our hosting provider (Vercel) automatically logs basic technical information about your request, such as your IP address, browser type, and the page you accessed. These logs are used to operate the site and detect abuse. We do not combine these logs with information you give us through forms unless we are investigating a specific security concern.

Our website also stores a single small flag in your browser's session storage (named lfl-crisis-popup-dismissed) so the crisis support popup does not reappear after you dismiss it. This flag is deleted when you close your browser tab and is never sent back to us.

How we use information

We use the information you provide to:

• Respond to your inquiries when you submit the contact form.
• Review and respond to applications when you apply for a role.
• Operate the website, including delivering pages, processing form submissions, and protecting against abuse.

We do not use your information for advertising, profiling, automated decision-making, or any purpose other than the ones above. Under the EU/UK General Data Protection Regulation (GDPR), the legal bases we rely on are your consent (when you submit a form), our legitimate interest in operating the foundation and responding to inquiries, and where applicable, taking steps at your request before entering into an arrangement (when you apply to volunteer or intern with us).

Who processes information on our behalf

We use a small number of trusted third-party services (sometimes called “subprocessors”) to run the website and our forms. They receive only the information needed to perform their service.

We do not sell, rent, or share your personal information with anyone outside of these service providers. We may share information if required by law (for example, in response to a valid subpoena), but we will challenge requests we believe are unlawful and will notify you if legally permitted.

Cookies and similar technologies

We do not currently use cookies for advertising, analytics, or tracking. We do not embed third-party trackers, pixels, or advertising scripts on the site.

The only browser storage we set is the single session-storage flag described under “Information collected automatically.” If we ever add cookies or analytics in the future, we will update this policy and notify visitors before doing so.

How long we keep information

Contact form submissions are kept in our shared inbox for as long as we need them to respond and follow up. We aim to delete or archive contact records that are no longer needed within 12 months of resolution.

Application submissions are kept for up to 24 months after the application is reviewed, so we can re-evaluate strong applicants for future openings. After that, application records are deleted unless you have asked us to keep them on file.

Server logs are kept by our hosting provider follow Vercel's retention policy (typically around 30 days for standard request logs).

Email delivery logs kept by our email provider follow Resend's retention policy.

International transfers

The foundation is based in the United States, and the service providers listed above are also based in the United States. If you visit our site from the European Economic Area, the United Kingdom, or another region with strong data protection laws, your information will be transferred to and processed in the United States. Where required, our service providers maintain Standard Contractual Clauses or participate in the EU-U.S. Data Privacy Framework to provide protection for these transfers.

Your privacy rights

No matter where you live, you can ask us to:

• Tell you what information we have about you.
• Correct information that is inaccurate or incomplete.
• Delete your information, where we are not legally required to keep it.

If you are in the European Economic Area or United Kingdom (GDPR)

You have additional rights under the GDPR:

• Restrict or object to our processing of your information.
• Withdraw consent at any time, where consent is the legal basis we rely on.
• Receive a copy of your information in a portable format.
• Lodge a complaint with your local data protection authority.

You can find your country's authority through the European Data Protection Board.

If you are a California resident (CCPA/CPRA)

You have specific rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect, the right to request deletion, and the right to correct inaccurate information.

We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising any of your privacy rights.

How to exercise your rights

Email legislateforlife@gmail.com with the subject “Privacy Request” and tell us what you would like us to do. We may need to verify your identity (usually by confirming the email address you used to contact us) before responding. We will respond within a reasonable period, and within any deadline required by law.

Children's privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have received information from a child without appropriate consent, contact us and we will delete it promptly.

How we protect information

We take reasonable steps to protect the information you give us:

• The site is served over HTTPS, so the connection between your browser and our server is encrypted.
• API keys for our service providers are stored as server-side environment variables and are never exposed in our website code.
• Form submissions are validated and sanitized on the server before being processed.
• Access to the inbox where submissions land is restricted to authorized members of the foundation.

No system is perfectly secure, and we cannot guarantee that information you transmit to us will never be accessed by an unauthorized party. If we become aware of a security incident affecting personal information, we will notify affected people and authorities as required by law.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page reflects the most recent change. If we make material changes, we will note the change at the top of the policy for a reasonable period.