Privacy Policy

Adventure Therapy Foundation, Inc.

Effective date: 7/28/2026 | Last updated: 7/28/2026

1. About this policy

Adventure Therapy Foundation, Inc. (“Adventure Therapy Foundation,” “ATF,” “we,” “us,” or “our”) is a 501(c)(3) nonprofit corporation, EIN 61-1896557, located in Oakley, California. We support people whose lives have been touched by cancer through peer support groups (Kinship), virtual coaching (RISE), retreats and local events, educational content, and community programming.

This Privacy Policy explains what information we collect through adventurefound.org (the “Site”) and through our programs, forms, and communications (together with the Site, the “Services”), how we use it, who we share it with, and the choices you have.

This policy does not apply to third-party websites, platforms, or services that we link to, including our online shop, social media pages, podcast hosts, and payment platforms. Those services have their own privacy policies.

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

2. Important note about health information and HIPAA

Adventure Therapy Foundation is not a health care provider, health plan, or health care clearinghouse. We are not a “covered entity” or a “business associate” under the Health Insurance Portability and Accountability Act (“HIPAA”), and information you share with us — including anything you tell us about cancer — is not protected health information under HIPAA.

We treat health-related information you share with us as sensitive, and we handle it with the care described in this policy. But we want you to understand clearly that HIPAA’s legal protections do not apply to the information you give us, and that we do not provide medical care, diagnosis, treatment, or mental health therapy. Please see our Terms of Use for more on what our programs are and are not.

Separately, if you are a Washington or Nevada resident, please also see our Consumer Health Data Privacy Notice, which describes rights that may apply to health-related information under those states’ laws.

3. Information we collect

3.1 Information you provide to us

Contact and identity information — your name, email address, phone number, mailing address, and city and state.
Application and program information — information you submit when you apply for or participate in Kinship, RISE, retreats, events, or other programs, including your responses to application questions, program preferences, group placement preferences, and language preference.
Voluntary health-related information — including your response to the question “How has cancer intersected with your life?” and any other information about cancer, diagnosis, caregiving, loss, or your experience that you choose to share with us. See Section 4, which is devoted to this information.
Donation information — your name, email address, billing address, donation amount and frequency, and any tribute, memorial, or dedication message you include. Donations are processed through Harness Giving, our donation platform. Payment card and bank account details are collected and processed directly by Harness Giving and its payment processor; we do not collect or store full payment card numbers or bank account numbers.
Newsletter and communication preferences — the email address you provide to receive our monthly Adventure Found newsletter, and your subscription preferences.
Volunteer and partnership inquiries — information you submit when you offer to volunteer, propose a partnership, or contact us.
Content you share with us — messages, questions, feedback, survey responses, testimonials, photographs, and stories you send us or authorize us to use.

3.2 Information collected automatically

When you visit the Site, we and our analytics and advertising providers may automatically collect:

IP address and approximate location derived from it (such as city, region, and country)
Browser type, device type, operating system, screen size, and language
Pages and content viewed, links clicked, time spent, and scroll depth
The website or ad that referred you to us, and the search terms or campaign parameters in the link you followed
Date and time of your visit, and a randomly generated identifier stored in a cookie

We collect this information using cookies, pixels, tags, and similar technologies. See Section 6.

3.3 Information from other sources

Social media platforms — if you interact with our pages or ads on Facebook, Instagram, or YouTube, those platforms may provide us with aggregate information about that interaction.
Advertising and analytics platforms — aggregate reports about how our ads and content perform.
Our donation platform and other service providers — records of gifts, event registrations, and communications made through their systems.
Referrals — if someone refers you to a program, we may receive your name and contact information from them.

4. Health-related information you choose to share

This section describes specifically how we handle the health-related information you volunteer to us, including your response to “How has cancer intersected with your life?”

4.1 It is voluntary

Answering this question, and sharing any other health-related detail, is entirely voluntary. You may leave the field blank, share only what you are comfortable sharing, or ask us to remove what you have shared at any time. We will still review and process your application or registration if you choose not to answer.

4.2 Why we collect it

We use this information only to:

Understand your situation so we can respond to you with appropriate care
Determine whether our programs are a good fit for you, and match you to a Kinship group or program with people who share a similar experience
Prepare facilitators and coaches to support the group
Tailor the support, resources, and follow-up we offer you
Evaluate and improve our programs, and report to funders and grantmakers — in aggregate or de-identified form only, never in a way that identifies you

4.3 What we do not do with it

We do not sell it, and we do not rent, trade, or exchange it.
We do not use it for advertising, ad targeting, custom audiences, lookalike audiences, or conversion tracking.
We do not share it with Google Analytics, Google Ads, Meta, or any other analytics or advertising provider. Our tracking tools are configured so that the content you type into our forms is not captured by them.
We do not publish it, quote it publicly, or use it in fundraising or marketing materials unless you give us specific, separate permission.
We do not disclose it to other participants, except that anything you choose to say aloud in a group session is heard by the other people in that group.

4.4 Where it is stored and who can see it

Health-related information you submit is stored in a secure, access-controlled constituent relationship management (CRM) system hosted by GoHighLevel (HighLevel, Inc.). Access is limited to Adventure Therapy Foundation staff, contractors, and volunteer facilitators who need it to do their work, each of whom is subject to confidentiality obligations. Access is protected by individual accounts and multi-factor authentication, and our CRM provider is contractually obligated to protect the information and to use it only to provide services to us.

4.5 How long we keep it

We keep health-related information for as long as you are involved with our programs and for 10 years afterward, so that we can support you if you return and so we can meet our recordkeeping and grant-reporting obligations. After that, we delete it or de-identify it. You may ask us to delete it sooner at any time (Section 8).

4.6 Your consent, and withdrawing it

By voluntarily submitting health-related information, you consent to our collecting, storing, and using it for the purposes described in this section. You may withdraw that consent at any time by emailing info@adventurefound.org. Withdrawing consent does not affect anything we did before you withdrew it, and it may mean we can no longer place you in or continue a program.

5. How we use information

We use the information described in Section 3 to:

Operate, provide, and improve our programs and Services
Review applications and place participants in appropriate programs
Communicate with you about programs, events, retreats, scheduling, and logistics
Send you our newsletter, program updates, and other communications you have asked for
Process donations, issue acknowledgments and tax receipts, and manage recurring gifts
Steward relationships with donors, volunteers, and partners, and invite you to support our work
Understand how the Site is used, measure the performance of our content and campaigns, and improve them
Advertise our programs and reach people who may benefit from them
Maintain the security and integrity of the Site and our systems, and prevent fraud and abuse
Comply with legal, tax, audit, and grant-reporting obligations
Establish, exercise, or defend legal claims

6. Cookies, analytics, and advertising

6.1 Cookies and similar technologies

Cookies are small text files placed on your device. We use:

Strictly necessary cookies, which are required for the Site to function and cannot be turned off
Analytics cookies, which help us understand how the Site is used
Advertising cookies, which help us and our advertising partners show you relevant ads and measure how they perform

You can control cookies through your browser settings, including blocking or deleting them. If you block cookies, some parts of the Site may not work as intended.

6.2 Google Analytics

We use Google Analytics 4, a web analytics service provided by Google LLC, to understand how visitors find and use the Site. Google Analytics sets cookies (such as _ga and _ga_*) and collects information including your IP address, device and browser characteristics, the pages you view, how you arrived at the Site, and how long you stay. This information is transmitted to and stored by Google.

Google Analytics 4 does not log or store IP addresses; IP addresses are used transiently to derive approximate location and are then discarded.
We do not upload names, email addresses, or any other information that directly identifies you to Google Analytics, and we do not send health-related information or form responses to Google Analytics.
We use Google Analytics data in aggregate to improve our Site and our programs.
[We have / We have not] enabled Google Analytics Advertising Features, including Google Signals, Demographics and Interests reporting, and remarketing with Google Analytics. Where these are enabled, Google may associate your visit with information from your Google account if you are signed in and have consented, in order to report demographic and interest data and to serve ads.

You can learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites. You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, and you can control ad personalization at myadcenter.google.com.

6.3 Advertising and remarketing pixels

We use advertising and measurement tools from Meta Platforms, Inc. (the Meta pixel, used for Facebook and Instagram) and Google (Google Ads tags and remarketing). These tools place cookies and collect information about your visit so that we can:

Show ads for our programs to people who have visited our Site, on other websites and on social media platforms
Reach people whose interests suggest our programs may be relevant to them
Measure how many people who saw an ad went on to apply, donate, or subscribe

Third-party vendors, including Google and Meta, use cookies and similar identifiers to serve ads based on your prior visits to our Site and other sites. We do not control these vendors’ own use of the information they collect, which is governed by their privacy policies.

We do not include health-related information in any advertising activity. We do not build audiences based on your cancer-related responses, we do not upload our CRM records to advertising platforms as custom audiences, and we do not send form content to advertising pixels.

You can opt out of personalized advertising:

Google: google.com and adssettings.google.com
Meta: your Facebook or Instagram ad preferences settings
Industry-wide: aboutads.info, youradchoices.com, and optout.networkadvertising.org
Mobile devices: your device’s “Limit Ad Tracking” or “Opt out of Ads Personalization” setting

6.4 Do Not Track and Global Privacy Control

Some browsers offer a “Do Not Track” (“DNT”) signal. There is no common industry standard for how to respond to DNT, and we do not currently respond to DNT signals. We honor the Global Privacy Control (“GPC”) signal as an opt-out of targeted advertising where applicable law requires it.

7. How we share information

We do not sell your personal information. We do not rent, trade, or exchange donor lists. We share information only as described below.

Service providers. We share information with vendors who perform services for us, each of which is permitted to use the information only to provide services to us:
GoHighLevel (HighLevel, Inc.) — our CRM, form, and email and text message platform, which stores participant, donor, and subscriber records, including the health-related information described in Section 4
Harness Giving — our donation platform and payment processor, which handles donations, recurring gifts, and donation receipts
Website hosting, virtual meeting, and file storage providers used to operate the Site and deliver our programs
Google (analytics and advertising) and Meta Platforms, Inc. (advertising), which receive Site usage information as described in Section 6 and never receive health-related information
Program facilitators and contractors. Coaches, facilitators, and retreat staff receive the information they need to support you.
Advertising and analytics partners. As described in Section 6, and never including health-related information.
With your permission. For example, when you authorize us to share your story, photograph, or testimonial.
Legal and safety. When we believe in good faith that disclosure is required by law, subpoena, or court order, or is reasonably necessary to protect the rights, property, or safety of any person — including where someone appears to be at risk of serious harm.
Professional advisors. Our auditors, accountants, insurers, and attorneys, under obligations of confidentiality.
Organizational changes. If Adventure Therapy Foundation merges with, is acquired by, or transfers its assets or programs to another nonprofit organization, or in the event of dissolution, information may be transferred as part of that process, subject to this policy.
Aggregate and de-identified information. We share statistics and de-identified information — which cannot reasonably be used to identify you — with funders, grantmakers, partners, and the public.

8. Your choices and rights

8.1 Choices available to everyone

Unsubscribe using the link at the bottom of any of our emails, or email us. We may still send you administrative messages about a program you are enrolled in.
Text messages. [If you have agreed to receive text messages from us, you can stop them at any time by replying STOP to any message. Message and data rates may apply. We never include health-related details in a text message.]
Contact us to change, pause, or cancel a recurring gift.
Cookies and advertising. See Section 6.
Health-related information. Ask us to delete it or withdraw your consent at any time (Section 4.6).

8.2 Requests to access, correct, or delete

As a matter of policy, and regardless of where you live, you may ask us to:

Know what personal information we hold about you and how we use and share it
Access a copy of it
Correct information that is inaccurate
Delete information we hold about you
Opt out of targeted advertising, and of any processing you have consented to

To make a request, email info@adventurefound.org with the subject line “Privacy Request.” We will verify your identity by confirming information we already hold, and we will respond within 45 days. If we need more time, we will tell you why and how much longer we need, up to an additional 45 days. We will not discriminate against you for exercising these rights.

Some information we must keep — for example, donation records we are required to retain for tax and audit purposes, or information we need to establish or defend a legal claim. If we cannot fully honor a request, we will explain why.

Appeals. If we decline your request, you may appeal by replying to our response or emailing info@adventurefound.org with the subject line “Privacy Appeal.” We will respond to an appeal within 45 days and explain our reasoning. If we deny your appeal, you may contact your state attorney general.

8.3 State privacy laws

Most state comprehensive privacy laws, including the California Consumer Privacy Act, exempt nonprofit organizations. A few — including those of Colorado, Delaware, New Jersey, and Oregon — can apply to nonprofits when certain thresholds are met. Rather than track which law applies to which visitor, we extend the rights described in Section 8.2 to everyone who asks.

Residents of Washington and Nevada have specific rights regarding consumer health data. Please see our separate Consumer Health Data Privacy Notice, linked from the footer and home page of our Site.

8.4 Authorized agents

You may use an authorized agent to submit a request on your behalf. We may ask for proof of the agent’s authority and may ask you to confirm the request directly.

9. How we protect information

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, access controls and multi-factor authentication on systems that hold participant information, limiting access to staff and volunteers with a need to know, confidentiality expectations for staff and facilitators, and due diligence on the vendors we use.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any required authorities as the law requires.

Please do not send sensitive information to us by unencrypted email or through social media messages.

10. How long we keep information

We keep personal information for as long as we need it for the purposes described in this policy:

Program and health-related information — as described in Section 4.5
Donor records — for at least seven years, as required for tax, audit, and legal purposes
Newsletter subscriptions — until you unsubscribe, plus a short period to honor your opt-out
Website analytics data — according to the retention period configured in Google Analytics, currently [2 / 14] months

11. Children’s privacy

Our Services are intended for adults 18 years of age and older. We do not knowingly collect personal information from children under 13, and our Site is not directed to children. If you believe a child has provided us with personal information, contact us at info@adventurefound.org and we will delete it.

12. Third-party links and platforms

The Site links to third-party services, including our online shop, donation platform, podcast hosts, social media pages, and virtual meeting platform. When you follow those links or use those services, the third party’s privacy policy governs — not ours. We encourage you to read them.

13. Visitors outside the United States

We are based in the United States, and our Services are operated and hosted here. If you access the Services from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above. If we make a material change to how we handle health-related information, we will notify you by email or through a prominent notice on the Site before the change takes effect, and where the law requires it, we will ask for your consent.

15. Contact us

Adventure Therapy Foundation, Inc.

1156 Lake Park Dr, Oakley, CA 94561

Email: info@adventurefound.org

Phone: (925) 724-9319