PRIVACY POLICY

Last updated March 15, 2026

This Privacy Policy for The Athena Margaux Sanctuary Inc ("Athena Margaux," "we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://athenamargauxsanctuary.org or any website of ours that links to this Privacy Policy
• Support our mission as a 501(c)(3) nonprofit providing emotional, spiritual, and financial support to mothers and families who have experienced the loss of a baby — through grief support boxes, counseling resources, angelversary tributes, memorial services, burial assistance, and our merchandise shop
• Engage with us in other related ways, including donations, events, or marketing communications

Questions or concerns? Reading this Privacy Policy will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. Contact us at admin@athenamargauxsanctuary.org.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you make a donation, purchase merchandise, submit a form, register for an event, subscribe to our newsletter, or otherwise contact us.

Personal Information Provided by You. The personal information we collect may include:

• Names
• Email addresses
• Phone numbers
• Mailing and billing addresses
• Debit/credit card numbers (processed securely via PayPal)
• Contact preferences
• Comments, messages, or uploaded content

Sensitive Information. In the context of our grief support programs, users may voluntarily share sensitive health-related information, such as details about pregnancy loss or medical circumstances. We treat this information with the highest level of care and compassion, use it solely to provide appropriate support, and do not sell or share it with third parties.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In Short: Some information — such as your IP address and browser characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and other technical information needed to maintain the security and operation of our Services.

Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:

• Log and Usage Data: IP address, browser type, pages visited, time spent, clicks, scrolling, navigation, and referring URLs
• Device Data: Device identifiers, hardware model, operating system, and browser settings
• Location Data: Approximate location based on your IP address. You may disable location sharing in your device or browser settings.

Derived or Processed Information

We may generate anonymized identifiers, engagement metrics, and aggregated usage statistics to improve our Services. This data does not identify you individually.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for the following reasons:

• To deliver and facilitate delivery of services to the user — including grief support programs, event registration, and merchandise orders
• To fulfill and manage user orders — to process merchandise purchases and donation transactions
• To respond to user inquiries and offer support — to answer your questions and provide assistance
• To send administrative information — such as order confirmations, program updates, and policy changes
• To send marketing and promotional communications — with your consent, to share updates about our programs and events. You may opt out at any time.
• To post testimonials — with your permission, we may share testimonials from families who have received our support
• To request feedback — to improve our programs and services
• To protect our Services — for security, fraud prevention, and monitoring
• To evaluate and improve our Services — by identifying usage trends and improving the user experience
• To identify usage trends — to better understand how our Services are being used
• To comply with legal obligations — including nonprofit reporting requirements, tax compliance, and responding to legal requests

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may share your personal information with the following third-party service providers who perform services for us or on our behalf:

• Content Optimization: YouTube video embed
• Functionality and Infrastructure Optimization: Termly.io
• Invoicing and Billing: PayPal (Privacy Policy)
• Web and Mobile Analytics: Google Analytics
• Website Hosting: WordPress.com / GoDaddy

We may also need to share your personal information in the following situations:

• Business Transfers. In connection with any merger, acquisition, or transfer of organizational assets, your information may be transferred as part of that process.
• Legal Authorities. We may disclose your information when required by law or to protect our rights and the safety of others.

We do not sell your personal data. We do not share your data with business affiliates or partners for advertising purposes.

4. DONOR PRIVACY

Donors may request anonymity at any time by contacting us at admin@athenamargauxsanctuary.org. All proceeds from merchandise sales and donations go directly to supporting grieving families through our programs.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (such as web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions including our WooCommerce shopping cart.

We also permit third-party service providers to use online tracking technologies on our Services for analytics purposes. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

Google Analytics

We use Google Analytics to track and analyze Site usage. To opt out of Google Analytics tracking, visit https://tools.google.com/dlpage/gaoptout. For more information on Google's privacy practices, visit the Google Privacy & Terms page.

6. EMBEDDED CONTENT

Our Site may include embedded content such as videos, posts, or maps from third-party platforms (e.g., YouTube, TikTok). Embedded content behaves as if you visited the third-party site directly. These platforms may collect data about you, use cookies, and track your interaction with the embedded content according to their own privacy policies.

Note: Uploaded images may contain EXIF location metadata. Please remove location data from images before uploading if you do not wish to share it.

7. HOW DO WE HANDLE SOCIAL LOGINS?

In Short: If you connect with us via social media, we may receive certain profile information from that platform.

Our Services may allow you to interact with us through third-party social media platforms such as Facebook, Instagram, or TikTok. Where you choose to do this, we may receive certain profile information about you from your social media provider — such as your name, email address, and profile picture. We will use this information only for the purposes described in this Privacy Policy. We are not responsible for other uses of your personal information by your social media provider. We recommend reviewing their privacy policies.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required by law (such as tax, accounting, or nonprofit reporting requirements). In general, we retain personal information for no longer than 2 years. Donor records may be retained longer as required for nonprofit tax and reporting compliance.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible (e.g., information stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through appropriate organizational and technical security measures.

We have implemented appropriate technical and organizational security measures including HTTPS encryption, secure servers, access controls, and routine monitoring designed to protect the security of any personal information we process. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk. You should only access our Services within a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of a minor and consent to such minor's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at admin@athenamargauxsanctuary.org.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you have rights regarding your personal information.

You may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Restrict or object to processing
• Data portability — receive a copy of your data in a portable format
• Withdraw consent at any time
• Opt out of marketing communications

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the contact details provided in Section 17 below. This will not affect the lawfulness of processing before its withdrawal.

Opting out of marketing communications: You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. You will then be removed from our marketing lists. However, we may still communicate with you for service-related or administrative purposes.

Account Information: Upon your request to delete your account or data, we will deactivate or delete your information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, or comply with applicable legal requirements.

Cookies: Most browsers accept cookies by default. You can set your browser to remove or reject cookies, though this may affect some features of our Site.

If you have questions or comments about your privacy rights, email us at admin@athenamargauxsanctuary.org.

12. EMAIL MARKETING

If you subscribe to our newsletter or opt in to communications, we may send updates about our programs, events, and merchandise. You may unsubscribe at any time using the unsubscribe link included in every marketing email, or by contacting us directly. Unsubscribing from marketing emails will not affect service-related or transactional communications. We do not send SMS text messages to our users.

13. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific rights regarding your personal information.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Name, alias, postal address, phone number, IP address, email address	YES
B. California Customer Records	Name, contact information, and financial information	YES
C. Protected classification characteristics	Gender, age, race, ethnicity, national origin	NO
D. Commercial information	Merchandise purchase history, donation records	YES
E. Biometric information	Fingerprints, voiceprints	NO
F. Internet or network activity	Browsing history, pages visited, interactions with our website	YES
G. Geolocation data	Approximate device location based on IP address	YES
H. Sensory data	Audio, visual, or other sensory recordings	NO
I. Professional or employment data	Work history, job title	NO
J. Education information	Student records	NO
K. Inferences	Profiles or summaries drawn from personal information	NO
L. Sensitive personal information	Payment card data; health-related information voluntarily shared in grief support context	YES

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A – 2 years
• Category B – 1 year
• Category D – 1 year
• Category F – 1 year
• Category G – 1 year
• Category L – 1 year

Sources of Personal Information

Learn more about the sources of personal information we collect in Section 1.

How We Use and Share Personal Information

Learn more about how we use your personal information in Section 2 and when and with whom we share it in Section 3.

We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed Categories A, B, D, F, and G to third-party service providers for operational purposes as described above.

Your Rights

You have rights under certain US state data protection laws, including:

• Right to know whether we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data for targeted advertising or sale

How to Exercise Your Rights

To exercise these rights, email us at admin@athenamargauxsanctuary.org or visit our contact page. Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf with proper written authorization.

Request Verification

Upon receiving your request, we will need to verify your identity before processing it. We will only use personal information provided in your request to verify your identity. If we cannot verify your identity from information already maintained by us, we may request additional information.

Appeals

If we decline to take action regarding your request, you may appeal by emailing us at admin@athenamargauxsanctuary.org. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits California residents to request, once per year and free of charge, information about categories of personal information disclosed to third parties for direct marketing purposes. To make such a request, contact us using the details in Section 17 below.

15. INTERNATIONAL DATA TRANSFERS

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the United States. Regardless of your location, please be aware that your information may be transferred to, stored by, and processed by us and by the third parties with whom we share your personal information (see Section 3), in the United States and other countries. We will take all necessary measures to protect your personal information in accordance with this Privacy Policy and applicable law.

16. DO WE MAKE UPDATES TO THIS POLICY?

In Short: Yes, we will update this policy as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. If we make material changes, we may notify you by prominently posting a notice or by sending you a notification. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your information.

17. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

If you have questions or comments about this Privacy Policy, please contact us:

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on applicable laws in your state or country, you may have the right to request access to, correct, or delete the personal information we collect from you. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To submit a request, please contact us at admin@athenamargauxsanctuary.org or visit our contact page. We will respond in accordance with applicable data protection laws.