Thrive for Longevity, Inc. (“Thrive for Longevity,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains what information we collect when you visit thriveforlongevity.org (the “Site”), how we use and share that information, your rights, and how to contact us with questions or requests.
Please read this policy carefully. By using our Site, you acknowledge that you have read and understood this Privacy Policy.
Who We Are
Thrive for Longevity, Inc. is a 501(c)(3) public charity incorporated in Florida (EIN 39-4883805; Florida Registration No. CH80847). Our principal office is located in West Palm Beach, Florida. Our mission is women’s health education focused on perimenopause, menopause, and longevity. We are the data controller for personal information collected through this Site.
For privacy questions or requests, contact us at:
- Email: privacy@thriveforlongevity.org
- Mail: Thrive for Longevity, Inc., West Palm Beach, Florida
Scope of This Policy
This policy applies to personal information collected through our Site. It does not apply to:
- Third-party websites linked from our Site
- Substack, which hosts our long-form publication “The Long Game” and operates under its own privacy practices
- Luma, when you register for events directly through Luma’s platform
- Information collected in person at TFL events
Information We Collect
Information You Provide Directly
We collect information you voluntarily provide when you:
- Subscribe to our mailing list: first name, last name, and email address
- Register for an event: first name, last name, email address, and (if ticketed) payment information processed by Stripe
- Make a donation: first name, last name, email address, mailing address (for tax receipts), and payment information processed by Stripe
- Submit a contact form: first name, last name, email address, phone number (optional), and any message content you include
- Submit a partnership inquiry: organizational and contact information you provide
Note regarding sensitive content: Our Site addresses topics including perimenopause, menopause, and hormone therapy. If you voluntarily include health-related information in a contact message or form, we treat that information with heightened care. We do not solicit, collect, or process Protected Health Information (PHI) as defined under HIPAA and are not a HIPAA covered entity.
Information Collected Automatically
When you visit our Site, certain information is collected automatically through cookies, web beacons, and similar technologies, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited, time on page, and referring URL
- General geographic location derived from IP address
This information is collected primarily through Google Analytics 4. See Section 6 (Cookies and
Tracking) for more detail.
Payment Information
Payment card and transaction data for donations and event registrations are processed by Stripe, Inc. Thrive for Longevity does not store your full payment card number, CVV, or related sensitive financial data. Stripe operates as an independent data controller for payment processing; please review Stripe’s privacy policy at stripe.com/privacy.
California Category Disclosure
The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) require disclosure of personal information by statutory category. The following maps the information described in Sections 3.1–3.3 to those categories. Thrive for Longevity collects personal information in the following categories:
- Identifiers — Name, email address, IP address, and phone number (optional).
- Personal Records (Cal. Civ. Code § 1798.80) — Mailing address and payment-related transaction records (donation amounts, event ticket purchases). Payment card data is processed exclusively by Stripe and is not retained by TFL.
- Commercial Information — Records of donations made and event tickets purchased.
- Internet or Network Activity — Pages visited, time on page, referring URL, browser type and version, device type and operating system, and cookie data collected via Google Analytics 4 and embedded third-party services.
- Geolocation Data — General geographic location derived from IP address. We do not collect precise geolocation data.
- Inferences — We do not draw inferences from personal information to create profiles about our users.
We do not collect Biometric Information, Sensory Data, Professional or Employment Information, or Education Information as those categories are defined under the CCPA/CPRA. All categories of personal information listed above are collected for the business purposes described in Section 4. We do not sell or share any category of personal information for cross-context behavioral advertising.
How We Use Your Information
We use the information we collect for the following purposes:
To Provide Services and Fulfill Requests
- Process donations and issue tax acknowledgments
- Register you for events and deliver confirmations and reminders
- Respond to contact and partnership inquiries
- Deliver newsletters and program announcements to subscribers
To Operate and Improve Our Site
- Analyze site usage and user behavior to improve content and navigation
- Maintain site security and prevent fraud
- Diagnose technical problems
To Comply with Legal Obligations
- Maintain donation records as required by nonprofit tax law
- Respond to legal process or regulatory requests
- Comply with applicable state charitable solicitation registration requirements
Legitimate Interests and Consent
Where required by applicable law, we process your personal information only where we have a
lawful basis to do so. Our primary legal bases are:
- Performance of a transaction: when you donate or register for an event
- Legitimate interests: analytics and Site improvement, security, and fraud prevention
- Compliance with law: record-keeping and regulatory obligations
- Consent: email marketing and use of non-essential cookies (where applicable law requires consent)
How We Share Your Information
We do not sell your personal information. We share personal information only as follows:
Service Providers
We share personal information with the following categories of service providers who assist us in operating our Site and programs: payment processors, email marketing platforms, event registration platforms, website analytics providers, fundraising platforms, accessibility technology providers, and website hosting infrastructure. These providers are authorized to use your information only as necessary to provide services to us and are bound by appropriate confidentiality and data protection obligations. Current vendors in each category are identified below. We update this list as our integrations change; please review this Policy periodically forthe most current disclosure.
Payment Processors
- Stripe, Inc. — Payment processing for donations and event tickets (stripe.com/privacy)
Email Marketing Platforms
- Mailchimp (Intuit Inc.) — Email newsletter and program announcement distribution; collects names, email addresses, and engagement data (mailchimp.com/legal/privacy)
Event Registration Platforms
- The Events Calendar / Event Tickets Plus — On-site event listing and ticketing (theeventscalendar.com/privacy-policy)
- Luma — Event registration for select TFL events (lu.ma/privacy)
Donation and Fundraising Platforms
- WPSimplePay — Donation form processing integrated with Stripe (wpsimplepay.com/privacy-policy)
- RallyUp — Fundraising event and auction platform integrated with Stripe (rallyup.com/privacy)
Website Analytics Providers
- Google (Analytics 4) — Website analytics and traffic measurement (policies.google.com/privacy)
Accessibility Technology Providers
- UserWay — Website accessibility widget (userway.org/privacy)
Website Hosting Infrastructure
- GoDaddy / WordPress — Website hosting and content management infrastructure
Internal Financial Management
- QuickBooks (Intuit Inc.) — Internal financial management; receives transactional summary data via Stripe (server-to-server, not directly user-facing) (quickbooks.intuit.com/privacy)
Embedded Media and Content Platforms
Certain embedded media content on our Site (including videos hosted on Vimeo or YouTube and Instagram content) may set cookies or collect data in accordance with the privacy practices of those platforms when you view such content. These platforms operate as independent data controllers for data they collect through embedded content.
Legal Requirements
We may disclose information if required to do so by law or in response to valid legal process (including subpoenas, court orders, or government requests), or to protect the rights, property, or safety of Thrive for Longevity, our users, or others.
Organizational Transfers
In the unlikely event of a merger, dissolution, or transfer of assets, personal information may be transferred to a successor organization, subject to the same or equivalent privacy protections.
Cookies and Tracking Technologies
What We Use
Our Site uses cookies and similar tracking technologies. Cookies are small data files stored on your device. We use the following categories:
- Strictly Necessary Cookies: Required for basic Site functionality, including session management and security. These cannot be disabled.
- Functional Cookies: Enable enhanced features such as remembering your preferences.
- Analytics Cookies: Used by Google Analytics 4 to understand how visitors use the Site. This data is aggregated and anonymized where possible.
- Third-Party Cookies: Set by embedded services including Mailchimp forms, Vimeo/YouTube video players, Instagram embeds, and UserWay. These third parties may use cookies for their own purposes.
Your Cookie Choices
When you first visit our Site, you will be presented with a cookie consent notice. You may accept all cookies or adjust your preferences by category. Strictly necessary cookies cannot be disabled. You may also manage cookies through your browser settings. Note that disabling certain cookies may affect Site functionality. For more information about managing cookies, visit allaboutcookies.org.
Do Not Track
Our Site does not currently respond to “Do Not Track” signals from web browsers. If this changes, we will update this Policy. You may opt out of Google Analytics data collection at tools.google.com/dlpage/gaoptout.
Email Communications
If you subscribe to our newsletter or program announcements, we will send you email communications using Mailchimp. Each email includes an unsubscribe link. You may also unsubscribe by contacting us at hello@thriveforlongevity.org. Transactional emails (donation acknowledgments, event confirmations) will be sent regardless of marketing preferences. We comply with the CAN-SPAM Act. All commercial emails include our physical mailing address and a clear unsubscribe mechanism.
Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law:
- Donor records: Retained for a minimum of seven (7) years to satisfy IRS and nonprofit recordkeeping requirements
- Event registration records: Retained for three (3) years following the event date
- Email subscriber data: Retained until you unsubscribe or request deletion
- Contact form submissions: Retained for two (2) years unless an ongoing relationship results
- Analytics data: Retained in Google Analytics for 14
Data Security
We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit via TLS/HTTPS
- Use of Stripe’s PCI-DSS compliant infrastructure for all payment data
- Access controls limiting personnel access to personal information
- Regular review of our security practices
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to protecting your information using industry-standard safeguards.
Your Privacy Rights
General Rights (All Users)
Regardless of where you are located, you may:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information (subject to legal retention obligations)
- Opt out of marketing email communications at any time
- Request a copy of your personal information in a portable format where technically feasible
To exercise these rights, contact us at privacy@thriveforlongevity.org. We will respond within 30 days of a verifiable request.
California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), even if Thrive for Longevity does not meet the statutory thresholds for mandatory compliance (we voluntarily honor these rights):
- Right to Know: The categories and specific pieces of personal information we have collected about you
- Right to Delete: Your personal information, subject to legal exceptions
- Right to Correct: Inaccurate personal information
- Right to Opt Out: We do not sell or share personal information for cross-context behavioral advertising
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To submit a California privacy request, email privacy@thriveforlongevity.org with “California Privacy Request” in the subject line. We will verify your identity before processing your request.
Virginia, Colorado, Connecticut, and Other State Residents
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with comprehensive privacy laws have rights substantially similar to those described in Section 10.2. We extend the same voluntary commitments to users in those states. Contact us at privacy@thriveforlongevity.org to submit a request.
EEA, UK, and Other International Visitors
Thrive for Longevity is based in the United States and is not targeting residents of the European Economic Area (EEA) or the United Kingdom. However, if you access our Site from the EEA or UK, you may have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing.
Our legal bases for processing are set out in Section 4.4. Where we rely on consent, you may withdraw consent at any time without affecting prior lawful processing. We do not actively target EEA or UK residents. To the extent personal data from EEA or UK visitors is incidentally processed in the United States as a result of their voluntary use of our Site, we rely on recognized transfer mechanisms where applicable, including Standard Contractual Clauses, or on the limited derogations available under GDPR Article 49 for non-systematic transfers made on the basis of the individual’s explicit request or consent.
To submit an EEA or UK rights request, contact us at privacy@thriveforlongevity.org.
Children’s Privacy
Our Site is intended for adult women and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at privacy@thriveforlongevity.org and we will promptly delete it. Consistent with the Children’s Online Privacy Protection Act (COPPA), if we discover we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information as soon as practicable.
Third-Party Links
Our Site contains links to third-party websites and embedded content (including Substack, Luma, and social media platforms). This Privacy Policy does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third parties you interact with.
Florida Nonprofit Disclosure
THRIVE FOR LONGEVITY, INC. 501(C)(3). REGISTRATION#: CH80847. A COPY OF THE OFFICIAL REGISTRATION AND FINANCIAL INFORMATION MAY BE OBTAINED FROM THE DIVISION OF CONSUMER SERVICES BY CALLING TOLL-FREE (800-435-7352) WITHIN THE STATE. REGISTRATION DOES NOT IMPLY ENDORSEMENT, APPROVAL, OR RECOMMENDATION BY THE STATE.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last Reviewed” date at the top of this page and, where appropriate, notify you by email or by posting a notice on our Site. We encourage you to review this Policy annually or whenever you interact with our Site.
Contact Us
For questions, concerns, or to exercise your privacy rights, please contact:
Thrive for Longevity, Inc.
Privacy Inquiries
- Email: privacy@thriveforlongevity.org
- General: hello@thriveforlongevity.org
- Mail: Thrive for Longevity, Inc., West Palm Beach, Florida
We will respond to verifiable requests within 30 days, or within the timeframe required by applicable law.