LEGAL

Privacy Policy

Effective Date: August 18, 2026

PRIVACY AT A GLANCE

PICTURE Art Foundation does not rent or exchange Foundation Patron, contributor, customer, applicant, or mailing lists.

At the Effective Date, the Foundation does not sell personal information for monetary consideration or share it for cross-context behavioral advertising.

Payment-card information is processed by third-party payment processors; the Foundation does not intend to store complete payment-card numbers or card security codes.

A request to remain publicly anonymous affects public recognition, but the Foundation may retain and disclose identity information for payment, accounting, legal, fraud-prevention, and regulatory purposes.

The Site is not directed to children under 13, and the Foundation does not knowingly collect their personal information online without legally sufficient parental or guardian consent.

1. Scope and Who We Are

PICTURE Art Foundation (the "Foundation," "we," "us," or "our") is a California nonprofit public benefit corporation that supports charitable, educational, literary, artistic, and cultural programs, including art exhibitions, book publishing, performing arts, culinary and cultural events, documentary production, scholarships, and community-enrichment initiatives.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through the Foundation's website and any donation pages, online store, event or program registration pages, Foundation Patron and membership functions, publication-recognition forms, applications, email communications, and other online services that link to this Policy (collectively, the "Site").

This Policy does not apply to a third-party website, platform, payment processor, social network, or service that has its own privacy policy, even when the Site links to or integrates that service. It also does not govern employment records or internal personnel records that are subject to a separate notice.

For purposes of laws that use the terms "controller," "business," "covered entity," or similar concepts, PICTURE Art Foundation is the entity responsible for the personal information described in this Policy, except when a third party independently determines how and why it processes information.

2. Personal Information We Collect

"Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual or household. It does not include information that applicable law treats as public, aggregated, or deidentified. We may collect the following categories, depending on how a person interacts with the Foundation.

A. Identity and contact information

Name, honorific, signature, postal address, email address, telephone number, organization, title, and relationship to another person or organization.
Account username, password or authentication credential, communication preferences, and records needed to verify identity or authority.

B. Contribution, payment, and transaction information

Contribution amount, date, campaign, payment method, billing address, transaction identifier, recurring-contribution instructions, refund or dispute history, matching-gift information, donor-advised-fund or private-foundation information, gift restrictions, and tax-acknowledgment records.
Payment-card or bank information submitted to a payment processor. The Foundation generally receives only a token, transaction status, card brand, expiration information, or limited digits rather than a complete card number or security code.
Purchase, preorder, shipping, fulfillment, sales-tax, return, event-registration, ticket, and merchandise information.

C. Foundation Patron, lifetime-membership, and recognition information

Foundation Patron tier, honorary lifetime-membership status, start date, related benefits, history, and communications.
The name to be published, anonymous-giving preference, "in honor of" or "in memory of" designation, authority to submit the name, consent to publication, and editorial or correction requests.
Records of recognition in books, websites, event materials, annual reports, or other Foundation communications.

D. Program, event, scholarship, grant, volunteer, and application information

Registration and attendance information; interests; event selections; accessibility, dietary, language, or accommodation requests; emergency contact information; and photograph, audio, or video permissions.
Application and eligibility information, such as education, experience, portfolio or work samples, references, essays, demographic information, financial need, tax forms, government-issued identifiers, and supporting documents, but only when relevant to a specific program and permitted by law.
Volunteer availability, skills, background information, training records, and screening information where appropriate for the role.

E. Communications, content, and preferences

Messages, inquiries, feedback, survey responses, newsletter preferences, support requests, and records of communications with the Foundation.
Text, photographs, audio, video, artwork, biographical information, stories, comments, or other materials submitted for publication, public display, program participation, review, or Foundation use.

F. Internet, device, and usage information

Internet Protocol address, browser type, device type, operating system, language, time zone, referring page, pages viewed, links selected, dates and times of visits, session duration, cookie or device identifiers, approximate location derived from an IP address, and diagnostic or security logs.
Interaction with Foundation emails, such as delivery, opening, and link-selection data, to the extent the email provider supplies that information and applicable law permits its use.

G. Inferences and aggregated information

Preferences or interests inferred from interactions with the Site, programs, communications, or past support, such as interest in publications, exhibitions, performances, scholarships, or events.
Aggregated or deidentified statistics about Site use, program participation, audience reach, and fundraising. We may use and disclose such information where permitted by law and will not attempt to reidentify properly deidentified information except as allowed to test or maintain deidentification.

3. Sources of Personal Information

We may collect personal information from:

You, when you make a contribution or purchase, register, apply, submit content, request recognition, subscribe, attend a program, volunteer, communicate with us, or otherwise use the Site.
A family member, employer, matching-gift program, donor-advised fund, private foundation, sponsor, event registrant, reference, nominator, or other person acting at your direction or with appropriate authority.
Payment processors, fundraising platforms, ticketing services, shipping carriers, email providers, website hosts, analytics providers, and other service providers.
Social-media platforms and third-party accounts when you interact with Foundation pages, use a social sign-in, share Foundation content, or authorize a platform to provide information.
Program partners, schools, cultural institutions, publishers, printers, event venues, contractors, and other organizations involved in a Foundation activity.
Public records, public websites, publications, and other lawful sources.

4. How We Use Personal Information

We may use personal information to:

Operate, maintain, secure, troubleshoot, and improve the Site and Foundation systems.
Process contributions, recurring gifts, purchases, preorders, refunds, registrations, and other transactions; prevent fraud; and issue receipts and legally required acknowledgments.
Administer Foundation Patron recognition and honorary lifetime membership, including benefit eligibility, communications, and records.
Publish an approved Foundation Patron, memorial, or honorary acknowledgment when the person has requested or authorized publication.
Deliver books, merchandise, tickets, digital content, event information, and program services.
Administer exhibitions, publications, performances, cultural events, documentary projects, scholarships, grants, volunteer activities, and other charitable or educational programs.
Evaluate applications, verify eligibility, select recipients, obtain references, disburse awards, and meet reporting or legal obligations.
Respond to inquiries, requests, complaints, privacy requests, accessibility needs, and technical support matters.
Send transaction-related notices and, where permitted, newsletters, fundraising appeals, program announcements, surveys, and other communications.
Understand Site use and audience interests, measure program and campaign effectiveness, and improve content, accessibility, outreach, and fundraising.
Protect the Foundation, Site users, program participants, artists, authors, partners, and the public; enforce agreements and policies; investigate misuse; and establish, exercise, or defend legal claims.
Comply with accounting, tax, charitable-solicitation, sanctions, anti-fraud, recordkeeping, subpoena, court order, government request, audit, insurance, and other legal obligations.
Carry out another purpose disclosed at collection or authorized by the individual.

The Foundation does not use personal information for solely automated decision-making that produces legal or similarly significant effects unless it first provides any notice, consent, and rights required by applicable law. Program and scholarship decisions are intended to involve meaningful human review.

5. Legal Bases for Processing

Where a law requires a legal basis for processing, the Foundation relies on one or more of the following, as appropriate:

Performance of a contract or steps requested before entering a contract, such as processing a purchase, event registration, or requested program service.
The Foundation's legitimate interests in operating a secure nonprofit organization, administering contributions and programs, communicating with supporters, improving services, preventing fraud, protecting rights, and advancing its mission, balanced against the individual's rights and expectations.
Consent, including consent to optional cookies, marketing communications, public recognition, use of certain submitted content, or processing of sensitive information where consent is required.
Compliance with a legal obligation, including tax, accounting, sanctions, charitable-registration, accessibility, safety, and government-reporting duties.
Protection of vital interests in an emergency.
Establishment, exercise, or defense of legal claims.

6. Foundation Patrons, Contributors, and Public Recognition

A. Contributor-list privacy

The Foundation does not rent or exchange lists of Foundation Patrons, contributors, customers, applicants, or mailing-list subscribers. We may disclose information to service providers and other recipients described in Section 8 for Foundation purposes, subject to appropriate restrictions where required.

B. Anonymous contributions

A person may ask to remain anonymous in public Foundation materials. "Anonymous" means the Foundation will not intentionally identify that person in the applicable public acknowledgment. It does not mean the Foundation will process the contribution without knowing the person's identity. The Foundation and its processors may retain and disclose identity and transaction information as needed for payment processing, fraud prevention, accounting, audit, tax, sanctions screening, legal compliance, and regulatory reporting.

C. Public acknowledgments

When a Foundation Patron or contributor requests public recognition, the submitted name, organization, tier, memorial or honorary designation, and related approved information may become public in a book, website, event program, annual report, social-media post, or other recognition material. Public information may be copied, indexed, archived, or redistributed by others. After a book or other printed item is produced or distributed, the Foundation may be unable to remove or correct the acknowledgment. A later withdrawal request will apply prospectively where reasonably practicable but will not require recall or destruction of existing materials.

D. Lifetime-membership records

The Foundation may retain records reasonably necessary to administer and document an honorary lifetime membership for the life of an individual Foundation Patron, for the existence of an organizational Foundation Patron, and thereafter as required for accounting, historical, legal, or archival purposes.

7. Cookies and Similar Technologies

The Site may use cookies, pixels, local storage, software development kits, server logs, and similar technologies. The categories used may include:

Strictly necessary technologies, which support security, payment flow, form submission, load balancing, accessibility, fraud prevention, and other functions required to provide the Site.
Functional technologies, which remember settings, language, preferences, or media choices.
Analytics technologies, which help the Foundation understand traffic, performance, and use patterns. Where required, these technologies are used only after consent.
Advertising or social-media technologies. At the Effective Date, the Foundation does not use personal information for cross-context behavioral advertising. Embedded social-media or video providers may independently collect information under their own policies when a person interacts with their content.

Where the Site displays a cookie banner, "Cookie Settings," or "Your Privacy Choices" tool, individuals may use it to accept, reject, or change nonessential technologies. Browser controls may also block or delete cookies, although doing so can affect Site functions. Choices are device- and browser-specific and may need to be repeated after cookies are cleared.

Because there is no uniform industry standard for browser "Do Not Track" signals, the Site may not respond to them. The Foundation will recognize legally required opt-out preference signals, including Global Privacy Control, when applicable and technically supported. A signal applies to the browser or device from which it is sent.

8. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

Service providers and contractors that host the Site, process payments, maintain contributor or membership records, deliver email, provide analytics, secure systems, store data, print or ship publications, manage events, conduct screenings, or perform other services for the Foundation.
Payment processors, financial institutions, donor-advised funds, matching-gift programs, and fundraising platforms involved in a transaction.
Publishers, printers, designers, event vendors, venues, program partners, schools, cultural institutions, selection committees, references, and other parties reasonably necessary to administer a publication, recognition, event, scholarship, grant, or program.
Professional advisors, auditors, accountants, attorneys, insurers, banks, and consultants who need information to provide services or protect the Foundation.
Government agencies, regulators, courts, law enforcement, tax authorities, or other persons when disclosure is required or permitted by law, necessary to respond to legal process, or reasonably needed to protect rights, safety, property, or the public.
A successor, affiliate, or other organization involved in a merger, consolidation, asset transfer, restructuring, dissolution, or similar organizational transaction, subject to applicable nonprofit and charitable-asset restrictions.
The public, when an individual requests or authorizes public recognition, submits public content, participates in a public event or publication, or otherwise understands that the information will be public.
Other recipients with the individual's direction or consent.

Service providers are expected to use personal information only as permitted by their agreements and applicable law. Some third parties, such as payment processors, social networks, or embedded-content providers, may act as independent controllers or businesses and apply their own privacy policies.

9. No Sale, Rental, or Cross-Context Behavioral Advertising

At the Effective Date, the Foundation does not sell personal information for monetary consideration, rent or exchange contributor or mailing lists, or share personal information for cross-context behavioral advertising as those terms are defined by applicable U.S. state privacy laws. The Foundation does not offer a financial incentive or price difference in exchange for personal information. Foundation Patron recognition and membership are provided in connection with charitable support, not in exchange for permission to sell or share personal information.

If these practices materially change, the Foundation will update this Policy and provide any notice, consent, opt-out link, or preference mechanism required by law before engaging in the new practice.

10. Payment Processing

Online contributions and purchases may be processed through third-party payment processors. Those processors receive payment-card, bank, billing, device, and fraud-prevention information and process it under their own privacy notices and contractual obligations. The Foundation does not intend to store complete payment-card numbers or card security codes. Individuals should review the processor's privacy notice presented during checkout.

11. Communications and Marketing Choices

The Foundation may send transactional or relationship communications, such as receipts, tax acknowledgments, security notices, order updates, event changes, membership notices, application decisions, and responses to inquiries. These communications are necessary to provide a requested transaction or service and may continue even after a person opts out of promotional messages.

Promotional emails will include an unsubscribe method where required. An unsubscribe request may take a reasonable period to process, and the Foundation may retain a suppression record to avoid sending future promotional messages. Marketing consent is not a condition of making a contribution or purchase.

The Foundation will send promotional text messages only after obtaining any consent required by law. Message frequency may vary; message and data rates may apply. A recipient may reply STOP to cancel or HELP for assistance, where those functions are offered.

12. Retention

The Foundation retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including to administer a lifetime relationship, complete a transaction or program, satisfy a written restriction, maintain financial and tax records, resolve disputes, enforce agreements, protect security, preserve historically significant records, and comply with law. Retention depends on the nature and sensitivity of the information, the risk of harm, the relationship, legal limitation periods, and applicable recordkeeping requirements.

Examples include:

Contribution, purchase, tax, accounting, gift-acceptance, and regulatory records are generally retained for at least the period required by the Foundation's records-retention policy and applicable law, which may extend for seven years or longer.
Foundation Patron and honorary lifetime-membership records may be retained for the applicable lifetime or organizational existence and for a reasonable archival or legal period thereafter.
Published acknowledgment information may remain in printed, archived, library, historical, backup, and legal records indefinitely.
Marketing information is generally retained until consent is withdrawn or the address is inactive, while a minimal suppression record may be retained to honor the opt-out.
Application, volunteer, program, security-log, and cookie information is retained under the applicable program, security, or vendor schedule and may be deleted or deidentified when no longer needed.

13. Security

The Foundation uses administrative, technical, and physical safeguards designed to protect personal information, taking into account its nature, sensitivity, volume, and the Foundation's resources. Measures may include access controls, multifactor authentication, encryption in transit, secure payment processing, backups, logging, vendor review, confidentiality obligations, and incident-response procedures.

No method of transmission or storage is completely secure. The Foundation cannot guarantee absolute security. Individuals should use unique passwords, protect devices, avoid sending sensitive information by ordinary email, and promptly report suspected misuse. The Foundation will provide notices of a security incident when required by applicable law.

14. Children and Minors

The general Site is not directed to children under 13, and the Foundation does not knowingly collect personal information online from a child under 13 without verifiable parental or guardian consent when required by the Children's Online Privacy Protection Act or other applicable law. A parent or guardian who believes a child has provided personal information without appropriate consent should contact the Foundation so the information can be reviewed and deleted where required.

Programs involving minors may use a separate registration form, privacy notice, parental or guardian consent, media release, emergency form, or program rule. A minor should not submit a contribution, purchase, application, public content, or recognition request without the involvement and authorization of a parent or legal guardian when required.

15. Sensitive, Health, and Accessibility Information

The Foundation seeks to minimize sensitive information. It may collect information such as government identifiers, financial-need documentation, account credentials, precise or approximate location, racial or ethnic information, disability or accessibility needs, dietary information, or other sensitive data only when reasonably necessary for a transaction, scholarship, grant, accommodation, safety, legal obligation, or other disclosed purpose.

Accessibility, dietary, disability, or health-related information is used only to evaluate or provide the requested accommodation, administer the applicable program, protect health or safety, comply with law, or carry out another purpose authorized by the individual. The Foundation does not sell such information or use it for targeted advertising. It discloses the information only to personnel, venues, vendors, emergency providers, or program partners who reasonably need it, or as required by law.

Where a jurisdiction requires a separate consumer-health-data notice, consent, or authorization, the Foundation will provide it before collecting or using covered information. Individuals may contact the Foundation to request access, deletion, or withdrawal of consent, subject to applicable exceptions.

The Site may link to or embed content from payment processors, social networks, video hosts, maps, ticketing systems, publishers, cultural partners, and other third parties. These parties may collect information independently, place technologies, or receive information when a person interacts with their service. Their practices are governed by their own notices, not this Policy. A link or integration does not constitute the Foundation's endorsement of the third party's privacy or security practices.

17. International Data Transfers

The Foundation is based in California, United States, and the Site and service providers may process personal information in the United States or other countries. Those countries may have privacy laws different from the laws where the individual resides. Where applicable law requires a transfer mechanism, the Foundation will use legally recognized safeguards, such as contractual clauses, consent, or another permitted basis.

18. Your Privacy Rights and Choices

Depending on the person's location, relationship with the Foundation, and applicable exemptions, the person may have rights to:

Confirm whether the Foundation processes personal information and obtain access to it.
Request correction of inaccurate personal information.
Request deletion, subject to legal, archival, security, transaction, free-expression, and other exceptions.
Receive a portable copy of certain information.
Object to or restrict certain processing, or withdraw consent prospectively.
Opt out of sale, targeted advertising, certain sharing, or qualifying profiling. The Foundation does not currently engage in these practices as described in Section 9.
Limit certain uses or disclosures of sensitive personal information where applicable.
Appeal a refusal to act on a privacy request where applicable.
Complain to a privacy, data-protection, or attorney-general authority.

How to submit a request

A request may be submitted by email to info@pictureartfoundation.org or by mail to the address in Section 22. The request should identify the right being exercised and provide enough information to locate relevant records. The Foundation may request information reasonably necessary to verify identity, authority, residency, and the scope of the request. The Foundation will use verification information only for verification, security, fraud prevention, and legal compliance.

Authorized agents and appeals

Where permitted, an authorized agent may submit a request. The Foundation may require proof of authorization and may verify the request directly with the individual. An appeal should be labeled "Privacy Appeal" and explain why the response should be reconsidered. The Foundation will respond within the time required by applicable law.

No discrimination

The Foundation will not unlawfully discriminate or retaliate against a person for exercising an applicable privacy right. A request may affect a service when the information is reasonably necessary to provide that service, administer a contribution or membership, or comply with law.

19. California and Other U.S. State Disclosures

A. Notice at collection

The categories of personal information described in Section 2 are collected for the purposes in Section 4, from the sources in Section 3, and may be disclosed to the recipients in Section 8. Retention is described in Section 12. The Foundation does not currently sell personal information or share it for cross-context behavioral advertising and does not use or disclose sensitive personal information for purposes that trigger a right to limit under California law.

B. Applicability to a nonprofit

Some state privacy statutes exempt nonprofit organizations entirely or in part, while others may apply based on activity, location, or data-volume thresholds. The Foundation will honor statutory rights to the extent the applicable law covers the Foundation and may voluntarily respond to reasonable requests even when a statute does not require it. A voluntary response does not waive an exemption or create a continuing legal obligation.

C. California "Shine the Light" and direct marketing

The Foundation does not disclose personal information to third parties for their own direct-marketing purposes without consent. California residents may contact the Foundation with questions regarding this practice.

D. Minors' removal requests

Where applicable law gives a registered minor the right to request removal of content posted by the minor, the request may be submitted using the contact information below. Removal may not be complete or possible when the content was reposted by others, is required by law, was anonymized, is in printed or archived materials, or an exception applies.

E. Nevada and similar opt-out laws

The Foundation does not currently sell covered personal information as defined by Nevada law or similar state laws. A verified opt-out request may nevertheless be submitted using the contact information below.

20. Visitors in the EEA, United Kingdom, and Switzerland

To the extent European, United Kingdom, or Swiss data-protection law applies, PICTURE Art Foundation is generally the controller of the personal data covered by this Policy. Legal bases are described in Section 5. Individuals may have rights of access, correction, erasure, restriction, portability, objection, and withdrawal of consent, as well as the right to lodge a complaint with the competent supervisory authority.

The Foundation may transfer personal data to the United States and other countries as described in Section 17. When required, it relies on an adequacy decision, standard contractual clauses, consent, or another authorized safeguard or derogation. The Foundation does not presently engage in solely automated decision-making producing legal or similarly significant effects.

A person may contact the Foundation to ask about the applicable legal basis, safeguards, recipients, or rights. The Foundation has not appointed a data protection officer unless separately stated on the Site.

21. Changes to This Policy

The Foundation may update this Policy to reflect changes in law, technology, vendors, programs, or data practices. The revised Policy will be posted with a new effective or "last updated" date. When required, the Foundation will provide additional notice or obtain consent before applying a material change to previously collected personal information.

22. Contact Us

Questions, privacy requests, complaints, accessibility requests, or concerns about this Policy may be directed to:

PICTURE Art Foundation

21143 Hawthorne Blvd #264

Torrance, CA 90503

Email: info@pictureartfoundation.org

Please use the subject line "Privacy Request" for requests under Section 18. The Foundation may need to preserve information that is subject to a legal hold, tax or accounting requirement, security need, published record, or other lawful exception.