Privacy Policy
Last updated: October 8, 2026
Will Rogers High School Community Foundation (“the Foundation,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit willrogersfoundation.net (the “Site”), how we use and share it, and the choices and rights you have.
Where this Policy describes rights that apply to individuals under privacy laws, we extend those rights to all visitors regardless of whether the law strictly requires it.
1. Information We Collect
Information you give us. When you submit our contact form, we collect the information you provide — your name, email address, phone number, the category you choose to describe yourself, the subject of your inquiry, and the contents of your message. If you contact us by email directly, we receive whatever you include.
Information collected automatically. When you browse the Site, we and our advertising provider automatically collect certain technical data, including your IP address, device and browser type, operating system, pages viewed, referring URLs, and interactions with the Site. If you arrive from a link that carries campaign identifiers (for example, UTM parameters or a click identifier from one of our ads), our advertising provider records them so that we can understand which channels bring visitors to the Site. This is collected through cookies and similar technologies (see Section 5). Our web host also keeps standard server logs, which record your IP address, browser and device type, and the pages you request.
Spam protection. Our contact form is protected by Google reCAPTCHA, which loads on every page of the Site. To tell human visitors from automated submissions, reCAPTCHA collects hardware and software information from your device and information about your interaction with the page, and sends it to Google for analysis. This is subject to Google’s Privacy Policy and Terms of Service.
We do not intentionally collect sensitive personal information (for example government identifiers, financial account numbers, health data, or precise geolocation) through the Site.
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide what you ask us for;
- Process and acknowledge donations you choose to make;
- Operate, maintain and improve the Site;
- Deliver and measure our advertising, including showing our ads to people who have visited the Site (retargeting);
- Detect, prevent and address spam, security issues and fraud; and
- Comply with legal obligations.
3. How We Share Your Information
We do not sell your personal information for money. We share information only as follows:
Service providers who perform functions on our behalf — website hosting (Kinsta), contact-form processing (Gravity Forms), spam protection (Google reCAPTCHA), email routing and delivery (Gravity SMTP and Twilio SendGrid), and donation processing (Givebutter, if you choose to give).
Advertising partner — the advertising platform we use on this Site (Google Ads) receives information through cookies and tags for measurement, advertising, and ad targeting. Some U.S. state privacy laws call this “targeted advertising,” and certain ad-related data sharing may also be considered a “sale” or “sharing” of personal information under California law (see Sections 7 and 8).
Legal and safety — when required by law, subpoena, or to protect our rights, our visitors, or the public.
Organizational changes — in connection with a merger, acquisition, or transfer of the Foundation’s assets.
4. Legal Bases for Processing (EU/UK Visitors)
The Site is operated from the United States and is directed to visitors in the United States. We do not target or market to individuals in the European Economic Area or the United Kingdom. If you visit the Site from those regions, the advertising cookies described in Section 5 are set by default; Section 5 explains how to control them.
Where the GDPR or UK GDPR applies, we process personal data on these legal bases: our legitimate interests (operating, securing and improving the Site, understanding how it is used, and promoting the Foundation); performance of a contract or steps taken at your request (responding to inquiries, processing a donation); and compliance with legal obligations.
5. Cookies and Tracking Technologies
We use cookies, tags and similar technologies to operate the Site, remember your choices, and deliver advertising. The technologies we use fall into the following categories:
Essential cookies — required for the Site to function, including hosting, security and caching cookies set by Kinsta, and moove_gdpr_popup, which our cookie banner sets to remember that you have seen it and any choice you made. It holds no name or contact details.
Spam protection — Google reCAPTCHA loads on every page of the Site and collects device and behavior information to distinguish people from automated submissions. It is subject to Google’s privacy policy.
Advertising cookies and tags — the Google Ads tag, used for measurement, conversion tracking, and retargeting. It lets us show our ads to people who have visited the Site, and see what visitors do on the Site after clicking one of our ads. Its main cookie on the Site is _gcl_au, which expires after 90 days, and Google sets advertising cookies on its own domains as well.
Donations — if you use the donation form, Givebutter sets the cookies its payment process requires. These are set only on the Donate page, and only when you use it.
Your choices. Advertising cookies are on when you first visit the Site. To turn them off, choose “Necessary only” on our cookie banner, or change your choice at any time with the “Your Privacy Choices” link at the bottom of every page or the cookie settings button. Choosing “Necessary only” turns advertising cookies off: Google’s tags set no cookies, and the advertising cookies the Site has already set in your browser are deleted. Google Ads still receives a basic record of each page you view, such as the page, the time and your browser type, with no identifier that links your visits together. The cookies the Site needs to work stay on.
Global Privacy Control. If your browser sends the Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information: advertising cookies stay off for that browser, whatever you choose on the banner.
You can also control cookies through your browser settings, and you may opt out of certain advertising at optout.aboutads.info.
6. Third-Party Services
Our service providers and our advertising partner process data under their own privacy policies:
- Google (reCAPTCHA & Ads): policies.google.com/privacy
- Twilio SendGrid (email delivery): twilio.com/legal/privacy
- Kinsta (hosting): kinsta.com/legal/privacy-policy
- Gravity Forms (contact form): gravityforms.com/privacy-policy
- Gravity SMTP (email delivery): gravitysmtp.com/privacy-policy
- Givebutter (donations): givebutter.com/privacy
7. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know and access the personal information we collect, to delete it, to correct inaccuracies, and to opt out of the “sale” or “sharing” of personal information (which, under California law, can include cookie-based advertising). You also have the right not to be discriminated against for exercising these rights.
We use Google Ads to show our ads to people who have visited the Site, which California law can treat as “sharing.” To opt out, use the “Your Privacy Choices” link at the bottom of every page and choose “Necessary only,” or turn on Global Privacy Control in your browser, which we honor as an opt-out (see Section 5).
In the prior 12 months, we may have collected the following categories: identifiers (name, email address, phone number, IP address, cookie identifiers), commercial or inquiry information (the contents of messages you send us, and information relating to any donation you choose to make), and internet activity (usage data, referral and campaign data, and interactions with our ads).
To exercise these rights, contact us using the details in Section 15.
8. Your Rights Under Other U.S. State Privacy Laws
Many states have enacted consumer privacy laws. We honor the following rights for any U.S. resident who requests them:
- To confirm whether we are processing your personal data and to access it;
- To correct inaccuracies in your personal data;
- To delete personal data you provided or that we obtained about you;
- To obtain a copy of your personal data in a portable format; and
- To opt out of the processing of your personal data for targeted advertising, for the sale of personal data, or for profiling that produces legal or similarly significant effects. (We do not engage in such profiling.) Section 7 explains how to opt out of targeted advertising.
To exercise any of these rights, use the methods in Section 15. We will acknowledge your request and respond as promptly as we reasonably can, and within any period that applicable law requires. We are a small volunteer-led organization, so please allow us reasonable time. We may need to verify your identity before acting on a request. We will not charge for a first request in any 12-month period.
Appeals. If we decline to act on your request, we will tell you why. You may appeal by replying to our decision, or by contacting us using the details in Section 15 — mark it “Privacy Appeal.” We will respond to appeals as promptly as we reasonably can. If we deny your appeal, you may contact your state Attorney General.
9. Your Rights (EU/UK — GDPR)
If you are in the EEA or UK, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, as well as the right to data portability and the right to withdraw consent. You may also lodge a complaint with your local data protection authority. Contact us using the methods in Section 15 to exercise these rights.
10. Data Retention
We keep personal information only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements, after which we delete or anonymize it.
11. Data Security
We use reasonable administrative, technical and physical safeguards to protect personal information. The Site is served over HTTPS. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. International Data Transfers
We are based in the United States, and information we collect is processed in the U.S. and in other countries where our service providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers out of the EEA or UK.
13. Children’s Privacy
The Site is not directed to children under 13, and we do not knowingly collect personal information from them. We do not knowingly sell or share the personal information of, or use for targeted advertising the personal information of, any visitor we know to be under 16.
The Foundation supports a high school, and the Site publishes photographs and stories about students as part of reporting on the programs we fund. If you are a parent or guardian and you would like us to remove a photograph or a description of your child, contact us using the details in Section 15 and we will do so.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version with a new “Last updated” date, and where a change materially affects how we use personal information we already hold, we will take reasonable steps to notify affected individuals.
15. Contact Us
For questions about this Policy, or to exercise any of the rights described above, contact us:
Will Rogers High School Community Foundation
PO Box 52845
Tulsa, OK 74152
wrcfsecretary@willrogersfoundation.net