1. Introduction
Finding Purpose Outdoors Foundation (“FPO,” “we,” “us,” or “our”) is a 501(c)(3) nonprofit organization established on July 9, 2025, and based in Carthage, Texas. Our mission is to connect veterans, active-duty service members, Gold Star families, first responders, and medical professionals with guided outdoor experiences that support mental health, community, and purpose.
This Privacy Policy explains what personal information we collect through our website (findingpurposeoutdoors.org), how we use that information, how we protect it, and what choices you have. We are committed to transparency and to handling your data responsibly.
By using our website or submitting information through any of our forms, you acknowledge that you have read and understand this Privacy Policy.
2. Information We Collect
We collect personal information only when you voluntarily provide it or when it is automatically gathered by the technologies described in this policy. We do not purchase, rent, or acquire personal data from third-party sources.
2.1 Information You Provide Directly
Veteran / Participant Application Form. When you apply for one of our outdoor programs, we collect the following:
- First name and last name
- Email address
- Phone number
- City and state of residence
- Age
- Branch of military service
- Service category (Veteran, Active Duty, Gold Star Family, First Responder, or Medical Professional)
- Years of service
- Outdoor activity preferences and experience level
- Physical limitations or accommodation needs
- Personal story (optional, provided at your discretion)
- How you heard about FPO
- Acknowledgment of program code of conduct and privacy notice
Sensitive Information Notice: Some of the data collected through the application form — including military service history, service category, and physical limitations or health-related accommodations — is considered sensitive personal information. We collect this information solely to evaluate program eligibility, plan appropriate accommodations, and ensure participant safety during outdoor activities. This information is never sold, shared for marketing, or used for any purpose unrelated to program administration.
Contact Form. When you reach out to us through the website contact form, we collect:
- Name
- Email address
- Phone number (optional)
- Subject line
- Message content
Volunteer Form. When you sign up to volunteer, we collect:
- First and last name
- Email address and phone number
- Areas you can help with
- Availability and skills/experience
In-Kind Donation Form. When you offer to donate goods or services, we collect:
- First and last name
- Email address and phone number
- Type and description of donation
Newsletter Signup. If you subscribe to our email newsletter, we collect your email address.
Participant Accounts. When you create an account through our application process, we store your name, email address, and a securely hashed password. Your account allows you to view your application status and register for events.
Staff Portal. FPO staff members access a WordPress-based administrative portal. Staff accounts consist of a username and password. Passwords are stored in hashed form by WordPress and are never accessible in plain text.
2.2 Information Collected Automatically
When you visit our website, certain information is collected automatically by the technologies and services described below.
- Google Analytics (GA4): We use Google Analytics 4 to understand how visitors interact with our site. GA4 collects data including pages visited, time spent on pages, device type, browser type, approximate geographic location (city/region level), and referral source. This data is aggregated and used to improve our website and outreach. Google Analytics uses cookies (_ga, _ga_*) to distinguish visitors across sessions.
- CookieYes: We use CookieYes to manage cookie consent on our website. When you visit our site, CookieYes presents a consent banner that allows you to accept or decline non-essential cookies (such as analytics). Your preference is stored in the cookieyes-consent cookie.
- Wordfence Security: We use the Wordfence Security plugin to protect our website from malicious activity. Wordfence automatically logs IP addresses, login attempts, and blocked requests as part of its firewall and security scanning functions. This data is used solely for site security and is retained according to Wordfence default settings.
- Cloudflare: Our website uses Cloudflare for content delivery and DDoS protection. Cloudflare may process your IP address and request data to route traffic and protect against attacks. This processing is governed by Cloudflare's privacy policy.
- WordPress Core: WordPress sets session cookies (wordpress_logged_in_*, wp-settings-*) for authenticated users. These cookies are used only to manage dashboard and account sessions.
2.3 Information We Do Not Collect
Donation and Payment Information. All donations to FPO are processed through Zeffy (zeffy.com), a third-party donation platform. When you click a donate link on our website, you are redirected to Zeffy's secure platform. FPO does not collect, process, store, or have access to your credit card number, bank account information, or other payment details. Zeffy's handling of your payment information is governed by Zeffy's own privacy policy, which we encourage you to review.
3. Cookie Inventory
The following table lists the cookies used on our website, their source, purpose, and how long they persist on your device.
| Cookie Name | Set By | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics (GA4) | Distinguishes unique visitors; tracks session data for analytics | 2 years |
_ga_* |
Google Analytics (GA4) | Maintains session state for GA4 measurement | 2 years |
cookieyes-consent |
CookieYes | Stores visitor cookie consent preferences | 1 year |
wfwaf-authcookie-* |
Wordfence Security | Verifies firewall authentication for security scanning | Session |
wordpress_logged_in_* |
WordPress Core | Authenticates logged-in users | Session / 14 days |
wp-settings-* |
WordPress Core | Stores dashboard display preferences | 1 year |
__cf_bm |
Cloudflare | Bot management and DDoS protection | 30 minutes |
You can manage your cookie preferences at any time using the CookieYes consent banner or your browser settings. Disabling analytics cookies will not affect your ability to use our website.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Program Administration: To evaluate and process applications for our outdoor programs, plan activities, arrange accommodations, and communicate with participants.
- Communication: To respond to inquiries submitted through our contact form and to send newsletters to subscribers who have opted in.
- Website Improvement: To analyze aggregated usage data (via Google Analytics) and improve our website content, navigation, and user experience.
- Security: To protect our website from unauthorized access, spam, and malicious activity (via Wordfence and Cloudflare).
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
We do not use your personal information for targeted advertising, automated decision-making, profiling, or any purpose unrelated to FPO's nonprofit mission.
5. How We Share Your Information
We do not sell, rent, trade, or otherwise disclose your personal information to third parties for their marketing purposes. We may share information in the following limited circumstances:
- Service Providers: We use third-party services (Google Analytics, CookieYes, Wordfence, Cloudflare, Jetpack CDN, WordPress/hosting provider) that process data on our behalf to operate and secure our website. These providers access only the data necessary for their specific function.
- Zeffy: Donation processing is handled entirely by Zeffy. FPO does not transmit your personal information to Zeffy; you provide it directly to them when you use their platform.
- Legal Requirements: We may disclose information if required by law, court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of FPO, our participants, or the public.
- Organizational Transfers: In the unlikely event that FPO merges with or transfers its operations to another nonprofit organization, personal information may be transferred as part of that process. We would notify affected individuals before any such transfer.
6. Data Retention
We retain personal information only as long as necessary to fulfill the purposes described in this policy:
- Application data is retained for the duration of your participation in our programs and for a reasonable period afterward to maintain program records and fulfill reporting obligations.
- Contact form submissions are retained for as long as needed to respond to and resolve your inquiry.
- Newsletter subscriber email addresses are retained until you unsubscribe.
- Analytics data is retained according to Google Analytics default settings (currently 14 months for GA4).
- Security logs (Wordfence) are retained per Wordfence default retention periods.
When personal information is no longer needed, we delete or anonymize it in accordance with our data management practices.
7. Data Security
We take reasonable administrative, technical, and organizational measures to protect the personal information we collect. These measures include:
- SSL/TLS encryption for all data transmitted between your browser and our website.
- Wordfence firewall protection, brute-force login prevention, and malware scanning.
- Cloudflare DDoS protection and content delivery network.
- Password hashing for all user accounts (WordPress).
- HTTP security headers including Content Security Policy, X-Content-Type-Options, and Referrer-Policy.
- Rate limiting on form submissions and login attempts.
- Restricted access to personal information on a need-to-know basis among authorized FPO staff.
While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incident that may affect your data.
8. Your Privacy Rights
Depending on your state of residence, you may have certain rights regarding your personal information under applicable state privacy laws, including the Texas Data Privacy and Security Act (TDPSA) and similar laws in other states. These rights may include:
- Right to Know: You may request confirmation of whether we are processing your personal information, and if so, request access to that data.
- Right to Correct: You may request that we correct inaccuracies in your personal information.
- Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain legal exceptions.
- Right to Data Portability: You may request a copy of your personal information in a portable, readily usable format.
- Right to Opt Out: You may opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Note: FPO does not engage in any of these activities.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, please contact us using the information in Section 12 below. We will respond to verified requests within the timeframe required by applicable law (typically 45 days under the TDPSA). If we need additional time, we will notify you of the extension and the reason.
If you are dissatisfied with our response, you may have the right to appeal our decision. To do so, contact us and reference your original request. We will review the appeal and respond within the timeframe required by applicable law.
9. Children's Privacy
Our website and programs are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will promptly delete that information. If you believe we may have collected information from a child under 13, please contact us immediately.
10. Third-Party Links and Services
Our website may contain links to third-party websites and services, including but not limited to:
- Zeffy (zeffy.com) for donation processing and event registration
- Facebook (Finding Purpose Outdoors Foundation page)
- Other external resources or partner organizations
These third-party sites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policy of any third-party site you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:
Finding Purpose Outdoors Foundation
Carthage, Texas
Email: [email protected]
Website: findingpurposeoutdoors.org
Facebook: Finding Purpose Outdoors Foundation