Effective date: October 29, 2026
This Privacy Policy explains what information Procreate Foundation (“we”, “us”) collects through the website procreatefoundation.org, how we use it and with whom we share it. Health information you send us as part of a grant application is covered by our Notice of Privacy Practices.
Information we collect
- Contact form. When you use the contact form we collect your first and last name, phone number, email address, the topic you are interested in and how you heard about us. The form does not have free-text fields: please do not send us medical information through it. We will call or email you back.
- Grant applications. Applications are not submitted through this website. They are sent by email to apply@procreatefoundation.org, by fax or by mail, as described on the Applicants page, and are handled under our Notice of Privacy Practices.
- Donations. Donations are processed on the secure pages of our payment providers, TransactionExpress (TSYS) and PayPal, which open in a new window. We do not receive or store your card number. Those providers process your payment information under their own privacy policies.
- Server logs. Our web server automatically records the IP address, date and time, pages requested, browser type and referring page of each visit. We keep these logs for 365 days for security and troubleshooting.
Cookies and tracking
This website does not use analytics, advertising pixels, session-recording tools, remarketing tags or social-media tracking of any kind. It sets no cookies for visitors. Cookies are only set for staff who log in to administer the website. Links to our social media profiles are plain links and do not load third-party scripts on this site.
Who we share information with
- Amazon Web Services hosts this website and our files. AWS has signed a Business Associate Agreement (BAA) with us.
- Google Workspace provides our email. Google has signed a BAA with us, accepted on February 2, 2022.
- TransactionExpress (TSYS) and PayPal process donations. They never receive health information. No BAA is required.
- Wordfence (security software on this website) may process the IP addresses of visitors to block attacks. It never receives personal or health information.
We do not sell, rent or trade your personal information. We disclose it to authorities only when required by law.
Security
The website is served exclusively over HTTPS and uses security headers, a strict content security policy and access restrictions on the server. Access to applicant files is limited to the staff who evaluate grants.
Your choices
You may ask us at any time what personal information we hold about you, ask us to correct it or ask us to delete it, by writing to contact@procreatefoundation.org or to Procreate Foundation, 700 Oak Grove Road, Chesapeake, VA 23320. For rights related to health information, see the Notice of Privacy Practices.
Children
This website is not directed to children under 18 and we do not knowingly collect information from them.
Changes
We will post any change to this policy on this page with a new effective date.
Contact
Procreate Foundation · 700 Oak Grove Road, Chesapeake, VA 23320 · (757) 290-0069 · contact@procreatefoundation.org
Privacy Officer: Denise Joyner