Last Updated: September 1, 2025

1) Introduction

The African Vulture SAFE Online Store (the “AV SAFE Store,” “we,” “us,” or “our”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit https://av-safe-store.mydonor360.com (the “Site”) and use any related pages, mobile applications, or services (collectively, the “Services”).

The AV SAFE Store is powered by Donor360, Inc. d/b/a “Donor Three Sixty” and “Donor360,” a California corporation that provides the underlying commerce platform and payment integrations (“Donor360”). Donor360 may process personal information as our service provider/processor. Additional Donor360 privacy disclosures may apply: https://www.donorthreesixty.com/privacy.

By using the Services, you consent to this Policy. If you do not agree, please do not use the Services.

2) Scope

This Policy applies to personal information we collect through the Services and from our service providers acting on our behalf. It does not apply to websites, apps, or services that we do not control. If you follow a link to a third-party site, review that site’s privacy policy.

3) Who We Are & Roles

• Controller: For the AV SAFE Store, AV SAFE (or the designated nonprofit/fiscal sponsor operating the Store) is the controller of personal information described here, except where we act as a service provider for a partner institution.
• Platform Provider/Processor: Donor360 provides e-commerce, payments, and certain fulfillment/operational services and may act as our processor/service provider.

4) Information We Collect

The information we collect depends on how you interact with us. We collect:

a) Information You Provide Directly

• Contact details (name, email, phone, billing/shipping addresses)
• Account credentials (username, password)
• Order, donation, and adoption details
• Payment information (processed by our payment partners; we do not store full card numbers)
• Preferences, surveys, and communications
• Photos, reviews, and other content you submit
• Third-party contact information you choose to share (e.g., referrals) (“Third-Party Data”)

b) Information Collected Automatically

• Device and usage data (browser type, OS, device identifiers, IP address, pages viewed, links clicked, referring/exit pages, date/time)
• Approximate location derived from IP (city/state) or precise geolocation if you enable it
• Session data and identifiers (cookies, pixels, SDKs, and similar technologies)

c) Information From Third Parties

• Payment processors (transaction confirmations, fraud signals)
• Analytics and advertising partners
• Social login providers (if you connect a social account)
• Partner institutions involved in fulfilling adoptions or donor stewardship

We may de-identify or aggregate information for research, reporting, and to improve the Services.

5) Cookies & Similar Technologies

We and our partners use cookies, pixels, SDKs, and similar technologies to:

1. enable core Site functionality; 2) remember your settings; 3) analyze traffic and performance; and 4) deliver and measure marketing. You can manage browser cookies through your settings. Some features may not function if cookies are disabled. 

6) How We Use Information

We use personal information to:

• Provide, operate, and secure the Services
• Process orders, donations, and symbolic adoptions; arrange shipping and customer support
• Send transactional messages (order confirmations, updates, policy notices)
• Personalize content and remember preferences
• Conduct analytics, research, troubleshooting, and fraud prevention
• Market AV SAFE programs and updates (with appropriate consent/opt-out)
• Comply with law, enforce Terms, and protect rights, safety, and property

If you opt-in, we may share your contact information with AV SAFE and partner institutions for conservation updates and future fundraising. You may opt-out at any time (see §10).

7) Social Features

If you connect a social networking account (e.g., Facebook/Google) or use sharing tools, we may receive information the provider makes available per its policies and your settings (such as name, profile image, contact list). We and Donor360 may use this to help you fundraise, personalize experiences, or find contacts most likely to support a campaign you initiate. Your use of social platforms is governed by those platforms’ privacy policies.

8) When We Share Information

We may share information with:

• Service providers/Processors (e.g., Donor360, payment processors, shipping carriers, cloud hosting, analytics, security, support). These parties may only use information to perform services for us.
• Partner institutions involved in fulfilling symbolic adoptions, donor recognition, or stewardship where you have engaged with that offering.
• Campaign organizers/beneficiaries (name, email, and donation details) when you donate to a specific campaign, where applicable.
• Analytics/advertising partners for measurement and audience reach (see §5 and §9).
• Legal and safety purposes (comply with law, respond to lawful requests, protect our rights/users/public, prevent fraud or abuse).
• Business transfers (merger, acquisition, financing, reorganization, or sale of assets).
• With your direction or consent.

We may share aggregated or de-identified data without restriction.

9) Online Advertising & Analytics

We may work with analytics and ad partners (e.g., Google Analytics, ad networks) that use cookies and similar tools to understand usage and deliver or measure ads. You can control many third-party advertising cookies via industry opt-outs (e.g., NAI or DAA) and platform settings (e.g., Google Ads Settings). Opt-outs are browser/device-specific and may not block all ads.

10) Your Choices & Rights

• Email/SMS: You may opt-out of marketing emails via unsubscribe links and of SMS by replying STOP. We may still send transactional messages about your orders/donations or account.
• Account: You can update certain information in your account settings or by contacting us (see §16).
• Do Not Track: Our Services currently do not respond to browser Do Not Track signals.
• Regional Rights: Depending on your jurisdiction (e.g., California or EEA/UK), you may have rights to request access, correction, deletion, portability, restriction, or objection; and to limit or opt-out of certain processing (including targeted advertising and “sale”/“sharing” as defined by applicable law). To exercise rights, use [Privacy Request form or email]. We will verify and respond per applicable law.
• California Notice (CPRA): California residents have rights to know, delete, correct, and opt-out of “sale” or “sharing” of personal information and to limit use of sensitive personal information. If we “sell” or “share” personal information as defined by CPRA, you may use [“Do Not Sell or Share My Personal Information” link]. We do not knowingly sell or share the personal information of anyone under 16.
• EEA/UK Legal Bases: Where GDPR applies, we process personal data based on: performance of a contract (orders/donations); legitimate interests (security, analytics, personalization, communications); consent (marketing, cookies where required, social features); and legal obligations.

11) Data Retention

We retain personal information for as long as needed to provide the Services and for legitimate business purposes (e.g., accounting, security, legal compliance), then take steps to delete, de-identify, or archive it.

12) Security

We use administrative, technical, and physical safeguards designed to protect personal information. Donor360 maintains PCI DSS compliance for cardholder data it processes. No method of transmission or storage is 100% secure, and you use the Services at your own risk. Protect your account by using a strong password and signing out after use.

13) Children’s Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us (see §16) and we will delete it as required by law.

14) International Users

Our operations and service providers are located in the United States. By using the Services, you understand your information may be transferred to, stored, and processed in the U.S. or other countries with different data protection laws than your home jurisdiction.

15) Third-Party Links & Features

The Services may link to third-party sites or include third-party tools. We are not responsible for their privacy practices. Review their policies before providing information.

16) Contact Us

• AV SAFE Privacy Contact: customerservice@donorthreesixty.com
• Mailing Address: 220 Rocky View Lane, Georgetown, TX 78628
• Donor360 Privacy Contact: customerservice@donorthreesixty.com

You may also submit requests via [Privacy Request form link].

17) Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date indicates the effective date. Material changes will be posted to the Site (and, where required, we will seek your consent or provide additional notice).

Additional Disclosures

• CAN-SPAM: We include opt-out instructions in marketing emails and honor opt-out requests.
• SMS: Carrier rates may apply. Update your number or preferences in your account to avoid misdirected messages.
• Accessibility: If you need this Policy in an alternative format, contact us at customerservice@donorthreesixty.com.

Note: This Policy is designed to align with the AV SAFE Store Terms of Service and Donor360’s role as platform provider. Where Donor360 acts as a processor/service provider, the Donor360 privacy policy and platform terms may also apply to your use of the St