Last Updated: July 31, 2025

This Privacy Policy describes how The Eva Longoria Foundation (“the Foundation”, “we”, “us”, or “our”) collects, uses, maintains, and discloses information collected from users (each, a “User”) of The Eva Longoria Foundation website (e.g., “www.evalongoriafoundation.org”) (“Website”). This policy applies to the Website and all products and services offered by The Eva Longoria Foundation.

We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) for individuals in the European Union and European Economic Area, the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) for California residents, and other relevant privacy laws globally

1. Information We Collect

1. Personal Data You Voluntarily Provide:
   When you interact with our Website, you may provide us with certain personal data. This includes:
   • Contact Form Submissions: When you use our contact form, we collect your name, email address, and any other information you choose to include in your message.
   • Newsletter Sign-ups: If you sign up for our newsletter, we collect your email address.
   • Donation Forms: If you make a donation, we collect your name, address, payment information, and contact details.
   • Event Registrations: If you register for an event, we collect your name, contact information, and any other details necessary for the event.
   • Correspondence: If you contact us directly via email or other means, we may keep a record of that correspondence.
2. Non-Personal Identification Information (Automatically Collected Data):We may collect non-personal identification information about Users whenever they interact with our Website. Non-personal identification information may include:
   • Browser Type and Operating System: The browser name, the type of computer or device, and technical information about Users’ means of connection to our Website.
   • IP Address: Your Internet Protocol (IP) address.
   • Usage Data: Information about how you use our Website, such as pages visited, time spent on pages, links clicked, and referring URLs.
   • Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our Website and hold certain information. Please refer to our separate Cookie Policy [Link to your Cookie Policy] for detailed information about how we use cookies.

2. How We Use Collected Information

We collect and use your personal data for the following purposes:

• To Respond to Inquiries: To respond to your questions and requests submitted through the contact form or other communication channels.
• To Improve Our Website: We may use feedback you provide to improve our products and services and enhance your experience on our Website.
• To Send Periodic Emails: If you opt-in to our mailing list, we may use your email address to send you updates, news about the Foundation, and related service information. You can unsubscribe at any time.
• To Process Donations: To process and acknowledge your donations.
• To Manage Event Registrations: To manage your registration for and participation in our events.
• For Analytical Purposes to Understand Website Usage: To analyze how Users interact with our Website, which helps us improve its functionality and content.
• To Maintain Security: To protect the security and integrity of our Website and prevent fraud or other illegal activities.
• To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.

3. Legal Basis for Processing (for EU/EEA Users under GDPR)

For individuals residing in the European Union or European Economic Area, we process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing purposes (e.g., for marketing communications or certain types of cookies). You have the right to withdraw your consent at any time.
• Legitimate Interests: Where processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms (e.g., responding to your inquiries, improving our services, website security, processing non-sensitive analytical data).
• Legal Obligation: Where processing is necessary to comply with a legal obligation (e.g., tax, accounting, or other regulatory requirements).
• Performance of a Contract: Where processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (e.g., processing a donation that forms a contractual agreement).

4. How We Protect Your Information

We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data, username, password, transaction information, and data stored on our Website.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

5. Sharing Your Personal Data

We do not sell, trade, or rent Users’ personal identification information to others. We may share generic aggregated demographic information not linked to any personal identification information regarding visitors and users with our business partners, trusted affiliates, and advertisers for the purposes outlined above.

We may share your personal data with:

• Service Providers: Third-party service providers who assist us in operating our Website, conducting our business, or serving our Users (e.g., website hosting, analytics providers, email service providers, payment processors). These parties are obligated to keep your information confidential and use it only for the purposes for which we disclose it to them.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
• Affiliated Organizations: With affiliated organizations within The Eva Longoria Foundation’s network, under strict data protection agreements, for purposes consistent with this Privacy Policy.

6. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there.

For transfers of personal data from the EU/EEA to countries not deemed to provide an adequate level of data protection by the European Commission, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on other lawful transfer mechanisms (e.g., the EU-U.S. Data Privacy Framework, if applicable). By submitting your personal data, you agree to this transfer, storing, and processing.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

8. Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right to Access: The right to request copies of your personal data.
• Right to Rectification: The right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure (Right to be Forgotten): The right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing: The right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing: The right to object to our processing of your personal data, under certain conditions.
• Right to Data Portability: The right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

For California Residents (CCPA/CPRA):

In addition to the above, California residents have specific rights, including:

• Right to Know: The right to request that we disclose what personal information we collect, use, disclose, and sell.
• Right to Opt-Out of Sale/Sharing: The right to opt-out of the “sale” or “sharing” of your personal information (as defined by CCPA/CPRA). Please note that The Eva Longoria Foundation does not sell or share personal information for monetary or other valuable consideration.
• Right to Non-Discrimination: The right not to be discriminated against for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us using the contact details provided in Section 11. We will respond to your request within the timeframes required by applicable law.

9. Children’s Privacy

Our Website is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13 without verifiable parental consent. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We have the discretion to update this Privacy Policy at any time. When we do, we will revise the “Last Updated” date at the top of this page. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications.

11. Contacting Us

If you have any questions about this Privacy Policy, the practices of this Website, or your dealings with this Website, please contact us at: evalongoriafoundationcontact@gmail.com