Privacy Policy
Effective Date: May 1, 2026
First Frame Foundation, a Virginia nonprofit corporation ("First Frame Foundation," "we," "us," or "our"), is committed to protecting the privacy of all individuals who visit our website, participate in our programs, or contribute to our mission. This Privacy Policy explains what personal information we collect, how we use and protect it, and your rights with respect to that information.
This Policy applies to information collected through https://firstframefoundation.org (the "Site"), which is hosted on the Squarespace platform, and through direct interactions with the Foundation by mail, phone, or email. By using the Site, you accept the practices described in this Policy.
1. Information We Collect
1.1 Information You Provide Directly
We collect personal information that you provide to us voluntarily, which may include:
Name, mailing address, email address, and phone number when you contact us, subscribe to communications, or submit a program application;
Payment information (such as credit card or bank account details) when you make a charitable contribution; payment data is processed and stored by our third-party payment processor and is not retained by the Foundation on its own servers;
Professional background, biography, or portfolio materials submitted as part of a program application;
Demographic information you choose to provide in connection with a program application; and
Any other information you choose to submit through forms, email, or other communications with the Foundation.
1.2 Information Collected Automatically
When you visit the Site, our web hosting provider, Squarespace, may automatically collect certain technical information through server logs, including your IP address, browser type and version, operating system, referring URLs, pages viewed, and the date and time of your visit. This information is used solely to maintain the security and operation of the Site. The Foundation does not use third-party analytics services, advertising networks, or behavioral tracking technologies on the Site.
1.3 Cookies and Similar Technologies
The Site is hosted on the Squarespace platform. Squarespace places a small number of cookies on your device that are strictly necessary for the Site to function. These essential cookies are set automatically by Squarespace as part of its standard hosting service and cannot be disabled without impairing basic site functionality. They do not track you across other websites, do not collect personally identifiable information beyond what is required to serve the page, and expire at the end of your browser session or within a short fixed period.
The Foundation does not enable Squarespace's optional analytics cookies, does not use advertising cookies, and does not integrate any third-party tracking or marketing scripts on the Site. No cookie consent banner is required for the essential cookies described above because they are technically necessary for site operation and do not constitute non-essential or tracking cookies under applicable law.
The following categories of essential cookies are set by Squarespace on this Site:
Session cookies: temporary cookies that identify your browser session and expire when you close your browser. These are used to maintain basic site functionality during your visit.
Security cookies: short-lived cookies used by Squarespace to protect the Site and its visitors from fraudulent or malicious activity.
Preference cookies: cookies that remember settings required to render the Site correctly, such as language or display preferences, where applicable.
You may configure your browser to refuse or delete cookies at any time. Refusing essential cookies may affect the display or functionality of certain portions of the Site. For a complete and current list of cookies placed by the Squarespace platform, please refer to Squarespace's Cookie Policy at https://www.squarespace.com/cookie-policy.
2. How We Use Your Information
First Frame Foundation uses personal information collected through the Site and through direct interactions solely for the following purposes:
To process and acknowledge charitable contributions and issue tax receipts;
To administer program applications and communicate with applicants regarding their status;
To deliver program services, including mentorship coordination, micro-grant administration, and Academy and festival communications;
To respond to your inquiries and communications;
To send program updates, newsletters, and other communications to individuals who have opted in to receive them;
To comply with applicable legal and regulatory requirements; and
To operate, maintain, and improve the Site.
We do not sell, rent, trade, or otherwise disclose personal information to third parties for commercial or marketing purposes. We do not use personal information for automated decision-making or profiling.
3. How We Share Your Information
First Frame Foundation does not sell or share personal information with third parties except in the following limited circumstances:
Service Providers: We may share information with third-party vendors who perform services on our behalf, such as payment processing, website hosting, and email delivery. These vendors are contractually obligated to use the information solely to perform services for the Foundation and to protect it consistent with this Policy.
Legal Compliance: We may disclose information when required to do so by law, court order, or other legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of the Foundation, its constituents, or the public.
Successor Organizations: In the event of a merger, dissolution, or transfer of Foundation assets to a successor charitable organization, personal information may be transferred as part of that transaction, subject to the same privacy protections described in this Policy.
We do not share donor personal information with other nonprofits, trade associations, or commercial entities without express donor consent.
4. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to comply with applicable legal and tax recordkeeping requirements, and to resolve any disputes that may arise. Donor records are generally retained for a minimum of seven years consistent with IRS recordkeeping guidance for nonprofit organizations. Program application materials are retained for a period consistent with the Foundation's program administration needs and applicable law. You may request deletion of your personal information as described in Section 6, subject to our legal retention obligations.
5. Data Security
First Frame Foundation implements reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, and destruction. Payment information submitted through the Site is processed by our third-party payment processor using industry-standard encryption; the Foundation does not store full payment card numbers on its systems.
No method of data transmission or storage is completely secure. While we take reasonable precautions to protect your information, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at the address in Section 11.
6. Data Breach Notification
In the event of a security breach involving personal information maintained by or on behalf of First Frame Foundation, the Foundation will comply with all applicable breach notification requirements, including the Virginia breach notification law (Va. Code Section 18.2-186.6). If a breach occurs that triggers notification obligations under applicable law, First Frame Foundation will notify affected individuals in the most expedient manner reasonably possible, consistent with the legitimate needs of law enforcement and with any measures necessary to determine the scope of the breach and restore the security of the data. Notification will include, at a minimum: a description of what occurred, the categories of personal information involved, the steps we have taken or are taking to address the breach, and guidance on steps affected individuals may take to protect themselves. The Foundation will also notify the Virginia Attorney General and any other required government agencies as required by applicable law. If you believe your personal information has been compromised in connection with your interactions with the Foundation, please contact us immediately at give@firstframefoundation.org or by phone at (703) 936-7888.
7. Your Rights and Choices
7.1 Access and Correction
You have the right to request access to the personal information we hold about you and to request that we correct any inaccuracies. To submit a request, please contact us at the address in Section 11.
7.2 Deletion
You may request deletion of your personal information. We will honor deletion requests to the extent permitted by applicable law and consistent with our legal recordkeeping obligations. We may retain certain information as required by law or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
7.3 Communications Opt-Out
If you have opted in to receive email communications from the Foundation, you may unsubscribe at any time by following the unsubscribe instructions included in any such communication or by contacting us directly. Opting out of marketing communications does not affect communications necessary to administer your program participation or charitable contribution.
7.4 Donor Privacy
Donors may request that their contributions be kept anonymous and that their personal information not be included in public donor recognition materials. Anonymous gift requests must be submitted in writing at the time of the contribution and are honored consistent with applicable law and the Foundation's transparency obligations.
8. Children's Privacy
The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. Program activities involving participants under the age of 18 are governed by participant-specific terms that include appropriate parental consent requirements. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take prompt steps to delete that information. If you believe we have inadvertently collected such information, please contact us at the address in Section 11.
9. Virginia Consumer Data Protection Act
The Virginia Consumer Data Protection Act (VCDPA) applies to businesses that process the personal data of 100,000 or more Virginia consumers in a calendar year, or 25,000 or more Virginia consumers while deriving over 50 percent of gross revenue from the sale of personal data. First Frame Foundation does not meet either threshold and is not subject to VCDPA compliance obligations as of the effective date of this Policy. We will monitor our data processing activities and revise this Policy if our circumstances change.
10. Third-Party Links
The Site may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit. First Frame Foundation is not responsible for the privacy practices of third-party websites.
11. Changes to This Policy
First Frame Foundation reserves the right to update or modify this Privacy Policy at any time. Changes are effective upon posting to the Site. We will update the effective date at the top of this Policy when changes are made. Your continued use of the Site following the posting of any change constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.
12. Contact
Questions, requests, or concerns regarding this Privacy Policy, our data practices, or a potential data security incident should be directed to:
First Frame Foundation
8401 Mayland Drive, Suite 7673
Richmond, Virginia 23294
Phone: (703) 936-7888
Email: give@firstframefoundation.org
Website: https://firstframefoundation.org