Privacy Policy

1. Introduction

Fathom Restoration ("Fathom Restoration," "we," "us," or "our") is a Utah nonprofit corporation (EIN 42-2166469) and an IRS-recognized 501(c)(3) tax-exempt organization. We are committed to protecting the privacy of donors, volunteers, partners, and visitors who interact with our website at fathomrestoration.org or otherwise share information with our organization. This Privacy Policy explains what information we collect, how we use and safeguard it, and the choices you have about that information.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically when you visit our site, and information from third-party services we use.

2.1 Information You Provide Directly

• Donor information: When you make a donation, we collect your name, email address, mailing address (for receipts and tax records), phone number (optional), donation amount, and any message you choose to include. Payment card information is collected and processed directly by our payment processor (Stripe / Squarespace Payments) and is not stored on our servers.
• Volunteer and partner information: When you apply to volunteer, partner with us, or contact us, we collect the information you submit, which may include name, contact information, professional or organizational affiliation, certifications, and any other details relevant to your inquiry.
• Email subscriber information: If you sign up for email updates, we collect your name and email address.
• Submitted reports: If you submit information about a submerged vehicle through our reporting form, we collect the details you provide along with your contact information.

2.2 Information Collected Automatically

• Usage data: Pages visited, time spent on pages, referring URLs, and browser and device information.
• IP address and approximate location: Used to improve site performance, prevent abuse, and produce aggregate analytics.
• Cookies and similar technologies: See Section 7 for details.

2.3 Information from Third Parties

We may receive limited information from third-party services that help us operate, such as payment processors confirming a transaction, social media platforms when you interact with our posts, or grant-tracking services that share information about applications and awards.

3. How We Use Your Information

We use the information we collect to:

• Process and acknowledge donations and issue tax-deduction receipts in compliance with IRS requirements;
• Communicate with donors, volunteers, partners, and subscribers about our mission, operations, impact, and ways to get involved;
• Coordinate volunteer and partner activities, including verifying qualifications such as dive certifications, CDL credentials, or HazMat training when relevant;
• Respond to inquiries, recovery reports, and partnership requests;
• Comply with federal and state legal obligations, including IRS reporting requirements for our 501(c)(3) tax-exempt status (annual Form 990 filing);
• Maintain corporate governance records as required by our bylaws and applicable nonprofit law;
• Improve our website, programs, and outreach;
• Protect the security and integrity of our website and operations.

4. How We Share Information

We do not sell, rent, lease, or trade donor lists or any personal information. Information is shared only in the limited circumstances described below.

4.1 Service Providers

We share information with service providers who help us operate, such as Squarespace (website hosting), Stripe (payment processing), email service providers, and accounting or auditing professionals. These providers are contractually obligated to use the information only to perform services for us and to protect it according to industry standards.

4.2 Legal Compliance

We may disclose information if required by law, subpoena, court order, or other legal process; to respond to a valid governmental request; or to protect the rights, safety, or property of Fathom Restoration, our team, our partners, or the public.

4.3 Public Acknowledgments

With your permission, we may publicly acknowledge your gift or partnership (for example, on our website, in an annual report, or on signage at recovery operations). We will never publish donor names or amounts without consent. Anonymous giving is always available — see Section 6.

4.4 Aggregate, De-Identified Data

We may share aggregate, non-identifying information (such as total donations received in a year, geographic distribution of supporters, or impact metrics) with the public, grantors, journalists, and partners. This information cannot be used to identify any individual.

5. Data Security

We use reasonable administrative, technical, and physical safeguards to protect the information we collect. Our website is served over HTTPS (TLS encryption). Payment card information is handled exclusively by PCI-DSS-compliant payment processors and is not stored on our servers. Access to donor and volunteer records is restricted to authorized board members and personnel with a legitimate need.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

6. Donor Anonymity

You may request to make a donation anonymously. Anonymous donations will not be publicly acknowledged by name in any of our materials. To request anonymity, simply note your preference when you donate, or email us at the address in Section 12. We will still collect your contact information for IRS receipt purposes, but we will not include your name in any public list of supporters.

7. Cookies & Analytics

Our website uses cookies and similar technologies to function properly, remember your preferences, and understand how visitors use the site. Categories of cookies include:

• Essential cookies: Required for site functionality (for example, donation form session state).
• Analytics cookies: Squarespace's built-in analytics provide aggregated information about site usage. We do not use cookies for third-party advertising.
• Social media cookies: Set by social media platforms (Facebook, Instagram, LinkedIn) when their content is embedded on our site.

You can control cookies through your browser settings. Disabling certain cookies may affect how the site functions for you.

8. Children's Privacy

Fathom Restoration is not directed at children under 13. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete that information.

9. Your Rights

You have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information, subject to legal record-keeping obligations (e.g., IRS requires donation records to be retained for at least seven years);
• Opt out of marketing communications at any time by clicking the unsubscribe link in any email we send, or by contacting us directly;
• Request anonymity for any donation or interaction;
• Withdraw consent for any non-essential data processing.

To exercise any of these rights, contact us using the information in Section 12. We will respond within 30 days.

10. California & EU Residents

California residents: Under the California Consumer Privacy Act (CCPA), California residents have additional rights regarding personal information, including the right to know what categories of personal information we collect and the right to request deletion. We do not sell personal information. Contact us to exercise your CCPA rights.

European Union and United Kingdom residents: If you are located in the EU or UK, we process your personal information under the General Data Protection Regulation (GDPR) and the UK GDPR. Our legal bases for processing include your consent, the performance of a contract (such as processing your donation), our legitimate interests in operating a nonprofit, and compliance with legal obligations. You have rights of access, rectification, erasure, restriction, portability, and objection. You also have the right to lodge a complaint with your local supervisory authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, for material changes, provide notice on our website and to email subscribers. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: