Effective date and last updated: October 10, 2026
1. Who we are and the scope of this policy
This Privacy Policy explains how Perpetual Impact ("we", "us" or "our"), the operator of perpetualimpact.org, handles personal information in connection with this website and enquiries about our real-estate-backed housing, food assistance, donation and investment programs. For questions about the identity of the responsible legal entity or the handling of your information, contact privacy@perpetualimpact.org.
This policy covers the public information website and communications sent to us. The website currently provides program information, illustrative financial calculations and links to documents; it does not provide a visitor account, an online donation or investment checkout, or a SNAP application submission service. Descriptions of proposed services do not mean that those services are currently available.
If we introduce applications, payments, accounts or other services, we will provide the relevant privacy information before collecting information for those services. Separate notices may apply to housing operators, food banks, government agencies and other independent organizations. Read this policy alongside our Terms and Conditions.
2. Information we may receive
- Information you provide: your name, email address, contact details and the contents of emails, enquiries, attachments or other communications you choose to send us.
- Technical information: an IP address, requested page or file, request time, browser and device information, referring page, and security or diagnostic information may be received by the services delivering and protecting the website.
- Error and diagnostic information: technical failures may produce information about an error, the page affected and the browser environment, to help identify reliability or security issues.
- Information from others: if a representative or partner contacts us on your behalf, we may receive the information needed to respond. They should have an appropriate basis to share it.
The investment calculator performs its calculation in your browser. It does not submit the amount entered to a Perpetual Impact application server or save it as a visitor profile. Ordinary requests for the calculator page may still create technical logs.
Please do not send Social Security numbers, government identifiers, payment-card details, bank information, passwords, immigration records, medical information or detailed benefit applications to the privacy email address. We do not need these to answer ordinary website or privacy enquiries. If sensitive information becomes necessary for a future service, we will explain the purpose and appropriate submission method separately.
3. How and why information is used
We use information, as appropriate to the interaction, to:
- Deliver the website and documents, respond to enquiries and communicate about matters you raise.
- Investigate errors, maintain availability, prevent misuse and protect the website and people who use it.
- Keep necessary communication records and handle complaints, privacy requests and disputes.
- Comply with applicable legal obligations and respond to valid legal requests.
- Establish, exercise or defend legal claims where necessary.
We do not use an illustrative calculator result to assess your financial suitability, eligibility for housing or eligibility for government benefits. The current website does not make automated decisions with legal or similarly significant effects about visitors.
Sending a privacy enquiry does not constitute consent to receive fundraising or investment marketing. If optional newsletters or marketing are introduced, the choice and withdrawal arrangements will be explained at collection.
4. Legal bases where data protection law requires them
Where the UK GDPR, EU GDPR or a similar framework applies, the lawful basis depends on the processing: our legitimate interests in responding to enquiries and operating a secure, reliable website; steps requested by you before entering a contract, or performance of a contract where relevant; compliance with a legal obligation; or consent where required.
When relying on legitimate interests, we consider the necessity of the processing and its impact on your rights. You may object as described below. Where we rely on consent, you may withdraw it without affecting processing that was lawful before withdrawal. We do not treat simply browsing this policy as consent to processing that requires a separate choice.
Special-category information or other sensitive information, if ever required, needs its own appropriate legal basis and safeguards. This general website policy is not a request or authorization to collect such information.
6. Hosting, external fonts, documents and email
The website is delivered using Lovable's website infrastructure and its delivery providers. Website hosting, content delivery, security and diagnostic services may process technical information needed to provide their services.
Our pages request DM Sans and Manrope fonts from Google Fonts. These requests connect your browser to Google services and can disclose your IP address, browser request information and the referring website, subject to browser settings. Google processes information under its own policies; see Google's Privacy Policy.
Investor PDFs are served from externally hosted asset links. Opening a document sends a request to its hosting provider, which may receive technical request information. A downloaded file is stored on your device under your control.
Clicking an email link opens your email service. Messages you send are also processed by the email providers involved in delivery. Their privacy and security practices apply to their services. We cannot guarantee the confidentiality of ordinary email in transit.
8. International processing and transfers
The project concerns properties and programs in the United States, and internet delivery, fonts, email and support providers may process information in other countries. Privacy laws and government access rules may differ from those in your location.
Where an international transfer is subject to UK, EU or other transfer restrictions, an appropriate permitted mechanism is required, such as an adequacy decision or approved contractual safeguards with any necessary supplementary measures. Contact privacy@perpetualimpact.org to ask about safeguards relevant to information we control. This policy does not itself establish that a particular transfer mechanism applies to every independent external provider.
9. How long information is kept
We retain personal information for no longer than reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations. Retention depends on the enquiry, the need to maintain a communication record, security requirements, applicable limitation periods and any obligation to preserve records.
Technical logs follow the relevant hosting or service provider's retention arrangements. Enquiry and privacy-request records may need to be kept to show how a matter was handled. Records may be retained longer where a legal hold, ongoing dispute or statutory requirement applies.
When information is no longer needed, it should be deleted or appropriately anonymized. Backup copies may persist until their normal replacement cycle and should remain protected. You can request information about retention for your particular interaction; we do not promise a universal deletion deadline that could conflict with legal requirements.
10. Security and incident handling
We seek to use safeguards proportionate to the nature of the information and the risks, including protected website delivery, appropriate access controls and limiting unnecessary collection. No website, network or email system can be guaranteed completely secure.
If you suspect a privacy or security incident involving this website, contact privacy@perpetualimpact.org with a description, without including passwords or sensitive records. Where a personal-data breach requires notification under applicable law, the relevant regulator and affected individuals will be notified as required.
11. Your privacy rights and choices
Depending on your location and the applicable law, you may have rights to:
- Know whether personal information is processed and request access to it or a copy.
- Correct inaccurate or incomplete information.
- Request deletion, subject to lawful retention exceptions.
- Restrict processing or object to certain processing, including processing based on legitimate interests.
- Receive eligible information in a portable format.
- Withdraw consent where processing relies on consent.
- Opt out of a legally defined sale, sharing for cross-context behavioral advertising, or targeted advertising if such processing occurs.
- Limit certain uses of sensitive information where the law provides that right.
- Appeal a refusal where applicable law provides an appeal mechanism, and complain to an appropriate regulator.
These rights are not identical in every jurisdiction and are subject to conditions and exceptions. We will not unlawfully discriminate against you for exercising an applicable privacy right. The current website does not implement sale or targeted advertising; if that changes, applicable opt-out controls and legally required recognition of browser preference signals will be provided.
12. How to make a request or complaint
Email privacy@perpetualimpact.org, describe your request and identify the interaction or information concerned. We may ask for information reasonably necessary to verify your identity and authority, but please do not send identity documents unless we explain why they are needed and how to provide them safely. Authorized representatives may make requests subject to verification of their authority and any applicable requirements.
We will respond within the timeframe required by the law applicable to your request, explain any permitted extension, and give reasons for a refusal where required. Requests are generally handled without charge; a fee or refusal is only appropriate where the applicable law permits it. We cannot delete information held solely by an independent third party on that party's behalf.
If you disagree with our response, reply asking for a review or appeal. You may also complain to the data protection authority or relevant regulator in your jurisdiction. For example, UK residents may contact the Information Commissioner's Office at ico.org.uk; individuals in the EEA may contact their local supervisory authority. Contacting us first is encouraged but does not remove a statutory right to complain directly.
13. Children and vulnerable individuals
The public website is intended for adults researching the program. It does not offer a children's account or knowingly request personal information from children under 13, or below a higher applicable digital-consent age. A parent or guardian who believes a child has sent information should contact us so we can assess and address it appropriately.
References to families and children supported by the mission do not authorize collecting or publishing identifiable beneficiary information. Any future service involving children, housing applicants or people seeking benefits will require appropriate notices, safeguards and lawful authority. Impact reporting should use aggregated or de-identified information where practical and avoid unnecessary disclosure of vulnerable individuals' identities.
14. Changes and contact
We may update this policy when website functionality, processing practices or legal requirements change. The updated version will show a revised date. Where a material change requires direct notice or renewed consent, we will provide it as required; publishing a new policy does not replace consent where consent is legally necessary.
For privacy enquiries, rights requests, complaints or questions about this policy, contact Perpetual Impact at privacy@perpetualimpact.org.