We are committed to safeguarding the privacy of individuals who entrust us with their information — particularly those sharing sensitive details as part of their journey toward resilience.
Parting Glass Foundation Inc. (the "Foundation," "we," "us," or "our") is a Missouri-based 501(c)(3) nonprofit organization dedicated to providing trauma healing and resiliency support through retreats, events, and workshops for military personnel, veterans, and their families.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website (www.partingglass.org), engage with our services, or interact with us in any way.
As a U.S.-based organization with operations in Europe, we comply with applicable U.S. laws and the EU's General Data Protection Regulation (GDPR) for any processing of personal data of individuals in the EU/EEA. For GDPR purposes, we are the data controller.
We collect information to support our mission of fortifying warriors for their journey home. The types of information we may collect include:
We collect this information directly from you via forms, applications, or communications, or indirectly from partners such as therapists or veteran organizations, or through website analytics tools.
We use your information solely to advance our charitable purposes. Specific uses include:
Under GDPR, our legal bases for processing are:
We do not use your information for automated decision-making or profiling that produces legal effects.
We treat your information with the confidentiality expected in SOF communities — shared only on a need-to-know basis. We may share information with:
We do not sell, rent, or trade your information. For international data transfers we use safeguards such as EU Standard Contractual Clauses to ensure GDPR-equivalent protection.
To operate this site and our programs, we rely on a small set of vendors who process limited personal information on our behalf. We disclose them here in keeping with GDPR Article 13(1)(e) and equivalent U.S. state-law requirements. Each is bound by a written data-processing agreement and processes data only for the purpose listed below.
| Processor | Data processed | Purpose | Location |
|---|---|---|---|
| Cloudflare, Inc. | All site traffic; encrypted storage of donor, subscriber, and program-operational records; gated staff routes. | Hosting, content delivery, access control, durable storage (Workers, R2, D1, Access). | United States |
| Amazon Web Services, Inc. | Travel-itinerary documents (passenger name, confirmation code, flight detail) submitted by program participants. | Structured-data extraction via Amazon Bedrock under a signed HIPAA Business Associate Agreement. Anthropic, PBC is AWS's downstream sub-processor for the underlying Claude model; Anthropic does not receive data directly from us. | United States |
| Resend (Resend, Inc.) | Outbound transactional email (form acknowledgments, broadcasts) and inbound forwarded itinerary attachments. | Email delivery and inbound-email webhook routing. | United States |
| monday.com Ltd. | Subscriber email + segment label; donor classification (individual / organization). | Constituent cultivation pipeline and donor segmentation. | United States operations (parent entity in Israel) |
| Zeffy (Simplyk Inc.) | Donor name, contact, donation amount and metadata. | Donation acceptance and donor record ingestion. | Canada |
| Intuit Inc. | Donor and vendor names, donation and disbursement amounts, journal entries. | Bookkeeping and IRS-required nonprofit accounting in QuickBooks Online. | United States |
| Google LLC (Workspace) | Staff email and calendar only. Not used to process program-participant records. | Internal staff communications. | United States |
| Microsoft Corporation (Azure) | Short audio segments transcoded during live Ukrainian-to-English interpretation when staff use the operational translator. Not stored. | Real-time speech translation via Azure AI Speech. | United States / Germany West Central region |
We implement robust security measures to protect your data:
Despite these measures, no system is impenetrable. In the event of a breach, we will notify affected individuals and relevant authorities as required by law — within 72 hours under GDPR where applicable.
You have rights over your data. These rights empower you to control your own narrative:
To exercise any of these rights, contact us using the details below. We respond within one month. There is no fee unless requests are manifestly unfounded or excessive. Providing personal data is voluntary but may be necessary to participate in certain programs.
Our website uses cookies for functionality and analytics:
We do not use advertising or tracking cookies for commercial purposes. You can manage or disable cookies at any time through your browser settings. Note that disabling certain cookies may affect site functionality.
Pages on this site may include embedded content such as videos, images, or third-party widgets. Embedded content from other websites behaves as if you had visited those websites directly — they may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that content.
We recommend reviewing the privacy policies of any third-party services whose content appears on our site.
Our programs and services are intended for adults. We do not knowingly collect personal data from minors under the age of 13 without verifiable parental consent. If we become aware that we have inadvertently collected such data, we will delete it promptly. If you believe we may have collected information from a minor, please contact us immediately.
We retain personal data only as long as necessary for the purposes outlined in this policy:
We delete or anonymize data once retention periods expire.
We review this policy annually or whenever our practices materially change. Continued use of our website after changes are posted constitutes acceptance of the updated policy. For significant changes, we will provide notice via email or a prominent notice on our website.
The date of the most recent review appears in the sidebar. Prior versions are available upon request.
For questions about this policy, to exercise your data rights, or to raise a concern:
Parting Glass Foundation Inc.
EU residents who are unsatisfied with our response may lodge a complaint with their national data protection supervisory authority or the lead authority in their jurisdiction.