Privacy Policy

Summary of Key Points

We collect information you provide directly — such as when you apply for a scholarship, purchase a ticket, make a donation, or contact us — and use it to operate our services, communicate with you, and comply with the law. We share information only with the service providers that help us run this site (payment processing, email, hosting, and email marketing) and do not sell your information. We use privacy-friendly, cookieless website analytics and do not use advertising cookies or cross-site tracking. Details on each of these points, your rights, and how to reach us are below.

1. What Information We Collect

Information You Provide

The information we collect depends on how you interact with us, and may include:

• Name, phone number, email address, mailing address, and contact preferences
• Account credentials (username/email and password) for applicant, board, admin, and Member accounts
• Scholarship application content: academic information (e.g., GPA, class rank, school), essays, and other responses to application form questions
• Payment information processed for ticket purchases and donations (see "Payment Data" below)
• If you set up a recurring donation (Foundation Membership), your selected giving cadence and amount, subscription status, and references to one or more saved payment methods on file with Square, which you can view and manage from your account
• Messages you send us through the Contact page or a refund request
• If you attend a Gio Cup event, the date and time your ticket is checked in at the gate

All personal information you provide must be true, complete, and accurate. Please notify us of any changes.

Payment Data

Ticket purchases and donations are processed by Square. Your card details are encrypted and tokenized by Square at the time of entry and never pass through or get stored on the Foundation's servers. Square's privacy notice is available at squareup.com/us/en/legal/general/privacy.

Information Automatically Collected

Our hosting and infrastructure providers automatically log standard technical information — such as IP address, browser type, and request timestamps — for security and operational purposes. We also use Vercel Analytics, a cookieless website analytics tool, to understand aggregate traffic to this site (for example, which pages are visited). It does not use cookies or track you across other websites, and does not build an individual profile of you. We do not use advertising trackers or third-party analytics cookies on this site.

Gate Check-In

At Gio Cup events, Foundation staff use a separate check-in application to scan your ticket's QR code, or to look you up by name or email, and record when each ticket is checked in. This check-in data is stored in the same database as your order and is used only for event entry and attendance record-keeping.

2. How We Use Your Information

We use the information we collect to:

• Create and manage applicant, board, admin, and Member accounts, and keep them secure
• Process and evaluate scholarship applications through our review workflow
• Process ticket purchases and donations, and deliver tickets and receipts
• Process recurring donations on your chosen schedule, send related reminders, and manage pause, cancellation, and reactivation requests
• Respond to inquiries submitted through the Contact page and review refund requests
• Send transactional emails (application confirmations, ticket confirmations, donation receipts)
• Send marketing and organizational updates via email, where described below
• Maintain the security of our services and prevent fraud
• Comply with our legal obligations

3. When and With Whom We Share Information

We share information with the following service providers, each of which processes it only on our behalf and only as needed to provide their service:

• Square— payment processing for ticket purchases, one-time donations, and recurring donations, including storage of your saved payment method on file for recurring charges
• Supabase— database hosting, authentication, and file storage; access is restricted to Foundation admins and board members involved in scholarship evaluation
• Resend— transactional email delivery (confirmations, receipts, notifications)
• MailerLite— email marketing, described further below
• Vercel— website hosting infrastructure and cookieless website analytics
• WooCommerce— the Foundation's prior giving platform. If you are moving a recurring donation over from that platform, we contact WooCommerce to cancel your prior subscription as part of completing the switch

We do not sell your personal information. We may also disclose information if required to comply with the law, or in connection with a merger, sale of assets, or acquisition involving the Foundation.

If you were a recurring donor on the Foundation's prior giving platform (WooCommerce), Foundation staff enter your basic giving information (such as your email address, giving amount, and cadence) into this platform to set up your migration — before you have created an account or interacted with this website yourself. We may then email you a one-time invitation link so you can review your giving details, add a payment method, and continue your support through this platform. That link signs you in directly, without a password, and expires after a period of time for security, after which we'll send you a fresh one if needed.

Email Marketing (MailerLite)

When you submit a scholarship application, purchase a ticket, or make a donation, your name and email address are added to MailerLite, our email marketing platform, so we can send you organizational updates and communications from the Foundation. You may unsubscribe at any time using the unsubscribe link included in any marketing email you receive from us.

4. Cookies

This site uses a cookie set by our authentication provider (Supabase) to keep you signed in to your account. Our website analytics (Vercel Analytics) is cookieless and does not set any cookies. Our payment processor, Square, may set its own cookies or use similar technology during checkout for fraud prevention, as described in Square's privacy notice. We do not use advertising cookies or tracking pixels. Most browsers accept cookies by default; you can configure your browser to remove or reject cookies, though doing so may prevent you from staying signed in or completing a payment.

5. How Long We Keep Your Information

We keep your personal information for as long as necessary to fulfill the purposes described in this Notice, unless a longer retention period is required by law (for example, tax or accounting requirements). When we no longer have a legitimate need to retain information, we securely delete or anonymize it.

6. How We Keep Your Information Safe

We use reasonable technical and organizational measures to protect your personal information, including row-level security on our database and encrypted payment processing through Square. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

You may review, update, or request deletion of your personal information at any time by emailing info@gvscholarship.org. If you have an account (applicant, board, or admin), you can review and update much of your information directly by signing in. If you are a Member with a recurring donation, you can manage it directly — including pausing, changing your amount, updating your payment method, or canceling — from your account. You may unsubscribe from marketing email at any time using the unsubscribe link in those emails; this does not affect transactional emails related to an application, order, or donation you've made.

If you are located in the EEA, UK, or Switzerland and believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority.

8. Do-Not-Track Signals

Some browsers offer a Do-Not-Track ("DNT") setting. We do not use advertising trackers or cross-site tracking on this site, and our website analytics is cookieless and does not identify individual visitors, so we do not currently respond to DNT signals separately.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

To exercise your CCPA rights — including the right to know what we collect or to request deletion — please email info@gvscholarship.org. We will need to verify your identity before fulfilling a request, which may require you to confirm information we already have on file. We will not discriminate against you for exercising these rights. If you use an authorized agent to submit a request, we may require proof that the agent is validly authorized to act on your behalf.

10. Changes to This Notice

We may update this Notice from time to time. The "Last updated" date above reflects the most recent revision, and the current version is always posted at this page. Material changes will be reflected here as soon as they take effect.

11. Contact Us

If you have questions or comments about this Notice, please contact us at info@gvscholarship.org, or by post to:

Giovanni Vitrano Foundation
4106 Four Oaks Blvd
Tallahassee, FL 32311
United States