Privacy Policy | Bounce Back Generation

Bounce Back Generation, Inc.

Effective Date: September 26, 2026 | Last Updated: September 26, 2026 | Replaces the policy dated January 7, 2025 to update California and international regulations.

1. Who We Are

Bounce Back Generation, Inc. is a California nonprofit public benefit corporation and a tax-exempt organization under Section 501(c)(3) of the Internal Revenue Code (“Bounce Back Generation,” “we,” “us,” or “our”). We provide free educational content for young people and communities, including lessons on managing emotions and the Six Building Blocks for Resilience, and we accept charitable donations to support that work.

This Privacy Policy explains what personal information we collect through our websites at https://www.bouncebackgeneration.org and bbgtv.org (together, the “Website”), how we use it, who receives it, and the choices and rights you have. It also serves as our privacy notice under the European Union General Data Protection Regulation (“GDPR”) and the United Kingdom GDPR for visitors in those regions.

For purposes of the GDPR, Bounce Back Generation, Inc. is the data controller of your personal data. You can reach us at info@bouncebackgeneration.org or by mail at 50501 W Broadway, Suite 1540, San Diego, CA 92101.

2. Our Commitments at a Glance

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We never sell, rent, or trade donor lists or donor contact information.
We do not store your full card or bank account numbers. Payments go directly to our payment processors.
Our Website is not directed to children under 13, and we take extra care with information about anyone under 18 (see Section 4).
Non-essential cookies are optional. Where the law requires it, we ask for your consent before they are placed, and you can change your choice at any time.

3. Information We Collect

a) Information you give us

Donations: your name, email address, billing address, donation amount and frequency, dedication or tribute details, and any note you choose to add. Card and bank details are entered into, and processed by, our payment processors (see Section 7). We receive only a confirmation and limited details, such as the last four digits of a card, to issue receipts.
Newsletter and updates: your name and email address.
Contact forms and emails: your name, email address, and whatever you choose to tell us.
Surveys and feedback: your responses, which you may give anonymously where the form allows.
Stories, comments, and other submissions (“User Contributions”): the content you submit and the name or username you attach to it. Anything you post in a public area can be seen by others, so please do not include information you want to keep private.

If you give us personal information about someone else (for example, in a tribute donation), please make sure you are entitled to share it with us.

b) Information collected automatically

When you visit the Website, our website host and analytics tools automatically collect technical information such as your IP address, browser and device type, operating system, referring page, pages viewed, time spent on pages, and general location derived from your IP address (city or region, not precise location). Section 6 explains the cookies and similar technologies involved.

c) Information we do not seek

We do not ask for, and ask that you not send us, sensitive information such as Social Security numbers, health or medical information, or information about racial or ethnic origin, religious beliefs, or sexual orientation. If you share such information voluntarily in a message or submission, we will use it only to respond to you and will not use it for any other purpose.

4. Children, Teens, and Young People

Much of our educational content is written for teens and young adults, so we hold ourselves to the protections below.

a) Children under 13

Our Website is not directed to children under 13, and we do not knowingly collect personal information from them, consistent with the federal Children’s Online Privacy Protection Act (COPPA). Children under 13 may watch and read our free public content, which does not require them to provide any personal information. They may not donate, subscribe, create an account, or submit stories, comments, or other information to us.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. A parent or guardian who believes we may have information about their child can contact us at info@bouncebackgeneration.org to ask what we hold, have it deleted, and stop any further collection. If we ever offer a program that collects information from children under 13, we will first obtain verifiable parental consent and will post a separate notice describing that program.

b) Teens ages 13 to 17 (California and all U.S. users)

Removal of posted content. If you are under 18 and have posted content on our Website, you may ask us to remove it by emailing info@bouncebackgeneration.org with the subject line “Minor Content Removal” and a link to or description of the content. We will remove it from public view, or make it anonymous so it can no longer be connected to you. This right does not cover content that someone else posted about you, content we are legally required to keep, or content for which you received payment or other consideration. Removal from the Website may not guarantee complete removal from the internet if others have copied or reposted it.
No marketing of age-restricted products. We do not market or advertise to minors any product or service that California law prohibits marketing to minors, and we do not allow third parties to use minors’ information for that purpose.
Story and media projects. For any youth storytelling, documentary, or podcast project that involves recording or publishing a young person’s name, image, voice, or story, we obtain written consent from a parent or legal guardian for participants under 18, in addition to the young person’s own agreement.
Data minimization. We collect only the information needed for the activity a young person has chosen, and we do not use it for profiling or targeted advertising.

c) Young people in the EU and UK

Where we rely on consent to process personal data of a person in the European Economic Area or the United Kingdom who is below the age of digital consent in their country (between 13 and 16, depending on the country; 13 in the UK), we will obtain consent from the holder of parental responsibility and will make reasonable efforts to verify it.

d) Donations

Donors must be at least 18 years old or the age of majority where they live. A parent or guardian may make a donation on behalf of a minor.

5. How We Use Your Information and Our Legal Bases

We use personal information only for the purposes below. The right-hand column states the legal basis we rely on under the GDPR for visitors in the EEA or UK.

Purpose

Examples

GDPR legal basis

Process donations and issue receipts

Charging your gift, sending tax receipts, handling recurring gifts, refunds, and payment questions

Performance of a contract (Art. 6(1)(b)); legal obligation for tax records (Art. 6(1)(c))

Keep required records

Donor and financial records required by the IRS, the California Attorney General, and auditors

Legal obligation (Art. 6(1)(c))

Send newsletters and updates

Program news, new lessons, fundraising appeals

Consent (Art. 6(1)(a)); you may withdraw at any time

Thank and communicate with donors

Thank-you messages, impact reports, occasional appeals to past donors

Legitimate interests in supporting our charitable mission (Art. 6(1)(f)); consent where required by e-privacy law

Respond to you

Answering questions, requests, and feedback

Legitimate interests (Art. 6(1)(f)); contract, where you request a service

Publish User Contributions

Posting stories or comments you choose to submit

Consent (Art. 6(1)(a))

Operate and secure the Website

Hosting, troubleshooting, fraud and spam prevention, security

Legitimate interests (Art. 6(1)(f))

Understand how the Website is used

Aggregate analytics on visits and popular content

Consent where required for analytics cookies (Art. 6(1)(a)); otherwise legitimate interests (Art. 6(1)(f))

Comply with law and protect rights

Responding to lawful requests, enforcing our Terms of Use, preventing harm

Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f))

Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms, and you may object (see Section 10). Providing personal information is voluntary, but if you choose not to provide information needed for a donation (such as a name and payment details), we will not be able to process your gift. We do not use automated decision-making, including profiling, that produces legal or similarly significant effects for you.

6. Cookies and Third-Party Trackers

Cookies are small text files placed on your device. Pixels, tags, and similar technologies work in comparable ways. We use them in these categories:

7. Who Receives Your Information

We share personal information only with the following recipients, and only as needed for the purposes in Section 5. We require our service providers to protect your information and to use it only to provide services to us.

Recipient

Purpose

Wix.com Ltd. and affiliates

Website hosting, forms, donation tools, and site analytics

wix.com/about/privacy

PayPal, Inc.

Payment processing

paypal.com/privacy

Stripe, Inc. and/or Wix Payments

Card payment processing

stripe.com/privacy

Google (email)

Sending newsletters and donor communications

Google.com

Google LLC (YouTube)

Embedded video

policies.google.com/privacy

Professional advisers

Accountants, auditors, and attorneys, under confidentiality obligations

Not applicable

We may also disclose personal information: (a) when required by law, subpoena, or court order, or in response to a lawful request by public authorities; (b) to protect the rights, safety, or property of our participants, donors, the public, or Bounce Back Generation; (c) to a successor organization if we merge with or transfer our assets to another charitable organization, in which case your information will remain subject to the commitments in this Policy; or (d) with your consent. We may publish aggregated or de-identified information that cannot reasonably be used to identify you.

Donor recognition. We will not publicly name you as a donor without your permission. You may give anonymously by selecting that option on the donation form or by telling us.

8. International Transfers

We are based in the United States, and our service providers process information in the United States and other countries. If you are in the EEA, UK, or Switzerland, your personal data will be transferred to the United States, which does not have an adequacy decision covering all recipients. We rely on appropriate safeguards for these transfers, including the European Commission’s Standard Contractual Clauses (and the UK Addendum) in our providers’ data processing terms, or a provider’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where applicable.

9. How Long We Keep Information

Information

Retention period

Donation and receipt records

7 years after the donation, to meet tax, audit, and charitable-registration requirements

Newsletter subscriptions

Until you unsubscribe; we then keep only your email address on a suppression list so we do not contact you again

Contact messages

Up to 2 years after the matter is resolved

User Contributions

As long as they are published, or until you ask us to remove them

Analytics data

Up to 26 months, in the analytics provider’s systems

Information about a child under 13 collected without parental consent

Deleted promptly upon discovery

When information is no longer needed, we delete it or de-identify it.

10. Your Privacy Rights

a) Rights for everyone

Wherever you live, you may ask us to tell you what personal information we hold about you, correct it, or delete it, and you may unsubscribe from our emails at any time using the link in each message. We will not treat you differently or deny you services because you exercised any privacy right.

b) Additional rights in the EEA, UK, and Switzerland

Under the GDPR and UK GDPR, you have the right to:

Access your personal data and receive a copy of it;
Rectify inaccurate or incomplete data;
Erase your data (the “right to be forgotten”), subject to legal retention obligations;
Restrict our processing of your data in certain circumstances;
Data portability, meaning you may receive data you provided to us in a structured, commonly used, machine-readable format, or have it sent to another organization;
Object to processing based on our legitimate interests, and to object at any time to direct marketing, which we will then stop;
Withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal; and
Lodge a complaint with the data protection supervisory authority in your country of residence or work, or where an alleged infringement occurred. In the UK, this is the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to address your concern first.

c) California residents

We honor requests to access, correct, and delete personal information as described above. Under California’s “Shine the Light” law (Civil Code Section 1798.83), California residents may request information about disclosures of personal information to third parties for their own direct marketing purposes. We do not make such disclosures. To confirm this in writing, email us with “Request for California Privacy Information” in the subject line.

d) How to make a request

Email info@bouncebackgeneration.org with “Privacy Request” in the subject line. We may need to verify your identity before acting on a request, and we will ask only for information needed to do so. An authorized agent or parent or guardian may make a request on your behalf with proof of authority. We will respond within 30 days, or within one month for requests under the GDPR. That period may be extended by up to two further months for complex requests, in which case we will tell you why. Requests are free unless they are manifestly unfounded or excessive.

11. How We Protect Information

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information. All pages of the Website, including the donation form, are served over encrypted HTTPS connections. Payments are handled by processors that maintain PCI DSS compliance, and we do not store full card numbers. Access to donor and participant information is limited to people who need it for their work with us. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a data breach affects your personal information, we will notify you and the appropriate authorities as required by law, including within 72 hours of becoming aware of it where the GDPR requires notice to a supervisory authority.

12. Links to Other Websites

Our Website may link to websites and services we do not operate, including those of our program partners. This Policy does not apply to them, and we are not responsible for their privacy practices. Please review their privacy policies before providing them with information.

13. Changes to This Policy

We may update this Policy from time to time. We will post the updated version on this page and change the “Last Updated” date above. If we make material changes, such as using personal information for a new purpose, we will give notice on the Website home page and, where we have your email address and the change affects you, by email before the change takes effect. Where the law requires your consent to a change, we will ask for it.

14. Contact Us

Questions, requests, or concerns about this Policy or our privacy practices can be sent to:

Bounce Back Generation, Inc.
info@bouncebackgeneration.org

Our Terms of Use are available at https://www.bouncebackgeneration.org/terms-of-use.