Skip to main content

Privacy Policy

How we collect, use, and protect your information

Last updated: February 2026

The Captain John “Bag” Hefti Memorial Scholarship Foundation, doing business as Bag's Buddies (“we,” “us,” or “our”), is a 501(c)(3) nonprofit organization (EIN: 87-2984176) based in Virginia Beach, Virginia. We are committed to protecting the privacy of our donors, customers, scholarship applicants, and website visitors.

This Privacy Policy explains what personal information we collect, how we use it, and the choices you have regarding your data when you visit bagsbuddies.org or interact with our services.

Information We Collect

Information You Provide Directly

When you make a purchase, donate, apply for a scholarship, or contact us, we may collect:

  • Contact information — name, email address, phone number, and mailing address
  • Shipping information — delivery address for merchandise orders
  • Payment information — processed securely through Stripe (see “Third-Party Services” below); we never store your credit card number on our servers
  • Scholarship application data — academic records, athletic achievements, financial information, essays, and parent/guardian contact details
  • Communications — messages you send through our contact form or email
  • Newsletter subscription — your email address when you opt in to our mailing list

Information Collected Automatically

  • Browser and device data — browser type, operating system, screen resolution, and language preferences
  • Usage data — pages visited, time spent on pages, and referring URLs
  • IP address — used for security, fraud prevention, and approximate geographic location

Cookies and Local Storage

We use browser localStorage to persist your shopping cart between visits. Cart data is stored entirely in your browser and is not transmitted to our servers until you proceed to checkout. We use essential cookies to maintain your session and preferences. We do not use third-party advertising or tracking cookies.

How We Use Your Information

We use the information we collect to:

  • Fulfill orders — process merchandise purchases, arrange shipping, and send order confirmations
  • Process donations — issue tax-deductible donation receipts and acknowledge your generosity
  • Evaluate scholarship applications — review and select scholarship recipients through our Scholarship Committee
  • Communicate with you — respond to inquiries, provide updates about our mission, and send newsletters (with your consent)
  • Improve our website — analyze usage patterns to enhance the user experience
  • Prevent fraud — detect and prevent fraudulent transactions and abuse
  • Comply with legal obligations — meet tax reporting, nonprofit compliance, and other legal requirements

Third-Party Services

We use the following third-party services that may process your data:

  • Stripe — handles all payment processing. Stripe is PCI DSS Level 1 compliant, the highest level of certification in the payments industry. Your card details are transmitted directly to Stripe and never touch our servers. View Stripe's Privacy Policy.
  • Amazon Web Services (AWS) SES — used to send transactional emails such as order confirmations, donation receipts, and application acknowledgments.
  • AI-assisted content tools — we may use artificial intelligence services to help generate product descriptions, lifestyle imagery, and editorial content. These tools do not receive or process customer personal data.

Data Retention

We retain your personal information as follows:

  • Order and donation records — retained for seven years to comply with IRS nonprofit reporting requirements
  • Scholarship applications — retained for three years after the application cycle closes
  • Contact form messages — retained for two years or until the inquiry is resolved
  • Newsletter subscriptions — retained until you unsubscribe
  • Cart data in localStorage — remains in your browser until you clear it or it expires

Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

  • With service providers listed above, solely to perform services on our behalf
  • When required by law, regulation, or legal process
  • To protect the rights, safety, or property of Bag's Buddies, our users, or the public

Your Rights and Choices

You have the right to:

  • Access your data — request a copy of the personal information we hold about you
  • Correct your data — ask us to update inaccurate or incomplete information
  • Delete your data — request deletion of your personal information, subject to legal retention requirements
  • Unsubscribe — opt out of marketing emails at any time using the unsubscribe link in every email
  • Clear local storage — remove cart data by clearing your browser's local storage

To exercise any of these rights, email us at info@bagsbuddies.org with the subject line “Privacy Request.” We will respond within 30 days.

Children's Privacy

Our scholarship program serves high school students. When applicants are under 18, we require parent or guardian consent as part of the application process. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

Security

We take reasonable measures to protect your personal information, including encrypted data transmission (HTTPS), secure payment processing through Stripe, and access controls on our systems. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

501(c)(3) Nonprofit Disclosure

Bag's Buddies is a registered 501(c)(3) nonprofit organization (EIN: 87-2984176). Donations are tax-deductible to the extent allowed by law. Donor information is maintained in accordance with IRS regulations for tax-exempt organizations.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us: