Data Retention & Security Statement
Placeholder for board review. Final publication requires legal counsel review. Contact privacy@bridgetobold.org · info@bridgetobold.org
Retention principle
Bridge to Bold should retain personal information only as long as needed for the stated purpose, donor stewardship, program administration, legal compliance, audit, tax, charitable solicitation, dispute resolution, or governance obligations.
Security safeguards
Safeguards should include vendor review, access controls, strong passwords, multi-factor authentication where available, encryption where appropriate, secure payment processing, backups, staff training, privacy incident procedures, and limited access to sensitive records.
Incident response
If Bridge to Bold becomes aware of unauthorized access to personal information, it should investigate promptly and provide notices required by applicable law, contractual obligations, or Board policy.