Surprise Firefighters Charities

Surprise Firefighters

Charities · Est. 2005

Donate
Surprise Fire-Medical crews.

Serving since 2005

Privacy Policy

Effective date: November 1, 2026

This Privacy Policy explains how Surprise Firefighter Charities (“we,” “us,” or “our”) collects, uses, and shares information when you visit surprisefc.org, register for an event, or send us a message. We are a local charity in Surprise, Arizona, USA, run by the men and women of Surprise Fire-Medical. We wrote this in plain English so you can see exactly what happens with your information.

< -->

Who we are

Surprise Firefighter Charities
14250 W. Statler Plaza, Suite 101
Surprise, AZ 85374
Email: [email protected]
Website: https://surprisefc.org

< -->

What we collect

< -->

Event registration

When you register for an event on this site, we ask for:

  • First name and last name
  • Email address
  • Phone number (optional unless a specific event requires it)
  • Zip code (required when an event is limited to our service-area zip codes)
  • Party size (how many people you are registering)
  • Any extra answers that event needs — for example, a toy drive may ask for a mailing address and child info such as gender and age for gift planning

We also create a ticket code for you and store a one-way hash of your IP address (not the raw IP) so we can limit repeated submissions. Custom answers are stored with your registration.

Registration records are saved in our WordPress database in the event registrations table (ssb_event_registrations). Event settings and form definitions are stored as post meta on each event.

< -->

Contact messages

If you use the contact form, we collect your name, email address, and message. A hidden “honeypot” field is used only to catch spam bots. We do not store contact messages in the database; the message is emailed to our contact address. We may briefly remember your IP address in a temporary server record (about one minute) to prevent rapid repeat submissions.

< -->

Technical and log data

Like most websites, our hosting and security layers automatically process technical data such as IP address, browser type, date/time, and the pages requested. That happens so the site can load, stay secure, and be diagnosed if something breaks. We do not run a separate advertising analytics product on this site.

< -->

Why we collect it

  • Run events and volunteer sign-ups — confirm your place, check capacity, apply zip-code rules when an event is local-only, and issue your ticket.
  • Communicate with you — email your ticket and details, and reply when you contact us.
  • Operate and protect the website — prevent spam and abuse, keep the site working, and secure administrator logins.
  • Plan community programs — for some drives (such as toys), limited child details help us prepare age- and gender-appropriate gifts.

We use this information because it is necessary to provide the registration or contact service you asked for, to run our charitable programs, and to keep the site secure and reliable.

< -->

Who gets your information

  • Our charity team — Staff and volunteers who organize the event receive registration details so they can run check-in and communicate about that event. New registrations are also emailed to our configured organization notify address.
  • You — After you register, we email your ticket (including a PDF when available) to the address you provided.
  • Service providers — Companies that help us host and protect the site (for example our web host and Cloudflare’s content delivery / security network) process technical data as part of delivering the website. Email is sent through our server’s mail system.
  • Donate via Venmo — If you choose to donate, you may leave our site and use Venmo. Venmo’s own privacy policy applies to anything you do there. We do not process card payments on this website.

We do not sell your personal information. We do not share it for advertising.

< -->

How long we keep it

Registration records are kept so we can administer past and upcoming events, answer questions, and meet ordinary nonprofit record-keeping needs. Contact form messages exist in email, not as a separate site database of inquiries. Technical logs are kept only as long as our hosting and security tools normally retain them. If you ask us to delete your registration or contact details, we will remove or de-identify what we can from our systems, except where we must keep something for security, fraud prevention, or legal reasons.

< -->

How we protect it

The site is served over HTTPS. Access to WordPress admin tools is limited to authorized users and protected with login-rate limiting. Registration stores a hashed IP rather than a raw address. No security practice is perfect, but we take reasonable steps appropriate for a small charity website.

< -->

Children’s information

This website is for adults who register themselves or their household for community events. Some events (such as a toy drive) ask the registering adult for limited information about children — for example gender and age — only so we can prepare appropriate gifts or services. We do not knowingly collect information directly from children under 13 for online accounts, and we do not use children’s details for marketing. If you believe a child has provided information directly to us in a way that should be removed, contact us and we will help.

< -->

Your choices and rights

You can ask us to:

  • Confirm whether we have registration or contact information about you
  • Correct inaccurate details
  • Delete a registration or related personal data we hold, where practical

Email [email protected] with your request and enough detail for us to find your record (such as the event name and the email you used). We may need to verify that the request comes from you before we change or delete data.

< -->

Cookies and similar storage

We use a small amount of browser storage so the site works the way you expect:

  • Theme preference — Your light/dark choice is saved in your browser’s localStorage under the key ssb-theme so the site remembers it on your next visit. This stays on your device.
  • WordPress login cookies — If you are a site administrator and log in, WordPress sets standard authentication cookies.
  • Login protection — The Limit Login Attempts Reloaded plugin may set cookies such as llar_login_flow, llar_mfa_state, or related admin-notice cookies around the login screen to slow down password guessing. Visitors who never log in typically will not see these.
  • Cloudflare — Our CDN/security provider may set cookies needed for security and performance when you visit the site.

We do not use advertising cookies or third-party marketing trackers on this site.

< -->

Third-party services

  • Cloudflare — Helps deliver and protect the website.
  • Venmo — Optional donation path; not an on-site payment form.
  • Fonts — Typefaces are hosted with the site (not loaded from Google Fonts).
  • Social networks — Links to Instagram or Facebook, when enabled, take you to those services; their policies apply there.

We do not embed a live map provider, payment processor (Stripe, PayPal, Square, etc.), or Google Analytics on this site today. If that changes, we will update this policy.

< -->

Changes to this policy

We may update this Privacy Policy when our practices or the site change. The effective date at the top will be revised when we do. Continued use of the site after an update means you are aware of the revised policy.

< -->

Contact

Questions about privacy, or a request to access or delete your data:

Surprise Firefighter Charities
[email protected]
14250 W. Statler Plaza, Suite 101
Surprise, AZ 85374