Privacy Notice

This Privacy Notice explains what personal information we collect from people who visit our websites or attend our events, how we use the information, and under what circumstances personal information may be shared.

We collect data to help create a better online experience when you use our website. We do not sell any data we collect, but instead use it to continually improve our website so it remains a helpful resource for people affected by lung cancer.

When we ask for personal information like your name, email, phone number, and relationship to lung cancer, we use it to make sure we only contact you with relevant information you care about.

The sections below provide details about the data we collect and your privacy rights.

1. About this Privacy Notice

In this Privacy Notice, LUNGevity Foundation (“LUNGevity,” “we,” “us,” or “our”) describes the personal data that we collect from or about you through our patient advocacy services when we are acting in our capacity as a data controller, including your online interactions with us at (our “Site”), on any other site that we manage on which we post this Privacy Notice, and offline, such as when you attend an event that we sponsor or host, including conferences and charitable events. Please note that a different privacy notice may apply to certain of our programs; your participation in those programs will be governed by that privacy notice, not this one.

LUNGevity is based in the United States but welcomes interest from persons outside of the United States. Depending on the region in which you are located, you may be entitled to exercise rights regarding your personal data, which are set forth below.

If you have any questions regarding this Privacy Notice, please contact us at [email protected].

2. The Scope of Personal Data We Collect About You

We predominantly collect personal data (a) directly from you; (b) from other persons; and (c) automatically as you use our Site.

Information You Provide Directly to Us

We collect information, including personal data, about you when you:

  • Opt in to communications: We may collect your email address and/or phone number if you sign up for our newsletter, events, or otherwise request to receive information from us, whether by email, phone, or text. Please note that where permitted by applicable law, we may send you such communications if you have previously interacted with us (e.g., if you make a donation, we may send you information about us even if you have not specifically signed up to receive emails).
  • Make a donation: if you make a donation (whether online or offline), we collect your name, payment information, postal/billing address, and email address.
  • Attend a conference/participate in an event that we host or sponsor: We collect your name, email address, physical mailing address, and other information that you choose to provide to us.
  • Request support: If you request support from us, whether for yourself or on behalf of someone else (e.g., whether in your capacity as a family member, caregiver, friend, or otherwise, collectively an “interested party”), we obtain your contact information as well as other information that you choose to provide to us. Often, the request for support comes from an interested party and not the person needing support. In that case, we obtain the interested party’s contact information as well as information about the person needing support.

Information We Collect from Other Persons

We may obtain information about you from other persons, such as the interested persons referenced above. The scope of information we collect about you depends on the particular instance.

Information We Collect Automatically

We automatically collect information from you through cookies and other trackers when you use our website. This information includes your IP address, operating system and browser used to access our website, internet service provider, external website that directed you to our website, length of time you are on our website, and the pages you viewed on our website. We do not necessarily associate this information with other information that we maintain about you (for example, if you make a donation on our website, we might log the time and date of your donation, but we do not associate your particular internet service provider along with information about your donation).

3. How We Share Your Personal Data

We disclose your personal data to service providers and other parties. LUNGevity does not sell or rent the personal data collected from online registrations, donations, or other sources to other entities for their own marketing purposes.

Service Providers

We share personal data with our service providers to assist us in providing our services to you. As an example, we use service providers to assist us in maintaining our website; we also work with external event coordinators, mailing companies, and other vendors that assist us in hosting/creating/planning events as well as in communicating with you.

Legal Obligations

We may share any personal data that is required by law or regulation, or court or administrative order having force of law, or where required by any of LUNGevity’s regulators.

To Protect Rights and Interests

We share personal data with law enforcement, advisors, and other persons as we deem appropriate when we believe, in our sole discretion, that it is necessary to do so to protect our rights and interests and the rights and interests of other persons.

Nonprofit Sharing Due to Partnering/Combining Forces

If we partner or combine forces with another not-for-profit, we may share your personal data with the other entity for the purpose of continuing to provide our Services to you.

4. Storage of Personal Data

We are a US-based charity. Accordingly, your personal information is stored in the United States.

5. Cookies

LUNGevity uses cookies and other trackers on our Site. Cookies are small text files that are placed on your computer or mobile device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide web services and functionalities for users. For example, they enable us to improve your experience on our Site and enable the website to remember your actions and preferences over time.

Some cookies are required for certain parts of the Site’s functionality. Turning optional cookies on should allow for a smoother and more tailored browsing experience.

Types of Cookies

Cookies can be categorized, according to how long they are stored, as either "persistent" cookies or "session" cookies. Our website uses both persistent and session cookies.

A persistent cookie consists of a text file sent by a web server to a web browser that allows us to collect and analyze (on an anonymous basis) traffic and use of the Site, monitor the system, and improve operating performance, for example, to store your preferences to enhance your subsequent visits. Persistent cookies remain stored by the browser after you close the browser; these cookies remain until the set expiration date unless you affirmatively delete the cookie.

A session cookie is used to manage registration/login and provide access to reserved features. Session cookies are only stored while the browser is open.

Purpose of Cookies

We use the following types of cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of the website.
  • Analytical and performance cookies. These allow us to count the number of visitors and to see how visitors move around the website when they are using it. This helps us to improve the way the Site works, for example, by ensuring that users are easily finding what they are looking for.
  • Functionality cookies. These allow us to recognize you when you return to our Site. This enables us to personalize our content for you, remember your preferences (for example, your choice of language or region), and help you share content to social media.
  • Advertising cookies. These are used to provide people with relevant ads and marketing campaigns based on the sites they visit.

Table of Cookies Used

We may use a number of technologies offered by different providers to support website analytics and user tracking, including technologies offered by the providers below:

Name of cookie and duration

Who places the cookie

How to control them

Necessary Cookies: Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website anonymously.

  See "Managing cookie usage" below.

7 days

Amazon Web Services

1 year

CookieYes (the service that implements your cookie preferences)

1 hour

Cloudflare (a service that increases security and performance of websites

10 minutes

Laravel (a website PHP framework)

1 year

Stripe (a payment processor for donations)

1 hour


1 year

PayPal (to allow donations via Paypal)

1 year 1 month 4 days


1 year 1 month 4 days




Functionality Cookies: Functionality cookies help to perform certain tasks like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.   See "Managing cookie usage" below.

9 hours




3 days




1 day

Invision Power Service (the software platform for our Lung Cancer Support Community)

Performance Cookies: Performance cookies are used to understand and analyze the key performance indexes of the website, which helps us deliver a better user experience.   See "Managing cookie usage" below.

2 days

Poptin (the service that powers our pop-up notices)

1 year


1 hour


7 days


1 hour

This cookie is necessary for the PayPal login function on the website.

Analytical cookies: Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics: the number of visitors, bounce rate, traffic source, etc.   See "Managing cookie usage" below.

48 months

Google Analytics (Alphabet Inc.)

1 day

Google Analytics (Alphabet Inc.)

10 years

Fundraise Up (our donation platform)


Fundraise Up

Advertising: Advertising cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.   See "Managing cookie usage" below.

3 months

Meta Platforms, Inc.

3 months

Google (Alphabet Inc.)

Other: Other uncategorized cookies are those that are being analyzed and have not yet been classified into a category.    

Managing Cookie Usage

Cookie consent

You can adjust or withdraw your consent regarding the use of the above trackers at any time.

Browser settings

Most browsers allow you to alter (either enable or disable) cookies/trackers. You can reject all cookies except strictly necessary cookies. You can delete the cookies that are already on your computer, and you can set your browser to prevent them from being placed. If you disable or reject cookies, please note that we may not be able to provide all functionality of our Site to you.

Visit the "help" section of your browser for how to manage your cookie settings, or follow the links below:

For further general information on cookies and more detailed advice on how to disable and enable them, please go to

Opting out of ad networks/advertising tracking

We use service providers such as Google's AdSense and AdWords to help us identify relevant persons and to provide advertisements that are tailored to you based on interests you have expressed on our Site or elsewhere (“Interest-Based Ads”). Any advertisements served by Google, Inc., and affiliated companies may be controlled by cookies. These cookies allow Google to display ads based on your visits to this Site. Any tracking done by Google through cookies and other mechanisms is subject to Google's own privacy policies. You may decide to disable Google cookies by going to You can visit Google’s My Ad Center to manage the Google ads you see and opt out of Interest-Based Ads delivered by Google.

We also may disclose certain information (such as your email address) to Facebook Custom Audiences (for more information on Facebook Custom Audiences, go to so that we can better target ads and content to you and others with similar interests on non-affiliated websites or media (“Custom Audiences”). We may also work with other ad networks and marketing platforms that enable us and other participants to target ads to Custom Audiences submitted by us and others. You may also control how Facebook and other entities display certain ads to you, as explained further in their respective privacy policies, or by using the opt-outs described in this paragraph.

You have the ability to opt out of many ad networks. For example, you may go to the Digital Advertising Alliance (“DAA”) Consumer Choice Page for information about opting out of interest-based advertising and their choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (“NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and their choices regarding having information used by NAI members. You may need to separately visit the Google and Facebook Custom Audiences to opt out of the trackers used by those products.

Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page will opt you out from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our website or on other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on the DAA or NAI websites, your opt-out may not be effective. Additional information is available on the DAA’s website at or the NAI’s website at

6. Additional Information for EEA/UK Data Subjects

Purposes for Processing Personal Data

Our legal basis for collecting and using your personal data depends on the context in which we have collected your data; we process your personal data only if we have a lawful basis to do so. We process your data relying on the following lawful bases:

  • Performance of a contract: When it is necessary for LUNGevity to process your Personal Data to:
    • Comply with legal obligations under a contract with you, or
    • Verify information before entering into a contract with you.
  • Legitimate interest: Where LUNGevity has an interest in using your personal data in a certain way, which is necessary and proportionate in light of its purpose as a charitable organization.
  • Consent: When LUNGevity asks you to actively indicate your agreement to LUNGevity’s use of your personal data for a certain purpose.
  • Compliance with legal obligations: When LUNGevity must process your personal data comply with a law.

The table below details how LUNGevity will use your personal data and the accompanying lawful basis.


Legal Basis

Categories of Personal Data Processed

Registration to and provision of support services
To provide Support Services in accordance with our contract with you

Performance of a Contract

  • Contact Data
  • Identifier(s)

Payment processing
To process your donation to LUNGevity

Performance of a Contract

  • Contact Data
  • Identifier(s)

For marketing, promotion, and advertising purposes where the law requires us to collect your consent (for example, when the law requires consent for email marketing)


  • Contact Details (Marketing)

Breach of LUNGevity terms and conditions
To take appropriate action when our policies or terms and conditions are infringed

Legitimate Interest including improving our service provision

  • Contact Data

Legal claims
To establish, exercise, or defend legal claims (for example, if we are involved in litigation and we must provide information to our lawyers in relation to that legal issue)

Legitimate Interest including to seek legal advice and to protect ourselves, our clients, or others in legal proceedings

  • Device/IP Data
  • Contact Data
  • Identifier(s)
  • Payment Information
  • Emergency Information
  • Contact Details
  • (Marketing)

Compliance with legal obligations
To comply with legal obligations we are subject to (for example, to comply with an obligation under the law of the country/region you are in)

Legitimate Interest including compliance with international legal requirements

  • Device/IP Data
  • Contact Data
  • Identifier(s)
  • Payment Information
  • Emergency Information
  • Contact Details
  • (Marketing)

Where required by applicable data privacy laws, we will use your personal data only for the purposes for which we collect it and as permitted by applicable law, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for any other reasonable purposes in connection with our engagement with you, we will notify you of the purpose and legal basis for such processing, where required and permitted by applicable law.

Your Personal Data Rights

Residents of the EEA and the United Kingdom may have the following rights under the General Data Protection Regulation and the UK equivalent of the General Data Protection Regulation (collectively, GDPR). For further information on whether you can exercise any of the rights below in your jurisdiction, please contact us at [email protected]. Depending on your jurisdiction, you may have the following rights:

  • To request access to your personal information
  • To request rectification of inaccurate or incomplete personal information
  • To request erasure of your personal information
  • To restrict the processing of your personal information
  • To object to our use of your personal information
  • Where relevant, to request the portability of your personal information
  • Where you have given consent to the processing of your personal information, to withdraw your consent
  • To lodge a complaint with the competent supervisory authority


We retain personal data about you for as long as necessary to provide you with our Services and as required by applicable law. In some cases, we retain personal data for longer, if doing so is necessary to comply with our legal obligations or is otherwise required by applicable law, rule, or regulation.

We will delete personal data when the initial purpose of collection expires, subject to any legal or contractual requirement that we retain the data. If you request that we delete your personal data, we may retain a record of your deletion request and information necessary to demonstrate that we have complied with any legal deletion and/or retention obligation.

7. Changes to This Privacy Notice

We constantly try to improve our services, so we may need to change this Privacy Notice from time to time to reflect changes in technology, law, business operations, or any other reason we determine is necessary or appropriate. If we make a material change to the manner in which we process your personal data, we will try to contact you by posting a notice on our website and/or by emailing you if we have current contact information for you.

8. Security

We have taken measures designed to protect personal data from unauthorized access, use, and disclosure, including physical, technical, and organizational measures. We value your privacy. Please note that transmission of information via the Internet is not completely secure. As such, we cannot guarantee the security of your personal data transmitted to our site; any transmission is at your own risk.

9. Contact Information

If you have any questions about this Privacy Notice, the ways in which we collect and use your personal data, or your choices and rights regarding such collection and use, please do not hesitate to contact us as follows:

Email: [email protected]
Mailing address: LUNGevity Foundation, PO Box 754, Chicago, IL 60690


Effective Date: May 22, 2024