Privacy Policy

The Doris Duke Management Foundation (“DDF,” “we,” “us,” or “our”) is a private, operating foundation whose mission is to build a more creative, equitable, and sustainable future. We pursue this mission by investing in artists and the performing arts, environmental conservation, medical research, child well-being, and greater mutual understanding among diverse communities. Our work includes grantmaking, fellowships, public programs, events and convenings, digital communications, and the operation of our public centers—Duke Farms in New Jersey and Shangri La in Honolulu.

This Privacy Policy describes how DDF collects, uses, shares, and protects personal information gathered through our website (dorisduke.org and related sites), our grantmaking and program activities, events and convenings, digital and SMS communications, and any other interaction with DDF.

By visiting our website or providing information to us, you agree to the practices described in this Policy. If you do not agree, please do not use our website or submit information to us.

1. Information We Collect

We collect personal information when you interact with DDF—whether through our website, grantee portal, events, or direct communications.

Information You Provide Directly

Depending on your interaction with us, we may collect:

  • Contact information: name, title, organization, email address, mailing address, and phone number
  • Professional background: resume, work history, education, qualifications, and references
  • Grant or fellowship application materials, including project descriptions and budgets
  • Tax identification or employer identification numbers (for disbursement purposes only)
  • Payment or banking information, processed securely through our financial systems
  • Demographic information you voluntarily share (e.g., gender identity, race/ethnicity, disability status), where relevant to a program
  • Any other information you choose to provide in correspondence, surveys, or event registrations

Information Collected Automatically

When you visit our website, certain information is collected automatically, including:

  • IP address, browser type, device type, and operating system
  • Pages visited, time spent, and how you arrived at our site
  • Geographic location at the city or region level

This information is collected using cookies and similar tracking technologies (see Section 5).

Information Received from Third Parties

We may receive information about you from co-organizers of events, partner organizations, grantees who include collaborator information in applications or reports, professional references, and publicly available sources.

2. How We Use Your Information

We use the information we collect to:

  • Review, process, and administer grant and fellowship applications
  • Disburse grant funds and manage ongoing grantee relationships
  • Communicate with applicants, grantees, fellows, program participants, and event attendees
  • Send newsletters, program updates, and announcements (with your consent)
  • Plan, manage, and follow up on events, convenings, and public programs
  • Engage our community through digital channels, social media, and SMS communications
  • Improve our website, grantmaking effectiveness, and program design
  • Comply with legal and regulatory requirements, including tax and nonprofit reporting obligations
  • Detect and prevent fraud, security incidents, or unauthorized activity
  • Conduct internal research, evaluation, and strategic planning

We do not use your information for commercial purposes, and we do not sell your personal information.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it in the following limited circumstances:

Service Providers and Technology Partners

We work with trusted third-party vendors to support our operations—including systems for email and calendar management, cloud storage and file collaboration, grantmaking management, contact relationship management, identity and access management, event registration, payroll and human resources, electronic signatures, board governance, and support services. These providers are authorized to use your data only as necessary to deliver services to us and are contractually prohibited from using it for any other purpose.

Program and Funding Partners

In connection with joint programs, co-funded grants, convenings, or collaborative initiatives, we may share relevant information with partner organizations. Those partners’ use of your information is governed by their own privacy practices.

Legal Requirements

We may disclose your information when required by law, subpoena, regulatory inquiry, or other legal process; to comply with tax and nonprofit reporting obligations; or when we believe disclosure is necessary to protect the safety, rights, or property of DDF, our grantees, or the public.

Organizational Changes

In the unlikely event of a significant organizational restructuring, merger, or dissolution, personal information may be transferred as part of that process, consistent with applicable law.

4. Digital Communications: Voice and Text Messaging

DDF uses enterprise communication tools for voice and text-based communications with our community. As we work to engage and activate grantees, artists, program participants, and the broader public, we may communicate with you via SMS (text message) for purposes such as event reminders, program updates, meeting confirmations, and other operational communications.

Consent and Opt-Out

By providing your phone number to DDF in connection with a grant, program, event, or other DDF interaction, you acknowledge that DDF may contact you via SMS for the purposes described above. Message and data rates may apply depending on your carrier and plan.

You may opt out of SMS communications from DDF at any time by replying STOP to any message you receive from us. You may also contact us directly (see Section 10) to request removal from our messaging list. We will honor opt-out requests within 10 business days, consistent with current TCPA requirements.

Call and Message Logging

Please be aware that calls and SMS messages sent through DDF’s Zoom Phone environment may be logged and accessible to authorized DDF administrators for compliance, internal record-keeping, and operational purposes. This is a standard feature of enterprise telephony platforms. If you prefer not to have your communications logged in this manner, please contact DDF staff via email.

Note: DDF does not send marketing or solicitation messages via SMS. Our text communications are strictly operational and program-related.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies (such as pixels and web beacons) to improve your experience, measure site performance, and support our communications. The categories we use include:

  • Necessary cookies: Required for basic site functionality such as navigation and security. These cannot be disabled.
  • Functional cookies: Remember your preferences and settings to personalize your experience.
  • Performance cookies: Help us understand how visitors use our site so we can improve it.
  • Targeting cookies: May be used to deliver relevant content or measure the reach of our outreach and communications.

You can configure your browser to refuse or alert you to cookies. Disabling certain cookies may limit some site functionality. At this time, our website does not respond to browser-level “Do Not Track” signals. Where required by applicable law, we will seek your consent before placing non-essential cookies.

6. Artificial Intelligence and Automated Tools

DDF uses AI-assisted tools to support staff productivity, communications, and workflow automation. We are committed to using AI responsibly and transparently.

7. Data Security and Retention

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. Our systems are secured through enterprise identity and access management controls, and access to personal data is limited to authorized personnel with a legitimate business need.

No method of electronic transmission or storage is completely secure. If you have concerns about transmitting sensitive information electronically, please contact us by mail or phone.

We retain personal information for as long as necessary to fulfill the purpose for which it was collected, to comply with legal and regulatory obligations (including records retention requirements applicable to private foundations), or as otherwise needed for our grantmaking and operational records. When information is no longer needed, we take reasonable steps to securely delete or de-identify it.

8. Children’s Privacy

Our website and programs are intended for adults (18 years of age and older). We do not knowingly collect personal information from children under 13. Consistent with recent amendments to the federal COPPA Rule (effective June 2025), if you are a parent or guardian and believe your child under 13 has provided personal information to DDF, please contact us immediately and we will take prompt steps to delete it.

9. Your Privacy Rights and Choices

Depending on your location and the applicable laws, you may have the right to:

  • Access the personal information DDF holds about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information, subject to our legal and operational retention requirements
  • Opt out of certain types of data processing, including targeted advertising
  • Withdraw consent for SMS or email communications

State Privacy Law Notice

Many U.S. states have enacted comprehensive consumer privacy laws. While most of these laws include exemptions for nonprofit organizations, DDF is aware that some states—including Oregon (as of July 2025), Delaware, Minnesota, and New Jersey—apply their privacy frameworks to nonprofits. We are committed to honoring your rights under applicable law regardless of your state of residence.

California residents may contact us to inquire about our data sharing practices under the California “Shine the Light” law. DDF does not currently share personal information with third parties for their own direct marketing purposes.

To exercise any of the rights above, please contact us using the information in Section 10. We will respond within the timeframe required by applicable law.

10. International Visitors

Our website is operated in the United States. If you are located outside the U.S., please be aware that any information you provide will be transferred to and processed in the United States, which may have different data protection standards than your country of residence. By interacting with us, you consent to this transfer and processing.

11. Third-Party Links and Platforms

Our website and communications may contain links to third-party websites, platforms, or social media services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies. This includes platforms used by DDF partner organizations, co-hosted events, or grantee organizations.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or organizational activities. When we do, we will revise the “Last Updated” date at the top of this page. We encourage you to review this Policy periodically. Your continued use of our website following any posted changes constitutes your acceptance of the updated Policy.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or the personal information we hold about you, please contact us at:

Doris Duke Foundation

444 Madison Ave, 10th Floor

New York, NY 10022

Email: privacy@dorisduke.org

Website: www.dorisduke.org

© 2026 Doris Duke Foundation. All rights reserved.