It's entirely possible you have pure intentions, but I know nothing about (and therefore have no implicit trust in) your organization, so it would be a huge leap of faith for me to even consider putting this amount and degree of personal information into a random website.

The fact that your privacy policy's fine print allows you to use the information for something other than the express purpose at hand seriously undermines that, even if you have no actual intentions of doing anything shady.

Probably want to make the privacy policy more explicit and restrictive then.

Then give the user the letter up front instead of hiding it in small text. This site has NO written all over it!

So if I was to opt-out of communications does that mean you'll never upload my email address to Facebook or Google for advertising in the future?