PRIVACY POLICY
CHANGE & IMPACT INC.
PRIVACY POLICY
Dated August 24, 2022
Change and Impact, Inc. (“Company,” “us,” our” or “we”) is committed to protecting your privacy. “You/your/user(s)” means you as a user of our website located at www.changeandimpactinc.org (the “Website”) and the services and offerings made available to you through the Website, including without limitation all features and functionality thereof and updates thereto and all Content made available through the Website (together with the Website, the “Services”). Our privacy policy, which applies to all Users of our Services, is designed to explain the information we collect and how we use it to provide our Services and give Users a better experience (“Privacy Policy”). Capitalized terms not defined in this Privacy Policy have the meanings given in our Terms of Use. This Privacy Policy is part of, and incorporated into, the Terms of Use.
This Privacy Policy describes the Personal Information (as defined below) we collect about you through or during your use of the Services, why we collect it, how we use it, and when we share it with third parties. This Privacy Policy also describes the choices you can make about how we collect and use certain of that information. The Personal Information provided by you is not used for any purpose other than as outlined in this Privacy Policy
By accessing and using the Services you consent to our collection, storage, use and disclosure of your Personal Information and other information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not provide any Personal Information to us. If you choose not to provide any Personal Information that is necessary for us to provide you with specific products or services, we may not be able to provide those products or services to you.
1. Types of Information We Collect
- Personal Information; Anonymous Information. We collect both Personal Information and Anonymous Information about our users. “Personal Information” is information that can be used to contact or identify you or individuals about whom you enter information as part of your activities on our Services, such as first name, last name, e-mail address, phone number, street address, zip code, comments, testimonials, other personal information you make publicly available through the use of the Services, date of birth, company name and address, IP address, username and/or mail address in combination with a password or security questions and answers, account numbers or credit/debit card numbers, even without a security code, access code, or password if the account could be accessed without such information, as well as information that is linked to the forgoing information. “Anonymous Information” or de-identified information is information that cannot reasonably be used to contact or identify you and is not linked to information that can be used to do so. It includes passively collected information about your activities on or through the Services such as usage data, to the extent that information is not linked to your Personal Information.
- “Aggregated Anonymous Information” is the combination of your Anonymous Information with the Anonymous Information of other users. Aggregated Anonymous Information does not allow you to be identified or contacted.
- Non-Personally Identifiable Information. Through your use of the Services, we may also collect certain non-personally identifiable information from you (“NPII”). NPII is not associated with you as an individual. It is measured anonymously and only in the aggregate.
- Cookies; Pixel Tags. We may also use tools such as cookies and pixel tags to gather information as well. “Cookies” are small pieces of information that a website sends to your device while you are viewing the Website or using the Services. We use both session Cookies (which expire once you close your web browser), persistent Cookies (which stay on your device until you delete them) and third-party Cookies (which are placed by a website from a domain other than ours) to provide you with a more personal and interactive experience. Persistent Cookies can be removed by following web browser help file directions. “Pixel Tags” (sometimes called “web beacons” or “clear gifs”) are a snippet of code that collects information about a visitor’s behavior on a website, and then sends the information back to the originating platform to be processed and reported. View the list of cookies we collect Here.
- Unique Device Identifiers. Users can access and browse a majority of the Website without disclosing Personal Information, although, like most website providers, we passively collect certain information from your devices, such as your IP address, browser information, unique device identifier (“UDID”) and/or your mobile operating system.
- User-Provided Information. We collect information that you provide directly to us when you engage in the following:
- Make a donation
- Register for our Newsletter
- Submit testimonials or other content
- Follow, link with other otherwise join us on any supported social media application, including Facebook, Twitter, Instagram, LinkedIn, and YouTube
- Submit a request for support or assistance
- Submit User Content (as defined in the Terms of Use)
- Communicate with us via e-mail, telephone, video conference, or other methods
- Complete a survey for, submit information to, or request information from us
- Inquire about, apply for, or initiate employment or volunteer opportunities
- Hardware; Browser; IP Address. We may collect information from your use of the Services including your hardware model, browser type, operating system, Internet Protocol (IP) address and domain name, through the use of Cookies, web beacons or other technologies. This information may include the following: your browser and mobile device type, operating system and name of your Internet service provider; web pages you visit on the Services; IP address, browser type, profile information, geo-location information; information about your interactions with e-mail messages, such as whether the messages were opened and the links clicked in those e-mails; and standard server log information. If you are using a mobile device, we may also receive your UDID, or another unique identifier, and mobile operating system.
- Payment of Donations & Processing Information. Only some donation processing information is collected by us, for example if you make a donation by telephone. We may also use a third party(ies) for processing donations made through using the Services. We do not want you to send us your credit card or bank account information by e-mail or other means. Please review the terms of use and privacy policies of the third-party payment processor prior to providing Personal Information to them.
- Geolocation. If you access the Services through a desktop or mobile device, we may access, collect, monitor and/or remotely store geo-location data.
- Third-Parties. We may also obtain information from other sources and combine that with information we collect directly. For example, we may collect information about you from third parties, including but not limited to identity verification services, fraud detection service providers, credit bureaus, mailing list providers, review sites and services, and publicly available sources.
We use third-party services, such as Google Analytics, Google AdWords, Facebook Pixel, DoubleClick and Twitter Conversion Tracking, to track and analyze online behavior of our Users. These services may help inform, optimize, target and serve ads based your visits to our Services. We do this to better understand how you use the Services, with a view to offering improvements for all Users, and to tailor our business and marketing activities accordingly. If you would like to opt out of Google Analytics, please download and install the browser plugin at http://tools.google.com/dlpage/gaoptout?hl=en. You can also manage your Facebook privacy settings and preferences by going to your account and navigating to the Settings & Privacy page of your account. Users can also opt out of third party interest based advertising by visiting the Network Advertising Initiative’s deactivation website at www.networkadvertising.org/choices/.
When you interact with us through social media networks, such as when you follow us, share content or contact us through Facebook, Twitter, Instagram, YouTube, Snapchat or other sites, we may receive information about you, including your profile information, picture, user ID associated with the social media account, friends list, and any other information you permit the social media network to share with third parties. The data we receive is dependent upon your privacy settings with the social network in question.
2. How We Use Your Information
- Personal Information. We may use your Personal Information for the following representative purposes:
- Review and process and fill your donations
- Send communications to you, including product information and administrative e-mails
- Satisfy our contractual obligations to you
- Send you promotional/marketing information, newsletters, offers or other information
- Perform internal operations, processing services, maintain user accounts, resolve disputes, establish, exercise, and defend legal claims, prevent and identify fraud, verify your identity and authenticate users
- Personalize and tailor the features, performance and support of the Services
- Analyze, benchmark and conduct research on user data and interactions with the Services and our products and services
- Provide the materials, goods and/or services we offer and/or that you request
- Identify your preferences, so we can notify you of new or additional products, services, and/or promotions that might be of interest to you
- Improve our services, content, customer service, and overall Services experience by aggregating and analyzing our customer data
- Analyze information about visitors to the Services to enhance our marketing efforts
- Communicate with you by e-mail, video conferencing, telephone, text message, or other means for the purpose of providing you with customer service and support, as well as information about our mission or other information that we believe may be of interest to you
- Provide others with your Personal Information for the limited purposes described in this privacy policy
- Send you notices of a transactional, administrative or relationship nature, or as required by law
- Anonymous Information. We may use Anonymous Information for the following representative purposes:
- Perform internal operations on the Services
- Improve the Services and customize the user experience
- Aggregate the information collected via Cookies and Pixels to use in statistical analysis to help us track trends and analyze patterns
- Both Personal Information and Anonymous Information. We may use a combination of Personal Information and Anonymous Information that we collect to target and measure the performance of advertisements to Users both on and off of the Services on our own and through different ad networks and exchanges, using the following data, whether separately or combined: (i) data from advertising technologies such as Cookies, Pixels, web beacons, ad tags and device identifiers; (ii) User-provided information; (iii) data from your use of the Services; (iv) information from others (e.g., advertising partners, publishers and data aggregators); and (v) social media platforms.
- Targeting. We may use Personal Information and Aggregated Information that we collect to target and measure the performance of advertisements to Users both on and off of the Website on our own and through different ad networks and exchanges, using the following data, whether separately or combined: (i) data from advertising technologies such as Cookies, Pixels, web beacons, ad tags and device identifiers; (ii) User-provided information; (iii) data from your use of the Website; (iv) information from others (e.g., advertising partners, publishers and data aggregators); and (v) social media platforms.
3. Lawful Processing; Legitimate Interests. Our Processing of your Personal Information for the purposes set out in this Privacy Policy is necessary for one or more of the following:
- Performing a contract with you, or to take steps at your request prior to contracting with you
- Protecting your vital interests or the interests of another person
- Complying with our legal obligations
- Pursuing our legitimate interests, including without limitation:
- Providing, improving and customizing our offerings;
- Administration of our operations;
- Understanding how the Services are being used;
- Exploring ways to develop and grow and better fulfill our mission;
- Cybersecurity;
- Enhancing protection against fraud, spam, harassment, intellectual property infringement, crime and security risks; and
- Meeting our obligations and enforcing our legal rights
4. How We Share and Disclose Personal Information
- We will not rent, sell or share your Personal Information with third parties except as set forth herein. If you do not want us to use or disclose Personal Information collected about you in the ways identified in this Privacy Policy, you may choose not to use the Services or provide your Personal Information at any time. If you choose not to provide any Personal Information that is necessary for us to provide you with specific products or services, we may not be able to provide those products or services to you.
- We may disclose your Personal Information to outside individuals and/or companies that help us bring you the products and services we offer and to create, operate, and maintain our Services. For example, we may work with third-parties to: (a) manage a database of donor and prospective donor information; (b) assist us in distributing e-mails; (c) assist us with direct marketing and data collection; (d) provide data storage and analysis; (e) provide fraud prevention; (f) provide customer service; (g) process your donations; and (h) provide other services designed to assist us in developing and running our Services and maximizing the fulfillment of our mission. We require that these outside companies agree to keep all information shared with them confidential and to use the information only to perform their obligations to us.
- We may disclose information we have collected about you if required to do so by law or if we, in our sole discretion, believe that disclosure is reasonable to (i) satisfy any applicable law, regulation, legal process or governmental request; (ii) enforce this Privacy Policy and our Terms of Service, including investigation of potential violations hereof; (iii) detect, prevent, or otherwise address fraud, security or technical issues; (iv) respond to user support requests, or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
- We may share all or some of your Personal Information with any of our subsidiaries, joint venturers, or other companies under common control, in which case we will require them to honor this Privacy Policy. Additionally, in the event we undergo a business transition such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge that such transfers may occur and are permitted by this Privacy Policy, and that any entity that acquires us, is merged with us or that acquires our assets may continue to process your Personal Information as set forth in this Privacy Policy.
5. Use of Non-Personally Identifiable Information.
- We use NPII to maintain and administer the Services, analyze trends, gather demographic information and comply with applicable law. We may share Aggregated Anonymous Information with third-parties. We may share this information with others without express notice to you or consent from you, and we may exploit, use and disclose your NPII without limitation of any kind. We authorize certain service providers to utilize NPII for their business purposes and in accordance with their privacy policies, such as to report on usage or industry trends to their customer base.
- The Website may use Cookies. Cookies help us remember you when you return to the Website. Cookies also hold information to personalize and enhance your experience and to gather Website statistical data, such as which pages are visited, the Internet provider’s domain name and the addresses of the sites you visited immediately before coming to and immediately after leaving the Website. The information in the cookies lets us trace your “clickstream” activity (i.e., the paths taken by users of the Website as they move from page to page) to enable us to better serve you by revealing which portions of the Website are the most popular. We may also allow our affiliate and service providers and advertisers to serve cookies from the Website to allow them to assist us in various activities such as doing analysis and research on the effectiveness of the Website, its content and advertising. Some third-party advertising companies may be advertising networks that are members of the Network Advertising Initiative, which offer a single location to opt out of ad targeting from member companies. For more information, see: www.networkadvertising.org. We may also use Pixel Tags, which help us analyze users’ online behavior and measure the effectiveness of the Website and our advertising and marketing. Pixel Tags or Clear gif files are tiny graphics with a unique label that work in a similar way to cookies and are used to monitor the user’s online activities. In contrast to cookies that are saved on a user’s computer hard disk, clear gif files are embedded invisibly in websites and are about as big as the full stop at the end of this sentence. Where appropriate, we may combine the information collected by such Pixel Tags with the Personal Information of our customers. We may also use other analytical tools to evaluate site performance through the use of aggregated data, which contain no Personal Information. We work with service providers that help us track, collect, and analyze this information.
- Cookies, Pixel Tags, and/or other analytical tools that we may use on the Website may collect information about your visit, including the pages you view, the features you use, the links you click, and other actions you take in connection with the Website. This information may include your computer’s Internet protocol (IP) address, your browser type, your operating system, date and time information, and other technical information about your computer. We may also track certain information about the identity of the Website you visited immediately before coming to the Website. Cookies, pixel tags, and/or other analytical tools in our e-mails may also be used to track your interactions with those messages, such as when you receive, open, or click a link in an e-mail message from us. We may also work with businesses that use tracking technologies to deliver advertisements on our behalf across the Internet. These companies may collect information about your visits to the Website and your interaction with our advertising and other communications, but no Personal Information is shared with them.
- We may combine the NPII collected through Cookies, Pixel Tags and other analytical tools with other information we may have collected from you. This information may be used to improve the Website, to personalize your online experience, to help us deliver information to you, to determine the effectiveness of advertising, and for other internal business purposes. We may use and share aggregated and anonymous information to conduct market research and analysis for ourselves and/or for our business partners. Given the anonymous, non-personally identifiable nature of such information, there are no restrictions under this Privacy Policy on how we may use or disclose such information. For example, we may freely share such information with third parties who may use such data for their own marketing, advertising, research, or other business purposes. We may also freely share such information with our service providers in order for them to perform services to or for us.
- The Services contains links to and/or enables certain third-party functionalities to enhance your experience on the Services, including social plug-ins, tools and APIs. Prior to using any third party functionalities (e.g., Facebook “Like” button) on the Services, you should consult the privacy notices of the third party providers of such functionalities (e.g., Facebook), as we have no control over information that is submitted to, or collected by, such third parties, or how they may use the information. The privacy policies and data practices of such third parties may significantly differ from ours, and we make no representation or warranty whatsoever about their policies and practices. Your communications and interactions with such third parties are solely between you and them and are at your own risk.
6. Data Retention We will retain your Personal Information for as long as is necessary for the purposes set out in this Privacy Policy unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights or otherwise to comply with legal obligations.
7. Opting-Out
- Unsubscribe. You may opt out of: (a) receiving e-mail communications such as e-mail newsletters and promotional e-mails by following the instructions provided at the bottom of each e-mail, clicking the “unsubscribe” button at the bottom of e-mails we sent you; and/or (b) receiving promotional e-mail communications and newsletters by e-mailing us at info@changenandimpact.org and including the word “UNSUBSCRIBE” in the subject text. Opting out of receiving Services communications will not affect your receipt of service-related, and administrative communications, such as payment confirmations, delivery status updates, updates to our Terms of Use and this Privacy Policy as we must be able to communicate with you regarding your purchases. If you do not receive a response from us to any e-mails you send to us within ten (10) business days, please send us another e-mail as your original e-mail may not have been received.
- Google, Facebook & Apple. Our products and services may use Google Analytics Advertising Features and its associated tracking technologies to help display our ads you see on other sites, and to help us manage and optimize our online advertising efforts. To opt out of Google Analytics Advertising Features, visit Google’s Ad Settings page, currently located at https://www.google.com/settings/ads/anonymous?sig=ACi0TChBBUZhbil6jSzh_t9gc_hilJmxPFILo3fzsOJJ6mtq1DpanjQIychv5x00ayD5xiJnE_7py3LRuGOQtj8YQx5_1ZS2FA&hl=en. Services users can also access the Google Analytics Opt Out Browser Add-on, currently located at https://tools.google.com/dlpage/gaoptout or http://tools.google.com/dlpage/gaoptout?hl=en. We may also work with Facebook and Apple to provide analytics in connection with our Services, including our mobile applications. For more information about Facebook’s privacy practices, you may visit https://www.facebook.com/about/privacy, and for Apple’s privacy policy, click here http://www.apple.com/privacy/privacy-policy/. You can manage your Facebook privacy settings and preferences by going to your account and navigating to the Settings & Privacy page of your account. You can manage your Apple privacy settings and preferences by going to Settings in your Apple device and adjusting third party application access and permissions, as well as adjusting your Analytics & Improvements, Advertising and to Location Services privacy preferences.
- Ad Industry Opt-Outs. You can opt out of Internet-based and mobile advertising on your mobile device by visiting TRUSTe’s Ad Preference Manager, currently available at https://preferences-mgr.truste.com/. You may can opt out of receiving online behavioral or internet based advertising by using the tools located at the Digital Advertising Alliance’s consumer choice page, currently available at http://www.aboutads.info/choices/ or the Network Advertising Initiative (NAI) opt out tool currently available at http://www.networkadvertising.org/choices/. When using the ad industry opt out tools, note that: (a) if you opt-out we may still collect some data about your online activity for operational purposes (such as fraud prevention), but it will not be used by us for the purpose of targeting ads to you; (b) if you use multiple browsers or devices you may need to execute this opt out on each browser or device; and (c) other ad companies’ opt-outs may function differently than our opt-out, and we have no control over the practices of any third parties. We do not make any representations or warranties about such opt-out services. Such services are independent from us, and we have no control over, or responsibility for their performance.
- Cookies. You can opt out of accepting Cookies or disable them from your browser. The “Help” function on most browsers contains information on how you can set your browser to notify you before accepting Cookies or can disable them entirely. If you opt out of Cookies, you will not be able to take advantage of various features of the Services that are available to other users. For example, we may use Cookies to recognize you by name when you return to this Services so you don’t have to login again and provide your password each time.
8. Deleting, Changing & Updating Your Personal Information
- You may correct, update or revise your Personal Information that is inaccurate or request that we delete your Personal Information from our system. In certain cases, you may also have a right to: (i) to restrict or limit the ways in which we use your Personal Information; (ii) to object to the processing of your Personal Information; and (iii) to obtain a copy of your Personal Information in an easily accessible format.
- If you withdraw your consent to the use or sharing of your Personal Information for the purposes set out in this Privacy Policy, you may not have access to the related services, and we might not be able to provide you with certain or any services.
- To submit a request, please send an e-mail message to info@changenandimpact.org. We do not want to take any action regarding your Personal Information at the direction of someone other than you and may therefore ask you for information verifying your identity.
9. BASIS FOR CONTINUED USE OF YOUR PERSONAL INFORMATION. Please note that, in certain cases, we may continue to process your Personal Information after you have withdrawn consent and requested that we delete your Personal Information, if we have a legal basis to do so. For example, we may retain certain data if we need to do so to comply with an independent legal obligation, if we still need the data for the lawful purposes for which we obtained the data, or if it is necessary to do so to pursue our legitimate interest in keeping our services and operations safe and secure. Furthermore, if we have already disclosed your Personal Information to third-parties pursuant to the terms of this Privacy Policy, we cannot access that Personal Information any longer and cannot compel the deletion or modification of any such information by the parties to whom we have made those disclosures.
10. Notice to Californian Users Regarding Your Privacy Rights
- Shine the Light. Pursuant to California Civil Code Section 1798.83, also known as the “Shine The Light” law, California residents have the right to request in writing from businesses with whom they have an established business relationship: (i) a list of the categories of Personal Information, such as name, address, e-mail address, and the type of services provided to that individual, that a business has disclosed to third-parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (ii) the names and addresses of all such third-parties. We do not share Personal Information with third-parties for those parties’ direct marketing. To request the above information, California residents can e-mail us at info@changenandimpact.org or write to us at Change & Impact, Inc., Attn: Privacy Office, 2945 Townsgate Road, Suite 200, Westlake Village, CA 91361. Please note that, under California law, a business is only required to respond to such a request twice in any calendar year.
- Do Not Track. Some web browsers may let you enable a “do not track” feature that sends signals to the websites you visit, indicating that you do not want your online activities tracked. This is different than blocking or deleting cookies, as browsers with a “do not track” feature enabled may still accept cookies. There is currently no industry standard for how companies should respond to “do not track” signals, although one may develop in the future. We do not respond to “do not track” requests or signals at this time.
11. Children
The Services are not directed to or intended for children under 13 years of age. We do not knowingly solicit, collect or maintain information from those we actually know are under 13, and no part of our is targeted to attract anyone under 13. We also do not send e-mail correspondence to anyone who advises that they are under the age of 13. If we later obtain actual knowledge that a User is under 13 years of age we will take steps to remove that User’s Personal Information from our systems. If you are the parent or guardian of a child whom you believe has disclosed Personal Information to us, please contact us at info@changenandimpact.org or write to us at Attn: Privacy Office, 2945 Townsgate Road, Suite 200, Westlake Village, CA 91361 so that we may delete and remove such information from our system.
12. Security; Legally Required Disclosures
- Security. We strive to keep your Personal Information private and safe. We take commercially reasonable physical, electronic and administrative steps to maintain the security of Personal Information collected, including limiting the number of people who have physical access to database servers, as well as employing electronic security systems and password protections that guard against unauthorized access. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored Personal Information or “Personal Information” (as defined in applicable state statutes on security breach notification) to you via e-mail, text or conspicuous posting on the Website in the most expedient time possible and without unreasonable delay. Your consent to such purpose remains valid after termination of our relationship with you.
Unfortunately, despite our best efforts, the transmission of data over the Internet cannot be guaranteed to be 100% secure. While we will use reasonable means to ensure the security of information you transmit through the Services, any transmission of Personal Information by you is at your own risk. We cannot guarantee that such information will not be intercepted by third-parties and we shall not be liable for any breach of the security of your Personal Information resulting from causes or events that are beyond our control, including, without limitation, your own act or omission, corruption of storage media, defects in third party data security products or services, power failures, natural phenomena, riots, acts of vandalism, hacking, sabotage, or terrorism, and we are not responsible for circumvention of any privacy settings or security measures contained on the Services.
- Legally Required Disclosures. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored “Personal Information” (as defined in applicable state statutes on security breach notification) to you via e-mail and/or conspicuous posting on the Services in the most expedient time possible and without unreasonable delay, insofar as it is consistent with (i) the legitimate needs of law enforcement; or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.
13. Third-Party Websites
While visiting the Services, you may link to websites operated by third parties or you may have come to the Services using a link found in another website. We do not make any representations or warranties about any third-party website, we have no control over them or the information, services, products they provide or the manner or methods they employ to collect, store, access, or otherwise use your Personal Information. If you provide Personal Information at one of those websites, you are subject to the privacy policy of the operator of that website, not our Privacy Policy. Please make sure you understand any other website’s privacy policy before providing Personal Information.
14. Changes to Our Privacy Policy
We reserve the right to change, modify, add or remove portions of this Privacy Policy at any time and without prior notice, and any changes will become effective immediately upon being posted. However, we will not use your Personal Information in a way that is adverse and materially different from the uses described in this Privacy Policy without giving you an opportunity to opt out. The “Last Modified” date indicates if and as of when changes have been made to this Privacy Policy. Your continued use of the Services after this Privacy Policy has been amended shall be deemed to be your continued acceptance of the terms and conditions of the Privacy Policy, as amended.
15. Contact Us
If you have any questions regarding our Privacy Policy, or if you wish to issue a request to exercise your rights where applicable by law, you can contact us via e-mail at info@changenandimpact.org or write to us at Change & Impact, Inc., Attn: Privacy Office, 2945 Townsgate Road, Suite 200, Westlake Village, CA 91361.