- Privacy policies should be human readable, comprehensive, and easy to locate;
- Data collection, storage, and processing should be simplified as much as possible to enhance security, ensure consistency, and make the practices easy for users to understand.
- Only the minimum amount of information reasonably necessary to provide you with services should be collected and maintained, and only for so long as reasonably needed or required;
- Information you provide through our websites, or that we gather as a result of your use of our websites, should not be used for marketing or advertising purposes without your express permission;
- Any information you provide should not be voluntarily (without your permission) provided to anyone else unless required by law; and,
- Unless restricted or prohibited by law, and provided your email address has been collected and retained, you should be notified when circumstances require us to provide a third party with your personal information.
Personal information we collect
As used in this policy, “personal information” means information that would allow someone to identify you, including your name, email address, IP address, or other information from which someone could deduce your identity.
We may collect personal information at several places on the websites, including without limitation:
- When you provide us with your personal information such as by sending an email to us or signing up to receive a newsletter or our events listing;
- When you subscribe to one of our email discussion lists or register to establish a user account on any of our websites;
- When you purchase services from us;
- When you apply for a job opening; and/or,
- When you provide personal information in connection with posting content on our websites.
What we do with your personal information
Website Analytics. When you visit our Websites, we collect some information about your activities through tools such as Google Analytics. The type of information that we collect focuses on general information such as country or city where you are located, pages visited, time spent on pages, heat-map of visitors’ activity on the site, information about the browser you are using, etc. We collect and use this information pursuant to our legitimate interest in enhancing the security and utility of our websites. The information we gather and process is used in the aggregate to spot trends without deliberately identifying individuals, except in cases where you engage in a transaction with us by applying for a job, submitting a comment, or making a request for support. In those cases, we retain certain information about your visit to our websites pursuant to our legitimate interest in understanding our community of interested parties, and this information is stored in connection with other personal information you provide to us.
Note that you can learn about Google’s practices in connection with its analytics services and how to opt out of it by downloading the Google Analytics opt-out browser add-on.
Information from Cookies. We and our service providers (for example, Google Analytics as described above) may collect information using cookies or similar technologies for the purposes described herein. Cookies are pieces of information that are stored by your browser on the hard drive or memory of your computer or other Internet access device. Cookies may enable us to personalize your experience on our websites, maintain a persistent session, passively collect demographic information about your computer, and monitor advertisements and other activities. Our websites may use different kinds of cookies and other types of local storage (such as browser-based or plugin-based local storage).
Emails and Newsletters. When you sign up to receive updates from us or otherwise subscribe to one of our mailing lists, you will be asked to provide some personal information. We collect and use this personal information pursuant to its legitimate interest in providing news and updates to, and collaborating with, our current, former, or prospective clients, job candidates, friends, affiliates, peers, supporters and volunteers.
Email Analytics. When you receive communications from us after signing up for a newsletter, campaign updates, or other ongoing email communications from us, we use analytics to track whether you open the email, click on any links, and otherwise interact with what we send. You may opt out of this tracking by choosing to get plain-text emails from us. We collect and use this personal information pursuant to its legitimate interest in understanding the interests of our community of current, former, or prospective clients, job candidates, friends, affiliates, peers, supporters, and volunteers in order to provide more relevant news and updates.
Events. When you sign up for an event hosted or supported by us, you will be asked to provide some personal information, including your name, email address, and other information as needed. We collect and use this personal information pursuant to our legitimate interest in organizing and running the relevant event. We may share your personal information with vendors, third party contractors, partner organizations, and volunteers for the purpose of organizing and running the event and related activities.
Purchasing services. We use the personal information you provide for the purpose of contacting you about upcoming news and events related to the work we do. When we contact you for the first time after your engagement with us ends, we will use reasonable means to give you the option to choose not to be contacted in this manner again. When you purchase services from us, your name may be published in our portfolio unless you request otherwise.
Applying for a job. When you apply for a job with us, you provide personal information to create your job application. We use that personal information to evaluate your qualifications, expertise, and abilities for the purpose of employment with us, for contacting you about your application and again in the future when potential job openings are posted. You authorize us to use the information you publish in your job application for investigation and evaluation whether such information is of public record or not.
Participating on our websites. When you post content on our websites, you may be asked to provide personal information to establish your identity. If you voluntarily provide your real name in connection with any content you submit to any Website, your name may be associated with the content you contributed (such as when you comment on a blog post). We will also use that personal information for the purpose of contacting you about upcoming news and events.
Other Voluntarily Provided Information. When you provide feedback or otherwise submit personal information to us, we collect and use this personal information pursuant to our legitimate interest in furtherance of the particular program or activity to which you provided feedback or other input.
Retention of Personal Information
The majority of the personal information collected and used as explained above is aggregated and stored in a central database provided by a third party service provider. We aggregate this data pursuant to our legitimate interest in having information stored in a single location to minimize complexity, increase consistency in internal practices, better understand our current, former, or prospective clients, job candidates, friends, affiliates, peers, supporters and volunteers, and enhance the security of the data. We erase the web browser logs described above on a regular, rolling basis.
Access to Your Personal Information
You are generally entitled to access personal information that we hold and to have inaccurate data corrected or removed to the extent we still maintain it. In certain circumstances, you also may have the right to object for legitimate reasons to the processing or transfer of personal information. If you wish to exercise any of these rights, please email firstname.lastname@example.org explaining your request.
Disclosures of personal information
We do not disclose personal information to third parties except as specified in this policy and in the following instances:
- We may share personal information with our contractors and service providers in order to maintain, enhance, or add to the functionality of our websites; and,
- We may disclose your personal information to third parties in a good faith belief that such disclosure is reasonably necessary to:
- Take action regarding suspected illegal activities;
- Comply with legal process, such as a search warrant, subpoena, statute, or court order; or,
- Protect our rights, reputation, and property, or that of our users, affiliates, or the public.
Security of Your Personal Information
We have implemented reasonable physical, technical, and organizational security measures for personal information that we process against accidental or unlawful destruction, or accidental loss, alteration, unauthorized disclosure or access, in compliance with applicable law. However, no website can fully eliminate security risks. Third parties may circumvent our security measures to unlawfully intercept or access transmissions or private communications. If any data breach occurs, we will post a reasonably prominent notice to the affected websites and comply with all other applicable data privacy requirements including, when required, personal notice to you if you have provided and we have maintained an email address for you.
Third-party Service Providers
We use many third party service providers in connection with our websites, including website hosting services, database management, credit card processing, and many more. Some of these service providers may place session cookies on your computer, and they may collect and store your personal information on our behalf in accordance with the data practices and purposes explained above.
Transferring Data to Other Countries
If you are accessing or using our websites in regions with laws governing data collection, processing, transfer and use, please note that when we use and share your data as specified in this policy, we may transfer your information to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information.
Data transferred from the European Union to the United States or outside the European Union will be made on the grounds of a certification to the E.U./U.S. Privacy Shield regime and/or a data transfer agreement based on the Standard Contractual Clauses approved of by the European Commission respectively, consistent with applicable data privacy requirements.
Reorganization or spin-offs
Attribution of original work