Evidence Action Privacy Statement
Effective Date: April 28, 2020
Thank you for visiting our website. Your privacy is important to us. This Privacy Statement describes the types of information Evidence Action (“Evidence Action”, “we”, or “us”) collect from and about you, from others, and when you visit this website (the “Site”). This Privacy Statement also explains how we may use and disclose such information, as well as your ability to control certain uses of it. By using this Site, you agree to the data collection, use, disclosure, and storage practices described in this Privacy Statement.
Information You Provide to Us
We collect information from you when you choose to provide it to us, including by filling in forms on this Site. This may include when you request information from us, sign up for newsletters or our email lists, make a donation, register for an event, submit an application for employment, or otherwise contact us.
The information we collect may include your name, postal address, email address, telephone number, mobile telephone number, geolocation information, photos or videos, or user name. If you use a third party service to login, link to us, or communicate with us (such as a social network or third party video chat), we may receive certain information about you from the third party based on your registration and privacy settings on those third party services. If you provide a credit/debit card number or other financial information through this Site, it will be collected and processed by a third party vendor. Evidence Action does not collect or retain credit/debit card numbers or other financial information.
If you apply for a job posting, or become an employee, we may collect personal information necessary to process your application. This may include your name, email address, postal address, phone number, or tax identification number.
Information We Automatically Collect and Cookie Statement
Information Collected From Other Sources
We may obtain information about you from other sources, including social networks that you use to connect with Evidence Action. This information may include name, user name, demographic information, address or contact information, interests, and publicly-observed data, such as from social media and online activity.
Combination of Information
We may combine the information we receive from and about you, including information you provide to us and information we automatically collect through our Site as well as information collected offline or from third party sources to help us tailor our communications to you and to improve the Site.
We may use the information we collect from and about you to:
- Respond to your inquiries relating to employment opportunities or other requests;
- Provide donor benefits, contact and communicate with you, share with our vendors to process payments and prevent transactional fraud;
- Develop new programs, products or services;
- Communicate with you and others to further our mission-related goals;
- Provide you with customized content, targeted offers, and advertising on the Site, via email or text message, or on other sites or apps;
- Contact you with information, newsletters and promotional materials from Evidence Action or on behalf of our partners;
- Research, address problems, and improve the usage and operations of the Site;
- Protect the security or integrity of the Site and our business; and
- As described to you at the point of data collection.
We may share the information we collect from and about you:
- with your prior consent, with selected third parties that we believe may provide donor benefits, promotional materials, and goods and services that may be of interest to you, including with other non-profit organizations;
- to our Service Providers, including information brokers and for data analysis, if the disclosure will enable them to perform a business, professional, or technical support function for us;
- to respond to judicial process or provide information to law enforcement or regulatory agencies or in connection with an investigation on matters related to public safety, as permitted by law, or otherwise as required by law; and
- as described to you at the point of collection.
We also may share aggregate or anonymous non-personal information with third parties for their marketing or analytics uses.
We may sell or purchase assets during the normal course of our business. If another entity acquires us or any of our assets, information we have collected about you may be transferred to such entity. In addition, if any bankruptcy or reorganization proceeding is brought by or against us, such information may be considered an asset of ours and may be sold or transferred to third parties. Should such a sale or transfer occur, we will use reasonable efforts to try to require that the transferee use personal information provided through the Site in a manner that is consistent with this Privacy Statement.
We may contract with third parties to perform functions related to the Site (“Service Providers”). Service Providers will have access to your personal information needed to perform their business functions, but may not use or share that personal information for other purposes.
YOUR CALIFORNIA PRIVACY RIGHTS
If you are a California resident and have provided personal information to us, you are entitled under California law to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to email@example.com or write us at Evidence Action, 1101 K Street, NW, 9th floor, Washington, DC 20005.
YOUR EUROPEAN ECONOMIC AREA RIGHTS
If you are based in the European Economic Area (“EEA”) and have permitted an organization in the EEA to share your personal information with us, we are the data processor of your personal data and the other organization is the data controller. As the data processor, we will only process and use your personal information in accordance with the documented instructions of the data controller, subject to our agreement with them. As the data processor, our legal basis for collecting and using your personal data or information is to do so with your consent, which is provided to us by the data controller; in performance of a contract with the data controller, or where the collection and use is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect the personal information in question.
You have the right at any time to withdraw your consent to our collection and use of your personal data and to exercise the following rights. You must contact the EEA organization to whom you donated to exercise these rights:
- Access your personal data or information;
- Delete, or request deletion of, your personal data or information;
- Object to or restrict processing of your personal information;
- Request portability of your personal information;
- Complain to your local data protection authority at any time;
- Object to automated decision making; and
- Update your personal data or information.
Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Similarly, if we collect and use your personal information in reliance on our or a third party’s legitimate interests and those interests are not already listed above, we will let you know what those legitimate interests are.
Any information you may disclose on public areas of the Site, becomes public information. Please exercise caution when disclosing personal information in these public areas.
LINKS TO OTHER WEBSITES
The Site may have links to third party sites or applications, which may have privacy policies that differ from our own. We are not responsible for the practices of such sites or applications.
Protecting children’s privacy is important to us. We do not direct the Site to, nor do we knowingly collect any personal information from, children under the age of thirteen.
We have taken certain physical, administrative, and technical steps to safeguard the information we collect from and about our donors and visitors. While we make every effort to help ensure the integrity and security of our network and systems, unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to or from our Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.
DATA STORAGE AND RETENTION
Your personal information is stored on servers in the United States or in other countries in accordance with the data storage locations of our third party vendors. You understand and agree that we may collect, use, disclose, and otherwise process the information you provide as described in this Privacy Statement even if you are from an area outside the United States. Your personal information may be disclosed in response to inquiries or requests from government authorities or to respond to judicial process in the United States. We will retain your personal information for as long as it is needed to provide you with the Site, or to fulfill any legal or contractual obligations we may have.
If you are a resident of the EEA, your personal information may be transferred to and processed in the United States, which has data protection laws that are different than those in your country and may not be as protective. For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at [firstname.lastname@example.org].
ACCESS TO YOUR PERSONAL INFORMATION
You may send us an email at [email@example.com] to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change or delete information if we believe doing so would violate any law or legal or audit requirement or cause the information to be incorrect.
IF YOU HAVE QUESTIONS
If you have any questions, requests or concerns about this Privacy Statement or the practices described herein, you may contact us at firstname.lastname@example.org.
REVISIONS TO THIS STATEMENT
We reserve the right to revise this Privacy Statement at any time. When we do, we will post the changes on our website. If we change the Privacy Statement in a material way, we will provide appropriate notice to you.MA