Effective July 1, 2024
The American Civil Liberties Union Northern California ("Union") and the American Civil Liberties Foundation Northern California ("Foundation") (collectively, “ACLU of Northern California," "we," "us," or "our) work to expand the right to privacy, increase the control individuals have over their personal information, and ensure civil liberties are enhanced rather than compromised by technological innovation.
ACLU of Northern California is committed to living our values by describing, in plain language, how we collect and use your personal information and by providing clear choices for how we collect and use your personal information. We continually evaluate and improve our privacy and data governance practices to responsibly handle personal information entrusted to us. This may include information about you, whether you are an ACLU of Northern California supporter or not. We collect information from and about you when you interact with us and we may obtain information about you as an individual member of the public from other sources whether you are an entity] supporter or not (e.g., you are a registered voter and we have information about you in voter files we use to conduct voter outreach; research on civil liberties issues, such as, voting rights discrimination; or to identify and better understand potential entity] supporters). In this statement “you” refers to both entity] supporters and individuals with whom we may not currently have a direct relationship.
This Privacy Statement (“Statement”) describes how ACLU of Northern California collects, uses, shares, or otherwise processes personal information in its day-to-day operations. Certain ACLU of Northern California programs, as well as “Other ACLU Organizations,” which include the American Civil Liberties Union, Inc., the American Civil Liberties Union Foundation, Inc., the ACLU Voter Education Fund (collectively, "National" or “ACLU”), and other ACLU state/local/territory affiliated organizations (ACLU “Affiliates”) throughout the United States have separate privacy statements. Those statements are available here ACLU Organizations Privacy Statements. ACLU of Northern California and its affiliated organizations may be referred to individually and collectively as “ACLU Organizations.” To learn more about the scope of this Statement, applicable regulations, and key definitions, read About this Statement.
ACLU of Northern California collects and stewards your personal information through a variety of methods. This section outlines what information we collect and how we collect it.
This includes information you explicitly take steps to share with ACLU of Northern California. This may be through online forms, offline donation and volunteer sign-up forms, or over the phone when you call ACLU of Northern California to donate or request Foundation legal assistance, for example. Through these processes, you may share the following categories of information:
ACLU of Northern California and our authorized third parties may use technologies to automatically receive and record information when you interact with us online on our websites and/or through other digital technologies, such as email platforms, mobile applications that link to this Privacy Statement, or over the phone (altogether, “Digital Services”). These technologies allow the ACLU of Northern California to improve our Digital Services, to create a better experience for our users, and to protect against fraud.
These technologies may include cookies — small files placed on your browser that can be used to uniquely identify you and record information about the websites you visit — and other technologies, such as web beacons, clear gifs, and single-pixel gifs, that use embedded code in our Digital Services to record details about your use of those Digital Services, like whether you opened an email or clicked on a link.
These technologies may be placed by us or by other entities we authorize. We only authorize third parties to place these technologies on our Digital Services if those authorized third parties abide by our confidentiality and security requirements described below under With Whom and How We Share Your Information.
ACLU of Northern California and our authorized third parties may automatically collect the following categories of information:
ACLU of Northern California may acquire personal information about you from third-party sources, such as data cooperatives for nonprofits; other nonpartisan organizations; coalition partners; commercial voter file and consumer research providers; and various federal, state, and local government entities (e.g., public records data or information procured through FOIA requests that we use to search for civil liberties violations). We acquire this information to learn more about you — including how best to engage with you — to identify people like you that may be interested in hearing from ACLU of Northern California, and to research and evaluate potential or ongoing claims or advocacy regarding civil rights and civil liberties issues. We may collect the following categories of information from third-party sources:
ACLU of Northern California may use personal information we have collected — directly, automatically, or acquired from third parties — to compile, combine, and infer new information about you. We do this to tailor our communications and outreach, and to improve our programs and services.
ACLU of Northern California and our service providers may infer the following categories of information:
ACLU of Northern California collects your personal information to further our mission through our advocacy and organizing, litigation, and fundraising programs. When we process, use, or share that information, we apply appropriate confidentiality and security requirements (see: How We Protect Your Information and With Whom and How We Share Your Information). In addition, we aim to use only the information that is specific and necessary for the ACLU of Northern California processing purposes we collected it for (see: Our Data Privacy Principles).
There is not a “one-size fits all” approach to how ACLU of Northern California processes and uses personal information. ACLU of Northern California strives for transparency about what personal information we collect and how we use it. This chart details further our personal information processing activities and their purposes, the categories of personal information we process (see Personal Information We Collect for more information), and the categories of parties with whom we may share your information (see With Whom and How We Share Your Information for more information).
|
Processing Activity and Use |
Purpose(s)*^ |
Type(s) of Information* |
With Whom We May Share Information^ |
|
Account creation and management: To create and manage your account. Accounts may be created for our online store. |
|
|
|
|
Broadcast updates and communicate with you: To keep you informed of our priorities and opportunities to get involved, and in response to inquiries made by you. This can be through direct mail, email, phone calls, and text messages and includes any of our action or marketing lists you subscribe to. |
|
|
|
|
Conduct research and analyze information to improve the effectiveness of our outreach and communications: To ensure you receive the most relevant opportunities, we use personal information to model and identify who is most likely to support an issue area or campaign and segment our messages. |
|
|
|
|
Deliver petitions and other message actions: To facilitate petitions and other message actions to our advocacy targets (such as messages to your member of Congress). |
|
|
|
|
Evaluate requests for and provide legal services: To assess requests for legal assistance, potential and pending legal action, and to deliver legal services to Foundation clients. |
|
|
|
|
Host our National Advocacy Institute and other events: To plan and host in-person or virtual events, including selecting participants, awarding scholarships, coordinating travel, lodging, or other accommodations and logistical planning. |
|
|
|
|
Mobilize volunteers: To mobilize volunteers to canvass, phonebank, or text-bank in support of an issue area or campaign. |
|
|
|
|
Participate in data cooperatives and list sharing arrangements to identify prospective ACLU of Northern California donors and strengthen support: To grow and strengthen our donor base, we participate in list exchanges with like-minded, nonpartisan organizations, and engage in data cooperatives for nonprofits. |
|
|
|
|
Prevent fraud: To protect ACLU of Northern California against fraudulent actors making payments through our sites. |
|
|
|
|
Process payments: To process your donations or payments for other services such as registering and paying for an ACLU of Northern California ticketed event. This includes managing payments, charges, and bequests from estates and financial accounts. |
|
|
|
|
Research violations of civil liberties: To research and analyze the impacts of laws, policies, and government or other stakeholder actions. This may be done to prepare and bolster legal claims, ACLU of Northern California advocacy campaigns, public education, and/or particular programs. For example:
|
|
|
|
|
Secure and optimize our Digital Services: To make our Digital Services easier, more pleasant to use, and effective by monitoring, assessing, and conducting other research and internal operations to secure, optimize, and improve our services, technology, and products. |
|
|
|
|
Serve and improve targeted advertising: To deliver advertising to people who are likely to support our issues, and to improve our targeted advertising, we may use aggregated ad performance data like views, click, and conversions. |
|
|
|
|
Solicit requests for legal support: ACLU of Northern California may solicit you directly or indirectly as a potential plaintiff if we think you may benefit from our services. You may also decide to contact ACLU of Northern California for legal support, in which case, we may process your information to determine if we can help and/or refer you to organizations that can help. |
|
|
|
|
Storytelling: The ACLU collects your stories to raise awareness around testimonials of injustice as part of our movement building. |
|
|
|
|
*Special Circumstance: In some instances, we may collect and/or use your personal information in ways not described in this chart. In those instances, we will describe how we will use or share your personal information at the point of collection.
^When Required by Law, to Prevent Fraud, and Protect Our or Others’ Rights: The ACLU of Northern California may also use your information to fulfill our legal obligations. Our processing activities may require that we share your information with government agencies, law enforcement, or other third parties, for example as we assess a potential threat you may have made to us. See With Whom and How We Share Your Information. |
|||
In addition to the processing purposes described in this notice, we may also de-identify personal information where possible. We may de-identify existing personal information to proactively minimize the data in our possession when identifying information is no longer needed. We may also de-identify information to remove identifying information from records that must be retained for legal purposes when you request the ACLU of Northern California delete your information. When we de-identify information permanently for privacy purposes, we will use it only in its de-identified form and do not attempt to re-identify the information.
ACLU of Northern California has taken physical, technical, and administrative measures to safeguard the information we collect. We work to keep your data safe and protect against unauthorized access to, and improper use of, personal information we collect online.
This section provides additional information on how we share your personal information with our state and local Affiliates, service providers, business partners, and other third parties.
We share personal information with your consent, when you direct us to share it with others, as necessary to complete your transactions, or to provide the services you have requested or authorized. For example, when you provide credit card information to donate, we will share that data with payment card processors and other entities as necessary to process your payment and to prevent or detect fraud.
We also share personal information with the following types of other parties:
To maximize our impact nationwide, ACLU of Northern California works together with and shares your personal information with our state/local/territory Affiliates around the United States and National to create a coherent experience for our supporters, members, and the public. For example, when you become a member of the National Union, you typically will also become a member of ACLU of Northern California’s Union Organization (if the mailing address you provide with your donation is in our state or territory). We also may co-collect or share your personal information with any affiliated ACLU Organizations.
While the ACLU Organizations adhere to a common set of privacy principles and standards for handling personal information that we share with one another, each ACLU Organization may have its own unique data practices that are not contained in this Statement. When we share your personal information with other ACLU Organizations, they are bound to use that information in accordance with their privacy statement and with regard to their own operations. To view the list of all ACLU Organizations’ privacy statements, read ACLU Organizations Privacy Statements.
We work with a variety of service providers who help us process your personal information as outlined in Why We Use Your Information above, such as to facilitate the operation of our sites; support our fundraising, marketing, communications, and advocacy programs; and deliver messages to you on other platforms.
We require these service providers to agree to take reasonable security measures in the handling and storage of that information. When we share personal information about you with a service provider, we take steps to: (1) transmit it in a secure manner and (2) require the service provider to promise to keep that information confidential and use it only for the purpose of carrying out the activities we have directed them to perform.
We allow some service providers to compile and use certain information related to ACLU of Northern California and/or its supporters’ use of the services for internal purposes, like improving the functionality or security of the services ACLU of Northern California receives from the service provider. In some instances, this may include training the service providers’ artificial intelligence tools or features for the services they provide the ACLU of Northern California*. In addition, we may also permit service providers to create and use data that has been de-identified for broader business purposes, including sharing aggregated benchmarking data with their business partners, other customers, or other third parties. We will not agree to that unless the service provider has sufficiently committed to not recombine the data with other information to identify you, and will not share or sell or use any identifiable data about you for the benefit of third parties outside the ACLU of Northern California-service provider business relationship.
*ACLU of Northern California takes your agency over the use of your personal information seriously. As the artificial intelligence landscape continues to evolve, we are committed to monitoring our service providers' artificial intelligence tooling for disproportionate privacy risks and other potential threats to civil liberties.
In some cases, we may disclose personal information to our vendors and other business partners for their own business purposes. In exchange, we may receive money or something else of value to ACLU of Northern California (e.g., a list of donors or supporters from like-minded organizations whose donors and supporters may also be interested in donating to and supporting ACLU of Northern California). We may also share your information with third party business partners at your request. For example, we may share information with another nonprofit advocacy organization with whom we are co-hosting an event or working in broader coalition on important civil liberties issues.
These “Business Partners” include:
ACLU of Northern California will join a data cooperative only if the cooperative exclusively serves nonprofit entities; does not receive any information from ACLU of Northern California about supporters whose information is not already included in the cooperative’s database; does not provide cooperative members direct access to ACLU of Northern California-provided information; does not share information derived from ACLU of Northern California-provided information to partisan organizations; will not disclose an individual’s ACLU of Northern California association to cooperative members; and agrees to remove from the cooperative’s data pool and destroy ACLU of Northern California-provided information when we leave the data cooperative.
In order to protect your privacy, list-sharing agreements with other nonpartisan organizations are conducted through secure and confidential arrangements in which the external organization does not directly receive information about you unless you choose to engage. Communications generated from list sharing agreements are carried out by each nonpartisan organization’s service provider(s), e.g., a vendor who prepares and sends out a mailer, who keeps your information confidential and secure. The other organization learns information about your relationship with the ACLU of Northern California only if you choose to respond to their third-party communication.
Personal information shared with these third-party advertisers are hashed to improve privacy. Hashing data refers to the practice of scrambling data in a pre-defined manner to make it more difficult to recognize. We only share hashed data with third-party advertisers that promise to hold entity]-provided information confidentially and securely, and promise not to use entity]-provided information for other purposes. For additional information on with whom we may have shared your personal information for targeted advertising purposes, please see Third-party Advertisers.
We may also share certain personal information with other third parties, as follows:
The ACLU of Northern California offers you a number of choices in relation to your personal information. Further, you may have a legal right to these choices depending on your jurisdiction.
We strive to communicate with you according to your preferences.
In some instances, you can update your communication preferences directly through the communication channels where we contact you, e.g., by texting or replying “STOP” to unsubscribe from automated recurring text messages from 82623 or by clicking on the “Unsubscribe” link in the footer of our emails.
In other instances, you will need to contact us to update your communication preferences. To make updating your phone and direct mail communication preferences as easy as possible, we have provided three methods:
Your Data Choices
The ACLU of Northern California offers you several choices in relation to your personal information. These choices may be offered to you as data subject rights required by applicable law. Data subject rights established by law can differ depending on the state or U.S. territory in which you reside and may be subject to legal limitations. The choices that ACLU of Northern California offers include:
Note: Some consumer privacy laws also afford residents the right to opt out of profiling or automated decision-making with legal or similarly significant impacts. ACLU of Northern California does not conduct these activities.
Note: If you choose to delete your personal information from our systems, your membership, donation, advocacy, and volunteer history with the ACLU Organizations will be irreversibly deleted. This will also unsubscribe you from all ACLU Organizations Communications and cancel any recurring donations. You may re-subscribe to ACLU of Northern California communications at any time, but doing so will not restore your past history with ACLU Organizations.
Submit a Data Choice Request
You may submit a data choice request to us using the mechanisms below. To make submitting Data Choice Requests as easy as possible, we have provided the following methods:
You may also authorize another party to submit an opt-out request for targeted advertising and/or sales of data or a deletion request on your behalf by having them email Privacy@aclu.org.
Further notes on making Data Choice Requests:
The internet is not a private place. As you visit websites, use search engines, and conduct business on the internet, many different companies and organizations are gathering information about your online behavior, including your searches, visits, and transactions, and then matching that data with other information about you or leveraging algorithms to predict your behavior. There are some things you can do to prevent your information from being collected. We encourage you to read our blog post Easy Steps Everyone Can Take to Protect Their Digital Privacy to help protect your privacy online.
Like most websites, our sites collect and process a range of information about their visitors to enable functionality and to deliver requested services. In addition to information we automatically collect for our purposes (see Personal Information We Automatically Collect), our Digital Services include links to social media sites, links to other websites operated by third parties (e.g., a registration page for another nonprofit advocacy organization’s event, a third-party payment processor), embedded media (e.g., YouTube videos), and embedded third-party applications that may collect information about you when you choose to interact with them. When you access this content, you are interacting directly with the third parties, whose data collection and other processing activities are governed by their privacy policies, and not by this Statement. When you view embedded media or interact with embedded third-party applications — hosted on other platforms, but viewable through the buttons we provide — you will remain on our sites but you will be interacting with these third party’s online environment. In these instances, we make clear that you are viewing external content when you click on buttons.
How to Disable Cookies
If you would like to reduce the web data collected about you while browsing the internet, you can purge and disable cookies in your web browser.
For your awareness, our sites will still work if you disable cookies in your browser. Please note disabling cookies on your browser may impact the operability of other websites you visit and disabling cookies will not disable other technologies (such as web beacons, clear gifs, and single-pixel gifs), which the ACLU of Northern California uses on our sites to support our operations and the security of our sites.
This Statement describes how we treat personal information collected by ACLU of Northern California in our general operations. This includes personal information collected online and offline, including through our main website, [domain], which is operated by the Union but hosts Foundation content, and other ACLU of Northern California sites and Digital Services that link to this Statement.
Certain ACLU of Northern California programs, as well as ACLU of Northern California’s other affiliated ACLU Organizations, have separate privacy statements. When a different privacy statement applies, the relevant privacy statement will be posted. To see a full list of ACLU Organizations’ privacy statements, read ACLU Organizations Privacy Statements.
“Data Choices” means the choices you have in relation to your personal information. These choices may be offered to you as data subject rights required by law.
“Personal information” means information that identifies, relates to, describes, or can be reasonably linked, directly or indirectly, to a specific human, in a personal capacity. It does not include information that is considered de-identified, anonymous, or aggregated under applicable law or information relating to a person in their employment or professional capacities, including information obtained from or about an ACLU of Northern California employee or job applicants looking to work at ACLU of Northern California.
“Processing” of personal information means any operation, or set of operations performed, manually or automatically, on personal information, like collection, use, organization, structuring, storage, transmission, analysis, retrieval, deletion, or modification of personal information.
Our Statement is subject to change. We will post updated versions of this Statement here and, if the changes are significant, we will provide a more prominent notice of changes on our website.
If you have any questions regarding this Privacy Statement or our privacy and data governance practices, you can reach our Privacy and Data Governance team by emailing Privacy@ACLU.org.