Privacy Policy

Find our donor and website privacy policy information here.

Commonweal Privacy Policy

Last Updated: [11/13/2023]

1. Introduction

Commonweal ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.

2. Information We Collect

We may collect the following types of personal information when necessary for our legitimate interests, in connection with the services we provide, or with your explicit consent:

  • Personal Identifiable Information (PII): Name, contact information (address, email, phone number), date of birth, and other similar information.
  • Financial Information: Donations, payment details (credit card information, bank account), and transaction history.
  • Communication Data: Records of your interactions with us, such as emails and support requests.
  • Usage Data: Information about how you use our website, including IP address, browser type, and operating system.
  • Other Information: Any other data you choose to share with us.

3. How We Use Your Information

We use your personal information for the following purposes:

  • To provide, maintain, and improve our services.
  • To process donations and payments.
  • To process event registrations.
  • To communicate with you, respond to inquiries, and provide support.
  • To comply with legal obligations.
  • To protect our rights and interests.

4. Legal Basis for Processing

We rely on the following legal bases for processing your personal data:

  • Consent: We will obtain your consent before processing your data in specific circumstances.
  • Contractual Necessity: We process your data to fulfill a contract with you (e.g., when you make a donation).
  • Legitimate Interests: We may process your data when our legitimate interests do not override your privacy rights.

5. Disclosure of Your Information and Third-Party Embeds

We may share your personal information with third-party service providers, including but not limited to Google, Salesforce, Zapier, PayPal, Stripe, FormAssembly, GiveLively, Shopify, and Ketch, who assist us in providing our services. These third parties are contractually obligated to protect your data and use it only for the purposes specified by us.

Additionally, our website may contain embedded content from third-party services, such as YouTube and SoundCloud. These third-party services may collect data from your interactions with the embedded content, which may include but is not limited to:

  • Your IP address
  • Web browser information
  • Cookies and similar tracking technologies
  • Usage and interaction data

Please note that the collection and processing of data by these third-party services are governed by their own privacy policies and terms of service. We do not have control over the data collected by these third parties, and their practices may differ from our own.

To learn more about how these third-party services handle your data, we recommend reviewing their privacy policies on their respective websites. 

6. Data Retention

We will retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law.

7. Security of Your Data

We are committed to protecting your personal information from unauthorized access or disclosure. We implement appropriate technical and organizational measures to safeguard your data in compliance with GDPR requirements.

8. Your Rights

You have the following rights regarding your personal information:

  • Access, rectification, and deletion.
  • Restriction of processing.
  • Data portability.
  • Object to processing.
  • Withdraw consent, if applicable.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. Any changes will be communicated to you via our website or other appropriate means.

10. Contact Information

If you have questions or concerns about this Privacy Policy or your personal data, please contact us at:

11. Supervisory Authority

You have the right to file a complaint with the relevant data protection authority if you believe we have not handled your personal data in compliance with applicable data protection laws.

12. Linked Websites

For your convenience, some hyperlinks may be posted that link to other websites not under our control. We are not responsible for, and this Privacy Policy does not apply to, the privacy practices of those websites or pages not under our control or of any companies that we do not own or control. We do not endorse any of those websites or pages, the services or products described or offered on such sites or pages, or any of the content contained on those sites or pages.

13. Google Analytics

We use Google Analytics, a web analysis service provided by Google, together with other analytics services, in order to better understand your use of the Services and how we can improve them. Google Analytics collects information such as how often users visit a website, what pages you visit when you do so, and what other websites you used prior to coming to such website. Google Analytics collects only the IP address assigned to you on the date you visit a website, rather than your name or other directly identifying information. We do not combine the information collected through the use of Google Analytics with your personal information. Although Google Analytics plants a persistent cookie on your web browser to identify you as a unique user the next time you visit a website, the cookie cannot be used by anyone but Google. Google Analytics uses its cookie(s) and the information Google Analytics collects to track your online activities over time and across different websites when you use our Services, and other websites. Google’s ability to use and share information collected by Google Analytics about your visits to the Services are governed by the Google Analytics Terms of Service and the Google Privacy Policy. Google may utilize the data collected to track and examine the use of the Services, to prepare reports on its activities, and share them with other Google services. To more fully understand how Google may use the data it collects through the Services, please review “How Google Uses Information From Sites or Apps That Use Our Services” (located here).

14. Social Media Platforms

Any information, communications, or material that you submit to any pages associated with Commonweal on social media platforms is done at your own risk and without any expectation of privacy. All such submissions are subject to the terms of use and privacy policy of such social media platforms.

15. Children's Personal Data

The Services are intended for a general audience and are not intended for use by children under 13 years of age. We do not knowingly collect information about children or sell products to children. Consistent with the Children’s Online Privacy Protection Act, we will not knowingly collect any information from children under the age of 13.