ACLU Foundation Website Privacy Statement
Effective as of April 1, 2021.
The American Civil Liberties Union Foundation, Inc. (“ACLU Foundation,” “Foundation,” or “we” or “us”) is committed to protecting the personal information that you provide and entrust to us when using our websites.
To be clear, this is not the online privacy statement for websites operated by other ACLU organizations that do not contain the aclufoundation.org domain name and do not link to this online privacy statement – for example, www.aclu.org or www.peoplepower.org. Those websites have site-specific privacy terms, which are posted on those sites.
This privacy statement also does not apply to websites that the ACLU Foundation does not operate where the ACLU Foundation has a presence, such as ACLU Foundation pages on Facebook.
Finally, this is not the online privacy statement for the websites of any ACLU Foundation local/state affiliate organizations (“Affiliates”). In all of those cases, site-specific privacy terms apply, and are posted accordingly. Please note, however, that this Privacy Statement provides for the ACLU Foundation to share data collected on the Foundation Site with Affiliates for use consistent with this Privacy Statement, which is described in more detail below, and that you may be redirected to one of our Sites when interacting with the website of our state Affiliates or other partners.
Privacy and the Internet
The Internet, generally speaking, is not currently a private place. As you visit websites, use search engines, and conduct business on the Internet, many different companies and organizations are gathering information about your online behavior by tracking your searches, visits, and transactions, and then matching that data with other information about you or leveraging algorithms to predict your behavior. There are some things you can do to prevent your information from being collected. We encourage you to read our Easy Steps Everyone Can Take to Protect Their Digital Privacy to help protect your privacy online.
Like most websites, our Sites collect and process a range of data about their visitors to enable full functionality of the website and to deliver requested services. We take many steps to protect your privacy when you visit our Sites. How and when we do so is explained below.
Data We Collect
In order to advance our advocacy and outreach programs, and to provide you with a better experience when interacting with the ACLU Foundation, we rely on data collected from our supporters. Data collected includes information that you provide directly and web data that may be automatically received and recorded by us from your browser. This section outlines what data is collected, as well as information on how we use collected data.
Information you provide directly
Certain pages on the Site may invite you to share personally identifying information, such as your name, address, email address, telephone number, payment information (e.g., credit card information to complete a transaction), or other information you provide when submitting an application. Sharing this information will allow you to make a donation, join our email list, sign a petition, register for an event or volunteer shift, send us a message or feedback, or to participate in other similar online activities.
We may automatically receive and record information from your browser when you visit our Site. The information that we collect with these automated methods may include your IP address, cookie information, browser type, system type, and the referring URL.
In addition, if you sign up for our email list, we may send you an email that includes an embedded image to track open rates or URLs that allow us to track click-rates.
Categories of Cookies and Information We Collect
- Protection against fraud: We may have cookies set up to protect us from fraudulent actors making payments through our Site.
Website Performance: Website performance cookies allow us to make our Site easier and more pleasant to use. For example, they may enable us to:
- Determine how often and where you see our “breaking news” alerts or promotions.
- Save you time when filling out a form by populating it with information you provided in previous visits.
- Registration: If you are visiting our Site as a registered user — for example, when you manage your subscriptions for our email lists — we may place cookies in your browser that allow our Site to recognize that you are logged in.
Analytics: We may use analytics tools that place cookies in order to give us a better understanding of how people engage with our Site. That in turn allows us to gauge the current performance of website features, and to develop better content. Analytics cookies can provide us with information such as:
- How many individual visitors we have
- How many visitors are new or returning
- How often visitors come to the website
- What content they’ve visited
- How visitors interact with particular pages or content
You can learn How to Disable Cookies in the section on Your Choices below.
Third Party Links and Hosted Content
Our Site is connected in a variety of ways to content hosted by third parties, including links to social media sites, links to other sites, and embedded media. When you access this content, including content that loads when you browse on the aclufoundation.org domain, third party content hosts may place tracking devices (e.g. cookies or pixels) on your computer, access existing tracking devices that were set when you previously visited other websites, or otherwise gather information about you as you access their content.
When you click on links to third party websites, including social media sites, you will leave our Site. To learn about how those third parties treat the data they collect through tracking devices and otherwise, see their respective online privacy policies and other posted guidance.
When you view embedded media, such as videos, that are hosted on other platforms, such as YouTube, but viewable directly through the buttons we provide, you will remain on our Site, but you will be visiting these third party’s web environments. In these instances, we make clear that you are viewing external content when you click on links or buttons.
Our Data Practices
We may use your data to:
- Fulfill your orders or complete transactions.
- Contact you about other ACLU Foundation activities or news, or about opportunities to support the ACLU Foundation.
- Conduct research in order to learn about our constituents as a whole and about ways we might engage you individually.
- In the case of petitions, we may display your first name, last initial, and city and state on our website.
- In the case of petitions or other direct messages to advocacy targets (such as your member of congress), all required information fields (e.g. name, email address, etc.) will be, and some optional information fields may be, passed on to the advocacy target with your message.
- Use or share your information as otherwise disclosed at the point of collection. For example, when you elect to take an action on our website—such as sign a petition or pledge—we may request information about you and provide a notice that completing and submitting the form will mean that you permit us to share the data you have entered with other parties, such as coalition partners for that campaign.
- Deliver targeted content—including advertisements—to you over the phone, through the mail, and using digital platforms such as social media, other websites, search results pages, and mobile applications.
- Measure and improve the performance of our Site.
- Investigate or maintain the stability and security of our Site.
To perform each of these functions, we may share your information with Service Providers that support our operations. For an understanding of how your data is shared with those vendors, please see “How We Work with Service Providers” below.
This section provides additional information on some special circumstances where we may use or share your data with other organizations. We believe you should have choice regarding these activities and have included information on how you can choose whether your data is used for these practices in the section Communication Preferences below. For an understanding of how your data is shared with those vendors, please see “How We Work with Service Providers” below. These additional uses are:
- Delivering targeted content, including advertisements, to you on non-ACLU Foundation digital platforms such as social media, other websites, search results pages and mobile apps.
- Engaging in list sharing agreements with non-partisan organizations that may be of interest to you.
Deliver targeted content on non-ACLU Foundation platforms
To enable us to provide the most relevant information on our activities, we may share your personal information with communications platforms, such as Facebook and Mother Jones, including to deliver our content to you or to identify other people who may enjoy our content.
We may also share ACLU Foundation supporter information with organizations that display our advertisements or petitions to their subscribers. This practice helps us engage in effective fundraising and advocacy operations and enables our teams to communicate more effectively with known supporters.
Importantly, we want you to have the opportunity to learn about these practices and give you the opportunity to opt out of them. For additional information on with whom we share your data—which may include name, zip code, email address, and other information—for delivering targeted content on non-ACLU Foundation platforms, please see this list of service providers that support us in delivering targeted content on non-ACLU Foundation platforms. If you do not wish to have your data shared with these service providers, please let us know by completing our Communication Preferences form. Additional information on how to change your communication preferences is outlined in the section on Communication Preferences below.
Engage in list sharing agreements with nonpartisan organizations
We sometimes allow other non-partisan organizations to contact our supporters who have chosen to share their information with us. Working with other organizations in this way, either on a rental basis, in an exchange, or through a data sharing co-op, is critical to maintaining a strong membership base by allowing us to lower costs while reaching the widest possible audience. Data shared on a rental basis or in an exchange is done on a one-time use basis. A data sharing co-op aggregates and models data from multiple organizations to identify individuals that might be interested in hearing from co-op members. When we leave the data sharing co-op, our data is removed from the co-op data model.
In order to protect your privacy, list sharing agreements are conducted through secure and confidential arrangements in which the external organization does not directly receive information about you. Communications generated from list sharing agreements are carried out by a third-party service provider, who keeps your information confidential. The other organization learns information about you only if you choose to respond to the third-party communication. If you do not wish us to make information about you available for this type of communication, please let us know by completing our Communication Preferences form. Additional information on how to change your communication preferences is outlined in the section on Communication Preferences below.
How We Work with Our Affiliates
We work and share your data with the American Civil Liberties Union, Inc. (“Union”) and our Affiliates around the United States to create a cohesive experience for our supporters and members. The Union and Affiliates are bound to use the data that we provide them no more broadly than as would be allowed under this Online Privacy Statement, and with regard to their own operations.
How We Work with Service Providers
We work with a variety of service providers who help us undertake the activities outlined in “Our Data Collection Methods,” including processing data; facilitating the operation of our site; supporting our fundraising, marketing, communications, and advocacy programs; and delivering messages to you on other platforms. For example, service providers may help us analyze traffic on our site, process credit card transactions, or facilitate activities such as the collection and delivery of petition signatures or surveys.
To the extent that any service provider has access to personally identifiable data about you, (1) it is transmitted by us to that service provider in a secure manner (please see Security Measures and Data Transmission below for more information on our security practices) and (2) we require that service provider to promise to keep that data confidential and use it only for the purpose of carrying out the functions we have engaged it to perform.
We allow some service providers to compile and use certain aggregated data for other purposes once it has been anonymized. This may include, for example, analyzing anonymized data in order to assess donor trends across organizations over time, or allowing a service provider to take aggregated and anonymized data about activity on our Site, and using that data for other purposes such as improvement of their products or benchmarking for their other clients. But we won’t agree to that unless we are confident, in each instance, that the data won’t be recombined with other information to create any record about you as an identifiable individual.
Additionally, we may share your data with service providers to deliver targeted content to you on non-ACLU Foundation platforms, as described in the above section “Additional Uses.” Data shared with these service providers are transmitted in a secure manner (as described below under “Security Measures and Data Transmission”), and additionally hashed to improve privacy (hashing data refers to the practice of scrambling data in a pre-defined manner to make it more difficult to recognize). As we have limited ability to perform detailed reviews of these service providers’ security practices, and the service providers’ terms are subject to change without notice, we rely on publicly posted information to ensure their data practices meet our standards. We review these terms on a quarterly basis to ensure they have not changed their assurances.
We may also disclose your data if we are required to do so by law, such as to comply with a subpoena or other legal process, a court order, or government reporting obligations.
If we determine we are required by law to disclose your data and if we are legally permitted to do so, we will provide you with notice of the request prior to making the disclosure to give you an opportunity to object to the disclosure. We will not provide such notice, however, if the disclosure is pursuant to our regular government reporting obligations, such as financial disclosures required for tax law compliance.
Security Measures and Data Transmission
We have taken physical, electronic, and administrative measures to safeguard the information we collect. We work to ensure data accuracy and protect against unauthorized access to, and improper use of, information we collect online.
Information that can be readily linked to you personally, such as your name and address, is stored by us on servers subject to security safeguards. Additionally, all data transmitted to and from our website, including credit card numbers, are encrypted in transit.
We require our service providers to whom we transfer your information to agree to take reasonable security measures in the handling and storage of your data. For service providers with access to particularly sensitive information, we may also undergo a more intensive assessment of their platforms and security practices to verify their commitments to maintain the confidentiality and privacy of data in their possession. We may also hash data in order to improve privacy. This is true when sharing data to deliver targeted content on non-ACLU Foundation platforms.
Consistent with these practices, we attempt to transmit emails to you using opportunistic Transport Layer Security (TLS). If your email provider does not accept our initial attempt to transmit using TLS, your message will be sent in plain text, which is not secure.
If you wish to update personal information or change your communication preferences, you may contact us to update our records. You have the following options to do this:
- If you are enrolled to receive ACLU Foundation and affiliate email communications: click on the “Unsubscribe” link in the footer of any ACLU Union, ACLU Foundation, or Affiliate email to change your communication preferences.
- If you are enrolled to receive automated recurring text messages from 82623, text or reply “STOP” to 82623 to opt out, and for other autodialed text messages we send via an autodialer, reply “STOP” or follow instructions in the text message.
Complete our Communication Preferences form to change your communications preferences for information you shared with us previously for the following:
- Paper mail communications
- Phone communications
- Data sharing with non-ACLU Foundation platforms that deliver targeted content (Please note, opting out of this practice will also unsubscribe you from our email communications.)
- List sharing agreements with non-partisan organizations
- Send an e-mail to: ACLUpreferences@aclufoundation.org.
- Send mail to: ACLU Foundation Membership Department, 125 Broad Street, 18th Floor, New York, NY 10004.
If you have any other questions regarding this Privacy Statement or our data practices, you can reach our Data Protection and Governance Lead by emailing ACLUpreferences@aclufoundation.org.
How to Disable Cookies
To provide you with maximum choice in deciding what data is collected about you, we have designed our website to work perfectly fine without cookies. If you would like to minimize the information about you collected by us and third party content hosts, please see the below instructions for blocking and purging cookies. Please note disabling cookies on your browser may impact the operability of other sites you visit.
Procedure When We Update This Statement
Our privacy statement may change from time to time. We will post privacy statement changes on this page and, if the changes are significant, we will provide a more prominent notice on our website. We will also keep prior versions of the Online Privacy Statement available for your review in this section.
- September 1, 2019 (original statement)
- April 1, 2021 (clarifications to prior version regarding our data sharing practices with service providers, and additions to provide site visitors with the ability to choose how we use your data)