ACLU of Northern California Privacy Policy

Privacy Statement | Data Privacy Principles | ACLU Organizations Privacy Statements 

Effective July 1, 2024 

The American Civil Liberties Union Northern California ("Union") and the American Civil Liberties Foundation Northern California ("Foundation") (collectively, “ACLU of Northern California," "we," "us," or "our) work to expand the right to privacy, increase the control individuals have over their personal information, and ensure civil liberties are enhanced rather than compromised by technological innovation.  

ACLU of Northern California is committed to living our values by describing, in plain language, how we collect and use your personal information and by providing clear choices for how we collect and use your personal information. We continually evaluate and improve our privacy and data governance practices to responsibly handle personal information entrusted to us. This may include information about you, whether you are an ACLU of Northern California supporter or not. We collect information from and about you when you interact with us and we may obtain information about you as an individual member of the public from other sources whether you are an entity] supporter or not (e.g., you are a registered voter and we have information about you in voter files we use to conduct voter outreach; research on civil liberties issues, such as, voting rights discrimination; or to identify and better understand potential entity] supporters). In this statement “you” refers to both entity] supporters and individuals with whom we may not currently have a direct relationship. 

This Privacy Statement (“Statement”) describes how ACLU of Northern California collects, uses, shares, or otherwise processes personal information in its day-to-day operations. Certain ACLU of Northern California programs, as well as “Other ACLU Organizations,” which include the American Civil Liberties Union, Inc., the American Civil Liberties Union Foundation, Inc., the ACLU Voter Education Fund (collectively, "National" or “ACLU”), and other ACLU state/local/territory affiliated organizations (ACLU “Affiliates”) throughout the United States have separate privacy statements. Those statements are available here ACLU Organizations Privacy Statements. ACLU of Northern California and its affiliated organizations may be referred to individually and collectively as “ACLU Organizations.” To learn more about the scope of this Statement, applicable regulations, and key definitions, read About this Statement.  

Privacy Statement Highlights 

  • Our Data Privacy Principles. ACLU of Northern California is committed to your right to privacy. We follow these eight principles when processing your personal information: Transparency, Individual Participation, Purpose Specification, Data Minimization, Use Limitation, Data Quality and Integrity, Security, and Accountability. Learn more

  • Personal Information We Collect. ACLU of Northern California collects and stewards personal information about you through a variety of methods, including through direct collection (e.g., through a web form you submit), through automated data collection (e.g., through technologies to understand how people navigate our websites), from third-party sources (e.g., voter information from government and commercial sources), and by inferring personal information about you (e.g., as we look for individuals who may be interested in joining a discrimination lawsuit based on information we have collected from you and/or information acquired from third-party sources). Learn more.  

  • Why We Use Your Information. ACLU of Northern California uses your personal information to further our mission. To better illustrate why we collect this information, we have listed specific processing purposes for which ACLU of Northern California uses your information, categorized by the thematic activities of advocacy and organizing; digital services optimization and operations; digital services optimization and operations; fundraising; legal services; outreach and research; merchandise; and when required by law, to prevent fraud and protect our or others’ rights. Learn more

  • With Whom and How We Share Your Information. ACLU of Northern California shares your personal information with our Affiliates, service providers who help us carry out business activities, business partners, and other third parties as required or permitted by law. Learn more

  • Your Choices and Rights. ACLU of Northern California offers choices on how we process your information. You can let us know how you want us to communicate with you, to correct your information, and ask us to delete or stop using your information in certain ways. Learn more

Personal Information We Collect 

ACLU of Northern California collects and stewards your personal information through a variety of methods. This section outlines what information we collect and how we collect it. 

Information You Give to Us 

This includes information you explicitly take steps to share with ACLU of Northern California. This may be through online forms, offline donation and volunteer sign-up forms, or over the phone when you call ACLU of Northern California to donate or request Foundation legal assistance, for example. Through these processes, you may share the following categories of information:  

  • Account registration. For example, account username and password.  

  • Audio or visual. For example, your image or voice captured when you attend an in-person or virtual event or leave us a voicemail. 

  • Contact. For example, email address, postal address, or telephone number. 

  • Demographic. For example, age, citizenship status, ethnicity/race, sexual orientation, gender identity, marital or other relationship status, and household information. 

  • Financial. For example, the amount you plan to bequeath to ACLU of Northern California. 

  • Health. For example, that you have had an abortion or have a disability, and/or other information you provide to us about your health when seeking legal representation, when you tell your story in an ACLU of Northern California campaign, and/or to request an accommodation at an ACLU of Northern California event.  

  • Interaction. For example, purchase and donation history, membership status, and advocacy actions taken. 

  • Interests. For example, civil liberties or campaigns you are particularly interested in hearing about, or more general information about your personal and professional interests that are relevant to your engagement with ACLU of Northern California and our work.  

  • Jurisdiction. For example, your zip code or county to help us identify your voting district or current representatives. 

  • Legal. For example, details about conditions of incarceration or other detention that may have violated your civil rights or liberties that you provide to us when seeking legal representation or to tell your story in an ACLU of Northern California campaign. 

  • Preferences. For example, your preferred method(s) of communication. 

  • Transaction. For example, credit or debit card details that you provide to make a donation or to purchase ACLU of Northern California merchandise. 

  • User-created content. For example, stories you provide to us as part of our storytelling campaigns or messages on issues we send to your legislative representatives on your behalf. This also includes photos, videos, audio, and other information you may submit to us. 

  • Other. Any other information you choose to provide, which may include information deemed to be “sensitive” personal information under certain privacy laws, such as religious beliefs, information about your sexual orientation or sex life, or citizenship status. 

Information We Automatically Collect 

ACLU of Northern California and our authorized third parties may use technologies to automatically receive and record information when you interact with us online on our websites and/or through other digital technologies, such as email platforms, mobile applications that link to this Privacy Statement, or over the phone (altogether, “Digital Services”). These technologies allow the ACLU of Northern California to improve our Digital Services, to create a better experience for our users, and to protect against fraud. 

These technologies may include cookies — small files placed on your browser that can be used to uniquely identify you and record information about the websites you visit — and other technologies, such as web beacons, clear gifs, and single-pixel gifs, that use embedded code in our Digital Services to record details about your use of those Digital Services, like whether you opened an email or clicked on a link.  

These technologies may be placed by us or by other entities we authorize. We only authorize third parties to place these technologies on our Digital Services if those authorized third parties abide by our confidentiality and security requirements described below under With Whom and How We Share Your Information.  

ACLU of Northern California and our authorized third parties may automatically collect the following categories of information: 

  • Contact. For example, your email address or telephone number. 

  • Device identifiers. For example, your phone model, phone carrier browser version, or operating system you use to browse our sites.  

  • IP address or information that could be derived from it. For example, your approximate geolocation.  

  • Interaction. For example, the content you click on or view in our e-mails, the amount of time you spend on our websites, or the referring URL. 

Information We Receive from Others 

ACLU of Northern California may acquire personal information about you from third-party sources, such as data cooperatives for nonprofits; other nonpartisan organizations; coalition partners; commercial voter file and consumer research providers; and various federal, state, and local government entities (e.g., public records data or information procured through FOIA requests that we use to search for civil liberties violations). We acquire this information to learn more about you — including how best to engage with you — to identify people like you that may be interested in hearing from ACLU of Northern California, and to research and evaluate potential or ongoing claims or advocacy regarding civil rights and civil liberties issues. We may collect the following categories of information from third-party sources: 

  • Contact. For example, your telephone number, physical and email addresses, or social media handles. 

  • Demographic. For example, your age, gender and race/ethnicity for assessing the potential disparate impact of laws, learning about the diversity of our supporters and voters to further our commitment to Systemic Equality, and deciding how best to engage people to support our fight against laws that restrict their civil rights, such as stopping bans on abortion. 

  • Interaction. For example, your engagement with other nonpartisan organizations, nonprofit organizations, and entity] coalition partners, or your likelihood to support the ACLU of Northern California and our issue areas. 

  • Interests. For example, civil liberties or campaigns you may be interested in hearing about or supporting.  

Information We Infer and Model 

ACLU of Northern California may use personal information we have collected — directly, automatically, or acquired from third parties — to compile, combine, and infer new information about you. We do this to tailor our communications and outreach, and to improve our programs and services.  

ACLU of Northern California and our service providers may infer the following categories of information: 

  • Contact. For example, inferred members of your household. 

  • Demographic. For example, when we cannot ascertain demographic data directly, we may rely on models or service providers to infer gender or racial/ethnic identity in order to assess the potential disparate impact of laws, learn about the diversity of our supporters and voters to further our commitment to Systemic Equality, and decide how best to engage people to support our fight against laws that restrict their civil rights, such as stopping bans on abortion.  

  • Financial. For example, we may use models or service providers to estimate the amount you are likely to donate. 

  • Interaction. For example, inferred likelihood to engage with the ACLU of Northern California and our issue areas. 

  • Interests. For example, civil liberties or campaigns you may be interested in hearing about or supporting. 

  • Preferences. For example, your preferred method(s) of communication. 

  • Voting. For example, inferred likelihood to vote based on an issue area. 

Why We Use Your Information 

ACLU of Northern California collects your personal information to further our mission through our advocacy and organizing, litigation, and fundraising programs. When we process, use, or share that information, we apply appropriate confidentiality and security requirements (see: How We Protect Your Information and With Whom and How We Share Your Information). In addition, we aim to use only the information that is specific and necessary for the ACLU of Northern California processing purposes we collected it for (see: Our Data Privacy Principles). 

  • Advocacy and Organizing. ACLU of Northern California works to advance our advocacy and organizing capacity to further our mission. To do this, ACLU of Northern California uses the personal information you provide to us when you take action to share your stories and testimonials, to deliver your petitions and action messages, and to host events. We may also use your personal information to mobilize volunteers and activists in support of our work.  

  • Fundraising. ACLU of Northern California, as a nonprofit, needs donor support to enable its operations. To do this, ACLU of Northern California uses your personal information to process your donations and solicit donations.  

  • Legal Services. Foundation works to win court battles and Supreme Court cases core to our issue areas, and to provide other critical legal services regarding important civil liberties and rights to Foundation clients. To do this, ACLU of Northern California uses sources that may include your personal information to research violations of civil liberties, evaluate requests for legal representation, solicit potential clients, litigate court cases, and effectively represent Foundation clients. 

  • Merchandise. ACLU of Northern California provides merchandise to support our advocacy and fundraising efforts. When you order merchandise, ACLU of Northern California uses your personal information to register your account with our store or process your payments.  

  • Outreach and Research. ACLU of Northern California works to deliver to you information on issue areas you have identified as important to you, and to seek out new supporters of our mission. To do this, ACLU of Northern California uses your personal information to communicate opportunities to support ACLU of Northern California‘s mission through various communication channels, including targeted advertising, based on your engagement profile, social listening, and polling.  

  • Services Security, Optimization, and Improvement. ACLU of Northern California works to provide you with a secure and optimized experience engaging with our Digital Services, and to improve our programs and services to advance our work preserving and protecting civil rights and liberties more generally. To do this, ACLU of Northern California uses your personal information in: user-experience testing, website performance assessment, fraud detection, account registration, and to conduct internal research to develop and improve our services, products, and technologies.  

  • When Required by Law, to Prevent Fraud, and Protect Our or Others’ Rights. ACLU of Northern California, as a nonprofit, must submit donation reports to governmental entities and fulfill other legal obligations, such as complying with Your Choices and Rights. To do this, ACLU of Northern California uses your personal information to fulfill those obligations (e.g., ensuring that your information is deleted from our systems if you so request). In addition, ACLU of Northern California may need to use your personal information to prevent fraud or to protect our or others’ rights (e.g., researching your personal information if we have reason to think you may be using our name and logo without permission). 

Processing Activities and Uses 

There is not a “one-size fits all” approach to how ACLU of Northern California processes and uses personal information. ACLU of Northern California strives for transparency about what personal information we collect and how we use it. This chart details further our personal information processing activities and their purposes, the categories of personal information we process (see Personal Information We Collect for more information), and the categories of parties with whom we may share your information (see With Whom and How We Share Your Information for more information).  

Processing Activity and Use 

Purpose(s)*^ 

Type(s) of Information* 

With Whom We May Share Information^ 

Account creation and management: To create and manage your account. Accounts may be created for our online store. 

  • Merchandise 

  • Services Security, Optimization, and Improvement 

  • Account registration 

  • Contact  

 

  • Service Providers 

Broadcast updates and communicate with you: To keep you informed of our priorities and opportunities to get involved, and in response to inquiries made by you. This can be through direct mail, email, phone calls, and text messages and includes any of our action or marketing lists you subscribe to.  

  • Advocacy and Organizing  

  • Fundraising 

  • Legal Services 

  • Outreach and Research 

  • Merchandise 

  • Services Security, Optimization, and Improvement 

  • Contact 

  • Demographic 

  • Interaction 

  • Interests 

  • Preferences 

  • User-created content 

  • Voting 

 

  • Service Providers  

 

Conduct research and analyze information to improve the effectiveness of our outreach and communications: To ensure you receive the most relevant opportunities, we use personal information to model and identify who is most likely to support an issue area or campaign and segment our messages.  

  • Advocacy and Organizing  

  •  

  • Fundraising 

  • Services Security, Optimization, and Improvement 

 

  • Contact 

  • Demographic 

  • Device identifiers 

  • Financial  

  • Interaction 

  • Interests 

  • Preferences 

  • Voting 

 

  • Affiliates 

  • Service Providers 

 

Deliver petitions and other message actions: To facilitate petitions and other message actions to our advocacy targets (such as messages to your member of Congress).  

  • Advocacy and Organizing 

  • Contact 

  • User-created content 

 

  • Business Partners (Coalition Partners) 

  • Service Providers 

  • Other Third Parties (Advocacy Targets) 

Evaluate requests for and provide legal services: To assess requests for legal assistance, potential and pending legal action, and to deliver legal services to Foundation clients. 

  • Legal Services 

  • Services Security, Optimization, and Improvement 

  • Contact   

  • Demographic 

  • Financial 

  • Health 

  • Jurisdiction 

  • Legal 

  • User-created content 

  • Affiliates 

  • Business Partners (Co-Counsel) 

  • Service Providers 

Host our National Advocacy Institute and other events: To plan and host in-person or virtual events, including selecting participants, awarding scholarships, coordinating travel, lodging, or other accommodations and logistical planning.  

  • Advocacy and Organizing  

  • Fundraising 

  • Legal Services 

  • Outreach and Research 

  • Services Security, Optimization, and Improvement 

  • Contact 

  • Demographic 

  • Financial 

  • Health 

  • Interaction 

  • Interests 

  • Legal 

  • User-created content 

  • Affiliates 

  • Service Providers 

Mobilize volunteers: To mobilize volunteers to canvass, phonebank, or text-bank in support of an issue area or campaign. 

  • Advocacy and Organizing 

  • Services Security, Optimization, and Improvement 

  • Contact  

  • Interaction 

  • Interests 

  • Affiliates 

  • Service Providers 

  •  

Participate in data cooperatives and list sharing arrangements to identify prospective ACLU of Northern California donors and strengthen support: To grow and strengthen our donor base, we participate in list exchanges with like-minded, nonpartisan organizations, and engage in data cooperatives for nonprofits. 

  • Fundraising 

  • Contact 

  • Interaction 

  • Business Partners (Data Cooperatives for nonprofits, Nonpartisan organizations) 

  • Service Providers 

Prevent fraud: To protect ACLU of Northern California against fraudulent actors making payments through our sites.  

  • Services Security, Optimization, and Improvement 

  • Contact 

  • Device identifiers 

  • Interaction  

  • IP address or information that could be derived from it  

  • Service Providers 

 

Process payments: To process your donations or payments for other services such as registering and paying for an ACLU of Northern California ticketed event. This includes managing payments, charges, and bequests from estates and financial accounts. 

  • Advocacy and Organizing 

  • Fundraising  

  • Contact   

  • Financial   

  • Transaction  

  • Service Providers 

 

Research violations of civil liberties: To research and analyze the impacts of laws, policies, and government or other stakeholder actions. This may be done to prepare and bolster legal claims, ACLU of Northern California advocacy campaigns, public education, and/or particular programs. For example: 

  • Conducting disparate impact analysis of data collected from government agencies through FOIA requests;  

  • Analyzing employment records we are given access to in order to monitor employer compliance with an employment discrimination settlement on behalf of our clients; or  

  • Analyzing data received from police departments pursuant to settlement agreements.  

  • Advocacy and Organizing 

  • Legal Services 

  • Services Security, Optimization, and Improvement 

  • Contact 

  • Demographic 

  • Financial 

  • Health 

  • Jurisdiction 

  • Legal 

 

  • Affiliates 

  • Business Partners (Coalition Partners, Co-counsel) 

  • Service Providers 

 

 

Secure and optimize our Digital Services: To make our Digital Services easier, more pleasant to use, and effective by monitoring, assessing, and conducting other research and internal operations to secure, optimize, and improve our services, technology, and products. 

  • Advocacy and Organizing  

  • Fundraising 

  • Outreach and Research 

  • Services Security, Optimization, and Improvement 

  • Device identifiers 

  • Interaction 

  • IP address or information that could be derived from it 

  • Service Providers 

Serve and improve targeted advertising: To deliver advertising to people who are likely to support our issues, and to improve our targeted advertising, we may use aggregated ad performance data like views, click, and conversions.  

  • Advocacy and Organizing  

  • Fundraising 

  • Services Security, Optimization, and Improvement 

  • Contact 

  • Demographic 

  • Interaction 

  • Interests 

  • IP address or information that could be derived from it 

  • Jurisdiction 

  • Voting 

  • Business Partners (Third-party advertisers) 

  • Service Providers 

 

Solicit requests for legal support: ACLU of Northern California may solicit you directly or indirectly as a potential plaintiff if we think you may benefit from our services. You may also decide to contact ACLU of Northern California for legal support, in which case, we may process your information to determine if we can help and/or refer you to organizations that can help. 

  • Legal Services 

  • Services Security, Optimization, and Improvement 

  • Contact  

  • Demographic  

  • Financial 

  • Health 

  • Interaction 

  • Interests 

  • Jurisdiction 

  • Legal 

  • Voting  

  • User-created content 

 

  • Affiliates 

  • Business Partners (Co-counsel) 

  • Service Providers 

 

 

Storytelling: The ACLU collects your stories to raise awareness around testimonials of injustice as part of our movement building. 

  • Advocacy and Organizing 

  • Fundraising 

  • Legal Services 

  • Services Security, Optimization, and Improvement 

 

  • Contact  

  • Demographic  

  • Health 

  • User-created content 

  • Affiliates 

  • Service Providers 

  • Business Partners (Coalition Partners) 

*Special Circumstance: In some instances, we may collect and/or use your personal information in ways not described in this chart. In those instances, we will describe how we will use or share your personal information at the point of collection. 

 

^When Required by Law, to Prevent Fraud, and Protect Our or Others’ Rights: The ACLU of Northern California may also use your information to fulfill our legal obligations. Our processing activities may require that we share your information with government agencies, law enforcement, or other third parties, for example as we assess a potential threat you may have made to us. See With Whom and How We Share Your Information.  

In addition to the processing purposes described in this notice, we may also de-identify personal information where possible. We may de-identify existing personal information to proactively minimize the data in our possession when identifying information is no longer needed. We may also de-identify information to remove identifying information from records that must be retained for legal purposes when you request the ACLU of Northern California delete your information. When we de-identify information permanently for privacy purposes, we will use it only in its de-identified form and do not attempt to re-identify the information. 

How We Protect Your Information 

ACLU of Northern California has taken physical, technical, and administrative measures to safeguard the information we collect. We work to keep your data safe and protect against unauthorized access to, and improper use of, personal information we collect online.  

  • Physical measures. For example, your personal information, such as your name and address, is stored on servers subject to physical security safeguards. 

  • Technical measures. For example, data transmitted to and from our sites, including credit card numbers, are encrypted in transit.  

  • Administrative measures. For example, we have established privacy and security policies and procedures to limit access to personal information. We also adhere to industry standards and regularly monitor our compliance with Payment Card Industry Standards to protect credit card information that you provide to us. 

With Whom and How We Share Your Information 

This section provides additional information on how we share your personal information with our state and local Affiliates, service providers, business partners, and other third parties.  

We share personal information with your consent, when you direct us to share it with others, as necessary to complete your transactions, or to provide the services you have requested or authorized. For example, when you provide credit card information to donate, we will share that data with payment card processors and other entities as necessary to process your payment and to prevent or detect fraud.  

We also share personal information with the following types of other parties: 

Our Affiliated Organizations 

To maximize our impact nationwide, ACLU of Northern California works together with and shares your personal information with our state/local/territory Affiliates around the United States and National to create a coherent experience for our supporters, members, and the public. For example, when you become a member of the National Union, you typically will also become a member of ACLU of Northern California’s Union Organization (if the mailing address you provide with your donation is in our state or territory). We also may co-collect or share your personal information with any affiliated ACLU Organizations. 

While the ACLU Organizations adhere to a common set of privacy principles and standards for handling personal information that we share with one another, each ACLU Organization may have its own unique data practices that are not contained in this Statement. When we share your personal information with other ACLU Organizations, they are bound to use that information in accordance with their privacy statement and with regard to their own operations. To view the list of all ACLU Organizations’ privacy statements, read ACLU Organizations Privacy Statements

Service Providers 

We work with a variety of service providers who help us process your personal information as outlined in Why We Use Your Information above, such as to facilitate the operation of our sites; support our fundraising, marketing, communications, and advocacy programs; and deliver messages to you on other platforms.  

We require these service providers to agree to take reasonable security measures in the handling and storage of that information. When we share personal information about you with a service provider, we take steps to: (1) transmit it in a secure manner and (2) require the service provider to promise to keep that information confidential and use it only for the purpose of carrying out the activities we have directed them to perform. 

We allow some service providers to compile and use certain information related to ACLU of Northern California and/or its supporters’ use of the services for internal purposes, like improving the functionality or security of the services ACLU of Northern California receives from the service provider. In some instances, this may include training the service providers’ artificial intelligence tools or features for the services they provide the ACLU of Northern California*. In addition, we may also permit service providers to create and use data that has been de-identified for broader business purposes, including sharing aggregated benchmarking data with their business partners, other customers, or other third parties. We will not agree to that unless the service provider has sufficiently committed to not recombine the data with other information to identify you, and will not share or sell or use any identifiable data about you for the benefit of third parties outside the ACLU of Northern California-service provider business relationship. 

*ACLU of Northern California  takes your agency over the use of your personal information seriously. As the artificial intelligence landscape continues to evolve, we are committed to monitoring our service providers' artificial intelligence tooling for disproportionate privacy risks and other potential threats to civil liberties.  

Business Partners  

In some cases, we may disclose personal information to our vendors and other business partners for their own business purposes. In exchange, we may receive money or something else of value to ACLU of Northern California (e.g., a list of donors or supporters from like-minded organizations whose donors and supporters may also be interested in donating to and supporting ACLU of Northern California). We may also share your information with third party business partners at your request. For example, we may share information with another nonprofit advocacy organization with whom we are co-hosting an event or working in broader coalition on important civil liberties issues.  

These “Business Partners” include:  

  • Coalition Partners. To enable more effective advocacy, organizing, and litigation, we often partner with other organizations to further the reach of our work. We may share your personal information with our coalition partners to further those efforts and bolster our respective capacities to pursue our missions. We, however, will only share your personal information if you have requested or consented to have it shared. 

  • Co-counsel. As needed, ACLU of Northern California may share personal information with third parties during litigation, including with co-counsel, referral partners, expert witnesses, and other parties engaged in prospective and pending litigation. Personal Information we share in this context may be related to you or other individuals who are not direct clients depending on the legal matter. For example, we may use modeled voter data that is relevant to a voting rights case against a state government entity. When ACLU of Northern California lawyers share personal information, particularly client information, they do so in compliance with applicable professional responsibility rules. 

  • Data Cooperatives for Nonprofits. To grow our base of donors, ACLU of Northern California participates in nonprofit data cooperatives. Data cooperatives are membership-based services offered by vendors that enable cooperative members to pool personal information about their respective supporters to model and identify new prospective supporters and/or to deepen engagement with existing supporters. When we participate in data cooperatives, we may share your personal information, including contact and interaction information — for example, donation history — with data cooperative vendors in exchange for the ability to contact individuals who are prospective ACLU of Northern California supporters and/or modeled information about existing ACLU of Northern California supporters who also support other cooperative member nonprofits (e.g., modeled information may include likelihood to become a monthly donor to ACLU of Northern California). This practice of sharing supporter personal information with and through a data cooperative is a longstanding nonprofit practice that enables nonprofits to maintain a stronger supporter base — while lowering costs — by targeting communications to individuals who are most likely to be interested in hearing from them. 

ACLU of Northern California will join a data cooperative only if the cooperative exclusively serves nonprofit entities; does not receive any information from ACLU of Northern California about supporters whose information is not already included in the cooperative’s database; does not provide cooperative members direct access to ACLU of Northern California-provided information; does not share information derived from ACLU of Northern California-provided information to partisan organizations; will not disclose an individual’s ACLU of Northern California association to cooperative members; and agrees to remove from the cooperative’s data pool and destroy ACLU of Northern California-provided information when we leave the data cooperative. 

  • Nonpartisan Organizations (List Rental or Exchange). To grow our donor base, ACLU of Northern California may share your contact information with other nonpartisan organizations, either on a rental basis (i.e., for a monetary fee) and/or in exchange for a similar supporter list from the other nonpartisan organization that ACLU of Northern California can contact. This information sharing allows each organization to contact the supporters of the other organization to further its mission This collaboration is critical to maintaining a strong donor base by lowering costs while reaching the widest possible audience. Data shared with nonpartisan organizations is done on a one-time use basis. 

In order to protect your privacy, list-sharing agreements with other nonpartisan organizations are conducted through secure and confidential arrangements in which the external organization does not directly receive information about you unless you choose to engage. Communications generated from list sharing agreements are carried out by each nonpartisan organization’s service provider(s), e.g., a vendor who prepares and sends out a mailer, who keeps your information confidential and secure. The other organization learns information about your relationship with the ACLU of Northern California only if you choose to respond to their third-party communication. 

  • Third-party Advertisers. ACLU of Northern California may display targeted advertisements to you on non- entity] platforms, third-party websites, and social media sites, such as Facebook and Instagram, to fundraise and build support for our advocacy, organizing, and litigation priorities. We target our advertisements to effectively and efficiently reach people who are most likely to take action, including people impacted by government policies. In doing so, we may share your personal information with third-party advertisers to serve targeted advertisements to specific individuals (i.e., one-to-one matching), including you, or to display ads to people who are similar to specific individuals (i.e., “look-alikes”) who have engaged with ACLU of Northern California. These practices help us engage in effective fundraising and advocacy operations and enable our teams to communicate more effectively with known and prospective supporters.  

Personal information shared with these third-party advertisers are hashed to improve privacy. Hashing data refers to the practice of scrambling data in a pre-defined manner to make it more difficult to recognize. We only share hashed data with third-party advertisers that promise to hold entity]-provided information confidentially and securely, and promise not to use entity]-provided information for other purposes. For additional information on with whom we may have shared your personal information for targeted advertising purposes, please see Third-party Advertisers

Other Third Parties 

We may also share certain personal information with other third parties, as follows: 

  • Advocacy Targets. To enable more effective advocacy, organizing, and litigation, we may use petitions and other message actions to demonstrate our collective size and strength as ACLU of Northern California advocates and organizers to spur change. When collecting signatures for a petition or facilitating other message actions, we may share personal information with advocacy targets (such as messages to your member of Congress). 

  • Where Requested or Consented to by You (including Public Disclosures) or Necessary to Fulfill Your Request.  

  • Where Required by Law or Necessary to Protect ACLU of Northern California or Others. We may disclose personal information from or about you to third parties in the following circumstances: 

    • To comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies; 

    • To conduct litigation, including by disclosing information to co-counsel or ACLU of Northern California advisors or other parties involved in the litigation process of claims by or against the ACLU of Northern California;  

    • In the event of exigent circumstances, to help prevent the loss of life or serious injury or to protect the personal safety of ACLU of Northern California personnel, users of our Digital Services or other ACLU of Northern California services, our visitors, or the public; 

    • To detect, investigate, prevent or otherwise address fraud or privacy issues; 

    • To operate and maintain the security of our services, including to detect, investigate, prevent, stop, or remediate an attack on our computer systems or networks; or 

    • To protect the rights or property of ourselves, our Affiliates, or others, including by enforcing our agreements, terms, and policies. 

    • ACLU of Northern California considers individual privacy and government overreach to be serious civil liberties issues. If we are required by law or legal process to share your information with government agencies, law enforcement, or other third parties (e.g., plaintiffs or defendants in a legal action), we will object to legal demands for third-party access to your information that we believe to be improper. In those situations, if it is determined that we are required by law to disclose your data, we will attempt to do so under cover of confidentiality and, as long as we are legally permitted to do so, will also attempt to provide you with notice of the request by whatever method is reasonably practical prior to making the disclosure to give you an opportunity to object to the disclosure. We will not provide such notice, however, if the disclosure is pursuant to our regular government reporting obligations, such as financial disclosures required for tax law compliance.  

Your Choices and Rights 

The ACLU of Northern California offers you a number of choices in relation to your personal information. Further, you may have a legal right to these choices depending on your jurisdiction. 

Communication Preferences 

We strive to communicate with you according to your preferences.  

In some instances, you can update your communication preferences directly through the communication channels where we contact you, e.g., by texting or replying “STOP” to unsubscribe from automated recurring text messages from 82623 or by clicking on the “Unsubscribe” link in the footer of our emails.  

In other instances, you will need to contact us to update your communication preferences. To make updating your phone and direct mail communication preferences as easy as possible, we have provided three methods: 

  1. Recommended: Communication Preferences web form. We recommend submitting your phone and mail preferences via our Communication Preferences web form to expedite processing. 

  1. Email. Send an e-mail to: ACLUpreferences@ACLU.org. 

  1. Mail. Send a letter to ACLU Membership Department, 125 Broad Street, 18th Floor, New York, NY 10004. 

Data Choices  

Your Data Choices 

The ACLU of Northern California offers you several choices in relation to your personal information. These choices may be offered to you as data subject rights required by applicable law. Data subject rights established by law can differ depending on the state or U.S. territory in which you reside and may be subject to legal limitations. The choices that ACLU of Northern California offers include: 

  1. Opting out: You have the choice to opt out of certain types of data processing activities.  

  • Targeted Advertising. You have the choice to opt out of targeted advertising. In the ACLU of Northern California context, targeted advertising refers to our practice of sharing your personal information with third-party advertisers to direct advertisements to you. 

  • Sales of Data. You have the choice to opt out of sales of data. In the ACLU of Northern California context, we exchange donor personal information with other nonpartisan organizations and nonprofit data cooperative vendors. When you opt out of sales of data, you will be removed from both practices. 

Note: Some consumer privacy laws also afford residents the right to opt out of profiling or automated decision-making with legal or similarly significant impacts. ACLU of Northern California does not conduct these activities. 

  1. Correcting what we have: You have the choice to correct the personal information we have about you. We must consider the interests of others, so this is not an absolute right.  

  1. Deleting what we have: You have the choice to request that we delete the personal information we have about you, except information that is required or permitted to be kept in compliance with applicable law and obligations. If any personal information cannot be deleted, we will notify you when your request is complete. 

Note: If you choose to delete your personal information from our systems, your membership, donation, advocacy, and volunteer history with the ACLU Organizations will be irreversibly deleted. This will also unsubscribe you from all ACLU Organizations Communications and cancel any recurring donations. You may re-subscribe to ACLU of Northern California communications at any time, but doing so will not restore your past history with ACLU Organizations. 

Submit a Data Choice Request 

You may submit a data choice request to us using the mechanisms below. To make submitting Data Choice Requests as easy as possible, we have provided the following methods:  

  1. Recommended: Your Data Choices web form. We recommend submitting your data choice request(s) via our dynamic Data Choices web form to expedite processing.  

  1. Email. You may submit an opt-out request for targeted advertising or sales of data by emailing privacy@aclu.org. .  

You may also authorize another party to submit an opt-out request for targeted advertising and/or sales of data or a deletion request on your behalf by having them email Privacy@aclu.org

Further notes on making Data Choice Requests: 

  • Identity Verification. When you or an authorized agent on your behalf make a request, we will confirm your identity. We may contact you for more information to verify your identity beyond what is included in your initial request. Information collected to verify your identity will never be used for any other purpose than to verify your identity to fulfill your request. To preserve privacy and further equity, we are committed to not using biometrics, social security numbers, or commercial credit bureau information as part of our identity verification process. 

  • Children. If you are under 13, we do not want your personal information, and you must not provide it to us. If you are a parent or guardian and believe that your child who is under 13 has provided us with personal information, please contact us to have your child’s information removed. 

  • Appeals. If you would like to make an appeal related to a Data Choice Request, you may do so by emailing Privacy@aclu.org

Manage Your Privacy Online 

The internet is not a private place. As you visit websites, use search engines, and conduct business on the internet, many different companies and organizations are gathering information about your online behavior, including your searches, visits, and transactions, and then matching that data with other information about you or leveraging algorithms to predict your behavior. There are some things you can do to prevent your information from being collected. We encourage you to read our blog post Easy Steps Everyone Can Take to Protect Their Digital Privacy to help protect your privacy online. 

Like most websites, our sites collect and process a range of information about their visitors to enable functionality and to deliver requested services. In addition to information we automatically collect for our purposes (see Personal Information We Automatically Collect), our Digital Services include links to social media sites, links to other websites operated by third parties (e.g., a registration page for another nonprofit advocacy organization’s event, a third-party payment processor), embedded media (e.g., YouTube videos), and embedded third-party applications that may collect information about you when you choose to interact with them. When you access this content, you are interacting directly with the third parties, whose data collection and other processing activities are governed by their privacy policies, and not by this Statement. When you view embedded media or interact with embedded third-party applications — hosted on other platforms, but viewable through the buttons we provide — you will remain on our sites but you will be interacting with these third party’s online environment. In these instances, we make clear that you are viewing external content when you click on buttons. 

How to Disable Cookies 

If you would like to reduce the web data collected about you while browsing the internet, you can purge and disable cookies in your web browser.  

For your awareness, our sites will still work if you disable cookies in your browser. Please note disabling cookies on your browser may impact the operability of other websites you visit and disabling cookies will not disable other technologies (such as web beacons, clear gifs, and single-pixel gifs), which the ACLU of Northern California uses on our sites to support our operations and the security of our sites. 

About this Statement 

When This Statement Applies 

This Statement describes how we treat personal information collected by ACLU of Northern California in our general operations. This includes personal information collected online and offline, including through our main website, [domain], which is operated by the Union but hosts Foundation content, and other ACLU of Northern California sites and Digital Services that link to this Statement. 

Certain ACLU of Northern California programs, as well as ACLU of Northern California’s other affiliated ACLU Organizations, have separate privacy statements. When a different privacy statement applies, the relevant privacy statement will be posted. To see a full list of ACLU Organizations’ privacy statements, read ACLU Organizations Privacy Statements.  

Definitions 

“Data Choices” means the choices you have in relation to your personal information. These choices may be offered to you as data subject rights required by law.  

“Personal information” means information that identifies, relates to, describes, or can be reasonably linked, directly or indirectly, to a specific human, in a personal capacity. It does not include information that is considered de-identified, anonymous, or aggregated under applicable law or information relating to a person in their employment or professional capacities, including information obtained from or about an ACLU of Northern California employee or job applicants looking to work at ACLU of Northern California. 

“Processing” of personal information means any operation, or set of operations performed, manually or automatically, on personal information, like collection, use, organization, structuring, storage, transmission, analysis, retrieval, deletion, or modification of personal information. 

Statement Update Procedure 

Our Statement is subject to change. We will post updated versions of this Statement here and, if the changes are significant, we will provide a more prominent notice of changes on our website. 

Questions about this Statement 

If you have any questions regarding this Privacy Statement or our privacy and data governance practices, you can reach our Privacy and Data Governance team by emailing Privacy@ACLU.org.