This information includes:
- Personal information obtained from donors, volunteers and prospects through pledge cards, letters, surveys, applications, and other forms, in writing, in person, by telephone, or electronically (e.g. name, address, employer, birth date, credit card number, family members, interests, etc.)
- Individual information may also be collected about donors, volunteers and prospects’ present and past giving history, volunteer activity, committee service, information from public documents and reports, and any other interactions an individual may have had with Ronald McDonald House Charities of Southern Arizona.
Principles, Actions, and Beliefs
- We do not sell supporter information.
- Without the supporter’s consent, we do not provide their information to organizations or individuals outside Ronald McDonald House Charities of Southern Arizona.
- We contractually require any person or organization providing services to Ronald McDonald House Charities of Southern Arizona to protect the confidentiality of supporter information.
- We will hold strictly confidential all information concerning donors and prospects, including names, addresses, names of beneficiaries, nature and value of estates, amounts of provisions or gifts, etc., unless a donor or prospect grants permission to use selective information for purposes of referral, testimonial, example, recognition, or publicity.
- We have procedures in place to limit access to information to those employees and volunteers who need to know such information in order to fulfill our mission.
- We educate our employees and volunteers on the importance of protecting the privacy and security of confidential personal and organizational information.
- We will use our best efforts to comply with the expressed wishes of any supporter who does not want their name used in any promotional material, wishes their name removed from solicitation lists, or wishes to have their gifts or services be anonymous.
- We will collect, use and share information about our supporters among employees and volunteers only on a needs-to-know basis and for the sole purpose of carrying out Ronald McDonald House Charities of Southern Arizona’s mission.
A DONOR BILL OF RIGHTS
- The right to be informed of the organization’s mission, of the way the organization intends to use donated resources, and of its capacity to use donations effectively for their intended purposes.
- The right to be informed of the identity of those serving on the organization’s governing board, and to expect the board to exercise prudent judgment in its stewardship responsibilities.
- The right to have access to the organization’s most recent financial statements.
- The right to be assured their gifts will be used for the purposes for which they were given.
- The right to receive appropriate acknowledgement and recognition or to remain anonymous if desired.
- The right to be assured that information about their donations is handled with respect and with confidentiality to the extent provided by law.
- The right to expect that all relationships with individuals representing organizations of interest to the donor will be professional in nature.
- The right to be informed whether those seeking donations are volunteers, employees of the organization or hired solicitors.
- The right to have the opportunity for their names to be deleted from mailing lists that an organization may intend to share.
- The right to feel free to ask questions when making a donation and to receive prompt, truthful and forthright answers.
A Donor Bill of Rights was developed by the Association of Fundraising Professionals and is endorsed by Ronald McDonald House Charities of Southern Arizona
- RMHC may collect Personal Information (as defined below), such as your first and last names, home addresses, e-mail addresses, and phone numbers; payment information when you make a transaction such as donating to RMHC; demographic information, photographs, gender, and other information about you. We and our service providers may automatically collect certain information while you use the Site, including your Device Identifier (as defined below), browser/operating system, referring URL or advertisement, and all of the areas our Site you visit. There are a variety of technologies that collect this information including cookies, local storage and web beacons. In addition, we may receive information about you from third parties.
- We may use the information we collect for a variety of purposes including to: enable you to use our Site; process your donation; personalize your experience and offers; and provide you with information, opportunities, or services from us and our third-party partners.
- We work with advertisers and analytics service providers to target our advertisements elsewhere online, and to provide us information on the effectiveness of our advertisements and Site traffic. We may share non-Personal Information (including hashed or otherwise de-identified personal information) with service providers for these same purposes. Some of the companies participate in a self-regulatory program that allows you to opt-out of having information about you used for targeted advertising. Learn more about third party advertisers and similar third parties on our Site, and the opt-outs they may offer.
TYPES OF INFORMATION COLLECTED
Information You Provide
Information We Collect Automatically As You Access and Use the Site
We and our third-party service providers (including any third-party content, advertising, and analytics providers) may use a variety of technologies that automatically or passively collect certain information about your use of the Site whenever you visit or interact with the Site (“Usage Information”). Usage Information may include the browser and operating system you are using, the URL or advertisement that referred you to our Site, the search terms you entered into a search engine that led you to our Site, all of the areas within our Site that you visit, and the time of day you visit the Site, among other information. Usage Information also includes the IP address, mobile device identifier, or other unique identifier (“Device Identifier”) for any computer, mobile phone, or other device used to access the Site. A Device Identifier is a number that is automatically assigned to your device and our servers identify your device by its Device Identifier.
We may use Usage Information for a variety of purposes, including enhancing or otherwise improving the Site and our services, and to target content or offers to users.
Cookies and Local Storage
“Cookies” and local storage are pieces of information (data files) transferred to an individual’s browser on their device when the device is used to visit a site. These technologies are able to store a unique identifier for a device to allow a certain Internet site to recognize the device whenever the device is used to visit the site, and may be used for many purposes, including remembering information that will make your use of the site more convenient. Like most Internet sites, the RMHC Site uses these technologies for a variety of purposes. For example, we use these technologies to serve targeted advertising elsewhere online, to track the total number of visitors to our site on an anonymous, aggregate basis, and to remember you when you return to the Site and remember your preferences. We may associate Personal Information with a data file. You can find more information about cookies and how they work at AllAboutCookies.org. A Flash cookie is a data file placed on a device via the Adobe Flash plug-in that may be built into or downloaded by you onto your device. Flash cookies may be used for various purposes, including, without limitation, enabling a Flash feature and remembering your preferences. For more information about Flash and the privacy choices Adobe offers, visit the Adobe’s Flash Player Settings Manager page. If you choose to disable cookies or to adjust your Flash privacy settings on your device, some features of the Site may not function properly.
Use the options in your Internet browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. If you disable all cookies or adjust your Flash privacy settings on your device, you may not be able to take advantage of all the features of the RMHC website.
Web Beacons. Small graphic images or other web programming code called web beacons (also known as “pixel tags,” “1×1 GIFs,” or “clear GIFs”) may be included in our web pages and email messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the Site, to monitor how users navigate the Site, to count how many emails that were sent were actually opened or to count how many particular links were actually viewed.
In addition, we may use a variety of other technologies that collect similar information for security and fraud detection and prevention purposes.
Information Third Parties Provide About You
We may use the information we collect, including Personal Information and Usage Information:
- to enable you to use our Site, and to provide related services and care, including responding to your questions, complaints or comments;
- to process your donation and, as applicable, create your account or personal profile;
- to provide you with information, opportunities, or services that you have requested or that we otherwise believe will interest you, including opportunities to donate and other special opportunities from us and our third-party partners;
- to personalize your experience by tailoring content, recommendations, and opportunities we display to you, both on the Site and elsewhere online;
- for internal business purposes such as to improve our Site and services;
- to administer and process contests, sweepstakes, promotions, and surveys;
- to process information you provide via our Site, including verifying that your email address is active and valid;
- to comply with regulatory and legal obligations; and
INFORMATION SECURITY AND PAYMENT PROCESSING
RMHCTucson.org has implemented technical and organizational security measures designed to protect your personal information from loss, misuse, or unauthorized access, alteration and/or destruction. Some of these safeguards include internal policies related to information governance, password complexity, handling, and maintenance protocols, remote access controls, backup and retention requirements, restricting access to personal information to those on a need to know basis, and we use a PCI DSS compliant third party to process, store, and transmit any credit or debit card data in compliance with PCI standards. We also utilize a password-protected database to store any donor personal information. Access to this database is restricted to personnel with a legitimate business need to access or modify the information contained therein. If you have any questions about our security controls or need further assistance, please contact firstname.lastname@example.org. Please note, however, no method of transmission over the internet, and no means of electronic or physical storage, is absolutely secure. As such, we cannot guarantee the security of information transmitted to, through, or on our Services or via the Internet.
RMHC uses Blackbaud products for payment processing and payment transactions. Blackbaud represents that it is compliant with PCI DSS requirements, and fully adheres to PCI standards regarding secure payment processing and storage of data, strong access control and other requirements. For further information on this subject please visit Blackbaud’s PCI Compliance page. Since we use a vendor to process credit card payments made through the Site and to store associated payment data, RMHC does not directly collect such payment card information, nor does RMHC store or have access to payment card information submitted online. For donations made offline, RMHC may directly collect, store or have access to payment card information for processing payments, and adheres to PCI DSS requirements for these types of transactions.
Third Parties Providing Services on Our Behalf
Companies may be engaged by RMHC to perform a variety of functions, such as assisting with donation collection, providing technical services for our Internet sites, etc. Such companies may have access to Personal Information if needed to perform certain functions. However, these companies may use such Personal Information only for the purpose of performing that function and may not use it for any other purpose.
Administrative and Legal Reasons
RMHC reserves the right to use or disclose any information (including Personal Information) as needed to satisfy any law, regulation or legal request, to protect the integrity of the site, to fulfill your requests, or to cooperate in any law enforcement investigation or an investigation on a public safety matter, to protect and defend the legal rights or property of RMHC, our Site or its users, or any other party, or in an emergency, to protect the health and safety of our users or the general public.
Sweepstakes, Contests, & Promotions
We may offer sweepstakes, contests, and other promotions (any, a “Promotion”) that may require registration. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern that Promotion, which may contain specific requirements of you (including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing materials). If you choose to enter a Promotion, Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion’s terms or official rules (such as on a winners list).
Social Networking Features
Business Transfers & Transitions
In the event RMHC goes through a transition (such as a merger, acquisition, bankruptcy or sale of all or a portion of its assets, including, without limitation, during the course of any due diligence process), your Personal Information will likely be among the assets transferred. By providing your Personal Information, you agree that we may transfer such information to the acquiring entity without your further consent.
THIRD-PARTY ANALYTICS PROVIDERS, AD SERVERS, AND SIMILAR THIRD PARTIES
We work with network advertisers, ad agencies, analytics service providers, and other vendors to provide us with information regarding traffic on the Site (including pages viewed and the actions taken when visiting the Site), to serve our advertisements elsewhere online, and to provide us with information regarding the use of the Site and the effectiveness of our advertisements. We may share non-Personal Information (including hashed or otherwise de-identified personal information) with service providers for these same purposes. In addition, our service providers may collect certain information about your visits to and activity on the Site and other websites and services and may use this information to target our and third-party advertising to you.
These service providers may set and access their own tracking technologies on your device and may otherwise collect or have access to information about you. Some of these parties may collect personal information over time as you visit online websites and services. Cookies, including those set by third-party network advertisers, may be used to (among other things): target advertisements, prevent you from seeing the same advertisements too many times, and conduct research regarding the usefulness of certain advertisements to you. We may share Usage Information about visitors with third-party advertising companies, analytics providers, and other vendors for similar purposes.
For example, we use Google services, such as Google Analytics, to collect data about traffic across our Site, to deliver advertisements when you visit other websites, and to share data about traffic to our website with Google and other Google Analytics program participants. For more information about how Google Analytics collects and processes data, visit How Google uses data when you use our partner’s sites or apps.
To opt out of: (i) Google Analytics install the Google Analytics opt-out browser add-on and (ii) Google’s ad serving. In addition to Google, we may use a variety of other service providers to perform advertising services. Some of these companies are members of the Network Advertising Initiative (“NAI”) or the Digital Advertising Alliance (“DAA”) Self-Regulatory Program for Online Behavioral Advertising. You may want to visit The Network Advertising Initiative for Consumer Opt Out, which provides information regarding targeted advertising and the “opt-out” procedures of NAI members. You may also want to visit the Digital Advertising Alliance Consumer Choice Page, which provides information regarding targeted advertising and offers an “opt-out” by participating companies in the DAA Self-Regulatory Program.
Please note that these third party advertising companies may still collect information from you and opting out through these mechanisms does not opt you out of being served advertising. You will continue to be served generic ads while online or on your device.
HOW WE RESPOND TO “DO NOT TRACK” SIGNALS
Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, the Site does not alter its practices when it receives a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” please visit All About Do Not Track (DNT).
If at any time, you would like to correct or delete the Personal Information we have about you or if you would like to change your preferences for contacts from us, you can let us know by contacting us at the following addresses: Ronald McDonald House Charities of Southern Arizona, Inc., 2155 East Allen Rd, Tucson, AZ 85719 or email: email@example.com. RMHC will make good faith efforts to implement requested changes in our active databases. Note, however, that we may keep information you update or change for RMHC’s administrative purposes. Certain Personal Information is required to use our site and related services and care. Requesting complete deletion of your Personal Information may result in a termination of your account and/or your ability to donate, receive our services and care, or engage in other transactions with RMHC. Also, it is not always possible to completely remove or delete all of your information from our databases, and residual data may remain on backup media or may be retained as necessary to comply with our legal and/or contractual obligations.
LINKS TO OTHER SITES
We may offer links to sites that are not operated by RMHC. If you visit one of these linked sites, you should review their privacy and other policies. We are not responsible for the policies and practices of others.
USERS RESIDING OUTSIDE OF THE UNITED STATES AND CONSENT TO TRANSFER
The Site is operated in the United States. If you are located in another jurisdiction, please be aware that information you provide to us will be transferred to and processed in the United States. By using the Site or providing us with any information, you consent to this transfer, processing, and storage of your information in the United States, a jurisdiction in which the privacy laws may not be as comprehensive as those in the country where you reside or are a citizen.
DATA BREACH NOTIFICATION
In May of 2020, a RMHC third-party data management vendor experienced a security breach which has since been resolved. Per the vendor, encrypted sensitive identifiable information such as credit card and banking information were not compromised. The data impacted by the breach included information already publicly available, such as name, mailing address, email address, and phone number. Further, the vendor informed RMHC that all information was destroyed. Vendor officials are conducting investigations and monitoring the situation closely. At this time, RMHC has no reason to believe that the data was further compromised or shared elsewhere.
The protection and proper use of sensitive personal information of our stakeholders is important to RMHC and we will continue to take all necessary safeguards and precautions with your data to ensure this does not happen again.
HOW TO CONTACT US
Ronald McDonald House Charities of Southern Arizona, Inc.
2155 East Allen Road
Tucson, AZ 85719