Privacy Policy
Last Updated: December 2024
Overview
Exodus Impact Club ("we," "our," "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights.
Information We Collect
From Website Forms:
- Name, email address, organization, country
- Message content you choose to provide
- IP address (automatically logged)
From Programs:
- Attendance records (with consent)
- Photo/video documentation (with explicit written consent)
- Survey responses (anonymous or identified, per your choice)
- Testimonials (with explicit consent for use)
How We Use Information
- Respond to partnership inquiries
- Deliver program materials and updates
- Produce impact reports (aggregate data only)
- Improve our programs and services
- Comply with legal obligations
What We Don't Do
- Sell or rent your information to third parties
- Use your information for unrelated marketing
- Share participant data without consent
- Store payment information (handled by fiscal sponsor)
Data Storage & Security
- Encrypted storage (AES-256)
- Access limited to authorized personnel
- Regular security audits
- Data retention: 7 years for financial records, 3 years for program data
Your Rights
- Access your personal data
- Request correction of inaccurate data
- Request deletion (subject to legal retention requirements)
- Withdraw consent for photo/video use
- Opt out of non-essential communications
Cookies
Our website uses minimal cookies:
- Essential: Session management, security
- Analytics: Anonymous usage statistics (Google Analytics)
You can disable cookies in your browser settings.
Third-Party Services
We use:
- Fractured Atlas: Fiscal sponsor (handles donations, subject to their privacy policy)
- Google Analytics: Website analytics (anonymized)
- Email service provider: Communication delivery (encrypted)
GDPR Compliance
For EU participants:
- Legal basis: Consent or legitimate interest
- Data minimization principles
- Right to data portability
- Right to be forgotten (subject to legal exceptions)
Children's Privacy
Programs involving minors require parent/guardian consent. We don't knowingly collect data from children under 13 without parental consent.
Changes to This Policy
We may update this policy. Material changes will be posted on our website with updated date.
Contact
Privacy questions: partnerships@exodusimpact.org
For data access/deletion requests: Include "Privacy Request" in subject line.