Privacy Policy

Introduction

Welcome to G A G Charitable Corporation ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website https://Gag-charitable.com, use our services, or interact with us in any way.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

Information We Collect

We collect various types of information to provide and improve our services to you. The information we collect falls into several categories:

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account or create a profile on our website
• Make a donation or financial contribution to our charitable programs
• Subscribe to our newsletter or email communications
• Contact us through our contact forms, email, or phone
• Participate in surveys, contests, or promotional activities
• Apply for volunteer opportunities or employment positions
• Attend our events or programs
• Interact with our social media pages

The personal information we may collect includes:

• Contact Information: Name, email address, mailing address, phone number
• Financial Information: Credit card details, billing address, donation history
• Demographic Information: Age, gender, occupation, interests
• Account Credentials: Username, password, security questions
• Communication Preferences: Newsletter subscriptions, notification settings
• Professional Information: Resume, work history, references (for employment or volunteer applications)

Information Automatically Collected

When you access our Services, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: General geographic location based on IP address
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms when you interact with our content or use social login features
• Payment processors and financial institutions for donation processing
• Marketing partners and analytics providers
• Public databases and data aggregators
• References provided during volunteer or employment applications

How We Use Your Information

We use the information we collect for various legitimate business purposes, including:

Service Delivery and Operations

• Processing and managing your donations and financial contributions
• Creating and maintaining your account
• Providing customer support and responding to your inquiries
• Sending transaction confirmations and receipts
• Managing volunteer applications and coordinating volunteer activities
• Organizing and facilitating events and programs

Communication and Marketing

• Sending newsletters, updates, and information about our programs and initiatives
• Providing information about fundraising campaigns and donation opportunities
• Sending promotional materials and special offers (with your consent)
• Conducting surveys and gathering feedback
• Sharing impact stories and success stories from our charitable work

Website Improvement and Analytics

• Analyzing website usage patterns and user behavior
• Improving our website functionality and user experience
• Developing new features and services
• Conducting research and statistical analysis
• Testing and optimizing our marketing campaigns

Legal and Security Purposes

• Complying with legal obligations and regulatory requirements
• Protecting against fraud, unauthorized transactions, and other illegal activities
• Enforcing our terms of service and other agreements
• Protecting the rights, property, and safety of our organization, users, and the public
• Responding to legal requests and preventing harm

How We Share Your Information

We respect your privacy and do not sell your personal information to third parties. However, we may share your information in the following circumstances:

Service Providers and Business Partners

We may share your information with trusted third-party service providers who assist us in operating our website, conducting our business, and providing services to you. These service providers include:

• Payment processors and financial institutions for donation processing
• Email service providers for newsletter distribution
• Cloud storage and hosting providers
• Analytics and marketing platforms
• Customer relationship management (CRM) systems
• Event management and registration platforms

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements and Protection

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our terms of service and other agreements
• Protect the rights, property, or safety of our organization, users, or others
• Investigate and prevent fraud, security issues, or illegal activities
• Respond to claims that content violates the rights of third parties

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership or use of your personal information.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, such as when you choose to share your donation or volunteer activities on social media.

Aggregate and De-identified Information

We may share aggregate, anonymized, or de-identified information that cannot reasonably be used to identify you. This information may be used for research, marketing, analytics, and other purposes.

Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

Security Measures

Our security measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• Secure Payment Processing: All payment information is processed through PCI-DSS compliant payment processors
• Access Controls: We limit access to personal information to authorized personnel only
• Regular Security Audits: We conduct regular security assessments and vulnerability testing
• Data Backup: We maintain secure backups of data to prevent loss
• Employee Training: Our staff receives regular training on data protection and security best practices
• Incident Response: We have procedures in place to respond to security incidents promptly

Your Responsibility

While we implement strong security measures, you also play a role in protecting your information:

• Choose strong, unique passwords for your account
• Keep your login credentials confidential
• Log out of your account when using shared or public computers
• Be cautious about phishing attempts and suspicious emails
• Keep your contact information up to date
• Report any suspicious activity or security concerns to us immediately

Your Privacy Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

Access and Portability

• Request access to the personal information we hold about you
• Receive a copy of your personal information in a structured, commonly used format
• Request that we transfer your information to another organization

Correction and Update

• Request correction of inaccurate or incomplete personal information
• Update your account information and preferences at any time
• Ensure your information is current and accurate

Deletion and Restriction

• Request deletion of your personal information (subject to legal obligations)
• Request restriction of processing of your personal information
• Object to processing of your personal information for certain purposes

Opt-Out Rights

• Opt out of receiving marketing communications
• Opt out of certain data collection and tracking technologies
• Withdraw consent for processing where consent was the legal basis

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law, typically within 30 days.

Please note that we may need to verify your identity before processing your request. In some cases, we may be unable to fulfill your request due to legal obligations or legitimate business interests.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and collect information about how you use our Services.

Types of Cookies We Use

Managing Cookies

You can control and manage cookies in several ways:

• Most web browsers allow you to control cookies through their settings preferences
• You can set your browser to refuse all cookies or indicate when a cookie is being sent
• You can delete cookies that have already been set
• You can use browser plugins or extensions to manage cookies

Please note that if you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

Third-Party Tracking

We use third-party analytics services, such as Google Analytics, to help us understand how users interact with our website. These services may use cookies and similar technologies to collect information about your use of our Services and other websites.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

Children's Privacy

Our Services are not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information from our servers as quickly as possible.

Special Note for Parents and Guardians

We encourage parents and guardians to monitor their children's internet usage and help enforce this Privacy Policy by instructing their children never to provide personal information through our Services without permission.

For children between 13 and 18 years of age, we recommend that parents or guardians review this Privacy Policy with their children and supervise their online activities.

International Data Transfers

G A G Charitable Corporation is based in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

These countries may have data protection laws that are different from the laws of your country. However, we take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable data protection laws.

Data Protection Safeguards

When transferring personal information internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by relevant authorities
• Ensuring service providers comply with recognized data protection frameworks
• Implementing technical and organizational security measures
• Conducting regular assessments of data protection practices

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods

The length of time we retain your information depends on several factors:

• Account Information: Retained while your account is active and for a reasonable period thereafter
• Donation Records: Retained for at least 7 years for tax and accounting purposes
• Marketing Communications: Retained until you unsubscribe or request deletion
• Website Analytics: Typically retained for 26 months
• Legal Records: Retained as required by applicable laws and regulations

Deletion of Information

When we no longer need your personal information, we will securely delete or anonymize it. In some cases, we may retain certain information in anonymized or aggregated form for research, statistical, or archival purposes.

Third-Party Links and Services

Our website may contain links to third-party websites, applications, and services that are not operated by us. This Privacy Policy does not apply to these third-party sites, and we are not responsible for their privacy practices.

Social Media Integration

Our website includes social media features and widgets, such as Facebook, Twitter, and Instagram buttons. These features may collect information about your IP address, the page you are visiting on our site, and may set cookies to enable the feature to function properly.

Your interactions with these features are governed by the privacy policies of the companies providing them. We encourage you to review the privacy policies of any third-party sites or services before providing them with your personal information.

Payment Processors

When you make a donation through our website, your payment information is processed by third-party payment processors. We do not store your complete credit card information on our servers. Please review the privacy policies of our payment processors to understand how they handle your information.

California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and other California privacy laws.

Your California Rights Include:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights
• Right to Correct: Request correction of inaccurate personal information

How to Exercise Your California Rights

To exercise these rights, please contact us at support@gag-charitable.com or call us at 213 708 1135. We will verify your identity before processing your request and respond within 45 days.

Shine the Light Law

California's "Shine the Light" law permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal information for specific purposes
• Contract: Processing is necessary for the performance of a contract with you
• Legal Obligation: Processing is necessary to comply with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests

Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal information
• Rectify inaccurate personal information
• Erase your personal information ("right to be forgotten")
• Restrict processing of your personal information
• Data portability
• Object to processing of your personal information
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

Notification of Changes

For material changes to this Privacy Policy, we will provide notice through one or more of the following methods:

• Posting a prominent notice on our website
• Sending an email notification to the email address associated with your account
• Displaying an in-app notification
• Providing notice through other communication channels

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.