Privacy Policy
Witness to Innocence (“we”, “us”, “our”) is committed to protecting your privacy and ensuring compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website at witnesstoinnocence.com or otherwise engage with our services. We adopt a privacy-first approach and encourage you to read this Policy carefully to understand your rights and how we protect your data.
1. Commitment to Privacy and Data Protection
Your privacy is of paramount importance to us. We are committed to maintaining the confidentiality, integrity, and security of your personal information. We strive to collect only what is necessary and to handle all personal data respectfully and lawfully. Our data processing practices are designed to uphold the rights and freedoms of individuals across all jurisdictions in which we operate.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected through our website, witnesstoinnocence.com, and in connection with our services. We act as the data controller with respect to the personal data described in this Policy, determining the purposes and means for processing that data. If you have questions regarding our data practices, you may contact us at [email protected].
3. Categories of Data Processed
We collect and process the following types of personal data:
– Usage Data: Internet protocol (IP) address, browser type, operating system, pages visited, time spent on pages, and user session metadata, including timestamps and interaction history.
– Account Data: First and last name, email address, mailing address, phone number, and any identifiers you provide when creating, modifying, or using an account on our website.
– Profile Data: User preferences, event participation, donation history, and behavioral data associated with site activities.
– Communication Data: Inquiries submitted via contact forms, email correspondence, support requests, and communication history.
– Technical Data: Device type, screen resolution, operating system, browser configurations, and diagnostics related to technical performance.
– Transaction Data: Payment method details (excluding full card numbers or banking credentials where processed by third parties), transaction identifiers, donation or purchase details, and delivery information where applicable.
– Preference Data: Marketing subscription preferences, product or advocacy interests, cookie consents, and participation in surveys or campaigns.
4. Legal Bases for Processing
We process personal data lawfully, based on one or more of the following legal grounds:
– Consent: When you have provided clear and explicit permission for a particular purpose, such as subscribing to a newsletter.
– Contractual Necessity: Where processing is required to perform a contract with you or to take steps at your request prior to entering into a contract.
– Legitimate Interest: Where processing serves our legitimate interests or those of a third party (e.g., improving user experience, securing our website), provided such interests are not overridden by your data protection rights.
– Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
5. Your Rights
Subject to local laws, you have the following rights regarding your personal information:
– Right of Access: You may request confirmation of whether we process your personal data and access to that data.
– Right to Rectification: You may request that incomplete or inaccurate data be corrected or updated.
– Right to Erasure: You may request the deletion of your personal data where there is no lawful reason for us to continue processing it.
– Right to Restrict Processing: Under certain conditions, you may request a restriction on further processing of your data.
– Right to Data Portability: You may request to receive your personal data in a structured, commonly used format and to transmit it to another controller, where feasible.
To exercise any of the above rights, please contact us at: [email protected].
6. Security Measures
We implement robust technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. Measures include but are not limited to:
– Data encryption (at rest and in transit)
– Access control restricted to authorized personnel
– Regular security assessments and audits
– Secure backups and redundancy mechanisms
– Staff privacy and security awareness training
While we strive to use commercially acceptable means to protect your information, no method of transmission over the Internet or method of storage is 100% secure. We encourage all users to take personal precautions to secure their devices and credentials.
7. International Transfers
Where personal data is transferred outside of the user’s country, we ensure appropriate safeguards are in place. These may include:
– Standard Contractual Clauses approved by the European Commission
– Adequacy decisions by relevant regulatory authorities
– Binding corporate rules or other legally authorized mechanisms
If you are located in the European Economic Area, we will ensure that your data receives an adequate level of protection in accordance with EU data protection laws.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Retention periods are as follows:
– Usage Data: Up to 26 months for analytics and audit purposes
– Account and Profile Data: Active duration of account + 5 years
– Communication Data: Up to 3 years after final interaction
– Transaction Data: Up to 7 years for financial and tax obligations
– Technical Data: Up to 12 months for performance optimization
– Preference Data: Until preferences are changed or revoked
9. Cookie Policy
Our website uses cookies to enhance your browsing experience and analyze usage patterns. The following types of cookies may be used:
– Essential Cookies: Necessary for core functionality (e.g., session management, authentication)
– Functional Cookies: Support enhanced features such as remembering user preferences
– Analytics Cookies: Help us understand website usage and performance with tools like Google Analytics
– Performance Cookies: Support site debugging and loading optimization
We do not use cookies to collect sensitive personal information without your consent.
10. Cookie Management and Compliance with GDPR & CCPA
Upon your first visit to witnesstoinnocence.com, you will be presented with a cookie consent banner where you can accept or decline non-essential cookies. You can manage your cookie preferences at any time via your browser settings or by revisiting the cookie settings link available on our website.
Under GDPR and CCPA, you may opt out of the sale or sharing of your personal data via tracking cookies. While we do not sell personal data for monetary value, we recognize data disclosure for analytics or advertising could be interpreted as such under certain laws. You may opt out via the “Do Not Sell or Share My Personal Information” link available on our homepage, if applicable.
11. Special Protections for Children
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children without verifiable parental consent. If you believe that a child under 13 has provided us with their personal data, please contact us at [email protected], and we will take appropriate steps to delete such information.
12. Policy Updates and Notifications
We reserve the right to update this Privacy Policy at any time to reflect changes in legal obligations, technologies, or business practices. Updates will be posted on witnesstoinnocence.com, and we may notify users through email or website banners where significant changes occur. Continued use of the site constitutes acceptance of the updated policy.
13. Contact
If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal information, please contact us at:
Email: [email protected]
Website: https://witnesstoinnocence.com
We are committed to full compliance with privacy laws and best practices. Please reach out to us at the above contact address if you believe your rights have been violated or if you seek resolution of any concerns tied to our data practices.