Privacy Policy

This Privacy Policy applies to the information Ronald McDonald House Charities of the Capital Region (“RMHC-CR”) collects, including through its website, applications, or other online service (“Site”) and offline, including information collected from donors. This Privacy Policy describes our information collection practices, such as the types of information we collect regarding visitors to the Site (including donors) and how we may use that information. By using this Site, you consent to this Privacy Policy.

OVERVIEW

Please review our full Privacy Policy below before using the Site. This initial summary of our Privacy Policy highlights some important points regarding our and third parties’ collection, use, and sharing of your information when you visit the Site.

  • RMHC-CR may collect Personal Information (as defined below), such as your first and last names, home addresses, e-mail addresses, and phone numbers; payment information when you make a transaction such as donating to RMHC-CR; demographic information, photographs, gender, and other information about you. We and our service providers may automatically collect certain information while you use the Site, including your Device Identifier (as defined below), browser/operating system, referring URL or advertisement, and all of the areas our Site you visit. There are a variety of technologies that collect this information including cookies, local storage and web beacons. In addition, we may receive information about you from third parties.
  • We may use the information we collect for a variety of purposes including to: enable you to use our Site; process your donation; personalize your experience and offers; and provide you with information, opportunities, or services from us and our third-party partners.
  • We may also share your information with third parties, including our service providers and RMHC Global. We do not share Personal Information with unaffiliated third parties for those third parties’ marketing purposes.

TYPES OF INFORMATION COLLECTED

Information You Provide

RMHC-CR may gather personal information, which is information that is linked to a specific, identifiable individual (such as, but not limited to, first and last names, home addresses, e-mail addresses, phone numbers) (“Personal Information”). If the Site offers an account or personal profile, we may require that you supply us with Personal Information to set up such an account. We may also collect payment information if you make a transaction, such as a donation. And, we may collect other information about you, such as demographic information (e.g., your age or gender), and information about your preferences and interests. If we combine demographic or other non-Personal Information with Personal Information, we will treat the combined information as Personal Information under this Privacy Policy.

Information We Collect Automatically As You Access and Use the Site

We and our third-party service providers (including any third-party content, advertising, and analytics providers) may use a variety of technologies that automatically or passively collect certain information about your use of the Site whenever you visit or interact with the Site (“Usage Information”). Usage Information may include the browser and operating system you are using, the URL or advertisement that referred you to our Site, the search terms you entered into a search engine that led you to our Site, all of the areas within our Site that you visit, and the time of day you visit the Site, among other information. Usage Information also includes the IP address, mobile device identifier, or other unique identifier (“Device Identifier”) for any computer, mobile phone, or other device used to access the Site. A Device Identifier is a number that is automatically assigned to your device and our servers identify your device by its Device Identifier.

We may use Usage Information for a variety of purposes, including enhancing or otherwise improving the Site and our services, and to target content or offers to users.

Cookies and Local Storage

“Cookies” and local storage are pieces of information (data files) transferred to an individual’s browser on their device when the device is used to visit a site. These technologies are able to store a unique identifier for a device to allow a certain Internet site to recognize the device whenever the device is used to visit the site, and may be used for many purposes, including remembering information that will make your use of the site more convenient. Like most Internet sites, the RMHC-CR Site uses these technologies for a variety of purposes. For example, we use these technologies to serve targeted advertising elsewhere online, to track the total number of visitors to our site on an anonymous, aggregate basis, and to remember you when you return to the Site and remember your preferences. We may associate Personal Information with a data file. A Flash cookie is a data file placed on a device via the Adobe Flash plug-in that may be built into or downloaded by you onto your device. Flash cookies may be used for various purposes, including, without limitation, enabling a Flash feature and remembering your preferences. For more information about Flash and the privacy choices Adobe offers, visit the Adobe’s Flash Player Settings Manager page. If you choose to disable cookies or to adjust your Flash privacy settings on your device, some features of the Site may not function properly.

Use the options in your Internet browser if you do not wish to receive a cookie or if you wish to set your browser to notify you when you receive a cookie. If you disable all cookies or adjust your Flash privacy settings on your device, you may not be able to take advantage of all the features of the RMHC-CR website.

Web Beacons. Small graphic images or other web programming code called web beacons (also known as “pixel tags,” “1×1 GIFs,” or “clear GIFs”) may be included in our web pages and email messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, without limitation, to count visitors to the Site, to monitor how users navigate the Site, to count how many emails that were sent were actually opened or to count how many particular links were actually viewed.

In addition, we may use a variety of other technologies that collect similar information for security and fraud detection and prevention purposes.

Information Third Parties Provide About You

We may receive information about you from third parties and we may supplement the information we collect with outside records in order to provide you with information, activities or services you have requested, to tailor content, to offer you opportunities to become involved in activities that we believe may interest you, and for other purposes. We may combine the information we receive from those other sources with information we collect through the Site. In those cases, we will apply this Privacy Policy to the combined information.

INFORMATION USE

We may use the information we collect, including Personal Information and Usage Information:

  • to enable you to use our Site, and to provide related services and care, including responding to your questions, complaints or comments;
  • to process your donation and, as applicable, create your account or personal profile;
  • to provide you with information, opportunities, or services that you have requested or that we otherwise believe will interest you, including opportunities to donate and other special opportunities from us and our third-party partners;
  • to personalize your experience by tailoring content, recommendations, and opportunities we display to you, both on the Site and elsewhere online;
  • for internal business purposes such as to improve our Site and services;
  • to administer and process contests, sweepstakes, promotions, and surveys;
  • to process information you provide via our Site, including verifying that your email address is active and valid;
  • to contact you with administrative communications and, in our discretion, changes to our Privacy Policy, Terms and Conditions, or any of our other policies;
  • to comply with regulatory and legal obligations; and
  • for purposes as disclosed at the time you provide your information, with your consent, and as further described in this Privacy Policy.

The use cases above constitute (i) a legitimate interest of RMHC-CR to process or use your Personal Information; (ii) may be necessary to enter into or perform a contract with you; or (iii) require your consent as further described in this privacy policy. If you do not agree with this approach or if you would like more information on choices you have with respect to the information we process about you, please see the section titled YOUR CHOICES below.

INFORMATION SECURITY AND PAYMENT PROCESSING

RMHC-CR has implemented technical and organizational security measures designed to protect your personal information from loss, misuse, or unauthorized access, alteration and/or destruction. Some of these safeguards include internal policies related to information governance, password complexity, handling, and maintenance protocols, remote access controls, backup and retention requirements, restricting access to personal information to those on a need to know basis, and we use a PCI DSS compliant third party to process, store, and transmit any credit or debit card data in compliance with PCI standards. We also utilize a password-protected database to store any donor personal information. Access to this database is restricted to personnel with a legitimate business need to access or modify the information contained therein. If you have any questions about our security controls or need further assistance, please contact info@rmhcofalbany.org. Please note, however, no method of transmission over the internet, and no means of electronic or physical storage, is absolutely secure. As such, we cannot guarantee the security of information transmitted to, through, or on our Services or via the Internet.

RMHC-CR uses Blackbaud products for payment processing and payment transactions. Blackbaud represents that it is compliant with PCI DSS requirements, and fully adheres to PCI standards regarding secure payment processing and storage of data, strong access control and other requirements. For further information on this subject please visit Blackbaud’s PCI Compliance page. Since we use a vendor to process credit card payments made through the Site and to store associated payment data, RMHC-CR does not directly collect such payment card information, nor does RMHC-CR store or have access to payment card information submitted online. For donations made offline, RMHC-CR may directly collect, store or have access to payment card information for processing payments, and adheres to PCI DSS requirements for these types of transactions.

DATA BREACH NOTIFICATION

In May of 2020, one of our third-party vendors — Blackbaud — experienced a security breach which has since been resolved. Per the vendor, encrypted sensitive identifiable information such as credit card details, banking information and social security numbers were not compromised. The data impacted by the breach included information already publicly available, such as name, mailing address, email address, and phone number. Further, the vendor informed RMHC-CR that all information was destroyed. Vendor officials are conducting investigations and monitoring the situation closely. At this time, RMHC-CR has no reason to believe that the data was further compromised or shared elsewhere.

The protection and proper use of sensitive personal information of our stakeholders is important to RMHC-CR and we will continue to take all necessary safeguards and precautions with your data to ensure this does not happen again.

INFORMATION SHARING

We may share non-Personal Information, such as Usage Information and aggregated user statistics, with third parties in our discretion. RMHC-CR does not sell or share personal information with unaffiliated third parties for their direct marketing purposes. We may share the information we have collected about you (including Personal Information): (i) as disclosed at the time you provide your information, (ii) with your consent, (iii) as described elsewhere in this Privacy Policy, or (iv) in the following circumstances:

Third Parties Providing Services on Our Behalf

Companies may be engaged by RMHC-CR to perform a variety of functions, such as assisting with donation collection, providing technical services for our Internet sites, etc. Such companies may have access to Personal Information if needed to perform certain functions. However, these companies may use such Personal Information only for the purpose of performing that function and may not use it for any other purpose.

Administrative and Legal Reasons

RMHC-CR reserves the right to use or disclose any information (including Personal Information) as needed to satisfy any law, regulation or legal request, to protect the integrity of the site, to fulfill your requests, or to cooperate in any law enforcement investigation or an investigation on a public safety matter, to protect and defend the legal rights or property of RMHC-CR, our Site or its users, or any other party, or in an emergency, to protect the health and safety of our users or the general public.

Sweepstakes, Contests, & Promotions

We may offer sweepstakes, contests, and other promotions (any, a “Promotion”) that may require registration. By participating in a Promotion, you are agreeing to the provisions, conditions, or official rules that govern that Promotion, which may contain specific requirements of you (including, except where prohibited by law, allowing the sponsor(s) of the Promotion to use your name, voice, likeness or other indicia of persona in advertising or marketing materials). If you choose to enter a Promotion, Personal Information may be disclosed to third parties or the public in connection with the administration of such Promotion, including, without limitation, in connection with winner selection, prize fulfillment, and as required by law or permitted by the Promotion’s terms or official rules (such as on a winners list).

Social Networking Features

Functionality on the Site may permit interactions that you initiate between the Site and a third-party website or service such as Twitter or Facebook (“Social Networking Features”). Examples of Social Networking Features include enabling you to “like” or “share” content from the Site or to “like” or “share” our page on a third-party service; to automatically or selectively show your social media posts/tweets on the Site; to create a RMHC-CR account or RMHC-CR personal profile using existing login information from a social-network (known as a social login); and to otherwise connect the Site to a third-party website or service. If you choose to share content or to otherwise post information through the Site to a third-party site or service, or vice versa, that information may be publicly displayed. Similarly, if you post information on a third-party platform that references RMHC-CR, for example, by using a Twitter hashtag associated with RMHC-CR in your Tweet), your post may be published on the Site in accordance with the terms of that third party. Also, both we and the third party may have access to certain information about you and your use of the Site and the third-party site or service. In addition, we may receive information about you if other users of a third-party website give us access to their profiles and you are one of their “connections” or information about you is otherwise accessible through your “connections” web page, profile page, or similar page on a social networking or other third-party website or service. If you choose to use a social login, we may collect Personal Information including your name and email address. The information we collect in connection with Social Networking Features is subject to this Privacy Policy. The information collected and stored by the third party remains subject to the third party’s privacy practices, including whether the third party continues to share information with us, the types of information shared, and your choices with regard to what is visible to others on that third-party website or service.

Business Transfers & Transitions

In the event RMHC-CR goes through a transition (such as a merger, acquisition, bankruptcy or sale of all or a portion of its assets, including, without limitation, during the course of any due diligence process), your Personal Information will likely be among the assets transferred. By providing your Personal Information, you agree that we may transfer such information to the acquiring entity without your further consent.

YOUR CHOICES

If at any time, you would like to correct or delete the Personal Information we have about you or if you would like to change your preferences for contacts from us, you can let us know by contacting us at the following addresses: Ronald McDonald House Charities of the Capital Region, 139 S. Lake Avenue, Albany, NY 12208 or email:  info@rmhcofalbany.org. RMHC-CR will make good faith efforts to implement requested changes in our active databases. Note, however, that we may keep information you update or change for RMHC-CR’s administrative purposes. Certain Personal Information is required to use our site and related services and care. Requesting complete deletion of your Personal Information may result in a termination of your account and/or your ability to donate, receive our services and care, or engage in other transactions with RMHC-CR. Also, it is not always possible to completely remove or delete all of your information from our databases, and residual data may remain on backup media or may be retained as necessary to comply with our legal and/or contractual obligations.

If you would like to unsubscribe from our email list, please use the unsubscribe link at the bottom of our newsletter emails or contact us through the postal address listed above. However, please note that even if you opt-out of receiving marketing communications or donor requests, we reserve the right to send you certain communications relating to your use of our Site, service announcements, notices of changes to this Privacy Policy or other Site policies, or similar administrative or transactional messages. These transactional messages may be unaffected if you choose to opt-out from marketing communications.

If you reside in the EEA or other country that provides you with a right to request a copy of your data as a matter of law, you may also ask us for a copy of information about you in a commonly used electronic format. We will ask that you verify your identity before responding to any such requests.

LINKS TO OTHER SITES

We may offer links to sites that are not operated by RMHC-CR. If you visit one of these linked sites, you should review their privacy and other policies. We are not responsible for the policies and practices of others.

USERS RESIDING OUTSIDE OF THE UNITED STATES AND CONSENT TO TRANSFER

The Site is operated in the United States. If you are located in another jurisdiction, please be aware that information you provide to us will be transferred to and processed in the United States. By using the Site or providing us with any information, you consent to this transfer, processing, and storage of your information in the United States, a jurisdiction in which the privacy laws may not be as comprehensive as those in the country where you reside or are a citizen.

CHANGES TO OUR PRIVACY POLICY

From time to time, RMHC-CR may change this Privacy Policy and will notify you of material changes by posting the changed or modified Privacy Policy on our Site. We may also provide notice to you in other ways at our discretion, such as through contact information you have provided. Any changes will be effective immediately upon the posting of the revised Privacy Policy unless otherwise specified and your continued use of the Site after the effective date of the revised Privacy Policy (or such other act as specified in the revised Privacy Policy) will constitute your consent to those changes. Rest assured, however, that unless we obtain your consent, any changes will not alter how we handle previously collected information.

HOW TO CONTACT US

If you have any questions about the RMHC-CR Privacy Policy, or wish to review your information or be removed from our database for mailings, please contact us at:

Ronald McDonald House Charities
of the Capital Region
139 S. Lake Avenue
Albany, NY 12208
Email: info@rmhcofalbany.org