Website Privacy Policy

Michigan Civic Action Fund ("MCAF", "we", “our”, or “us”) is a nonprofit organization under section 501(c)(4) of the Internal Revenue Code. We respect the privacy of visitors to our website (the "Website"). We collect only the information necessary to operate and secure the Website, respond to inquiries, and meet legal obligations. We do not sell, rent, or trade personal information.  

This Website Privacy Policy (this "Policy") explains how we collect, use, and protect information obtained through our Website and describes your choices regarding that information. By visiting or using the Website, you agree to the practices described in this Policy.

Our Privacy Commitment

MCAF is committed to respecting and protecting the privacy of those who engage with our work. We collect only the information necessary to operate our programs, communicate with supporters, and meet legal obligations. We do not sell, rent, or trade personal information, and we limit access to personal data to authorized staff and trusted service providers. We believe privacy is essential to free expression, civic participation, and trust, and we work to safeguard it accordingly. 

Our Approach to Privacy

We collect only the personal information we need, retain it only for as long as necessary, and share it only when vital to our operations or mandated by law. 

Information We Collect

Information You Voluntarily Provide. We collect personal information only when you choose to provide it, such as when you:

  • contact us through a form or email;
  • make a donation; or
  • request information about services provided by MCAF.

This may include your name, email address, mailing address, phone number, payment-related details, and the content of any communication you send us. We do not allow public user accounts, comments, forums, or public content submission on the Website, and visitors cannot upload or publish content directly on the Website. 

Information Collected Automatically. Like most websites, we automatically collect limited technical information necessary to operate and secure the Website. This may include:

  • IP address and general location based on IP;
  • browser and device type;
  • operating system; and
  • pages viewed, links clicked, and timestamps.

This information is collected through standard server logs and similar technologies and is used solely for Website functionality, security, system diagnostics, and aggregate analytics. We do not use this information to identify individual visitors by name, and we do not combine automatically collected data with other personal information except as needed to respond to a security concern. 

Cookies and Similar Technologies. We use limited cookies or similar technologies to enable essential features, ensure site functionality, and measure basic usage. A "cookie" is a small file placed on your device that allows a website to recognize your browser and store certain preferences. Most web browsers automatically accept cookies, but you can adjust your browser settings to refuse cookies or to alert you when cookies are being sent. If you disable cookies, some features of the Website may not function as intended. We do not use cookies for advertising or to track your activity across other websites. 

How We Use Information

We use the information collected through the Website only to: 

  • communicate with supporters;
  • respond to messages you initiate;
  • process donations and acknowledgements;
  • provide educational programs and resources;
  • provide, maintain, and improve the functionality of the Website;
  • maintain the Website security and prevent misuse; and
  • comply with legal, audit, and recordkeeping obligations.

We do not use Website-collected personal information for advertising, profiling, targeted advertising, or any purpose unrelated to the operation of MCAF or the Website.

Donations 

Donations made through our Website are processed by EveryAction®, a secure third-party payment provider. The following practices apply to all online donations made through the Website:

  • Donation forms collect only the information necessary to process your contribution and issue required acknowledgments.
  • Payment information is transmitted directly to EveryAction® and handled securely in accordance with their own privacy and security practices.
  • We do not receive or store full payment card numbers or bank account information on our servers; all payment details are processed exclusively by the third-party processor.

Donor and supporter information is used solely for organizational purposes consistent with applicable law and nonprofit best practices.

Sharing of Information

We do not sell, rent, or trade personal information. Information may be shared only with:

  • service providers assisting with website hosting, email delivery, security, or other operational functions; and
  • legal authorities, when required by law, court order, or to respond to lawful requests from government or regulatory bodies.

Our service providers may access personal information only as necessary to perform services on our behalf and are expected to safeguard that information under their own privacy and security obligations.

Data Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle. While no system can be perfectly secure, we work to reduce risks of unauthorized access, alteration, or disclosure. Transmission of information over the internet may not be fully secure, so please consider what you choose to send electronically. 

Data Minimization and Retention

We retain personal information only for as long as reasonably necessary to fulfill organizational, legal, financial, or operational requirements. When personal information is no longer needed for the purpose for which it was collected, we securely delete, deidentify, or archive it according to our retention and destruction practices. 

Your Choices and Requests

You may contact us to:

  • request access to the personal information you have submitted to us;
  • request correction of inaccurate personal information we hold about you; 
  • request deletion of your personal information, subject to applicable law; or
  • ask questions about how your information is used.

We may not be able to accommodate a request if it would impact our ability to comply with record-keeping or other legal obligations, or if it would cause the information to become inaccurate. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Children and Minors

The Website is directed to adults and is not intended for children or minors. We do not knowingly collect information from individuals under 18. If you believe a minor has provided information to us, please contact us so we can remove it.

Third-Party Links

The Website may contain links to third-party websites or services. These sites have their own privacy policies. We are not responsible for their practices.

GDPR Notice

Our Website is operated in and for users located in the United States. We do not intentionally market, target, or direct our services to individuals in the European Union (“EU”), European Economic Area (“EEA”), or the United Kingdom (“UK”), and any collection of personal information from individuals in those regions is incidental. To the extent the EU or UK General Data Protection Regulation (“GDPR”) applies to any personal information we process, individuals located in the EU/EEA or UK may have certain rights under applicable data‑protection laws, including the right to access, correct, delete, or restrict the processing of their personal information. If personal information is transferred outside the EU/EEA or UK, such transfers are made using safeguards permitted under applicable law. Individuals seeking additional information may use the contact details provided in the “Contact” section of this Policy.

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last Updated" date at the top of this Policy and post the updated policy on the Website. We encourage you to review this Policy periodically to stay informed about how we protect your information.

Contact

For any privacy-related questions or concerns, please contact us at admin@micivicactionfund.com.