Privacy Policy for Arts & Scraps
Effective Date: 2/07/2025
Arts & Scraps is committed to protecting the privacy and security of personal information obtained or collected in the course of our operations. This Privacy Policy outlines how we collect, use, disclose, and protect personal information in compliance with the California Consumer Privacy Act (CCPA/CPRA) and the General Data Protection Regulation (GDPR).
1. Information We Collect
We may collect personal information directly from individuals or from third parties, including donors, volunteers, clients, and website visitors. The types of personal information we collect may include:
-
Name
-
Contact information (e.g., address, email address, phone number)
-
Donation history
-
Volunteer history
-
Financial information (e.g., credit card details for donations)
-
Online identifiers (e.g., cookies, IP address, browsing data)
-
Other information provided voluntarily
2. How We Use Personal Information
We use personal information for the following purposes:
- Processing donations and acknowledging contributions
- Communicating with donors, volunteers, and stakeholders
- Providing information about our programs, events, and activities
- Administering volunteer opportunities
- Conducting research and analysis to improve our services
- Complying with legal and regulatory requirements
Under the GDPR, our legal bases for processing personal data include:
- Consent (when you provide permission)
- Contractual necessity (when processing is required for services)
- Compliance with legal obligations
- Legitimate interests (e.g., improving our services)
3. Your Privacy Rights
For California Residents (CCPA/CPRA)
California residents have the right to:
- Know what personal data we collect and how we use it
- Request access, correction, or deletion of personal data
- Opt out of the sale or sharing of personal data (we do not sell personal information)
- Non-discrimination for exercising privacy rights
To exercise your rights, email contact@artsandscraps.org
For European Union Residents (GDPR)
EU residents have the right to:
- Access, correct, or delete personal data
- Object to processing or restrict data usage
- Request data portability
- Withdraw consent at any time
To exercise your rights, contact contact@artsandscraps.org.
4. Cookies & Tracking Technologies
We may use cookies or similar tracking technologies to enhance user experience. By using our website, you consent to the use of cookies unless you opt out via browser settings
5. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes.
6. Third-Party Disclosures & International Transfers
We may share personal data with service providers, partners, or legal authorities as required. If data is transferred outside the U.S. or EU, we implement safeguards such as Standard Contractual Clauses (SCCs) for GDPR compliance.
7. Data Security
We implement appropriate technical, administrative, and physical safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction.
8. Children's Privacy
We do not knowingly collect personal data from children under 13 (COPPA) or under 16 (GDPR) without parental consent. If you believe we have collected such data, contact us for removal.
9. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on our website with an updated effective date.
10. Contact Us
If you have questions about this Privacy Policy, contact us at contact@artsandscraps.org.