Privacy Policy for ACF Funds
Policy Effective Date: January 2026
Policy is subject to change by ACF and written notice will be provided if the policy is revised or altered by Amalgamated Foundation.
Public Facing Policy & Best Practices
All funds with Amalgamated Foundation are required to implement the ACF Privacy Policy in instances where the fund collects, stores, uses, or shares any form of personal information from users, such as names, email addresses, credit card numbers, or browsing behavior via websites, apps, or services.
Implementation of the Privacy Policy is legally required under the law and is mandatory for complying with third-party service terms (e.g., app stores).
Recommendations for implementation:
Conduct a data audit: Map data flows to understand what personal information is collected, where it is stored, how it is used, and who accesses it
Review the ACF Privacy Policy and develop a plan to apply to policy to the data flows identified in the data audit (Step 1)
Make updates to websites (i.e., footers), add disclaimers at points of data collection (e.g., before sending a survey to external stakeholders, include a disclaimer and a link to the ACF privacy policy along with the invitation to take the survey), and develop a staff training plan to ensure all staff, contracted entities, and volunteers at your fund understand when disclaimers are required
Public and notify: Make the policy accessible on websites (footers), apps, and at points of data collection. If needed, inform users via email about updates.
ACF Privacy Policy
ACF’s Privacy Policy (“Privacy Policy”) describes how your personal information (also called “personal data”) may be collected, used, shared, and stored by Amalgamated Charitable Foundation (“ACF,” “we,” “us,” and “our”) when you use our website located at: https://amalgamatedfoundation.org/ (the “Website”). By using our Website, you agree to our practices concerning such information, including our use of cookies, as described below. This Privacy Policy may be revised from time to time. For questions regarding our handling of personal information, please contact us as detailed at the bottom of this page.
The Information We Collect
We may collect personal information in a variety of ways as described below.
Directly from You
We may collect personal information directly from you when you visit our Website. When you make a donation, we may collect: your full name; mailing address; email address; telephone number; and date of birth. Additionally, credit card information and bank account information may be collected by third-party service providers who work on our behalf to process your donations.
Automatically When you Use our Website
We collect certain information from all visitors to our Website. This information includes cookie data, Internet Protocol (IP) addresses, the types of browsers used, and information about navigation patterns including the specific web and/or mobile site pages visited. We may also collect geolocation information and computer and mobile device IDs. We also track data such as the total number of visits to our Website and the number of visitors to each page of our Website.
We use cookies on the Website to deliver our online services. We may also use information collected for data analytics, and consent management purposes related to our Website’s visitors, for system maintenance, and to understand how visitors use our Website and services. We utilize third-party analytics tools that use cookies or other tracking technologies to generate information on your use of our Website (e.g., your IP address, pages viewed, and links clicked). This information may be transmitted to, and stored by, our third-party service providers. We or our contractors may also transfer this information to third parties as required by law, or where such third parties process the information on our or our service provider's behalf.
Google Analytics: We may use Google Analytics and other third-party analytics vendors. These services use cookies to report on user interactions on our and others’ Websites. We use the information collected to evaluate our Website’s user activities and statistics to improve and inform our content, advertising, navigation, programming strategies, Website and app structure, and generally improving users’ experience. For more information about Google Analytics, how it collects and processes information, and instructions on opting out of Google Analytics using a specific plug-in, please visit https://tools.google.com/dlpage/gaoptout. Note that this opt-out is specific to Google activities and does not affect the activities of other ad networks or analytics providers that we may use.
Browser “Do Not Track” Signals: The Website does not respond to web browser "do not track" signals. We and our service providers engage in information collection and sharing practices, including tracking browsing history. We offer choices to users, as described in this Privacy Policy regardless of the "do not track" choice made by the user.
How We Use the Information We Collect
We may use the personal information we collect for various purposes, including:
To communicate with you about your donation;
To send you newsletters and information regarding our funds, campaigns, and for other advertising and marketing purposes;
To improve our content and communications and to respond to the interests and preferences of visitors to the Website;
If needed to process credit cards, with the assistance of a third-party processor, so that you may make a donation; and
To better understand the demographic makeup of our donors and visitors to the Website.
How We Share the Information We Collect
We may share personal information with:
Authorized third-party vendors and service providers. We may share your personal information with third-party vendors and service-providers that help us with specialized services, including with vendors that assist us with events, marketing, credentialing providers, test vendors, registration providers, website analytics services, billing and payment processing providers, customer service providers, email deployment providers, business analytics providers, and performance monitoring, hosting, and data processing providers.
Business or charitable partners. We may share your personal information with our business or charitable partners that are subject to this policy.
Investigate security incidents. We may share your personal information to investigate and respond to a security incident.
Business transfers. We may share your personal information in connection with a substantial corporate transaction, such as the sale of the Website, or a merger, consolidation, asset sale, or in the event of bankruptcy.
Legal purposes. We may disclose personal information to respond to subpoenas, court orders, legal process, law enforcement requests, legal claims or government inquiries, and to protect and defend the rights, interests, property, health, safety, and security of us, our affiliates, users, or the public. We may also share personal information with regulatory authorities as may be required or requested under applicable law.
With your consent or at your direction. We may share personal information for any other purposes disclosed to you at the time we collect the information or pursuant to your consent or direction.
Links to Third-Party Websites
The Website may contain links to websites operated by third parties. We do not control these websites or their content, and any information you provide to such websites is governed by the terms of that website's privacy policy. The inclusion of links to third-party website on our Website in no way constitutes an endorsement of the content, actions, or policies of the third-party website.
Public Posting Areas
Please note that any information you post to any public posting area on our Website is available to anyone with Internet access worldwide. If you don't want people to know your email address, for example, don't include it in any message you post publicly. Please be careful when disclosing information in public posting areas. We are not responsible for the use or disclosure by others of the information that you disclose in public posting areas.
Children’s Personal Information
Our Website is not directed to, and we do not knowingly collect, use, or disseminate any personal information from children (i.e., individuals younger than 18 years old). If, however, we become aware that such information has been collected, we will delete such information.
Disclaimer Regarding Video Content
The Website may contain video content, audiovisual content, or content of a like nature (collectively, “Video Content”). In connection with our provision of Video Content, the Website may utilize cookies and other online tracking technologies and tools that track information about your activity and webpage-viewing history on the Website (collectively, “Tracking Tools”). Tracking Tools on the Website may result in information about your activity on the Website being transmitted from your browser to us and third parties, which, in turn, may result in the display of targeted advertisements on third-party websites and platforms, including advertisements for ACF content. In addition, whether Tracking Tools on the Website results in your browser’s transmission of information to third parties depends on a number of factors that may be outside of our knowledge or control, including what third-party websites you use, what information you have provided to such third parties, and whether (and the extent to which) you have limited the use of cookies by the operators of those third-party websites.
How We Secure the Information We Collect
The security of your personal information is important to us. We implement reasonable technical and organizational security measures to protect the personal information submitted to us, both during transmission and once it is received. We take steps to ensure that such data remains private and confidential. We restrict access to personal information to our employees, contractors, and agents who need to know that information in order to operate, develop, or improve our Website.
Please understand, however, that no data transmissions over the Internet can be guaranteed to be 100% secure due to the inherent risks of data transmission over the Internet. Consequently, we cannot ensure or warrant the security of any information you transmit to us, and you understand that any information that you transfer to us is done at your own risk. If we learn of a security system breach, we may attempt to notify you, including electronically, so that you can take appropriate protective steps. By using the Website or providing personal information to us, you agree that we can communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Website. If you have any questions about the security of your personal information, you can contact us via the contact information provided below.
Your Choices Regarding the Information We Collect
You have some choices concerning our use of your personal information. For example, if you have requested communications from us (e.g., newsletters and communications regarding our events) but do not wish to receive further information, you can "opt-out" by clicking on the "unsubscribe" link provided in the relevant communication. Depending on where you live, you may request that we:
Update, correct, or delete your personal information;
Provide you with access to your personal information;
Withdraw your consent to marketing or other communications; and
Change your preferences regarding our sharing of your personal information with third parties.
California “Shine the Light”
California residents have the right to annually request and obtain information free of charge about any third parties that received personal information from ACF during the preceding calendar year for direct marketing purposes. We do not share personal information for these purposes.
Nevada Disclosure
Residents of Nevada have the right to opt out of the sale of certain personal information to third parties. We currently do not sell your personal information as defined by Nevada law.
Privacy Rights for Canada, the European Economic Area, the United Kingdom, and Switzerland
We may process “personal data,” as that term is defined in the European Union’s General Data Protection Regulation (“GDPR”) and the equivalent UK and Canadian federal and provincial data protection laws. If you are located in Canada, the EEA, U.K., or Switzerland, you may have the following rights:
The right to access information about the categories of personal data we have collected about you. You may also request a copy of the personal data we have collected, and upon request, we will provide this information to you in a machine-readable electronic format or transfer it to a third party.
The right to correct your personal data if inaccurate.
The right to request erasure of your personal data when such data is no longer necessary for the purpose for which it was collected, when you withdraw consent and no other legal basis for processing exists, or when you believe that your fundamental rights to data privacy and protection outweigh our legitimate interest in continuing the processing.
The right to withdraw your previously given consent for us to process your personal data.
The right to restrict our processing of personal data if there is a dispute about the accuracy of the data; if the processing is unlawful; if the processing is no longer necessary for the purposes for which it was collected but is needed by you for the establishment, exercise, or defense of legal claims; or if your request to object to processing is pending evaluation.
The right to object to processing of your personal data based on our legitimate interests, for direct marketing, and to object to decisions being made based solely on automated decision making and/or profiling. When you object, we will no longer process the data unless there are compelling legitimate grounds for our processing that override your interests, rights, and freedoms, or for the purpose of asserting, exercising, or defending legal claims.
The right to obtain information about, and a copy of, the safeguards we use to transfer personal data across borders.
In processing personal data, we may rely upon the following lawful bases:
Consent. We may process personal information with the consent of the individual whose data is being processed and/or in reliance upon the consent of the administrator of the account, who must affirm that s/he has obtained appropriate consent from all participants.
Contract. When we enter a contract with you and/or an administrator for your account, we process personal information on the basis of our contract in order to prepare and enter into the contract, as well as to perform and manage our contract. This is necessary for us to provide the Website to you.
Vital interests. In a case where the personal information is required to protect your vital interests or the vital interests of another natural person, then this may be used as the lawful basis of the processing. For example, we may need to process personal information in the event of a pandemic.
As required by law. We may process personal information as required to comply with legal obligations to which we are subject for the for the purpose of compliance with Canadian, EEA, UK, or Swiss public, governmental, judicial, or other regulatory authorities.
For legitimate business purposes. This includes but is not limited to legal compliance and the purposes described above.
Users who are located in Canada, the European Economic Area (“EEA”), the U.K., or Switzerland may also have the right to lodge a complaint about our data collection and processing actions with the relevant supervisory authority in their country of residence. Contact details for data protection authorities are available here:
In Canada (federal): https://www.priv.gc.ca/en/report-a-concern/
In Alberta, Canada: https://oipc.ab.ca/request-a-review-file-a-complaint/
In British Columbia, Canada: https://www.oipc.bc.ca/for-the-public/how-do-i-make-a-complaint/
In Quebec, Canada: https://www.cai.gouv.qc.ca/
In the EEA: https://edpb.europa.eu/about-edpb/about-edpb/members_en
In the U.K.: https://ico.org.uk/global/contact-us/contact-us-public/
In Switzerland: https://www.edoeb.admin.ch/edoeb/de/home/deredoeb/kontakt.html
ACF works to resolve inquiries about our data practices and our collection or use of your personal information. Canadian, EEA, U.K., and Swiss residents with inquiries or complaints regarding this Privacy Policy should mail us using the contact information provided below. You may also exercise the rights detailed above by emailing us at: [EMAIL]. ACF will respond to all inquiries within forty-five (45) days of receipt.
Data Transfers
We maintain information in the United States of America, which may not provide the same level of protection as the laws in your jurisdiction. By using the Website and providing us with personal information, you understand and agree that your information may be transferred to and stored on servers located outside your resident jurisdiction and, to the extent you are a resident of a country other than the United States, that you consent to the transfer of such data to the United States for processing by us in accordance with this Privacy Policy.
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time. Any changes will be posted on this page. If we make a significant change in the way we use or share your personal information, you will be notified via email and/or prominent notice within the Website at least 30 days prior to the changes taking effect.