Privacy Policy

Research in Reach Privacy Policy
Last Updated: 05/06/2025

Research in Reach (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a donation, subscribe to our emails, or interact with our services. By using our services, you consent to the data practices described in this policy.

1. Information We Collect

We may collect the following types of information:

A. Personal Information

  • Identifiers: Name, email, phone number, mailing address (e.g., when you donate or sign up for emails).
  • Payment Information: Credit card details (processed securely via third-party processors like Stripe/PayPal).
  • Communications: Records of emails, surveys, or feedback.

B. Non-Personal Information

  • Analytics Data: Google Analytics collects IP address (anonymized where possible), browser type, pages visited, and referral sources.
  • Cookies & Tracking Technologies: We use cookies for functionality, analytics, and advertising (e.g., Google Ads). Non-essential cookies require your prior consent.

2. How We Use Your Information

We process your data based on:

  • Your consent (e.g., newsletters),
  • Contractual necessity (e.g., processing donations), or
  • Legitimate interests (e.g., website analytics).

Specifically, we use your information to:

  • Process donations and provide receipts.
  • Send newsletters (only with your opt-in consent).
  • Improve our website and services via analytics.
  • Design and distribute ads offsite via Google Ads or similar platforms.
  • Comply with legal obligations (e.g., tax reporting).

3. Sharing Your Information

We do not sell your personal data in the traditional sense. However your information is shared with/for:

  • Service Providers: We share data with payment processors (e.g., Stripe), email platforms (e.g., Mailchimp), and analytics tools (Google).
  • Advertising Partners: If using Google Ads involves sharing data for cross-context behavioral advertising, this may qualify as a “sale/share” under CCPA/CPRA. Opt-out via Do Not Sell/Share My Info or enable Global Privacy Control (GPC).
  • Legal Compliance: If required by law (e.g., subpoenas, CCPA/GDPR requests).

International Transfers: Data may be transferred outside the EU/EEA with GDPR-compliant safeguards (e.g., Standard Contractual Clauses).

4. Data Retention

We retain personal data only as long as necessary:

  • Donation records: 7 years (for tax compliance).
  • Newsletter data: Until you unsubscribe.
  • Analytics data: Anonymized or deleted after 24 months.

5. Your Rights Under Privacy Laws

A. GDPR (EU Residents)

  • Access, correct, or delete your data.
  • Withdraw consent (e.g., opt-out of emails).
  • Data portability.
  • Lodge complaints with a supervisory authority.

B. CCPA/CPRA (California Residents)

  • Know what personal data we collect.
  • Delete your data (with exceptions).
  • Opt-out of “sales/sharing”
  • Non-discrimination for exercising rights.

C. Global Requests
Submit requests via email, mail, or our online form. We respond within 30 days.

Do Not Track (DNT): We honor DNT and GPC signals where technically feasible.

6. Cookies & Advertising

7. Data Security

We implement:

  • SSL encryption and secure payment gateways.
  • Restricted access to authorized personnel.

8. Children’s Privacy

We do not knowingly collect data from minors under 13 (COPPA) or 16 (GDPR). If we are informed that we have inadvertently collect such data, we will promptly delete it. If we are informed that a user is a minor we will remove their data. Our account registration page requires all users to certify that you are at least 18 years of age.

9. Changes to This Policy

Updates will be posted here with a new “Last Updated” date. Material changes will be notified via email (if subscribed).

10. Contact Us

For privacy requests or questions:
Research in Reach
1520 E Covell Blvd, Ste B5 #614
Davis, CA 95616
Email: admin@researchinreach.org