PRIVACY POLICY
GENERAL INFORMATION
All Out is committed to protecting your privacy and wants you to be familiar with how we collect, use, and disclose data.
Before we start: All Out Action Fund, Inc. (All Out
, we
or us
) is a 501(c)(4) not-for-profit corporation, registered in the U.S. and dedicated to raising awareness, promoting activism and influencing public and individual behavior to combat prejudice and discrimination against LGBT+ people (that is, lesbian, gay, bisexual, trans people and other identities).
This Privacy Policy describes how we collect, use, share, and protect the personal information All Out collects from you via allout.org and any other All Out website where this Privacy Policy is posted or linked (collectively, the Site
) or through any other means.
You can jump to particular topics by going to the headings below:
Jurisdictional Issues and Cross-Border Transfer
Updates to this Privacy Policy
WHAT INFORMATION WE COLLECT
All Out may collect and process the following information about you, and use it for the following purposes and in the following contexts:
| Context | Types of Data | Primary Purpose for Collection and Use of Data |
| Account Registration | We collect your name, email address and phone number when you create an account. We also collect information relating to the actions that you perform while logged into your account. | We have a legitimate interest in providing account related functionalities to our users. Accounts can be used to sign up for emails, to create petitions and campaigns and to save your preferences and transaction and donation history. |
| Donations and Campaigns | We collect your name, email address, country and phone number when you make a donation on our Site. We may also collect the amount, currency, and method of payment of your donation. Your payment card or other payment information if handled by our payment processors. | We use your information in order to complete the donation and fulfill the contract with you to do so. We also have a legitimate interest in ensuring that our Site and donations operate as intended. |
| Partner Information | We collect the name, and contact information, of our partners organizations and their employees with whom we may interact. | We have a legitimate interest in contacting our partners and communicating with them concerning normal business administration such as projects, services, and billing. |
| Cookies and First-Party Tracking | We use cookies and clear GIFs. “Cookies” are small pieces of information that a Site sends to a computer’s hard drive while a Site is viewed. See our Cookies & Similar Technologies Policy for more information. | We have a legitimate interest in making our Site operate efficiently. |
| Cookies and Third-Party Tracking | We may place tracking technology on our Site that collects analytics, records how you interact with our Site or allows us to participate in behavior-based advertising. This means that a third party uses technology (e.g., a cookie) to collect information about your use of our Site so that they can report analytics to us or provide advertising about products and services tailored to your interests. That third party might also collect information over time and across different websites in order to serve advertisements on our website or other websites. See our Cookies & Similar Technologies Policy for more information. | We have a legitimate interest in understanding our users and how you interact with our Site. Where required by law, we base the use of third-party cookies upon consent. |
| Demographic Information | We may collect personal information, such as your sexual orientation, gender identity, ethnic origin, religious beliefs, if you give us express consent to do so. | We only collect this information where you have given your express consent for us to do so. |
| Email Interconnectivity | If you receive email from us, we use certain tools to capture data related to when you open our message, click on any links or banners it contains and make purchases. | We have a legitimate interest in understanding how you interact with our communications to you. |
| Employment | If you apply for a job posting, or become an employee, we collect information necessary to process your application or to retain you as an employee. This may include, among other things, your Social Security Number. Providing this information is required for employment. | We use information about current employees to perform our obligations to employees. In some contexts, we are also required by law to collect information about employees or applicants. We also have a legitimate interest in using your information to have efficient staffing and work force operations. |
| Feedback/Support/Contact Us | If you provide us feedback or contact us for support, or otherwise we will collect your name, email address and country as well as any other content that you send to us, in order to reply. | We have a legitimate interest in receiving, and acting upon, your feedback or issues. |
| Mailing List | When you select that we may contact you by text, we collect your email, name, country and phone number. | We share information about our products and services with individuals that consent to receive such information. We also have a legitimate interest in sharing information about our products or services. |
| Mobile Devices | We collect information from your mobile device such as unique identifying information broadcast from your device when visiting our Sites. | We have a legitimate interest in identifying unique visitors, and in understanding how users interact with us on their mobile devices. |
| Location Data | We or our partners may collect your location data when you visit our Sites. | We have a legitimate interest in providing you with goods available in your region and to ensure that geographically correct service providers are utilized. |
| Order Placement | We collect your title, name, location data, billing address, shipping address, email address, payment card number or information, and any other personal message you share with us when you place an order. | We use your information to perform our contract to provide you with products or services. |
| Partner Promotion | We collect information that you provide as part of a co-branded promotion with another company. | We have a legitimate interest in fulfilling our promotions. |
| Public Health and Safety | In certain situations where a serious public health threat has been identified, we may collect information from employees, guests, and other individuals accessing our facilities or events. This may include medical and health information, such as body temperature, symptoms, and underlying health conditions. In some cases, we may also collect medical, health, and related information about an employee’s children, family member, or other individuals under the employee’s care. | We have a legitimate interest in protecting the health and safety of our employees and guests. In some jurisdictions we may be required by law, regulation, or governmental order to collect and retain information related to issues of public health and safety. We have a legitimate interest in complying with the laws in the jurisdictions in which we operate. |
| Surveys | When you participate in a survey, we collect information that you provide through the survey. If the survey is provided by a third party service provider, the third party’s privacy policy applies to the collection, use, and disclosure of your information. | We have a legitimate interest in understanding your opinions, and collecting information relevant to our organization. |
| Website interactions | We use technology to monitor how you interact with our Site. This may include which links you click on, or information that you type into our online forms. This may also include information about your device or browser. | We have a legitimate interest in understanding how you interact with our Site to better improve it, and to understand your preferences and interests in order to select offerings that you might find most useful. We also have a legitimate interest in detecting and preventing fraud. |
| Web logs | We collect information, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to a computer when the internet is used), domain name, click-activity, referring website, and/or a date/time stamp for visitors. | We have a legitimate interest in monitoring our networks and the visitors to our Sites. Among other things, it helps us understand which of our services is the most popular. |
WHY DO WE COLLECT INFORMATION
In addition to the purposes described above, All Out may use your Personal Information for the following purposes:
- To provide the Site’s services and functionalities (the
Services
), such as allowing you to:- Sign petitions.
- Make online donations.
- Start your own campaign with All Out.
- Take action on campaigns available on the Site.
- Sign up to receive email and mobile alerts from us.
- Sign up as a volunteer.
- Apply for a job or other openings at All Out.
- Place orders and receive your products.
- Submit inquiries and requests.
- To communicate with you, including sending you:
- Updates about All Out’s campaigns, either by email or mobile.
- Information regarding a donation you made to All Out.
- Information regarding a job or opening you applied for at All Out.
- Information about the Site, such as changes to our terms, conditions, and policies.
- To accomplish organizational purposes, including:
- Ensure the safety of participants in our volunteer groups.
- Determining the effectiveness of our campaigns.
- Generating and analyzing data.
- Identifying usage trends, i.e., which parts of our Site are most visited.
- Enhancing or modifying the Site or the Services.
- Developing new tools and services.
- Human resources purposes, such as recruitment.
- Carrying out audits.
- Fraud and security monitoring purposes, i.e., to detect and prevent cyberattacks.
Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you complete an online purchase, we may collect your information to perform our contract with you, but we also collect your information as we have a legitimate interest in maintaining your information after your transaction is complete so that we can quickly and easily respond to any questions about your order. As a result, our collection and processing of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.
HOW WE COLLECT INFORMATION
All Out may collect information about you in the following ways:
- When you voluntarily provide that information to us: You may give us Personal Information about you by engaging in any of the Services available on the Site, as described above.
- When our Site (and the tools it uses) collects information about you: When you visit our Site, we will collect some information about you and your visit – such as your browser type/version, your IP address, and the pages on our site that you visit. We may also download "cookies" to your device. Please read our Cookies & Similar Technologies Policy to learn about how we use cookies and similar technologies in connection with the Services. Some third parties may also place cookies, and may be able to track you over time and across different Sites.
- From third parties to whom you have shared your data: We may also receive Personal Information about you from third parties, including, for example, our affiliates, business partners, service providers and other third parties, or from publicly available sources. Note that these organizations may have their own privacy policies, so please make sure you read them before providing them with your Personal Information.
Keep in mind that, when you take certain actions on the Site, you may provide Personal Information to third parties, which are not covered by this policy. For example, when you use the social media sharing buttons and widgets available on our Site, you give Personal Information to third parties such as Facebook and Twitter. In such cases, your Personal Information will be managed according to the privacy policies of these third parties. All Out does not have control over the use they make of Personal Information you provide them.
HOW WE SHARE YOUR INFORMATION
Your Personal Information may be disclosed:
- To petition or campaign targets. When you sign a petition, or contribute to a campaign, we may add your name and country – if you have voluntarily provided that information when signing the petition or contributing to the Campaign – to the list of petition signers or campaign contributors. This list may be delivered to the target of that petition, that is, the decision maker to whom the petition is directed. Note that the petition target may, in turn, further disclose this information. We are not responsible for the practices of petition targets.
- To petition or campaign starters. Anyone can start their own petition or campaign using All Out's platform. Petitions or campaigns started by third parties are marked with a disclaimer that says,
Campaign started by
. If you sign a petition or contribute to a campaign started by a third party, your name and country - if you voluntarily provided such information when signing the petition or contributing to the campaign - may be shared with the petition or campaign starter who may, in turn, further disclose this information. We are not responsible for the practices of petition or campaign starters. - To other grassroots organizations, subject to any choices you make. Our platform also enables partner grassroots organizations to start their own petitions or campaigns. When you sign a petition or contribute to a campaign started by a partner organization, we may offer you the option of signing up to receive email alerts from that organization. If you agree to that, we will share your name, country and email address with the partner organization. Their use of such information will then be subject to their own policies and terms. We are not responsible for the practices of partner organizations.
- To third-party service providers, who have been appointed as data processors to perform functions and services on our behalf and who will be provided only with personal data necessary to perform the services on our behalf but are not authorized by us to use such data for any other purposes (e.g., providers of services in respect of web hosting, payment processing, information technology systems, customer relationship management, booking and reservations management, marketing, auditing, administration). An overview of our service providers that manage Personal Information is available here.
- Other Disclosures with Your Consent. We may ask if you would like us to share your information with other unaffiliated third parties who are not described elsewhere in this policy.
We also use or disclose your Personal Information as necessary or appropriate, especially when we have to exercise our rights or protect yours, when we have a legal obligation, or legitimate interest to do so. These include:
- Complying with applicable laws, which can include laws outside your country of residence.
- Responding to requests from public authorities, which can include authorities outside your country of residence.
- Cooperating with law enforcement. For example, when we respond to law enforcement requests and orders, including from authorities outside your country of residence.
- Other legal reasons, such as enforcing our terms and conditions, and protecting our rights, privacy, safety, or property, and/or that of our affiliates, you, or others.
- A sale or similar transaction. We have a legitimate interest in disclosing or transferring your Personal Information to a third-party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our organization, assets, or stock (including in connection with any bankruptcy or similar proceedings). Such third parties may include, for example, an acquiring entity and its advisors.
We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law. In some instances, we may combine Other Information with Personal Information. If we do, we will treat the combined information as Personal Information as long as it is combined. If we are required to treat Other Information as Personal Information under applicable law, then we may use and disclose it for the purposes for which we use and disclose Personal Information as detailed in this Privacy Policy.
JURISDICTIONAL ISSUES AND CROSS-BORDER TRANSFER
Because All Out is a global organization, your Personal Information may be stored and processed in any country where we have facilities or in which we engage service providers. By using the Site and the Services, you understand that your information will be transferred to countries outside your country of residence, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information.
For users in the European Economic Area (EEA) / United Kingdom (UK): Some of the non-EEA / UK countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here (EEA) and here (UK). For transfers from the EEA/UK to countries not considered adequate by the European Commission or the UK, we have put in place adequate measures, such as standard contractual clauses adopted by the European Commission to protect your Personal Information. You can view these standard contractual clauses here (EEA) and here (UK).
For users in Brazil: The legal basis supporting the cross-border transfer of your Personal Information is the need to fulfill contractual obligations, that is, your data must be transferred to other countries in order for All Out to provide you with Services you request.
SECURITY
All Out seeks to use reasonable organizational, technical, and administrative measures designed to protect Personal Information within our organization. Unfortunately, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the Contacting Us section below.
All Out may use services that process Personal Information on our behalf or store your Personal Information on servers provided by third-party vendors. Note that third-party vendors have their own privacy policies and are responsible for data processing according to their capacity and legal boundaries, according to applicable local legislation. Please note that we have no control over the privacy practices websites, or services that we do not own. We encourage you to review the privacy policies of any third-party website or application for details about such third party’s privacy practices. An overview of our service providers is available here.
YOUR RIGHTS
We will only send you campaign-related communications if you opted in to receiving them These may include emails, mobile messages, and social media ads. You have the right to opt out of receiving such communications at any time.
If you no longer want All Out to send you:
- Campaign-related emails, you may opt out here or by clicking the
Unsubscribe
link at the bottom of any email we sent you. By using this option, you will be removed from our mailing list and will no longer receive any campaign-related emails from us. Please note that we may still send important administrative messages to you (e.g., if there was an issue with a donation you made and that is still being processed). You cannot opt out of such messages. - Mobile messages, you may opt out by using this form.
- Targeted campaign-related ads on social media, you may opt out following the instructions provided by each platform, such as Facebook/Instagram and Twitter. Note that, in such cases, All Out is not responsible for ensuring your request is processed and implemented.
Additionally, subject to local legislation in your country of residence, you may be entitled to request the exercise of the following rights:
- Access, update or make corrections to the Personal Information we have about you.
- Erasure or anonymization of your Personal Information. Note that we may not always be able to delete the data, such as if there is an ongoing contractual relationship between us or if we are legally required to retain the data. Also, should you request erasure of your Personal Information, we may not be able to provide you with certain Services.
- Request restriction of collection and/or processing of, or object to certain types of collection and/or processing of your Personal Information.
- Ask us not to collect and/or process your personal data for marketing purposes. We currently require your consent by opting-in, and you can change your preferences at any time. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third-party for such purposes.
- Ask us to provide you information about the third parties (public or private) with whom we might share your Personal Information.
- The right to data portability of your Personal Information to other providers of the Services.
- Where we process your personal information based upon consent, you may revoke consent. Please note, if you revoke your consent for the processing of personal information then we may no longer be able to provide you services.
You may exercise these rights at any time by writing to us at the address detailed in the Contacting us section, or using this form. We will try to comply with your request(s) immediately or as soon as reasonably practicable. If you are not satisfied with our response, and are in the European Union or United Kingdom, you may have a right to lodge a complaint with your local supervisory authority.
In your request, please make clear what Personal Information you would like to have changed, whether you would like to have your Personal Information suppressed from our database, or otherwise let us know what limitations you would like to put on our use of your Personal Information.
Please note, not all of the rights described above are absolute, and they do not apply in all circumstances. In some cases, we may limit or deny your request because the law permits or requires us to do so, or if we are unable to adequately verify your identity.
For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use when sending us your request, and we may need to verify your identity before implementing your request.
We may also need to retain certain information for recordkeeping purposes, to complete any transactions that you began prior to requesting a change or deletion and/or to comply with legal obligations.
RETENTION POLICY
We will retain your Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained. In the event that we are required by law to inform you of an unauthorized to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the Services to you; (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation, or regulatory investigations).
USE OF SITE BY MINORS
The Services are not directed to minors, and we do not knowingly collect Personal Information from such individuals. It should be noted, however, that the Services provided on the Site aim to promote the rights and best interests of all LGBT+ people – including LGBT+ minors.
If we are alerted in any way that we have collected the Personal Information of a minor without proper consent, we will delete that information in a reasonable period of time. We may need to verify the identity of the person alerting us before implementing such requests.
If you are under the age of 16, please ask your parent/guardian for their consent before submitting your Personal Information to this Site – as long as you're confident that taking such action will not cause you any harm. Please note that certain services on our site may require you to be the age of majority in your jurisdiction to use.
CONTACTING US
If you have any questions about this Privacy Policy, or would like to address concerns over how we process your personal data, please contact us using this form. Please do not include credit card or other sensitive information in your messages to us.
Our business address is All Out Action Fund, Inc., 169 Madison Ave STE 11089, New York, NY 10016, U.S.A.
For users in the European Economic Area (EEA): To get in touch with us about your personal data, you may contact our EU Representative directly, Matthew Beard, at [[email protected]]. You may also lodge a complaint with a data protection authority competent for your country or region or where an alleged infringement of applicable data protection law occurs. Please click here for contact information for such authorities.
For users in Brazil: To get in touch with us about your personal data, you may contact our Brazilian Data Protection Officer directly, Ana Clara Toledo, at [[email protected]]. You may lodge a complaint with a data protection authority competent for your country or region or where an alleged infringement of applicable data protection law occurs. Please click here for contact information for such authorities.
UPDATES TO THIS PRIVACY POLICY
Please review this Privacy Policy periodically because we may modify it from time to time. The LAST UPDATED
legend at the top of this page indicates when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the Site. Each time you visit the Site or provide us with information through the Site, by doing so you are accepting the Privacy Policy in effect at that time.