Privacy Statement
American Civil Liberties Union Privacy Statement
The ACLU is committed to the right to privacy, including increasing the control individuals have over their personal information. Our June 30, 2023 privacy statement demonstrates this commitment by outlining in more detail how your personal information is collected, used, and shared by ACLU. Through this update, the ACLU is meeting and exceeding the disclosure requirements of U.S. state privacy laws (e.g., Colorado Privacy Act). We are using this update to expand the scope of our privacy statement to include information on how we treat personal information, regardless of how it is collected by the ACLU, and to expand the choices you have to control how we use your information.
These updates reinforce our commitment to your privacy and our dedication to protecting your personal information as we work together to advance civil liberties.
Effective June 30, 2023
The American Civil Liberties Union, Inc. (“ACLU, Inc.” or “Union”) and the American Civil Liberties Union Foundation, Inc. (“ACLUF” or “Foundation”) (collectively, “ACLU,” “National,” “we,” “us,” or “our”) work to expand the right to privacy, increase the control individuals have over their personal information, and ensure civil liberties are enhanced rather than compromised by technological innovation. Read more about our ongoing privacy and technology work on ACLU’s Privacy and Technology issue page.
ACLU is committed to living our values by describing how we collect and use your personal information in plain language, providing clear choices for how we collect and use your personal information, and continually evaluating and improving our privacy and data governance practices to responsibly handle personal information entrusted to us. This may include information about you, whether you are an ACLU supporter, or if you are not and we obtain information about you as an individual member of the public from other sources (e.g., you are a registered voter and we have information about you in voter files we use to conduct voter outreach); in this statement “you” refers to both.
This Privacy Statement (“Statement”) describes how ACLU collects, uses, shares, or otherwise processes personal information in its day-to-day operations. Certain ACLU programs, as well as ACLU state/local/territory affiliated organizations (“Affiliates”) throughout the United States, have separate privacy statements. Those statements are available here ACLU Organizations Privacy Statements. National and Affiliates may be referred to individually and collectively as “ACLU Organizations.” To learn more about the scope of this Statement, applicable regulations, and key definitions, read About This Statement.
Privacy Statement Highlights
- Our Data Privacy Principles. ACLU is committed to your right to privacy. We follow these eight principles when processing your personal information: Transparency, Individual Participation, Purpose Specification, Data Minimization, Use Limitation, Data Quality and Integrity, Security, and Accountability. Learn more.
- Personal Information We Collect. ACLU collects and stewards personal information about you through a variety of methods, including through direct collection (e.g., through a web form you submit), through automated data collection (e.g., through technologies to understand how people navigate our websites), from third-party sources (e.g., voter information from government and commercial sources), and by inferring personal information about you (e.g., as we look for individuals who may be interested in joining a discrimination lawsuit based on information we have collected from you and/or information acquired from third-party sources). Learn more.
- Why We Use Your Information. ACLU uses your personal information to further our mission. To better illustrate why we collect this information, we have listed specific processing purposes for which ACLU uses your information, categorized by the thematic activities of advocacy and organizing; digital services optimization and operations; fundraising; legal services; outreach and research; merchandise; and when required by law, to prevent fraud and protect our or others’ rights. Learn more.
- With Whom and How We Share Your Information. ACLU shares your personal information with our Affiliates, service providers who help us carry out business activities, business partners, and other third parties as required or permitted by law. Learn more.
- Your Choices and Rights. ACLU offers choices on how we process your information. You can let us know how you want us to communicate with you, correct your information, ask us to tell you about the information we have about you, and ask us to delete or stop using your information in certain ways. Learn more.
Personal Information We Collect
ACLU collects and stewards your personal information through a variety of methods. This section outlines what information we collect and how we collect it.
Information You Give to Us
This includes information you explicitly take steps to share with ACLU. This may be through online forms, offline donation forms, or even over the phone when you call ACLU to make a donation. Through these processes, you may share the following categories of information:
- Account registration. For example, account username and password.
- Audio or visual. For example, your image or voice captured when you attend an in-person or virtual event, or leave us a voicemail.
- Contact. For example, email address, postal address, or telephone number.
- Demographic. For example, age, citizenship status, ethnicity/race, or sexual orientation.
- Financial. For example, the amount you plan to bequest to ACLU.
- Health. For example, that you have had an abortion or have a disability, information you provide to us when seeking legal representation or to tell your story in an ACLU campaign.
- Interaction. For example, purchase and donation history, membership status, and advocacy actions taken.
- Interests. For example, civil liberties or campaigns you are particularly interested in hearing about.
- Jurisdiction. For example, your zip code or county to help us identify your voting district or current representatives.
- Legal. For example, details about conditions of incarceration or other detention that may have violated your civil rights or liberties and that you provide to us when seeking legal representation or to tell your story in an ACLU campaign.
- Preferences. For example, your preferred method(s) of communication.
- Transaction. For example, credit or debit card details that you provide in order to make a donation or purchase ACLU merchandise.
- User-created content. For example, stories you provide to us as part of our storytelling campaigns or messages on issues we send to your legislative representatives on your behalf. This also includes photos, videos, audio, and other information you may submit to us.
- Other. Any other information you choose to provide, including sensitive personal information, such as religious beliefs, information about your sexual orientation or sex life, or citizenship status.
Information We Automatically Collect
ACLU and our authorized third parties may use technologies to automatically receive and record information when you interact with us online on our websites (“Sites”) and/or through other digital technologies, such as email platforms, mobile applications that link to this Privacy Statement, or over the phone (altogether, “Digital Services”). These technologies allow the ACLU to improve our Digital Services, create a better experience for our users, and protect against fraud.
These technologies may include cookies, which refer to small files placed on your browser that can be used to uniquely identify you and record information about the websites you visit, and other technologies (such as web beacons, clear gifs, and single-pixel gifs) that use embedded code in our Digital Services to record details about your use of those Digital Services, for example, whether you opened an email or clicked on a link.
These technologies may be placed by us or by other entities we authorize. We only authorize third parties to place these technologies if those authorized third parties abide by our confidentiality and security requirements described below under With Whom and How We Share Your Information.
ACLU and our authorized third parties may automatically collect the following categories of information:
- Contact. For example, your email address or telephone number.
- Device identifiers. For example, your phone model, phone carrier browser version, or operating system you use to browse our Sites.
- IP address or information that could be derived from it. For example, your approximate geolocation.
- Interaction. For example, the content you click on or view, the amount of time you spend on our Sites, or the referring URL.
Information We Receive from Others
ACLU may acquire personal information about you from third-party sources, such as data cooperatives for nonprofits, other nonpartisan organizations, coalition partners, commercial voter file providers, and various federal, state, and local government entities (e.g., public records data or information procured through FOIA requests that we use to search for civil liberties violations). We acquire this information to learn more about you — including how best to engage with you — to identify people like you that may be interested in hearing from ACLU, and to research and evaluate potential or ongoing claims or advocacy regarding civil rights and civil liberties issues. We may collect the following categories of information from third-party sources:
- Contact. For example, your telephone number, physical and email addresses, or social media handles.
- Demographic. For example, your age, gender and race/ethnicity for assessing the potential disparate impact of laws, learning about the diversity of our supporters and voters to further our commitment to Systemic Equality, and deciding how best to engage people to support our fight against laws that restrict their civil rights, such as stopping bans on abortion.
- Interaction. For example, your engagement with other nonpartisan organizations, nonprofit organizations, and ACLU coalition partners, or your likelihood to support the ACLU and our issue areas.
- Interests. For example, civil liberties or campaigns you may be interested in hearing about or supporting.
- Financial. For example, estimated household income, real estate or business holdings, or estimated assets and salary which may be inferred and which derives from publicly available sources for engaging current and identifying prospective donors.
- Legal. For example, court records, details about conditions of incarceration, or other detention that may have violated your civil rights or liberties.
- Voting. For example, precinct, voter registration, modeled party registration, or information about your history of voting in prior elections.
Information We Infer and Model
ACLU may use personal information we have collected — directly, automatically, or acquired from third parties — to compile, combine, and infer new information about you. We do this to tailor our communications and outreach, and to improve our programs and services.
ACLU and our service providers may infer the following categories of information:
- Contact. For example, inferred members of your household.
- Demographic. For example, when we cannot ascertain demographic data directly, we may rely on models or service providers to infer gender or racial/ethnic identity in order to assess the potential disparate impact of laws, learn about the diversity of our supporters and voters to further our commitment to Systemic Equality, and decide how best to engage people to support our fight against laws that restrict their civil rights, such as stopping bans on abortion.
- Financial. For example, we may use models or service providers to estimate the amount you are likely to donate.
- Interaction. For example, inferred likelihood to engage with the ACLU and our issue areas.
- Interests. For example, civil liberties or campaigns you may be interested in hearing about or supporting.
- Preferences. For example, your preferred method(s) of communication.
- Voting. For example, inferred likelihood to vote based on an issue area.
Why We Use Your Information
ACLU collects your personal information to further our mission through our advocacy and organizing, litigation, and fundraising programs. When we process, use, or share that information, we apply appropriate confidentiality and security requirements (see: How We Protect Your Information and With Whom and How We Share Your Information). In addition, we aim to use only the information that is specific and necessary for the processing purpose (see: Our Data Privacy Principles).
- Advocacy and Organizing. ACLU works to advance our advocacy and organizing capacity to further our mission. To do this, ACLU uses the personal information you provide to us when you take action in order for us to share your stories and testimonials, deliver your petitions and action messages, and host events. We may also use your personal information to mobilize volunteers and activists in support of our work.
- Digital Services Optimization and Operations. ACLU works to provide our constituents with a secure and optimized experience engaging with our Sites and other Digital Services. To do this, ACLU uses your personal information in user experience testing, website performance assessment, fraud detection, and account registration.
- Fundraising. ACLU, as a nonprofit, needs donor support to enable its operations. To do this, ACLU uses your personal information to process your donations and solicit donations.
- Legal Services. ACLUF works to win court battles and Supreme Court cases core to our issue areas, and to provide other critical legal services regarding important civil liberties and rights to ACLUF clients. To do this, ACLU uses sources that may include your personal information in order to research violations of civil liberties, evaluate requests for legal representation, solicit potential clients, litigate court cases, and effectively represent ACLUF clients.
- Outreach and Research. ACLU works to deliver to you information on issue areas you have identified as important to you and seek out new supporters of our mission. To do this, ACLU uses your personal information to communicate opportunities to support ACLU’s mission through various communication channels, including targeted advertising, based on your engagement profile, social listening, and polling.
- Merchandise. ACLU provides merchandise to support our advocacy and fundraising efforts. When you order merchandise, ACLU uses your personal information to register your account with our store or process your payments.
- When Required by Law, to Prevent Fraud, and Protect Our or Others’ Rights. ACLU, as a nonprofit, must submit donation reports to governmental entities and fulfill other legal obligations, such as complying with Your Choices and Rights. To do this, ACLU uses your personal information to fulfill those obligations (e.g., ensuring that your information is deleted from our systems if you so request). In addition, ACLU may need to use your personal information to prevent fraud or to protect our or others’ rights (e.g., researching your personal information if we have reason to think you may be using our name and logo without permission).
Processing Activities and Uses
There is not a “one-size fits all” approach to how we process and use personal information at ACLU. ACLU strives for transparency about what personal information we collect and how we use it. This chart details further our personal information processing activities, alongside their purposes, categories of personal information we process (see Personal Information We Collect for more information), and the categories of parties with whom we may share your information (see With Whom and How We Share Your Information for more information).
Processing Activity and Use
Account creation and management: To create and manage your account. Accounts may be created for our online store.Purpose(s)*^
- Digital Services Optimization & Operations
- Merchandise
Type(s) of Information*
- Account registration
- Contact
With Whom We May Share Information^
- Service Providers
Processing Activity and Use
Broadcast updates and communicate with you: To keep you informed of our priorities and opportunities to get involved, and in response to inquiries made by you. This can be through direct mail, email, phone calls, and text messages and includes any of our action or marketing lists you subscribe to.Purpose(s)*^
- Advocacy & Organizing
- Fundraising
- Legal Services
- Outreach & Research
- Merchandise
Type(s) of Information*
- Contact
- User-created content
With Whom We May Share Information^
- Service Providers
Processing Activity and Use
Conduct research and analyze information to improve the effectiveness of our outreach and communications: To ensure you receive the most relevant opportunities, we use personal information to model who is most likely to support an issue area or campaign and segment our messages.Purpose(s)*^
- Advocacy & Organizing
- Digital Services Optimization & Operations
- Fundraising
Type(s) of Information*
- Contact
- Demographic
- Device identifiers
- Financial
- Interaction
- Interests
- Preferences
- Voting
With Whom We May Share Information^
- Affiliates
- Service Providers
Processing Activity and Use
Deliver petitions and other message actions: To facilitate petitions and other message actions to our advocacy targets (such as messages to your member of Congress).Purpose(s)*^
- Advocacy & Organizing
Type(s) of Information*
- Contact
- User-created content
With Whom We May Share Information^
- Business Partners (Coalition Partners)
- Service Providers
Processing Activity and Use
Evaluate requests for and provide legal services: To deliver legal services in relation to a legal case.Purpose(s)*^
- Legal Services
Type(s) of Information*
- Contact
- Demographic
- Legal
- User-created content
With Whom We May Share Information^
- Affiliates
- Business Partners (Co-Counsel)
- Service Providers
Processing Activity and Use
Host our National Advocacy Institute and other events: To plan and host in-person or virtual events, including selecting participants, awarding scholarships, coordinating travel, lodging, or other accommodations and logistical planning.Purpose(s)*^
- Advocacy & Organizing
- Fundraising
- Legal Services
- Outreach & Research
Type(s) of Information*
- Contact
- Demographic
- Financial
- Interaction
- Interests
- Legal
- User-created content
With Whom We May Share Information^
- Affiliates
- Service Providers
Processing Activity and Use
Identify prospective ACLU donors: To grow our base of donors, we participate in list exchanges with like-minded, non-partisan organizations and engage in data cooperatives for non-profits.Purpose(s)*^
- Fundraising
Type(s) of Information*
- Contact
- Interaction
With Whom We May Share Information^
- Business Partners (Data Cooperatives for non-profits, Non-partisan organizations)
- Service Providers
Processing Activity and Use
Improve performance of our Digital Services: To make our Digital Services easier and more pleasant to use by assessing the current performance of our Digital Services and content.To investigate and maintain the stability of our Digital Services.
Purpose(s)*^
- Advocacy & Organizing
- Digital Services Optimization & Operations
- Fundraising
- Outreach & Research
Type(s) of Information*
- Device identifiers
- Interaction
- IP address or information that could be derived from it
With Whom We May Share Information^
- Service Providers
Processing Activity and Use
Prevent fraud: To protect ACLU against fraudulent actors making payments through our Sites.Purpose(s)*^
- Digital Services Optimization & Operations
Type(s) of Information*
- Contact
- Device identifiers
- Interaction
- IP address or information that could be derived from it
With Whom We May Share Information^
- Service Providers
Processing Activity and Use
Process payments: To process your donations or payments for other services such as registering and paying for an ACLU ticketed event. This includes managing payments, charges, and bequests from estates and financial accounts.Purpose(s)*^
- Advocacy & Organizing
- Fundraising
Type(s) of Information*
- Contact
- Financial
- Transaction
With Whom We May Share Information^
- Service Providers
Processing Activity and Use
Mobilize volunteers: To mobilize volunteers to canvass, phonebank, or text-bank in support of an issue area or campaign.Purpose(s)*^
- Advocacy & Organizing
Type(s) of Information*
- Contact
- Interaction
- Interests
With Whom We May Share Information^
- Affiliates
- Service Providers
Processing Activity and Use
Research violations of civil liberties: To research and analyze the impacts of laws, policies, and government or other stakeholder actions. This may be done to prepare and bolster legal claims, ACLU advocacy campaigns, public education, and/or particular programs. For example:- Conducting disparate impact analysis of data collected from government agencies through FOIA requests;
- Analyzing employment records we are given access to in order to monitor employer compliance with an employment discrimination settlement on behalf of our clients; or
- Analyzing data received from police departments pursuant to settlement agreements.
Purpose(s)*^
- Advocacy & Organizing
- Litigation
Type(s) of Information*
- Contact
- Demographic
- Financial
- Legal
With Whom We May Share Information^
- Affiliates
- Business Partners (Coalition Partners, Co-counsel)
- Service Providers
Processing Activity and Use
Serve and improve targeted advertising: To deliver advertising to people who are likely to support our issues and improve our targeted advertising we may use aggregated ad performance data like views, click, and conversions.Purpose(s)*^
- Advocacy & Organizing
- Fundraising
Type(s) of Information*
- Contact
- Demographic
- Interaction
- Interests
- IP address or information that could be derived from it
- Jurisdiction
- Voting
With Whom We May Share Information^
- Business Partners (Third-party advertisers)
- Service Providers
Processing Activity and Use
Solicit requests for legal support: To process solicited and unsolicited requests for legal support. ACLU may solicit you directly or indirectly as a potential plaintiff if we think you may benefit from our services. You may also decide to contact ACLU for legal support, in which case, we may process your information to determine if we can help and/or refer you to organizations that can help.Purpose(s)*^
- Legal Services
Type(s) of Information*
- Contact
- Demographic
- Interaction
- Interests
- Jurisdiction
- Voting
- User-created content
With Whom We May Share Information^
- Affiliates
- Business Partners (Co-counsel)
- Service Providers
Processing Activity and Use
Storytelling: To collect and raise your stories and testimonials of injustice that you provide to us with others as part of our movement building.Purpose(s)*^
- Advocacy & Organizing
- Fundraising
- Legal Services
Type(s) of Information*
- Contact
- Demographic
- Health
- User-created content
With Whom We May Share Information^
- Affiliates
- Service Providers
- Business Partners (Coalition Partners)
^When Required by Law, to Prevent Fraud, and Protect Our or Others’ Rights: The ACLU may also use your information to fulfill our legal obligations. Our processing activities may require that we share your information with government agencies, law enforcement, or other third parties, for example as we assess a potential threat you may have made to us. See With Whom and How We Share Your Information.
In addition to the processing purposes described in this notice, we may also de-identify personal information where possible. We may de-identify existing personal information to proactively minimize the data in our possession when identifying information is no longer needed. We may also de-identify information to remove identifying information from records that must be retained for legal purposes when you request the ACLU to delete your information. When we de-identify information permanently for privacy purposes, we will use it only in its de-identified form and do not attempt to re-identify the information.
How We Protect Your Information
ACLU has taken physical, technical, and administrative measures to safeguard the information we collect. We work to keep your data safe and protect against unauthorized access to, and improper use of, personal information we collect online.
- Physical measures. For example, your personal information, such as your name and address, is stored on servers subject to physical security safeguards.
- Technical measures. For example, data transmitted to and from our Sites, including credit card numbers, are encrypted in transit.
- Administrative measures. For example, we have established privacy and security policies and procedures to limit access to personal information. We also adhere to industry standards and regularly monitor our compliance with Payment Card Industry Standards to protect credit card information that you provide to us.
With Whom and How We Share Your Information
This section provides additional information on how we share your personal information with our Affiliates, service providers, and other third parties.
We share personal information with your consent, when you direct us to share it with others, as necessary to complete your transactions, or to provide the services you have requested or authorized. For example, when you provide credit card information to make a donation, we will share that data with payment card processors and other entities as necessary for the processing of your payment and to prevent or detect fraud.
We also share personal information with the following types of other parties:
Affiliates
ACLU works together with and shares your personal information with our state/local/territory Affiliates around the United States to create a coherent experience for our supporters, members, and the public and maximize our impact nationwide. For example, when you become a member of the National Union Organization, you will typically also become a member of the ACLU Organization of the Affiliate in the U.S. state where you reside (based on the mailing address you provide with your donation). We also may co-collect or share your personal information with any affiliated ACLU Organization.
While the ACLU Organizations adhere to a common set of privacy principles and standards for handling personal information that we share with one another, each ACLU Organization may have its own unique data practices that are not contained in this Statement. When we share your personal information with our Affiliates, they are bound to use that information in accordance with their privacy statement and with regard to their own operations. To view the list of all ACLU Organizations privacy statements, read ACLU Organizations Privacy Statements.
Service Providers
We work with a variety of service providers who help us process your personal information as outlined in Why We Use Your Information above, such as to facilitate the operation of our Sites; support our fundraising, marketing, communications, and advocacy programs; and deliver messages to you on other platforms.
We require these service providers to agree to take reasonable security measures in the handling and storage of that information. When we share personal information about you with a service provider, we take steps to: (1) transmit it in a secure manner and (2) require the service provider to promise to keep that information confidential and use it only for the purpose of carrying out the activities we have directed them to perform.
We allow some service providers to compile and use certain information related to ACLU and/or its supporters’ use of the services for internal purposes, like improving the functionality or security of the services ACLU receives from the service provider. In addition, we may also permit service providers to create and use data that has been de-identified for broader business purposes, including sharing aggregated benchmarking data with their business partners and other customers, but we will not agree to that unless the service provider has sufficiently committed to not recombine the data with other information to identify you and will not share or sell or use any identifiable data about you for the benefit of third parties outside the ACLU-service provider business relationship.
Business Partners
In some cases, we may disclose personal information to our vendors and other business partners for their own business purposes and/or in exchange for some valuable consideration, including some instances where we may share data with third parties at your request. For example, another nonprofit advocacy organization with whom we are co-hosting an event or working in broader coalition regarding important civil liberties issues.
These “Business Partners” include:
- Coalition Partners. To enable more effective advocacy, organizing, and litigation, we often partner with other organizations to further the reach of our work. When working in coalitions, we may share your personal information with our coalition partners to further those efforts and bolster our respective capacities for furthering our missions. We, however, will only share your personal information if you have requested or consented to that sharing.
- Co-counsel. ACLU may, from time to time, share personal information with third parties in the course of litigation, including with co-counsel, expert witnesses, and other parties engaged to work on prospective and pending litigation as the need arises. Personal Information we share in this context may include personal information related to you or other individuals who are not direct clients depending on the legal matter. For example, we may use modeled voter data that is relevant to a voting rights case against a state government entity. When ACLU lawyers share personal information, in particular client information, they do so in compliance with applicable professional responsibility rules.
- Data Cooperatives for Nonprofits. To grow our base of donors, ACLU participates in nonprofit data cooperatives. Data cooperatives are membership-based services offered by vendors that enable cooperative members to pool personal information about their respective supporters to model and identify new prospective supporters and/or to deepen engagement with existing supporters. When we participate in data cooperatives, we may share your personal information, including contact and interaction information — for example, donation history — with data cooperative vendors in exchange for the ability to contact individuals who are prospective ACLU supporters and/or modeled information about existing ACLU supporters who also support other cooperative member nonprofits (e.g., likelihood to become a monthly donor to ACLU). This practice of sharing supporter personal information with and through a data cooperative is a longstanding nonprofit practice that enables nonprofits to maintain a stronger supporter base — while lowering costs — by targeting communications to individuals who are most likely to be interested in hearing from them. ACLU will only join a data cooperative if the cooperative only serves nonprofit entities, does not receive from the ACLU any information about an ACLU supporter whose information is not already included in the cooperative’s database, does not provide cooperative members direct access to ACLU-provided information, does not share information derived from ACLU-provided information to partisan organizations, will not disclose an individual’s ACLU association to cooperative members, and agrees to remove from the cooperative’s data pool and destroy ACLU-provided information when we leave the data cooperative.
- Nonpartisan Organizations (List Rental or Exchange). To grow our base of donors, ACLU may share your contact information with other nonpartisan organizations, either on a rental basis (i.e., for a monetary fee) and/or in exchange for a similar supporter list from the other nonpartisan organization that ACLU can contact. This sharing of information allows each organization to contact the supporters of the other organization in order to further its mission. Working with other organizations in this way is critical to maintaining a strong donor base by allowing us to lower costs while reaching the widest possible audience. Data shared with nonpartisan organizations is done on a one-time use basis.
In order to protect your privacy, list sharing agreements with other nonpartisan organizations are conducted through secure and confidential arrangements in which the external organization does not directly receive information about you unless you choose to engage. Communications generated from list sharing agreements are carried out by each nonpartisan organization’s service provider(s), e.g., a vendor who prepares and sends out a mailer, who keeps your information confidential and secure. The other organization learns information about your relationship with the ACLU only if you choose to respond to their third-party communication.
- Third-party Advertisers. ACLU may display targeted advertisements to you on non-ACLU platforms, third-party websites, and social media sites, such as Facebook and Instagram, to fundraise and build support for our advocacy, organizing, and litigation priorities. We target our advertisements to effectively and efficiently reach people who are most likely to take action, including people impacted by government policies. In doing so, we may share your personal information with third-party advertisers to serve targeted advertisements to specific individuals (i.e., one-to-one matching), including you, or to display ads to people who are similar to specific individuals (i.e., “look-alikes”) who have engaged with ACLU. These practices help us engage in effective fundraising and advocacy operations and enable our teams to communicate more effectively with known and prospective supporters.
Personal information shared with these third-party advertisers are hashed to improve privacy (hashing data refers to the practice of scrambling data in a pre-defined manner to make it more difficult to recognize) and are shared only with third-party advertisers that promise to hold ACLU-provided information confidentially and securely and promise not to use ACLU-provided information for other purposes. For additional information on with whom we may have shared your personal information for targeted advertising purposes, please see Third-party Advertisers.
Where Required by Law or Necessary to Protect ACLU or Others
We may also disclose personal information from or about you to third parties in the following circumstances:
- Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies;
- Conduct litigation, including by disclosing information to co-counsel or ACLU advisors or other parties involved in the litigation process of claims by or against the ACLU;
- In the event of exigent circumstances, to help prevent the loss of life or serious injury or to protect the personal safety of ACLU personnel, users of our Digital Services, our visitors, or the public;
- Detect, investigate, prevent or otherwise address fraud or privacy issues;
- Operate and maintain the security of our services, including to detect, investigate, prevent, stop, or remediate an attack on our computer systems or networks; or
- Protect the rights or property of ourselves, our Affiliates, or others, including by enforcing our agreements, terms, and policies.
ACLU takes individual privacy and government overreach seriously as civil liberties issues. So, if we are required by law or legal process to share your information with government agencies, law enforcement, or other third parties (e.g., plaintiffs or defendants in a legal action), we will object to legal demands for third-party access to your information that we believe to be improper. In those situations, if it is determined that we are required by law to disclose your data, we will attempt to do so under cover of confidentiality and, as long as we are legally permitted to do so, will also attempt to provide you with notice of the request by whatever method is reasonably practical prior to making the disclosure to give you an opportunity to object to the disclosure. We will not provide such notice, however, if the disclosure is pursuant to our regular government reporting obligations, such as financial disclosures required for tax law compliance.
Your Choices and Rights
You have a number of choices in relation to your personal information. Further, you may have a legal right to these choices depending on your jurisdiction.
Communication Preferences
We strive to communicate with you according to your preferences. In some instances, you can update your communication preferences directly through the communication channels where we can contact you, e.g., by texting or replying “STOP” to unsubscribe from automated recurring text messages from 82623 or by clicking on the “Unsubscribe” link in the footer of our emails.
To make updating your phone and direct mail communication preferences as easy as possible, we have provided three methods:
- Recommended: Communication Preferences web form. We recommend submitting your phone and mail preferences via our Communication Preferences web form to expedite processing.
- Email. Send an e-mail to: ACLUpreferences@ACLU.org.
- Mail. Send a letter to ACLU Membership Department, 125 Broad Street, 18th Floor, New York, NY 10004.
Data Choices
Your Data Choices
You have a number of choices in relation to your personal information. These choices may be offered to you as data subject rights required by law. Data subject rights can differ depending on the state in which you reside and may be subject to legal limitations, but these choices include:
- Opting out: You have the choice to opt out of certain types of data processing activities.
- Targeted Advertising. You have the choice to opt out of targeted advertising.
- Sales of Data. You have the choice to opt out of sales of data. In the ACLU context, we participate in exchanges of donor personal information with other nonpartisan organizations and nonprofit data cooperative vendors. When you opt out of sales of data, you will be removed from both practices.
- Note: Some consumer privacy laws also afford residents the right to opt out of profiling or automated decision-making with legal or similarly significant impacts. ACLU does not conduct these activities.
- Reviewing what we have: You have the choice to review the personal information we have about you. We do have to take into account the interests of others, so this is not an absolute right. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. If we determine your request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
- Request a report. You have the choice to request access to your personal information. This includes information on what categories of personal information we have collected and steward.
- Request your data. You have the choice to receive your personal information in a structured, commonly used, and machine-readable format, and you may have the right to transmit that data to another entity.
- Request to correct. You have the choice to request that we rectify inaccurate or incomplete personal information concerning you.
- Deleting what we have: You have the choice to request that we delete the personal information we have about you.
- Note: If you choose to delete your personal information from our systems, this will also unsubscribe you from all ACLU Organizations Communications and delete your membership, advocacy, and volunteer history with ACLU Organizations. You may re-subscribe to ACLU communications at any time, but this will not restore your past history with ACLU Organizations.
Submit a Data Choice Request
You may submit a data choice request to us, or you may authorize another party to do so on your behalf using the mechanisms below. To make submitting Data Choice Requests as easy as possible, we have provided the following methods:
- Recommended: Your Data Choices web form. We recommend submitting your data choice request(s) via our dynamic Your Data Choices web form to expedite processing.
- Email. You may also submit an opt-out request for targeted advertising or sales of data by emailing privacy@aclu.org.
- Phone. You may also request a report, request your data, request to correct, or request to delete your data by calling our toll-free number (888) 597-4269. Please be sure to clearly articulate the request type. If our transcription service has not captured your request accurately, we may need to follow up with you to confirm the request type before we can begin the process.
Further notes on making Data Choice Requests:
- Identity Verification. When you or an authorized agent on your behalf make a request, we will confirm your identity. We may reach out to you for additional information to verify your identity beyond what is included in your initial request. Information collected to verify your identity will never be used for any other purpose than to verify your identity to fulfill your request. To preserve privacy and further equity, we are committed to not using biometrics, social security numbers, or commercial credit bureau information as part of our identity verification process.
- Children. If you are under 13, we do not want your personal information, and you must not provide it to us. If you are a parent or guardian and believe that your child who is under 13 has provided us with personal information, please contact us to have your child’s information removed.
- Appeals. If you would like to make an appeal related to a Data Choice Request, you may do so by emailing Privacy@aclu.org.
Manage Your Privacy Online
The internet, generally speaking, is not a private place. As you visit websites, use search engines, and conduct business on the internet, many different companies and organizations are gathering information about your online behavior by collecting information about your searches, visits, and transactions, and then matching that data with other information about you or leveraging algorithms to predict your behavior. There are some things you can do to prevent your information from being collected. We encourage you to read our blog post Easy Steps Everyone Can Take to Protect Their Digital Privacy to help protect your privacy online.
Like most websites, our Sites collect and process a range of information about their visitors to enable functionality and to deliver requested services. In addition to information we automatically collect for our purposes (see Personal Information We Automatically Collect), our Digital Services include links to social media sites, links to other websites operated by third parties (e.g., a registration page for another nonprofit advocacy organization’s event, a third-party payment processor), and embedded media (e.g., YouTube videos) that may collect information about you when you choose to interact with them. When you access this content, you are interacting directly with the third parties, whose data collection and other processing activities are governed by their privacy policies, and not by this Statement. When you view embedded media — hosted on other platforms, but viewable through the buttons we provide — you will remain on our Sites but you will be interacting with these third party’s online environment. In these instances, we make clear that you are viewing external content when you click on buttons.
How to Disable Cookies
If you would like to reduce the web data collected about you while browsing the internet, you can purge and disable cookies in your web browser.
For your awareness, our Sites will still work if you disable cookies in your browser. Please note disabling cookies on your browser may impact the operability of other websites you visit and disabling cookies will not disable other technologies (such as web beacons, clear gifs, and single-pixel gifs), which the ACLU uses on our Sites to support our operations and the security of our Sites.
About this Statement
When This Statement Applies
This Statement describes how we treat personal information collected by ACLU in our general operations. This includes personal information collected online and offline, including through our main website, ACLU.org, which is operated by the Union but hosts Foundation content and data; the Union’s People Power website, peoplepower.org; and other ACLU Sites and Digital Services that link to this Statement.
Certain ACLU programs, as well as ACLU Affiliates, have separate privacy statements. When a different privacy statement applies, the relevant privacy statement will be posted. To see a full list of ACLU Organizations’ privacy statements, read ACLU Organizations Privacy Statements.
Definitions
“Data Choices” means the choices you have in relation to your personal information. These choices may be offered to you as data subject rights required by law.
“Personal information” means information that identifies, relates to, describes, or can be reasonably linked, directly or indirectly, to a specific human, in a personal capacity. It does not include information that is considered de-identified, anonymous, or aggregated under applicable law or information relating to a person in their employment or professional capacities, including information obtained from or about ACLU employees or job applicants looking to work at ACLU.
“Processing” of personal information means any operation, or set of operations performed, manually or automatically, on personal information, like collection, use, organization, structuring, storage, transmission, analysis, retrieval, deletion, or modification of personal information.
Statement Update Procedure
Our Statement may change from time to time. We will post updated versions of this Statement here and, if the changes are significant, we will provide a more prominent notice of changes on our website. We will also keep prior versions of our main Privacy Statement available for your review on our Past Versions page. To learn more, read Past Versions.
Questions about this Statement
If you have any questions regarding this Privacy Statement or our privacy and data governance practices, you can reach our Privacy and Data Governance team by emailing Privacy@ACLU.org.