Rights and Reason Project — Privacy Policy
Effective date: August 17, 2025
Website: https://www.rightsandreasonproject.com
This Privacy Policy explains how Rights and Reason Project (“RRP,” “we,” “us,” or “our”) collects, uses, shares, and safeguards information about you when you visit our website, interact with our programs, make donations, subscribe to updates, participate in events, or otherwise engage with us (collectively, the “Services”).
We are a U.S.-based nonprofit advocacy organization. Some privacy laws do not apply to nonprofits; however, we strive to respect your privacy and to honor applicable legal requirements where they do apply.
 
Quick summary:

• We collect information you provide (e.g., donations, subscriptions, event sign-ups), automatic data (e.g., cookies/analytics), and limited information from partners or publicly available sources.

• We use this information to run our website and programs, process donations, communicate with you, comply with law, and improve our Services.

• We don’t sell your personal information. We don’t use or share it for cross-context behavioral advertising.

• You may opt out of marketing emails at any time. Depending on where you live, you may also have additional privacy rights.

1) Who we are & how to contact us
Controller: Rights and Reason Project
Mailing address: [Add postal address]
Email:  info@rightsandreasonproject.com

If you have questions or wish to exercise privacy rights, please contact us using the details above.

2) Information we collect
A. Information you provide directly

• Contact & account info: name, email, phone, postal address, organization/affiliation.

• Donations: donation amount, date, and your contact details. Payment information (e.g., card numbers) is processed by our payment processor(s) and not stored on our servers.

• Subscriptions & advocacy actions: newsletter sign-ups, petitions, messages to lawmakers or agencies, survey responses, and preferences.

• Events & volunteering: RSVPs, dietary/access needs, role/affiliation, and participation details.

• Communications: emails, messages, and any content you submit (e.g., testimonials, comments).

B. Information collected automatically

• Usage & device data: IP address, device/browser type, operating system, pages viewed, referring/exit pages, timestamps, and approximate location based on IP.

• Cookies & similar technologies: used for site functionality, analytics, and to remember preferences. See Section 7 (Cookies).

C. Information from third parties

• Payment processors & donation platforms (e.g., confirmation of a successful donation).

• Email service providers (e.g., subscription status).

• Public sources (e.g., public office contact details when you send advocacy messages).

• Event platforms (e.g., ticket confirmations).
  We rely on these providers’ systems to securely process your information—see Section 6 (Sharing) for details.

3) How we use your information
We use personal information for:

• Providing and improving the Services: operating our site, processing donations, issuing acknowledgments/receipts, managing subscriptions and events, and troubleshooting.

• Communications: sending updates, newsletters, action alerts, policy content, event information, and responding to your inquiries. You can opt out of promotional emails at any time (unsubscribe link or email us).

• Advocacy & civic engagement: when you choose to email or call lawmakers/officials through our tools, we transmit your message and the personal details necessary to deliver it. Such communications may become part of public records.

• Analytics & performance: understanding how the Services are used, improving usability/content, and diagnosing technical issues.

• Safety, security & legal compliance: preventing misuse, protecting our rights and users, complying with laws, tax/charity reporting, and enforcing terms.

Lawful bases (EEA/UK visitors): We process personal data where necessary for our legitimate interests (e.g., operating and improving our Services, advocacy), to perform a contract (e.g., paid event registrations), to comply with legal obligations (e.g., tax receipts), and with your consent where required (e.g., certain cookies or marketing).
4) Your choices

• Emails: unsubscribe using the link in any newsletter or email us at [privacy@rightsandreasonproject.com].

• Cookies: manage preferences via our cookie banner or your browser settings (see Section 7).

• Advocacy messages: you control the content you submit; remember these may become public records.

• Do Not Track: most browsers offer DNT signals; we do not respond to DNT at this time, but you can use cookie controls and opt-outs noted below.

5) Retention
We retain information only as long as reasonably necessary to fulfill the purposes described in this Policy, including for accounting/tax/reporting, to honor opt-outs, resolve disputes, and enforce agreements. Donation records may be kept for the period required by law and best nonprofit practices.
6) How we share information
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
We share information with:

• Service providers/contractors who help us operate the Services (e.g., payment processors, email providers, cloud hosting, analytics, event/ticketing platforms). They are permitted to use data only to provide services to us.

• Advocacy recipients you select (e.g., messages to public officials or agencies).

• Legal/Compliance: where required by law, subpoena, or to protect rights, safety, and security.

• Organizational transitions: in rare cases of restructuring/merger of nonprofit assets, subject to this Policy’s protections.

Third-party services have their own privacy policies. Examples may include:

• Payments: [Stripe/PayPal/Other]

• Email & CRM: [Mailchimp/Action Network/Other]

• Events: [Eventbrite/Other]

• Analytics: [Google Analytics]

(Replace bracketed examples with your actual providers.)
7) Cookies, analytics & similar tech
We use cookies and similar technologies to operate the site, remember preferences, and measure performance.
Categories of cookies we use:

• Strictly necessary: required for core site functions (cannot be turned off).

• Performance/analytics: to understand usage and improve the site (e.g., page views, popular content).

• Preferences: to remember settings like language or cookie choices.

You can control cookies via our cookie banner (where present) or through your browser settings. Disabling some cookies may affect site functionality.
If we use Google Analytics, it collects pseudonymous usage data. You can learn about Google’s practices and opt-out using Google’s tools or your browser’s privacy settings.
8) Children’s privacy
Our Services are intended for general audiences and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided us information, please contact us so we can delete it.
9) International visitors
We are based in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the U.S., where privacy laws may be different from those in your country. Where required, we rely on appropriate safeguards for such transfers.
10) Your privacy rights
A. U.S. state privacy rights
Depending on your state (e.g., CA, CO, CT, VA, UT and others), you may have rights to:

• Access and port your information;

• Correct inaccuracies;

• Delete information;

• Opt out of targeted advertising (we do not engage in cross-context behavioral advertising), sales (we do not sell), and certain profiling.

To exercise these rights, contact us at info@rightsandreasonproject.com]. We will verify your request and respond as required by applicable law. If we deny your request (e.g., due to an exemption or legal requirement), you may have the right to appeal—instructions will be included in our response.
California disclosures: We do not sell or share personal information as defined by the California Consumer Privacy Act (CCPA/CPRA). We do not knowingly collect “sensitive personal information” for purposes beyond limited, permitted uses (e.g., donation records required by law). California residents may submit requests using the methods above. We will not discriminate against you for exercising your rights.
B. EEA/UK rights
If you are in the EEA/UK, you may have rights to access, correct, delete, restrict, or object to processing, and to data portability, subject to exceptions. Where we rely on consent, you may withdraw it at any time. You also have the right to lodge a complaint with your local data protection authority.
11) Security
We employ administrative, technical, and physical safeguards designed to protect personal information (e.g., HTTPS encryption in transit, role-based access, and vendor due diligence). No method of transmission or storage is completely secure; we cannot guarantee absolute security.
12) Third-party links & social media
Our Services may link to third-party websites, tools, or social media platforms. We are not responsible for their privacy practices. We encourage you to review their privacy policies.
13) Changes to this Policy
We may update this Policy from time to time. The “Effective date” at the top shows when the latest changes took effect. Material changes will be posted on this page and, where appropriate, we may notify you by email or site notice.
14) How to contact us
For questions, requests, or complaints about this Policy or our privacy practices, please contact:
Email: info@rightsandreasonproject.com