Last updated April 14, 2025
1. Introduction
Welcome to our Privacy Policy. This document explains how we collect, use, store, and protect your personal data when you visit our website or use our services. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), the ePrivacy Directive, and other applicable data protection laws.
2. Who We Are
Sociocracy for All (“we,” “us,” or “our”) is a nonprofit registered in the United States of America. We act as the data controller for the personal information collected through our website and services. Our legal name is Institute for Peaceable Communities, d.b.a. Sociocracy for All.
Contact Information:
- Address: 1120 Pulpit Hill Rd Unit 8, Amherst, MA 01002
- Email: [email protected]
- Data Protection Officer: [Well Being Circle]
3. Personal Data We Collect
We may collect the following types of personal data:
3.1. Information You Provide Directly
- Contact information (name, email address, phone number)
- Account information (username, password)
- Profile information (preferences, profile pictures)
- Donation details and payment information (billing address, payment method details) processed securely by third-party payment providers.
- Communications (emails, support inquiries)
- Survey responses and feedback
3.2. Information Collected Automatically
- IP address and device information
- Browser type and version
- Operating system
- Referring website
- Pages visited and navigation patterns
- Time and date of visits
- Location information (with consent)
- Cookie data (see Cookie Policy section)
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you explicitly agree to the processing of your data for a specific purpose
- Contract: When processing is necessary to fulfill our contractual obligations
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these interests don’t override your rights
- Legal Obligation: When processing is necessary to comply with a legal obligation
- Vital Interests: In rare cases, to protect someone’s life
- Public Interest: When processing is necessary for a task carried out in the public interest
5. How We Use Your Personal Data
With your consent, we use your personal data for the following purposes:
- To provide and improve our services
- To process transactions and manage accounts
- To communicate with you about our services
- To provide customer support
- To send relevant marketing communications
- To personalize your experience
- To ensure security and prevent fraud
- To comply with legal obligations
- To analyze website performance and conduct market research
6. Data Retention
We retain your personal data only for as long as necessary, no more than 5 years, to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Different types of data may be kept for different periods of time based on:
- Legal requirements
- The nature and sensitivity of the data
- Potential risk of harm from unauthorized use or disclosure
- Purposes for which we process the data
Accounts that have been inactive for more than 5 years will be deleted. We may retain and anonymize personal data for analytical purposes.
When data is requested to be removed it will be securely deleted.
7. Data Sharing and Third Parties
We may share your personal data with third parties only when strictly necessary for business operations. We will never sell personal data to any third party.
7.1. Service Providers
Third-party service providers who help us operate our business, such as:
- Cloud storage providers
- Payment processors
- Email service providers
- Analytics services
- Customer support tools
7.2. SoFA Network Delivery Units and Professional Partners
Partners with whom we offer co-branded services or joint marketing activities, with your consent.
7.3. Legal Requirements
We may disclose personal data if required by law, regulation, legal process, or governmental request.
8. International Data Transfers
As a U.S.-based nonprofit, we may collect and process personal data from individuals outside the United States, such as in the European Economic Area (EEA) and the United Kingdom (UK). By providing your information, you acknowledge that your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. We take appropriate measures to ensure that such data transfers comply with applicable laws and other safeguards as required under GDPR.
9. Your Rights
Under the GDPR and other applicable laws, you have the following rights:
- Right to Information: Transparent information about how we use your data
- Right of Access: Obtain confirmation of whether we process your data and request copies of your data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure (“right to be forgotten”): Request deletion of your data in certain circumstances
- Right to Restrict Processing: Limit how we use your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing that produce legal effects
- Right to Withdraw Consent: Withdraw consent at any time for processing based on consent
To exercise these rights, please contact us at [email protected]. We will respond to your request within one month unless the request is complex or numerous, in which case the period may be extended by up to two additional months.
10. Cookies and Similar Technologies
10.1. What Are Cookies
Cookies are small text files placed on your device to store data that can be recalled by a web server. We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts.
10.2. Types of Cookies We Use
- Strictly Necessary Cookies: Essential for website functionality and cannot be disabled
- Preference Cookies: Remember your settings and preferences
- Statistics/Analytics Cookies: Collect anonymous information about how visitors use our site
- Marketing Cookies: Track visitors across websites to display relevant advertisements
10.3. Cookie Management
You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. Blocking certain cookies may impact your experience and the services we can offer.
10.4. Third-Party Cookies
Some cookies are placed by third parties on our behalf. These third parties may collect information about your online activities over time and across different websites. We do not control these third-party cookies.
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data.
Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you and the appropriate authorities of any data breach as required by law.
12. Children’s Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we discover that we have collected personal data from a child, we will promptly delete it. If you believe we might have any information from or about a child, please contact us.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any significant changes by:
- Posting a notice on our website
- Sending an email to registered users
- Updating the “Last Updated” date at the top of this policy
We encourage you to review this policy regularly to stay informed about how we protect your data.
14. Complaints
If you have concerns about our handling of your personal data, please contact us first at [email protected]. You also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement occurred.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Institute for Peaceable Communities, Inc, dba Sociocracy For All, 1120 Pulpit Hill Rd Unit 8, Amherst, MA 01002, [email protected]
