Privacy Policy
IDEA Promise Foundation (“we,” “us,” or “our”) is committed to protecting the personal information of individuals who interact with our organization, programs, websites, and services. This Privacy Policy describes how we collect, use, share, and protect your information, including when you interact with us online, submit data through forms, support our mission through third-party donation platforms, or opt into communications such as text (SMS) messages.
We regularly review and update our privacy practices to remain in compliance with applicable laws, including evolving U.S. federal and state data protection regulations.
1. Information We Collect
We may collect the following types of personal information, depending on how you engage with us:
- Contact Information (e.g., name, email address, mailing address, phone number)
- Program or Event Participation Details (e.g., registration information, accommodations, preferences)
- Digital Information (e.g., IP address, browser type, browser version, device ID, unique device identifiers, and other diagnostic data)
- SMS Consent Data (e.g., mobile number, opt-in/opt-out status, message preferences)
- Demographic or Survey Information, when voluntarily provided
- Special Category Data (e.g., health, dietary, or faith-based details), only when necessary and with explicit consent
We do not knowingly collect personal information from children under the age of 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately so we can delete it.
Important Note Regarding Donor Information: IDEA Promise Foundation uses authorized third-party platforms to facilitate donations. Donor financial information (such as payment card details or banking information) is collected directly by those third-party platforms. IDEA Promise Foundation does not directly collect, store, or transmit donor payment card data. Please see Section 4 for more information.
2. How We Use Personal Information
We use personal data only for legitimate purposes related to our mission and services, including:
- Processing registrations and providing event/program services
- Sending confirmations, reminders, and communications to supporters and participants
- Facilitating SMS communications, if you opt in
- Providing support or responding to inquiries
- Conducting internal analysis and improving user experience on our website
- Supporting fundraising communications and donor stewardship
- Complying with legal or regulatory requirements
3. Who We Share Information With
We do not sell, rent, or share your personal information with third parties or affiliates for marketing purposes.
We may share information only in the following circumstances:
- With trusted service providers performing functions on our behalf (e.g., SMS messaging platforms, registration portals, website hosts, email service providers), under strict confidentiality agreements
- With authorized third-party donation and payment processing platforms to facilitate charitable giving (see Section 4)
- To comply with legal obligations or to respond to lawful requests from government or regulatory authorities
- With your express consent for a specified use
All third parties who process personal data on our behalf are bound by data protection obligations under written agreements and are prohibited from using your data for any purpose other than what is specified.
4. Third-Party Donor Information Collection
IDEA Promise Foundation uses authorized third-party platforms to process charitable donations and related financial transactions. These platforms independently collect and process donor financial information — including payment card data, banking information, and related billing details — directly from donors.
These third-party donation processors operate under their own privacy policies and maintain compliance with applicable standards, including the Payment Card Industry Data Security Standard (PCI-DSS). IDEA Promise Foundation does not store, process, or transmit cardholder data or donor financial account information on its own systems.
When you make a donation through a third-party platform linked from our website, please be aware that:
- You are subject to that platform’s terms of service and privacy policy
- IDEA Promise Foundation is not responsible for the data handling practices of third-party donation platforms
- We encourage you to review the privacy policy of any donation platform before submitting financial information
We take care to select reputable, compliant donation processors and require them to maintain appropriate data protection agreements with us. If you have questions about which platforms we use, please contact us using the information in Section 17.
5. SMS Communications
If you opt into SMS communications from IDEA Promise Foundation:
- You agree to receive text messages such as event updates, reminders, confirmations, or other Foundation-related messages
- Message frequency may vary
- Message and data rates may apply depending on your carrier plan
- Reply STOP to any message to opt out at any time
- Reply HELP for assistance or contact us at [foundation@ideapublicschools.org]
SMS consent is not shared with third parties or affiliates for marketing purposes. Any mobile data collected is stored securely and used only to facilitate the messaging service you opted into. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.
6. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to improve website performance, analyze usage patterns, and deliver relevant content. Cookies are small data files placed on your device when you visit our website. Tracking technologies may also include beacons, tags, and scripts.You may manage cookie preferences through your browser settings. If you disable cookies, some portions of our website may not function as expected.
Types of Cookies We Use:
- Session Cookies – Used to operate our website during your visit
- Preference Cookies – Used to remember your preferences and settings
- Security Cookies – Used for security purposes
Third-Party Analytics & Advertising:
We may use third-party analytics providers, including Google Analytics and Google Tag Manager, to collect aggregated, non-personal information about how visitors interact with our website. This helps us understand browsing behavior to improve your experience.
Google Analytics may use collected data to contextualize content and provide demographic and interest reporting on an anonymous and aggregate level. You can learn about Google’s practices at https://policies.google.com/privacy and opt out by downloading the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
We use Google Tag Manager to manage scripts and tags on our website in a central location. The Google Tag Manager Use Policy is available at https://www.google.com/analytics/tag-manager/use-policy.
We may also use Facebook Pixel or similar social media tracking tools to understand how visitors interact with our website. You can learn more about Facebook’s data practices at https://www.facebook.com/legal/terms/businesstools.
For more information about online advertising practices and your choices, visit http://www.networkadvertising.org/managing/opt_out.asp or http://www.aboutads.info/. If you are located in the European Union, visit http://www.youronlinechoices.eu/.
7. Mobile Applications
If you access our services through a mobile application, we may collect technical and usage data from your device, such as device type, operating system, app version, and usage patterns. App-specific permissions (e.g., location, microphone, camera) are only activated with your consent and used solely to deliver relevant features or services.
8. Data Retention
9. Automated Decision-Making
We do not use your personal data to make decisions that produce legal or similarly significant effects based solely on automated processing, including profiling. Should this change in the future, we will update this policy and provide notice of your rights related to such processing.
10. How We Protect Your Data
IDEA Promise Foundation, operating under the broader governance of IDEA Public Schools’ information security program, maintains a robust and consistent level of data protection across our organization. Below are the key ways we work to protect your information:
Information Audits – We conduct periodic information audits to identify and assess what personal information we hold, where it comes from, how and why it is processed, and if and to whom it is disclosed.
Policies & Procedures – We maintain data protection policies and procedures aligned with applicable data protection laws, with an emphasis on privacy by design and respect for10 individual rights.
Data Retention & Erasure – We apply data minimization and storage limitation principles, supported by a formal retention schedule and erasure mechanisms through our internal systems and third-party processors.
Data Breach Response – We maintain a breach communications plan and internal procedures to promptly identify, assess, investigate, and report personal data breaches to appropriate parties as required by law.
International Data Transfers & Third-Party Disclosures – We store data in the United States and evaluate all third-party vendors for adequate safeguards, data subject rights, and remedial protections before sharing any personal information.
Direct Marketing – All marketing messages contain an opt-in mechanism at the point of collection and an opt-out mechanism in every message.
Processor Agreements – All third parties who process personal data on our behalf are bound by data protection obligations under written agreements.
Special Category Data – We only collect and process sensitive personal data when necessary, with explicit, documented consent.
11. Data Subject Rights
Individuals have the right to:
- Understand the purpose of the processing and the categories of data involved
- Know who their information has been or will be shared with
- Request correction or completion of inaccurate or incomplete data
- Request deletion or restriction of processing in appropriate circumstances
- Object to direct marketing or certain types of processing
- Be informed of any automated decision-making used
- Lodge a complaint or seek legal remedy related to data processing
Requests may be submitted to [foundation@ideapublicschools.org], and we will respond within 30 days.
12. Information Security & Technical and Organizational Measures
We take privacy and information security seriously. Our controls include:
- SSL/TLS encryption for secure data transmission to and from our website
- Multi-factor authentication (MFA) and role-based access controls for all systems handling personal data
- ISO/IEC 27001:2022 certified Information Security Management System (ISMS) governing the organization’s security posture
- 24/7 Security Operations Center (SOC) monitoring for real-time threat detection and incident response
- Enterprise endpoint protection and network security controls across all organizational devices
- Internal audits and regular process reviews to ensure ongoing compliance
13. Roles and Employees
IDEA Promise Foundation operates under the information security governance of IDEA Public Schools’ Information Security team, led by the Vice President of Information Technology. A designated information security officer and technology steering committee are jointly responsible for data protection oversight across the organization.
This team monitors compliance with applicable privacy laws, promotes privacy awareness throughout the organization, and updates policies as needed to reflect changes in law or organizational practices.
All personnel with access to personal data complete privacy and information security training at onboarding and on a regular ongoing basis as part of our commitment to responsible data stewardship.
14. Links to Other Sites
Our website may contain links to third-party websites or donation platforms that are not operated or controlled by IDEA Promise Foundation. If you click on a third-party link, you will be directed to that third party’s site and will be subject to their privacy policy and terms.
We strongly advise you to review the Privacy Policy of every site you visit before submitting any personal information. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
15. Accessibility
We are committed to ensuring our website and communications are accessible to all individuals, including those with disabilities. If you encounter any accessibility issues or require information in an alternative format, please contact us at [foundation@ideapublicschools.org].
16. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will post the updated policy to our website with a revised effective date at the top of this document.
You are advised to review this Privacy Policy periodically for any changes. Continued use of our website or participation in our programs or services after updates are posted constitutes your acceptance of the revised terms.
