Last updated: October 15, 2021
Personally Identifiable Information
Donations made using the Services must be made by credit or debit card or by debit from your bank accounts via Automatic Clearinghouse (ACH). Any credit card, bank account, and other financial information is provided directly to our third-party payment processors. If you elect to make a donation, you will need to submit your name, contact information, credit or debit card number, expiration date, and CVV number, billing information, bank account number, and routing number, as applicable. HD does not directly access or handle your financial information. Payment by credit or debit card is subject to the approval of the card issuer and HD will not be liable if a card issuer refuses to accept a credit or debit card for any reason. Payment by ACH is subject to the approval of the applicable financial institution and HD will not be liable if a financial institution refuses to process the transaction for any reason. HD uses third parties, such as Stripe and Plaid, to gather your data from financial institutions. By using the Services, you grant our third-party providers the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution according to the terms of those third-party providers’ respective privacy policies. We encourage you to review the terms of service and privacy policies of our third-party providers.
If you use the Services, although the following information is stored by our vendors and not by HD directly, HD will have access to all of the credit and debit card transactions that are made using the credit or debit card that is connected to your account and the donation transactions that you make using the Services.
We may also collect information that, in and of itself, cannot be used to specifically identify you, such as your preferences, demographic information (e.g., age, education, gender, and interests), the characteristics of the device and software that you use to access the Services (e.g., type of device, operating system, Internet browser type, device identifier, Internet Service Provider (ISP) domain names, Internet Protocol (IP) addresses), records of your usage of the Services, the time of your usage, and aggregated personal data that cannot be used to specifically identify you. We do not collect your location-based information. IP addresses are not used to track a user’s session and we do not link IP address to any personally identifiable information. IP addresses help us determine how often different areas of the Site are visited. We may use this information to monitor and prevent fraud and to diagnose problems. We may also collect this type of data and the types of information listed above from third parties. The information we collect from third parties may be combined with the information we collect from you. Our web site hosting services provider, Digital Ocean, Inc., may collect information about your visits to the Site and other web sites, such as your user settings.
How We Use and Share Information
In addition, we reserve the right to use and share your information in the event we believe doing so is necessary to operate the Services, where such disclosure may be required by law, or to protect our rights or the rights of others. We will also use your information to customize your browsing experience and communicate with you and otherwise respond to your questions and suggestions regarding use of the Services as may be permitted by applicable law. HD may also use your personal information to send you promotional communications and information about HD.
We reserve the right to share your information collected by the Services with third parties to the extent permitted by applicable law or in the event of a subpoena or law enforcement request or other security issue. We may also disclose information that is necessary to identify, contact or bring legal action in the event of a violation of our contracts, policies or procedures.
We may aggregate your personally identifiable information, either alone or with other data, to create anonymous “aggregate data” regarding the users of the Services. Aggregate data is information that describes the habits, treatment plans, usage patterns, or demographics of users as a group but does not reveal the identity of particular users. This data will not identify you but will be used by HD internally as statistical information to determine such things as user demographics and usage patterns of the Services. We may use aggregate data to understand the needs of our community of users, to determine what kinds of programs and services we can help provide, and to improve and enrich our products, services, Site content, and App content.
Cookies and Other Tracking Technologies
Sharing Information with Our Vendors
We may share information, including without limitation credit card and other payment-related information, with our web site and mobile application vendors, marketing vendors, email vendors, payment processors, data analytics providers, and other suppliers as necessary to provide the Services, and our products and services to you and otherwise as may be permitted by applicable law. We require these vendors to comply with all applicable data privacy laws and regulations. Such suppliers include without limitation Stripe, Inc., Plaid, Digital Ocean, Inc., and SendGrid, Inc. These companies are authorized to use your personal information only as necessary to provide the applicable services to us. These vendors may use and disclose your information to interact with your financial institutions and credit and debit card issuers, to operate, maintain, and provide their services (e.g., maintenance, fixing malfunctions, testing security systems), to improve their services (e.g., refining the user experience), to personalize their services, to analyze trends, for statistical purposes, to send you service-related notifications, for purposes of legal compliance and as may be required by law, to protect the security of their services, to prevent physical harm or financial loss, to report suspected illegal activity, and to investigate violations of their respective terms of service.
Ownership of Information
Access to Your Personal Information
If you wish to access or update your personal information as it exists in our records, please do so on the Member Information page of the Services or by emailing HD Customer Support at firstname.lastname@example.org. You may also request that we update your personal information (e.g., to correct factual errors). Email Communications HD may use your personal information to send you promotional communications, including our newsletter(s). To stop receiving our newsletters or other promotional emails, follow the unsubscribe instructions included in those emails, access the email preferences in your account settings page, or contact us at the email address provided below.
The security of personally identifiable Information is important to us. We limit access to personally identifiable information about you to our employees and third parties whom we believe need to have access to such information in order for HD to respond to your requests and provide you with the information, products, or services you request from us. HD uses industry standards such as 256-bit secure socket layer technology (SSL) to help safeguard against such occurrences. In the event that a breach into our security systems occurs and there is a possibility that an unauthorized person acquires your personal information, we will notify you of such a breach as may be required under applicable law. The Services have security measures in place to help protect against the loss, misuse, and alteration of the information under our control. As we cannot guarantee that loss, misuse, or alteration will not occur, by using the Services, you acknowledge that notwithstanding HD’s efforts to maintain the privacy and security of personally identifiable information, no method of information transmission over the Internet, or method of electronic storage, can reasonably be expected to be 100% secure. Therefore, we cannot guarantee the absolute security of information collected. If you have any questions about information security on the Services, please contact us.
Access by Children
The Services are not directed, or intended to be attractive, to children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If you are under the age of 13, do not use the Services or submit any information to us. If we learn we have collected or received personal information from a child under the age of 13 without verification of parental consent, we will delete that information. If you believe we might have any personal information from or about a child under the age of 13, please contact us email@example.com.
Do Not Track
We may automatically collect non-personally identifying information when you visit the Site or use the Services. Due to this automatic collection, we do not currently honor do not track requests.
Third-Party Web Sites
The Services may link to, or be linked to, web sites and applications not maintained or controlled by HD. Such links are provided as a convenience and HD is not responsible for examining or evaluating the content or accuracy of, and does not warrant or endorse, any third-party web site or application. HD is not responsible for the privacy policies or practices of any third parties or third-party web sites or applications, including any web sites linked to or from the Services. To the extent that you disclose personally identifiable information to any such third parties, different rules may apply to the use and disclosure of such information. We encourage you to review the privacy policies of third-party web sites and applications before disclosing your personal information to them.
Access from Outside the United States
If you are using the Services from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where our and our suppliers’ servers and central databases are located and operated. The data protection and other laws of the United States might not be comprehensive as those in the country from which you are accessing the Services or otherwise deemed adequate, but please be assured that we take steps to protect your privacy as set forth below.