Privacy Statement

ACLU of Virginia Privacy Statement

Effective July 1, 2024

The American Civil Liberties Union of Virginia, Inc. ("Union"), the American Civil Liberties Union Foundation of Virginia ("Foundation"), the ACLU Voter Education Fund (collectively, "ACLU of Virginia," "we," "us," or "our") work to expand the right to privacy, increase the control individuals have over their personal information, and ensure civil liberties are enhanced rather than compromised by technological innovation.

ACLU of Virginia is committed to living our values by describing, in plain language, how we collect and use your personal information and by providing clear choices for how we collect and use your personal information. We continually evaluate and improve our privacy and data governance practices to responsibly handle personal information entrusted to us. This may include information about you, whether you are an ACLU of Virginia supporter or not. We collect information from and about you when you interact with us and we may obtain information about you as an individual member of the public from other sources whether you are an ACLU of Virginia supporter or not (e.g., you are a registered voter and we have information about you in voter files we use to conduct voter outreach; research on civil liberties issues, such as, voting rights discrimination; or to identify and better understand potential ACLU of Virginia supporters). In this statement “you” refers to both ACLU of Virginia supporters and individuals with whom we may not currently have a direct relationship.

This Privacy Statement ("Statement") describes how ACLU of Virginia collects, uses, shares, or otherwise processes personal information in its day-to-day operations. Certain ACLU of Virginia programs, as well as "Other ACLU Organizations," which, along with ACLU of Virginia include the American Civil Liberties Union, Inc. and the American Civil Liberties Union Foundation, Inc. (collectively, "National" or "ACLU"), and other ACLU state/local/territory affiliated organizations (ACLU "Affiliates") throughout the United States have separate privacy statements. Those statements are available here ACLU Organizations Privacy Statements. ACLU of Virginia and its affiliated organizations may be referred to individually and collectively as "ACLU Organizations." To learn more about the scope of this Statement, applicable regulations, and key definitions, read About this Statement.

Privacy Statement Highlights

  • Our Data Privacy Principles. ACLU of Virginia is committed to your right to privacy. We follow these eight principles when processing your personal information: Transparency, Individual Participation, Purpose Specification, Data Minimization, Use Limitation, Data Quality and Integrity, Security, and Accountability. Learn more.
  • Personal Information We Collect. ACLU of Virginia collects and stewards personal information about you through a variety of methods, including through direct collection (e.g., through a web form you submit), through automated data collection (e.g., through technologies to understand how people navigate our websites), from third-party sources (e.g., voter information from government and commercial sources), and by inferring personal information about you (e.g., as we look for individuals who may be interested in joining a discrimination lawsuit based on information we have collected from you and/or information acquired from third-party sources). Learn more.
  • Why We Use Your Information. ACLU of Virginia uses your personal information to further our mission. To better illustrate why we collect this information, we have listed specific processing purposes for which ACLU of Virginia uses your information, categorized by the thematic activities of advocacy and organizing; fundraising; legal services; outreach and research; merchandise; services security, optimization, and improvement; and when required by law, to prevent fraud and protect our or others’ rights. Learn more.
  • With Whom and How We Share Your Information. ACLU of Virginia shares your personal information with our Affiliates, service providers who help us carry out business activities, business partners, and other third parties as required or permitted by law. Learn more.
  • With Whom and How We Share Your Information. ACLU of Virginia shares your personal information with our Affiliates, service providers who help us carry out business activities, business partners, and other third parties as required or permitted by law. Learn more.
  • Your Choices and Rights. ACLU of Virginia offers choices on how we process your information. You can let us know how you want us to communicate with you, to to correct your information, tell you about the information we have about you and to what third parties we have transferred your information, and ask us to delete or stop using your information in certain ways. Learn more.

Personal Information We Collect

ACLU of Virginia collects and stewards your personal information through a variety of methods. This section outlines what information we collect and how we collect it.

Information You Give to Us

This includes information you explicitly take steps to share with ACLU of Virginia. This may be through online forms, offline donation and volunteer sign-up forms, or over the phone when you call ACLU of Virginia to donate or request Foundation legal assistance, for example. Through these processes, you may share the following categories of information:

  • Account registration. For example, account username and password.
  • Audio or visual. For example, your image or voice captured when you attend an in-person or virtual event, or leave us a voicemail.
  • Contact. For example, email address, postal address, or telephone number.
  • Demographic. For example, age, citizenship status, ethnicity/race, or sexual orientation, gender identity, marital or other relationship status, and household information.
  • Financial. For example, the amount you plan to bequeath to ACLU of Virginia.
  • Health. For example, that you have had an abortion or have a disability, and/or other information you provide to us about your health when seeking legal representation, when you tell your story in an ACLU of Virginia campaign, and/or when you request an accommodation at an ACLU of Virginia event.
  • Interaction. For example, purchase and donation history, membership status, and advocacy actions taken.
  • Interests. For example, civil liberties or campaigns you are particularly interested in hearing about, or more general information about your personal and professional interests that are relevant to your engagement with ACLU of Virginia and our work.
  • Jurisdiction. For example, your zip code or county to help us identify your voting district or current representatives.
  • Legal. For example, details about conditions of incarceration or other detention that may have violated your civil rights or liberties and that you provide to us when seeking legal representation or to tell your story in an ACLU of Virginia campaign.
  • Preferences. For example, your preferred method(s) of communication.
  • Transaction. For example, credit or debit card details that you provide to make a donation or to purchase ACLU of Virginia merchandise.
  • User-created content. For example, stories you provide to us as part of our storytelling campaigns or messages on issues we send to your legislative representatives on your behalf. This also includes photos, videos, audio, and other information you may submit to us.
  • Other. Any other information you choose to provide, which may include information deemed to be "sensitive" personal information under certain privacy laws, such as religious beliefs, information about your sexual orientation or sex life, or citizenship status.

Information We Automatically Collect

ACLU of Virginia and our authorized third parties may use technologies to automatically receive and record information when you interact with us online on our websites and/or through other digital technologies, such as email platforms, mobile applications that link to this Privacy Statement, or over the phone (altogether, "Digital Services"). These technologies allow the ACLU of Virginia to improve our Digital Services, to create a better experience for our users, and to protect against fraud.

These technologies may include cookies - small files placed on your browser that can be used to uniquely identify you and record information about the websites you visit - and other technologies, such as web beacons, clear gifs, and single-pixel gifs that use embedded code in our Digital Services to record details about your use of those Digital Services, like whether you opened an email or clicked on a link.

These technologies may be placed by us or by other entities we authorize. We only authorize third parties to place these technologies on our Digital Services if those authorized third parties abide by our confidentiality and security requirements described below under With Whom and How We Share Your Information.

ACLU of Virginia and our authorized third parties may automatically collect the following categories of information:

  • Contact For example, your email address or telephone number.
  • Device identifiers. For example, your phone model, phone carrier browser version, or operating system you use to browse our sites.
  • IP address or information that could be derived from it. For example, your approximate geolocation.
  • Interaction. For example, the content you click on or view in our e-mails, the amount of time you spend on our websites, or the referring URL.

Information We Receive from Others

ACLU of Virginia may acquire personal information about you from third-party sources, such as data cooperatives for nonprofits; other nonpartisan organizations; coalition partners; commercial voter file and consumer research providers; and various federal, state, and local government entities (e.g., public records data or information procured through FOIA requests that we use to search for civil liberties violations). We acquire this information to learn more about you — including how best to engage with you — to identify people like you that may be interested in hearing from ACLU of Virginia, and to research and evaluate potential or ongoing claims or advocacy regarding civil rights and civil liberties issues. We may collect the following categories of information from third-party sources:

  • Contact. For example, your telephone number, physical and email addresses, or social media handles.
  • Demographic. For example, your age, gender and race/ethnicity for assessing the potential disparate impact of laws, learning about the diversity of our supporters and voters to further our commitment to Systemic Equality, and deciding how best to engage people to support our fight against laws that restrict their civil rights, such as stopping bans on abortion.
  • Interaction. For example, your engagement with other nonpartisan organizations, nonprofit organizations, and ACLU coalition partners, or your likelihood to support the ACLU of Virginia and our issue areas.
  • Interests. For example, civil liberties or campaigns you may be interested in hearing about or supporting.
  • Financial. For example, estimated household income, real estate or business holdings, or estimated assets and salary, which may include information inferred from publicly and commercially available data for engaging current and identifying prospective donors.
  • Jurisdiction. For example, your zip code or county to help us identify your voting district or current representatives.
  • Legal. For example, court records, details about conditions of incarceration, or other detention that may have violated your civil rights or liberties.
  • Voting. For example, precinct, voter registration, modeled party registration, or information about your history of voting in prior elections.

Information We Infer and Model

ACLU of Virginia may use personal information we have collected — directly, automatically, or acquired from third parties — to compile, combine, and infer new information about you. We do this to tailor our communications and outreach, and to improve our programs and services.

ACLU of Virginia and our service providers may infer the following categories of information:

  • Contact. For example, inferred members of your household.
  • Demographic. For example, when we cannot ascertain demographic data directly, we may rely on models or service providers to infer gender or racial/ethnic identity in order to assess the potential disparate impact of laws, learn about the diversity of our supporters and voters to further our commitment to Systemic Equality, and deciding how best to engage people to support our fight against laws that restrict their civil rights, such as stopping bans on abortion.
  • Financial. For example, we may use models or service providers to estimate the amount you are likely to donate.
  • Interaction. For example, inferred likelihood to engage with the ACLU of Virginia and our issue areas.
  • Interests. For example, civil liberties or campaigns you may be interested in hearing about or supporting.
  • Preferences. For example, your preferred method(s) of communication.
  • Voting. For example, inferred likelihood to vote based on an issue area.

Why We Use Your Information

ACLU of Virginia collects your personal information to further our mission through our advocacy and organizing, litigation, and fundraising programs. When we process, use, or share that information, we apply appropriate confidentiality and security requirements (see: How We Protect Your Information and With Whom and How We Share Your Information). In addition, we aim to use only the information that is specific and necessary for the ACLU of Virginia processing purposes we collected it for (see: Our Data Privacy Principles).

  • Advocacy and Organizing. ACLU of Virginia works to advance our advocacy and organizing capacity to further our mission. To do this, ACLU of Virginia uses the personal information you provide to us when you take action to share your stories and testimonials, to deliver your petitions and action messages, and to host events. We may also use your personal information to mobilize volunteers and activists in support of our work.
  • Fundraising. ACLU of Virginia, as a nonprofit, needs donor support to enable its operations. To do this, ACLU of Virginia uses your personal information to process your donations and solicit donations.
  • Legal Services. Foundation works to win court battles and Supreme Court cases core to our issue areas, and to provide other critical legal services regarding important civil liberties and rights to Foundation clients. To do this, ACLU of Virginia uses sources that may include your personal information to research violations of civil liberties, evaluate requests for legal representation, solicit potential clients, litigate court cases, and effectively represent Foundation clients.
  • Merchandise. ACLU of Virginia provides merchandise to support our advocacy and fundraising efforts. When you order merchandise, ACLU of Virginia uses your personal information to register your account with our store or process your payments.
  • Outreach and Research. ACLU of Virginia works to deliver information on issue areas you have identified as important to you and seek out new supporters of our mission. To do this, ACLU of Virginia uses your personal information to communicate opportunities to support ACLU of Virginia’s mission through various communication channels, including targeted advertising, based on your engagement profile, social listening, and polling.
  • Services Security, Optimization, and Improvement. ACLU of Virginia works to provide you with a secure and optimized experience engaging with our Digital Services, and to improve our programs and services to advance our work preserving and protecting civil rights and liberties more generally. To do this, ACLU of Virginia uses your personal information in: user-experience testing, website performance assessment, fraud detection, account registration, and to conduct internal research to develop and improve our services, products, and technologies.
  • When Required by Law, to Prevent Fraud, and Protect Our or Others’ Rights. ACLU of Virginia, as a nonprofit, must submit donation reports to governmental entities and fulfill other legal obligations, such as complying with Your Choices and Rights. To do this, ACLU of Virginia uses your personal information to fulfill those obligations (e.g., ensuring that your information is deleted from our systems if you so request). In addition, ACLU of Virginia may need to use your personal information to prevent fraud or to protect our or others’ rights (e.g., researching your personal information if we have reason to think you may be using our name and logo without permission).

Processing Activities and Uses

There is not a "one-size fits all" approach to how ACLU of Virginia processes and uses personal information. ACLU of Virginia strives for transparency about what personal information we collect and how we use it. This chart details further our personal information processing activities and their purposes, the categories of personal information we process (see Personal Information We Collect for more information), and the categories of parties with whom we may share your information (see With Whom and How We Share Your Information for more information).

Processing Activity and Use
Purpose(s)*^
Type(s) of Information*
With Whom We May Share Information^

Processing Activity and Use

Account creation and management: To create and manage your account. Accounts may be created for our online store.

Purpose(s)*^

  • Merchandise
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Account registration
  • Contact

With Whom We May Share Information^

  • Service Providers

Processing Activity and Use

Broadcast updates and communicate with you: To keep you informed of our priorities and opportunities to get involved, and in response to inquiries made by you. This can be through direct mail, email, phone calls, and text messages and includes any of our action or marketing lists you subscribe to.

Purpose(s)*^

  • Advocacy & Organizing
  • Fundraising
  • Legal Services
  • Outreach & Research
  • Merchandise
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Interaction
  • Interests
  • Preferences
  • User-created content
  • Voting

With Whom We May Share Information^

  • Service Providers

Processing Activity and Use

Conduct research and analyze information to improve the effectiveness of our outreach and communications:
To ensure you receive the most relevant opportunities, we use personal information to model and identify who is most likely to support an issue area or campaign and segment our messages.

Purpose(s)*^

  • Advocacy & Organizing
  • Fundraising
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Device identifiers
  • Financial
  • Interaction
  • Interests
  • Preferences
  • Voting

With Whom We May Share Information^

  • Affiliates
  • Service Providers

Processing Activity and Use

Deliver petitions and other message actions: To facilitate petitions and other message actions to our advocacy targets (such as messages to your member of Congress).

Purpose(s)*^

  • Advocacy & Organizing

Type(s) of Information*

  • Contact
  • User-created content

With Whom We May Share Information^

  • Business Partners (Coalition Partners)
  • Service Providers
  • Other Third Parties (Advocacy Targets)

Processing Activity and Use

Evaluate requests for and provide legal services: To assess requests for legal assistance, potential and pending legal action, and to deliver legal services to Foundation clients.

Purpose(s)*^

  • Legal Services
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Financial
  • Health
  • Jurisdiction
  • Legal
  • User-created content

With Whom We May Share Information^

  • Affiliates
  • Business Partners (Co-Counsel)
  • Service Providers

Processing Activity and Use

Host our National Advocacy Institute and other events: To plan and host in-person or virtual events, including selecting participants, awarding scholarships, coordinating travel, lodging, or other accommodations and logistical planning.

Purpose(s)*^

  • Advocacy & Organizing
  • Fundraising
  • Legal Services
  • Outreach & Research
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Financial
  • Health
  • Interaction
  • Interests
  • Legal
  • User-created content

With Whom We May Share Information^

  • Affiliates
  • Service Providers

Processing Activity and Use

Mobilize volunteers: To mobilize volunteers to canvass, phonebank, or text-bank in support of an issue area or campaign.

Purpose(s)*^

  • Advocacy & Organizing
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Interaction
  • Interests

With Whom We May Share Information^

  • Affiliates
  • Service Providers

Processing Activity and Use

Participate in data cooperatives and list sharing arrangements to identify prospective ACLU of Virginia donors and strengthen support: To grow and strengthen our donor base, we participate in list exchanges with like-minded, nonpartisan organizations, and engage in data cooperatives for nonprofits.

Purpose(s)*^

  • Fundraising

Type(s) of Information*

  • Contact
  • Interaction

With Whom We May Share Information^

  • Business Partners (Data Cooperatives for nonprofits, Nonpartisan organizations)
  • Service Providers

Processing Activity and Use

Prevent fraud: To protect ACLU of Virginia against fraudulent actors making payments through our sites.

Purpose(s)*^

  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Device identifiers
  • Interaction
  • IP address or information that could be derived from it

With Whom We May Share Information^

  • Service Providers

Processing Activity and Use

Process payments: To process your donations or payments for other services such as registering and paying for an ACLU of Virginia ticketed event. This includes managing payments, charges, and bequests from estates and financial accounts.

Purpose(s)*^

  • Advocacy & Organizing
  • Fundraising

Type(s) of Information*

  • Contact
  • Device identifiers
  • Interaction

With Whom We May Share Information^

  • Service Providers

Processing Activity and Use

Research violations of civil liberties: To research and analyze the impacts of laws, policies, and government or other stakeholder actions. This may be done to prepare and bolster legal claims, ACLU of Virginia advocacy campaigns, public education, and/or particular programs. For example:

  • Conducting disparate impact analysis of data collected from government agencies through FOIA requests;
  • Analyzing employment records we are given access to in order to monitor employer compliance with an employment discrimination settlement on behalf of our clients; or
  • Analyzing data received from police departments pursuant to settlement agreements.

Purpose(s)*^

  • Advocacy & Organizing
  • Legal Services
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Financial
  • Health
  • Jurisdiction
  • Legal

With Whom We May Share Information^

  • Affiliates
  • Business Partners (Coalition Partners, Co-counsel)
  • Service Providers

Processing Activity and Use

Secure and optimize our Digital Services: To make our Digital Services easier, more pleasant to use, and effective by monitoring, assessing, and conducting other research and internal operations to secure, optimize, and improve our services, technology, and products.

Purpose(s)*^

  • Advocacy & Organizing
  • Fundraising
  • Outreach and Research
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Device identifiers
  • Interaction
  • IP address or information that could be derived from it

With Whom We May Share Information^

  • Service Providers

Processing Activity and Use

Serve and improve targeted advertising: To deliver advertising to people who are likely to support our issues, and to improve our targeted advertising we may use aggregated ad performance data like views, click, and conversions.

Purpose(s)*^

  • Advocacy & Organizing
  • Fundraising
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Interaction
  • Interests
  • IP address or information that could be derived from it
  • Jurisdiction
  • Voting

With Whom We May Share Information^

  • Business Partners (Third-party advertisers)
  • Service Providers

Purpose(s)*^

  • Legal Services
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Financial
  • Health
  • Interaction
  • Interests
  • Jurisdiction
  • Legal
  • Voting
  • User-created content

With Whom We May Share Information^

  • Affiliates
  • Business Partners (Co-counsel)
  • Service Providers

Processing Activity and Use

Storytelling: The ACLU of Virginia collects your stories to raise awareness around testimonials of injustice as part of our movement building.

Purpose(s)*^

  • Advocacy & Organizing
  • Fundraising
  • Legal Services
  • Services Security, Optimization, and Improvement

Type(s) of Information*

  • Contact
  • Demographic
  • Health
  • User-created content

With Whom We May Share Information^

  • Affiliates
  • Service Providers
  • Business Partners (Coalition Partners)
*Special Circumstance: In some instances, we may collect and/or use your personal information in ways not described in this chart. In those instances, we will describe how we will use or share your personal information at the point of collection.

^When Required by Law, to Prevent Fraud, and Protect Our or Others' Rights:
The ACLU of Virginia may also use your information to fulfill our legal obligations. Our processing activities may require we share your information with government agencies, law enforcement, or other third-parties, for example as we assess a potential threat you may have made to us. See With Whom and How We Share Your Information.

In addition to the processing purposes described in this notice, we may also de-identify personal information where possible. We may de-identify existing personal information to proactively minimize the data in our possession when identifying information is no longer needed. We may also de-identify information to remove identifying information from records that must be retained for legal purposes when you request the ACLU of Virginia delete your information. When we de-identify information permanently for privacy purposes, we will use it only in its de-identified form and do not attempt to re-identify the information.

How We Protect Your Information

ACLU of Virginia has taken physical, technical, and administrative measures to safeguard the information we collect. We work to keep your data safe and protect against unauthorized access to, and improper use of, personal information we collect online.

  • Physical measures. For example, your personal information, such as your name and address, is stored on servers subject to physical security safeguards.
  • Technical measures. For example, data transmitted to and from our sites, including credit card numbers, are encrypted in transit.
  • Administrative measures. For example, we have established privacy and security policies and procedures to limit access to personal information. We also adhere to industry standards and regularly monitor our compliance with Payment Card Industry Standards to protect credit card information that you provide to us.

With Whom and How We Share Your Information

This section provides additional information on how we share your personal information with our state and local Affiliates, service providers, business partners, and other third parties.

We share personal information with your consent, when you direct us to share it with others, as necessary to complete your transactions, or to provide the services you have requested or authorized. For example, when you provide credit card information to donate, we will share that data with payment card processors and other entities as necessary to process your payment and to prevent or detect fraud.

We also share personal information with the following types of other parties:

Our Affiliated Organizations

To maximize our impact nationwide, ACLU of Virginia works together with and shares your personal information with our state/local/territory Affiliates around the United States and National to create a coherent experience for our supporters, members, and the public. For example, when you become a member of the National Union, you typically will also become a member of ACLU of Virginia's Union Organization (if the mailing address you provide with your donation is in our state or territory). We also may co-collect or share your personal information with any affiliated ACLU Organizations.

While the ACLU Organizations adhere to a common set of privacy principles and standards for handling personal information that we share with one another, each ACLU Organization may have its own unique data practices that are not contained in this Statement. When we share your personal information with other ACLU Organizations, they are bound to use that information in accordance with their privacy statement and with regard to their own operations. To view the list of all ACLU Organizations' privacy statements, read ACLU Organizations Privacy Statements.

Service Providers

We work with a variety of service providers who help us process your personal information as outlined in Why We Use Your Information above, such as to facilitate the operation of our sites; support our fundraising, marketing, communications, and advocacy programs; and deliver messages to you on other platforms.

We require these service providers to agree to take reasonable security measures in the handling and storage of that information. When we share personal information about you with a service provider, we take steps to: (1) transmit it in a secure manner and (2) require the service provider to promise to keep that information confidential and use it only for the purpose of carrying out the activities we have directed them to perform.

We allow some service providers to compile and use certain information related to ACLU of Virginia and/or its supporters' use of the services for internal purposes, like improving the functionality or security of the services ACLU of Virginia receives from the service provider. In some instances, this may include training the service providers' artificial intelligence tools or features for the services they provide the ACLU of Virginia*. In addition, we may also permit service providers to create and use data that has been de-identified for broader business purposes, including sharing aggregated benchmarking data with their business partners, other customers, or other third parties. We will not agree to that unless the service provider has sufficiently committed to not recombine the data with other information to identify you, and will not share or sell or use any identifiable data about you for the benefit of third parties outside the ACLU of Virginia-service provider business relationship.

*ACLU of Virginia takes your agency over the use of your personal information seriously. As the artificial intelligence landscape continues to evolve, we are committed to monitoring our service providers' artificial intelligence tooling for disproportionate privacy risks and other potential threats to civil liberties.

Business Partners

In some cases, we may disclose personal information to our vendors and other business partners for their own business purposes. In exchange, we may receive money or something else of value to ACLU of Virginia (e.g., a list of donors or supporters from like-minded organizations whose donors and supporters may also be interested in donating to and supporting ACLU of Virginia). We may also share your information with third party business partners at your request. For example, we may share information with another nonprofit advocacy organization with whom we are co-hosting an event or working in broader coalition on important civil liberties issues.

These "Business Partners" include:

  • Coalition Partners. To enable more effective advocacy, organizing, and litigation, we often partner with other organizations to further the reach of our work. We may share your personal information with our coalition partners to further those efforts and bolster our respective capacities to pursue our missions. We, however, will only share your personal information if you have requested or consented to have it shared.
  • Co-counsel. As needed, ACLU of Virginia may share personal information with third parties during litigation, including with co-counsel, referral partners, expert witnesses, and other parties engaged in prospective and pending litigation. Personal Information we share in this context may be related to you or other individuals who are not direct clients depending on the legal matter. For example, we may use modeled voter data that is relevant to a voting rights case against a state government entity. When ACLU of Virginia lawyers share personal information, particularly client information, they do so in compliance with applicable professional responsibility rules.
  • Data Cooperatives for Nonprofits. To grow our base of donors, ACLU of Virginia participates in nonprofit data cooperatives. Data cooperatives are membership-based services offered by vendors that enable cooperative members to pool personal information about their respective supporters to model and identify new prospective supporters and/or to deepen engagement with existing supporters. When we participate in data cooperatives, we may share your personal information, including contact and interaction information — for example, donation history — with data cooperative vendors in exchange for the ability to contact individuals who are prospective ACLU of Virginia supporters and/or modeled information about existing ACLU of Virginia supporters who also support other cooperative member nonprofits (e.g., modeled information may include likelihood to become a monthly donor to ACLU of Virginia). This practice of sharing supporter personal information with and through a data cooperative is a longstanding nonprofit practice that enables nonprofits to maintain a stronger supporter base — while lowering costs — by targeting communications to individuals who are most likely to be interested in hearing from them.

    ACLU of Virginia will join a data cooperative only if the cooperative exclusively serves nonprofit entities; does not receive any information from the ACLU of Virginia about supporters whose information is not already included in the cooperative's database; does not provide cooperative members direct access to ACLU of Virginia-provided information; does not share information derived from ACLU of Virginia-provided information to partisan organizations; will not disclose an individual's ACLU of Virginia association to cooperative members; and agrees to remove from the cooperative's data pool and destroy ACLU of Virginia-provided information when we leave the data cooperative.
  • Nonpartisan Organizations (List Rental or Exchange). To grow our donor base, ACLU of Virginia may share your contact information with other nonpartisan organizations, either on a rental basis (i.e., for a monetary fee) and/or in exchange for a similar supporter list from the other nonpartisan organization that ACLU of Virginia can contact. This information sharing allows each organization to contact the supporters of the other organization to further its mission. This collaboration is critical to maintaining a strong donor base by lowering costs while reaching the widest possible audience. Data shared with nonpartisan organizations is done on a one-time use basis.

    In order to protect your privacy, list-sharing agreements with other nonpartisan organizations are conducted through secure and confidential arrangements in which the external organization does not directly receive information about you unless you choose to engage. Communications generated from list sharing agreements are carried out by each nonpartisan organization's service provider(s), e.g., a vendor who prepares and sends out a mailer, who keeps your information confidential and secure. The other organization learns information about your relationship with the ACLU of Virginia only if you choose to respond to their third-party communication.
  • Third-party Advertisers. ACLU of Virginia may display targeted advertisements to you on non-ACLU platforms, third-party websites, and social media sites, such as Facebook and Instagram, to fundraise and build support for our advocacy, organizing, and litigation priorities. We target our advertisements to effectively and efficiently reach people who are most likely to take action, including people impacted by government policies. In doing so, we may share your personal information with third-party advertisers to serve targeted advertisements to specific individuals (i.e., one-to-one matching), including you, or to display ads to people who are similar to specific individuals (i.e., "look-alikes") who have engaged with ACLU of Virginia. These practices help us engage in effective fundraising and advocacy operations and enable our teams to communicate more effectively with known and prospective supporters.
    Personal information shared with these third-party advertisers are hashed to improve privacy. Hashing data refers to the practice of scrambling data in a pre-defined manner to make it more difficult to recognize. We only share hashed data with third-party advertisers that promise to hold ACLU of Virginia-provided information confidentially and securely, and promise not to use ACLU of Virginia-provided information for other purposes. For additional information on with whom we may have shared your personal information for targeted advertising purposes, please see Third-party Advertisers.

Other Third Parties

We may also share certain personal information with other third parties, as follows:

  • Advocacy Targets. To enable more effective advocacy, organizing, and litigation, we may use petitions and other message actions to demonstrate our collective size and strength as ACLU of Virginia advocates and organizers to spur change. When collecting signatures for a petition or facilitating other message actions, we may share personal information with advocacy targets (such as messages to your member of Congress).
  • Where Requested or Consented to by You (including Public Disclosures) or Necessary to Fulfill Your Request.
  • Where Required by Law or Necessary to Protect ACLU of Virginia or Others. We may disclose personal information from or about you to third parties in the following circumstances:
    • To comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies;
    • To conduct litigation, including by disclosing information to co-counsel or ACLU of Virginia advisors or other parties involved in the litigation process of claims by or against the ACLU of Virginia;
    • In the event of exigent circumstances, to help prevent the loss of life or serious injury or to protect the personal safety of ACLU of Virginia personnel, users of our Digital Services or other ACLU of Virginia services, our visitors, or the public;
    • To detect, investigate, prevent or otherwise address fraud or privacy issues;
    • To operate and maintain the security of our services, including to detect, investigate, prevent, stop, or remediate an attack on our computer systems or networks; or
    • To protect the rights or property of ourselves, our Affiliates, or others, including by enforcing our agreements, terms, and policies.

ACLU of Virginia considers individual privacy and government overreach to be serious civil liberties issues. If we are required by law or legal process to share your information with government agencies, law enforcement, or other third parties (e.g., plaintiffs or defendants in a legal action), we will object to legal demands for third-party access to your information that we believe to be improper. In those situations, if it is determined that we are required by law to disclose your data, we will attempt to do so under cover of confidentiality and, as long as we are legally permitted to do so, will also attempt to provide you with notice of the request by whatever method is reasonably practical prior to making the disclosure to give you an opportunity to object to the disclosure. We will not provide such notice, however, if the disclosure is pursuant to our regular government reporting obligations, such as financial disclosures required for tax law compliance.

Your Choices and Rights

The ACLU of Virginia offers you a number of choices in relation to your personal information. Further, you may have a legal right to these choices depending on your jurisdiction.

Communication Preferences

We strive to communicate with you according to your preferences. In some instances, you can update your communication preferences directly through the communication channels where we contact you, e.g., by texting or replying "STOP" to unsubscribe from automated recurring text messages from 82623 or by clicking on the "Unsubscribe" link in the footer of our emails.

In other instances, you will need to contact us to update your communication preferences. To make updating your phone and direct mail communication preferences as easy as possible, we have provided three methods:

  1. Recommended: Communication Preferences web form. We recommend submitting your phone and mail preferences via our Communication Preferences web form to expedite processing.
  2. Email. Send an e-mail to: ACLUpreferences@ACLU.org.
  3. Mail. Send a letter to ACLU Membership Department, 125 Broad Street, 18th Floor, New York, NY 10004.

Data Choices

Your Data Choices

The ACLU of Virginia offers you several choices in relation to your personal information. These choices may be offered to you as data subject rights required by applicable law. Data subject rights established by law can differ depending on the state or U.S. territory in which you reside and may be subject to legal limitations. The choices that ACLU of Virginia offers include:

  1. Opting out: You have the choice to opt out of certain types of data processing activities.
    • Targeted Advertising. You have the choice to opt out of targeted advertising. In the ACLU of Virginia context, targeted advertising refers to our practice of sharing your personal information with third-party advertisers to direct advertisements to you.
    • Sales of Data. You have the choice to opt out of sales of data. In the ACLU of Virginia context, we exchange donor personal information with other nonpartisan organizations and nonprofit data cooperative vendors. When you opt out of sales of data, you will be removed from both practices.

    Note: Some consumer privacy laws also afford residents the right to opt out of profiling or automated decision-making with legal or similarly significant impacts. ACLU of Virginia does not conduct these activities.

  2. Reviewing and correcting what we have: You have the choice to review and correct the personal information we have about you, and to review a list of the third parties to whom we may have transferred your personal information. We must consider the interests of others, so this is not an absolute right. If permitted by applicable law, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. If we determine your request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
    • Request your data report. You have the choice to request access to your personal information. This includes personal information we have collected and stewarded.
    • Request your data export. You have the choice to receive your personal information in a structured, commonly-used, and machine-readable format, and you may have the right to transmit that data to another entity.
    • Request to correct. You have the choice to request that we rectify inaccurate or incomplete personal information concerning you.
    • Request a third party data transfer report. You have the choice to request access to a list of third parties — which do not include our other affiliated ACLU organizations and service providers — to whom the ACLU of Virginia has transferred personal information.
  3. Deleting what we have: You have the choice to request that we delete the personal information we have about you, except information that is required or permitted to be kept in compliance with applicable law and obligations. If any personal information cannot be deleted, we will notify you when your request is complete.

    Note: If you choose to delete your personal information from our systems, your membership, donation, advocacy, and volunteer history with the ACLU Organizations will be irreversibly deleted. This will also unsubscribe you from all ACLU Organizations Communications and cancel any recurring donations. You may re-subscribe to ACLU of Virginia communications at any time, but doing so will not restore your past history with ACLU Organizations.

Submit a Data Choice Request

You may submit a data choice request to us using the mechanisms below. To make submitting Data Choice Requests as easy as possible, we have provided the following methods:

  1. Recommended: Your Data Choices web form. We recommend submitting your data choice request(s) via our dynamic Data Choices web form to expedite processing.
  2. Email. You may submit an opt-out request for targeted advertising or sales of data by emailing privacy@aclu.org.
  3. Phone. You may request your data report, request your data export, request to correct, request a data transfer report, or request to delete your data by calling our toll-free number (888) 597-4269. Please be sure to clearly articulate your name, email address, phone number, and request type. If our transcription service has not captured your request accurately, we may need to follow up with you to confirm the request type before we can begin processing your request.

You may also authorize another party to submit an opt-out request for targeted advertising and/or sales of data or a deletion request on your behalf by having them email privacy@aclu.org.

Further notes on making Data Choice Requests:

  • Identity Verification. When you or an authorized agent on your behalf make a request, we will confirm your identity. We may contact you for more information to verify your identity beyond what is included in your initial request. Information collected to verify your identity will never be used for any other purpose than to verify your identity to fulfill your request. To preserve privacy and further equity, we are committed to not using biometrics, social security numbers, or commercial credit bureau information as part of our identity verification process.
  • Children. If you are under 13, we do not want your personal information, and you must not provide it to us. If you are a parent or guardian and believe that your child who is under 13 has provided us with personal information, please contact us to have your child’s information removed.
  • Appeals. If you would like to make an appeal related to a Data Choice Request, you may do so by emailing privacy@aclu.org.

Manage Your Privacy Online

The internet is not a private place. As you visit websites, use search engines, and conduct business on the internet, many different companies and organizations are gathering information about your online behavior, including your searches, visits, and transactions, and then matching that data with other information about you or leveraging algorithms to predict your behavior. There are some things you can do to prevent your information from being collected. We encourage you to read our blog post Easy Steps Everyone Can Take to Protect Their Digital Privacy to help protect your privacy online.

Like most websites, our sites collect and process a range of information about their visitors to enable functionality and to deliver requested services. In addition to information we automatically collect for our purposes (see Personal Information We Automatically Collect), our Digital Services include links to social media sites, links to other websites operated by third parties (e.g., a registration page for another nonprofit advocacy organization’s event, a third-party payment processor), embedded media (e.g., YouTube videos), and embedded third-party applications that may collect information about you when you choose to interact with them. When you access this content, you are interacting directly with the third parties, whose data collection and other processing activities are governed by their privacy policies, and not by this Statement. When you view embedded media or interact with embedded third-party applications — hosted on other platforms, but viewable through the buttons we provide — you will remain on our sites but you will be interacting with these third party’s online environment. In these instances, we make clear that you are viewing external content when you click on buttons.

How to Disable Cookies

If you would like to reduce the web data collected about you while browsing the internet, you can purge and disable cookies in your web browser.

For your awareness, our sites will still work if you disable cookies in your browser. Please note disabling cookies on your browser may impact the operability of other websites you visit and disabling cookies will not disable other technologies (such as web beacons, clear gifs, and single-pixel gifs), which the ACLU of Virginia uses on our sites to support our operations and the security of our sites.

About this Statement

When This Statement Applies

This Statement describes how we treat personal information collected by ACLU of Virginia in our general operations. This includes personal information collected online and offline, including through our main website, www.acluva.org, or which is operated by ACLU of Virginia and link to this Statement.

Certain ACLU of Virginia programs, as well as ACLU of Virginia’s other affiliated ACLU Organizations, have separate privacy statements. When a different privacy statement applies, the relevant privacy statement will be posted. To see a full list of ACLU Organizations’ privacy statements, read ACLU Organizations Privacy Statements.

Definitions

"Data Choices" means the choices you have in relation to your personal information. These choices may be offered to you as data subject rights required by law.

"Personal information" means information that identifies, relates to, describes, or can be reasonably linked, directly or indirectly, to a specific human, in a personal capacity. It does not include information that is considered de-identified, anonymous, or aggregated under applicable law or information relating to a person in their employment or professional capacities, including information obtained from or about an ACLU of Virginia employee or job applicants looking to work at ACLU of Virginia

"Processing" of personal information means any operation, or set of operations, performed manually or automatically on personal information - like the collection, use, organization, structuring, storage, transmission, analysis, retrieval, deletion, or modification of personal information.

Statement Update Procedure

Our Statement is subject to change. We will post updated versions of this Statement here and, if the changes are significant, we will provide a more prominent notice of changes on our website.

Questions about this Statement

If you have any questions regarding this Privacy Statement or our privacy and data governance practices, you can reach our Privacy and Data Governance team by emailing privacy@aclu.org.