Privacy Policy

1. Information We Collect

Information You Provide Directly

We collect information you voluntarily provide when you:

Complete a contact, RSVP, or volunteer form on our website
Submit a job application or employment inquiry
Make a donation or sponsorship contribution (donations are processed by Zeffy)
Sign up for our email newsletter
Register to volunteer or participate in an event
Contact us by phone, email, or in person

This information may include:

Name, email address, phone number
Mailing or physical address
Organization or employer name
Resume and employment history (for job applicants)
Payment information (donations are processed securely by Zeffy; we never see or store full card numbers)

Information Collected Automatically

When you visit our website, we automatically collect certain technical information including IP address, browser type, operating system, referring URL, pages viewed, and the date and time of your visit. We use Google Analytics 4 with Consent Mode v2; analytics cookies are blocked by default and only set after you grant consent through our cookie banner. See our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

Respond to your inquiries, questions, or requests for information
Process job applications and communicate with candidates
Process donations and provide acknowledgment receipts
Send you newsletters, program updates, and event announcements (only if you have opted in)
Coordinate volunteer activities and event participation
Improve our website and better understand how visitors interact with it
Comply with legal obligations and protect the rights of Lions Services

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

3. Information Sharing

Lions Services does not sell, rent, trade, or share your personal information for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising as that term is defined under the California Privacy Rights Act (CPRA). We may share information only in the following limited circumstances:

Service Providers: We share information with trusted vendors and service providers who assist us in operating our website (hosting, email delivery via SendGrid), processing donations (Zeffy), or providing analytics (Google Analytics 4, only after consent). These providers are contractually obligated to protect your information and use it only as directed.
Legal Requirements: We may disclose your information if required by law or in response to a valid legal process such as a court order, subpoena, or government request.
Protection of Rights: We may share information to protect the safety, rights, or property of Lions Services, our employees, clients, or the public.
With Your Consent: We may share information with your explicit consent for purposes not described in this policy.

4. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. We use Google Analytics 4 with Consent Mode v2: analytics cookies are blocked by default and only loaded after you actively grant consent through our cookie banner. We do not use advertising, retargeting, or cross-site tracking cookies.

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out preference signal under California law. You can change your preferences at any time using Cookie Settings, or review the full list of cookies in our Cookie Policy.

5. Data Security

We use reasonable administrative, technical, and physical safeguards to protect personal information from unauthorized access, use, disclosure, or destruction. These measures include encrypted data transmission (TLS 1.3 / HTTPS), HSTS preload, restrictive Content Security Policy, access controls, and limited employee access on a need-to-know basis.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately using the contact information below.

6. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described above. Specifically:

Contact and inquiry submissions that do not result in a continuing relationship are deleted within 24 months.
Donor and donation records are retained for 7 years for tax, accounting, and audit purposes, consistent with IRS guidance for 501(c)(3) organizations.
Employment application records are retained for the period required by federal and North Carolina law (typically 1 to 3 years), then securely destroyed.
Newsletter subscriptions are retained until you unsubscribe.

7. Your Rights and Choices

You have the following rights regarding your personal information:

Access: You may request a copy of the personal information we hold about you.
Correction: You may request that we correct inaccurate or incomplete information.
Deletion: You may request that we delete your personal information, subject to certain legal obligations such as donation record retention requirements.
Opt-Out of Communications: You may unsubscribe from our newsletter or marketing emails at any time by clicking "unsubscribe" in any email or by contacting us directly.
Authorized Agent: You may designate an authorized agent to submit a privacy request on your behalf. We will require reasonable verification of the agent's authority.
Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, please contact us at privacy@lionsservices.org or use the form on our Do Not Sell or Share My Personal Information page. We will respond within 45 days as required by applicable law.

8. California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Lions Services does not sell personal information for monetary or other valuable consideration, and does not share personal information for cross-context behavioral advertising as defined under those laws.

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out preference signal. We do not collect or process sensitive personal information as defined by CPRA § 1798.140(ae). California residents may exercise their rights to know, access, correct, delete, and opt out of sale or sharing by visiting our Do Not Sell or Share My Personal Information page.

9. Third-Party Links

Our website may contain links to external websites, including news articles, partner organizations, and resources for people with vision loss. These third-party sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us and we will promptly delete such information.

11. Governing Law

This Privacy Policy and any dispute arising from your use of this website are governed by the laws of the State of North Carolina, without regard to conflict-of-law principles. Any legal action or proceeding shall be brought exclusively in the state or federal courts located in Mecklenburg County, North Carolina.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page and, for significant changes, re-surface the cookie banner so you can review and re-confirm your choices. We encourage you to review this policy periodically.