Privacy Policy


PRIVACY POLICY

Welcome to the Privacy Policy of Title IX Girls Running Club, Inc., a 501(c)(3) non-profit organization (“TIXGRC,” “we,” “us,” “our”). TIXGRC operates the website available at www.titleixgirls.org (the “Site”), where it provides information about its programs and services designed to improve the mental, social, and physical health of young girls in Cambridge and the Greater Boston area and accepts donations.

This Privacy Policy explains what personal data we collect through the Site, how we use and share that data, and your choices concerning our data practices.

By providing us with your personal data, you agree to the practices described in this Privacy Policy.  If you do not agree to this Privacy Policy, please do not access or use the Site. Before you submit any personal data to TIXGRC, please review this Privacy Policy carefully, and contact us if you have any questions as described in the Contact Us section below.

1. INFORMATION WE COLLECT

When you interact with our Site, we collect information that alone or in combination with other information could be used to identify you (“Personal Data”), described below.

Donations: When you make an online donation on our Site, we collect your name, billing and email address. We collect information about your donation, including the project you are donating to and the amount of your donation. We also collect (but do not retain) credit card numbers which are processed by a third-party payment vendor. If you use PayPal ID or a similar service, the use of your information is based on the relevant service’s terms of service and policies, not ours, so we encourage you to review those policies carefully. If you wish to receive information about any relevant projects, you can choose to provide additional information, such as your phone number.

Road Race Teams: When you apply to join one of our road race teams, we collect your name, date of birth, gender, email, phone number, employer information, emergency contacts, payment card information, and your running/injury history, as permitted by the applicable laws.  We also ask you to answer some questions about your interest in joining our team and your fundraising experience.

Volunteer Coaching: If you sign up to be one of our volunteer coaches, we collect your name, email, the date of your application, your place of employment or education, two personal references along with their emails and phone numbers, and we ask you to answer a few questions about yourself.  We also request, but do not require you to provide, your phone number, address, an emergency contact name and phone number, any allergies you have, and your CPR certification status.

Mailing List: When you register for our mailing list, we collect your name, email, and your address.

Participation: If you help a girl sign up to participate in one of our programs, we will ask you to provide her name, a phone number and email where we can reach you, the school she attends, and her age.  We also request, but do not require, her grade level, the location she is applying to, her country of birth, her nationality, your motivation for signing her up, your family’s annual income, and how you heard about TIXGRC.  We will also ask the girl to answer a few questions about herself and her interest in TIXGRC. If you submit any Personal Data about other individuals to our Site, you represent that you have the authority to do so and you permit us to use the data in accordance with this Privacy Policy.

When girls participate in our programs, we collect demographic data via registration and pre- and post- participation surveys along with journal entries to measure the growth of the girls that participate in our program.

Feedback: If you donate, coach, join a road race team, or participate in one of our programs, we may ask for feedback on your experiences.

2. HOW WE USE INFORMATION

We use your Personal Data for the following purposes:

Processing Donations. To process your donations, including processing your payments and communicating with you as necessary in connection with your donations. This processing is necessary to perform the contract between you and us in connection with your donation. If you do not provide the necessary data to us or our payment service provider, we will not be able to process your donation.

Processing Applications. To process your applications to participate in our programs, join a road race team, or volunteer, including communicating with you as necessary to keep you informed on the status of your application.  This processing is necessary to comply with your requests before we enter into a contract with you.

As necessary for certain legitimate business interests, which include the following:

  • To respond to your inquiries, comments, feedback or questions;

  • To study whether our program participants are able to demonstrate understanding of our program values;

  • To post any feedback and/or testimonials you provide, attributing your thoughts and words to you according to your preferences;

  • To send administrative information to you, for example, information regarding the Site, and changes to our terms, conditions, and policies;

  • Using the technical information logged by our servers when you visit our Site (described above) to analyze Site usage and provide, maintain and improve the content and functionality of the Site and prevent fraudulent activity. For example, we regularly fix bugs and user experience issues and compile aggregate statistics that allow us to understand how visitors or registered users use our Site, so that we can make improvements in design and content to better serve you;

  • If you ask us to delete your data and we are required to fulfill your request, we will keep basic information about you in order to identify you and prevent further unwanted processing;

  • To prevent fraud, criminal activity, or misuses of our Site and to ensure the security of our IT systems, architecture and networks; and

  • To comply with legal obligations and legal process and to protect our rights, privacy, safety or property, and/or that of you or other third parties.

For information about what we mean by legitimate interests and the rights of individuals in the European Union (“EU”), please see the “EU Users” section below.

Contacting You. We may contact you to send you updates on how your donation has been used, project appeals, newsletters, events, information about TIXGRC, and opportunities we think will be of interest to you, such as annual fundraising campaigns or opportunities to have your donation matched by a third party. If we do, where required by law, for example if you are in the EU, we will only send you this information if you consent to us doing so at the time you provide us with your Personal Data. You may opt out of receiving such emails by following the instructions contained in each promotional email we send you. In addition, if at any time you do not wish to receive future communications, please contact us.

 

3. SHARING AND DISCLOSURE OF INFORMATION

In certain circumstances we may share your Personal Data with third parties without further notice to you, unless required by the law, as set forth below:

  • Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions: providers of hosting, cloud services and other information technology services; our donation processor and donor management system; and email communication. Pursuant to our instructions, these parties will access, process or store Personal Data in the course of performing their duties to us.

  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of Users of the Site, or the public, or (v) protect against legal liability.

 

4. DATA RETENTION

We will keep your Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy, while we have a legitimate business need to do so, or as required by law (e.g. for tax, legal, accounting or other purposes), whichever is the longer.

If you have elected to receive information from us, we retain information about your preferences until you opt out of receiving these communications and in accordance with our policies.

To determine the appropriate retention period for your Personal Data, we will consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we use your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

 

5. UPDATE YOUR INFORMATION

If you need to change or correct your Personal Data, or wish to have it deleted from our If you need to change or correct your Personal Data, or wish to have it deleted from our systems, you may contact us. We will address your request as required by applicable law. You may also update your Personal Data from your user settings.

 

6. EU USERS

Scope. This section applies if you are in the EU (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway).

Data Controller. Title IX Girls is the data controller for processing your Personal Data. To find out our contact details, please see the “Contact Us[1] ” section below.

Your Rights. Subject to applicable EU law, you have the following rights in relation to your Personal Data:

Right of access: If you ask us, we will confirm whether we are processing your Personal Data and, if so, provide you with a copy of that Personal Data along with certain other details. If you require additional copies, we may need to charge a reasonable fee.

Right to rectification: If your Personal Data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your Personal Data with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.

Right to erasure: You may ask us to delete or remove your Personal Data, such as where you withdraw your consent. If we shared your data with others, we will tell them about the erasure where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data with so you can contact them directly.

Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it (please read below for information on your right to object). We will tell you before we lift any restriction on processing. If we shared your Personal Data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your Personal Data so you can contact them directly.

Right to data portability: You have the right to obtain your Personal Data from us that you consented to give us or that was provided to us as necessary in connection with our contract with you, and that is processed by automated means. We will give you your Personal Data in a structured, commonly used and machine-readable format. You may reuse it elsewhere.

Right to object: You may ask us at any time to stop processing your Personal Data, and we will do so:

  • If we are relying on a legitimate interest to process your Personal Data -- unless we demonstrate compelling legitimate grounds for the processing or

  • If we are processing your Personal Data for direct marketing.

Right to withdraw consent: If we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing of your data before we received notice that you wished to withdraw consent.

Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your Personal Data, you can report it to the data protection authority that is authorized to hear those concerns.

Please see the “Contact Us” section below for information on how to exercise your rights.

Legitimate Interest. “Legitimate interests” means our interests in conducting our business, fulfilling the obligations under our contract with you and managing and delivering the best services to you. This Privacy Policy describes when we process your Personal Data for our legitimate interests, what these interests are and your rights. We will not use your Personal Data for activities where the impact on you overrides our interests, unless we have your consent or those activities are otherwise required or permitted by law.

7. CHILDREN

Please contact us if you have questions about how we collect, use, and protect information from the girls who participate in our programs.

 

8. LINKS TO OTHER WEBSITES

The Site may contain links to other websites not operated or controlled by TIXGRC (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact those sites directly for information on their privacy practices and policies.

 

9. SECURITY

You use the Site at your own risk.  We comply with industry standards to protect Personal Data both online and offline from loss, misuse, and unauthorized access, disclosure, alteration or destruction.  For example, we use available technology and other techniques to implement systems like firewalls, and/or encryption to secure Personal Data transfers. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from us in connection with our use of the Site may not be secure. Therefore, you should take special care in deciding what information you send to us via the Site or e-mail. Please keep this in mind when disclosing any Personal Data to TIXGRC via the internet. We cannot control the actions of others with whom you may choose to share information. Therefore, we cannot, and do not, guarantee that information you disclose to others will not be viewed by unauthorized persons. We are not responsible for circumvention of any privacy settings or security measures contained on the Site or third-party websites.

10. CHANGES TO THE PRIVACY POLICY

The Site and our services may change from time to time. As a result we may change this Privacy Policy at any time and when we do we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use the Site or providing us with information after we have posted an updated Privacy Policy, or notified you if applicable, you consent to the revised Privacy Policy and practices described in it.

 

11. INTERNATIONAL USERS

TIXGRC is based in the United States. If you are accessing our Site from the EU or other regions with laws governing data collection and use, please note that your Personal Data will be transmitted to our servers in the United States and the data may be transmitted to our service providers supporting our business operations (described above). The United States may have data protection laws less stringent than or otherwise different from the laws in effect in the country in which you are located. Where we transfer your Personal Data out of the EU we will take steps to ensure that your Personal Data receives an adequate level of security where it is processed and your rights continue to be protected.

12. CONTACT US

If you have any questions about our Privacy Policy or would like to exercise your choices in relation to your Personal Data, please contact us.