Privacy Policy
We collect only your email address. We do not sell, rent, or share it with third parties for their marketing purposes. You may unsubscribe or request deletion at any time.
1. Who We Are
Capital Rights Action ("we," "us," or "our") is a 501(c)(4) social welfare organization based in Washington, DC. Contact us at privacy@capitalrightsaction.org or P.O. Box 73242, Washington, DC 20056.
2. Information We Collect
We collect your email address when you submit the join form on our website. We do not collect names, phone numbers, payment data, precise geolocation, or special-category data (GDPR Art. 9).
Our hosting provider (Netlify) automatically receives standard server logs — IP address, browser type, referring URL, timestamp — retained up to 30 days and not linked to your email address.
3. How We Use Your Information
We use your email address solely to send you updates on DC voting rights, Congressional representation, and organizational news, and to comply with applicable law. We do not use it for automated profiling or decisions with legal effect.
4. Legal Basis for Processing (GDPR)
For users in the EEA or UK, our legal basis is your consent (GDPR Art. 6(1)(a)), given when you submit the form. You may withdraw consent at any time without affecting prior processing.
5. Service Providers
- Netlify, Inc. — hosting and form processing. Netlify Privacy Policy.
- Buttondown (email delivery, if applicable). Buttondown Privacy Policy.
We do not authorize service providers to use your data for their own purposes.
6. Data Transfers
Our service providers are US-based. Transfers from the EEA or UK are made under appropriate safeguards, including Standard Contractual Clauses where required.
7. Data Retention
We retain your email address while you remain subscribed. Upon unsubscribe or deletion request, we remove it from active lists within 30 days and from backups within 90 days.
8. Your Rights
All users may unsubscribe via any email link, or request deletion by emailing privacy@capitalrightsaction.org.
California residents (CCPA / CPRA) have the right to know what personal information we collect; to request deletion or correction; to opt out of sale or sharing (we do not sell or share data); and to non-discrimination. Submit requests to privacy@capitalrightsaction.org. We respond within 45 days.
EEA / UK residents (GDPR / UK GDPR) have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), port (Art. 20), and object (Art. 21). Contact us at privacy@capitalrightsaction.org. We respond within 30 days. You may also lodge a complaint with your local supervisory authority.
9. Cookies and Tracking
We do not use cookies or third-party tracking pixels. We do not use Google Analytics, Meta Pixel, or behavioral advertising technology.
10. Children's Privacy
Our site is not directed to individuals under 16. We do not knowingly collect personal information from anyone under 16. Contact us to request deletion if you believe such data was collected.
11. Security
We implement reasonable technical and organizational measures to protect your data. All transmissions are encrypted via TLS/HTTPS.
12. Changes to This Policy
We may update this policy and will post any changes here with a new effective date. Material changes will be communicated by email where required by law.
13. Contact
Capital Rights Action · P.O. Box 73242, Washington, DC 20056 · privacy@capitalrightsaction.org