Data Use Policy

Last Updated: January 2026

Introduction

USA Web School is committed to protecting your personal data and being transparent about how we use it. This Data Use Policy explains how we collect, process, store, and protect your information.

Data We Collect

Information You Provide Directly

  • Contact Information: Name, email address, phone number when you contact us, donate, volunteer, or subscribe to our newsletter
  • Account Information: Username, password (encrypted), and profile details when you create an account
  • Donation Information: Payment details are processed securely by Stripe; we store transaction records but not full credit card numbers
  • Volunteer Applications: Skills, availability, areas of interest, and background information
  • Communications: Messages you send us through contact forms or email

Information Collected Automatically

  • Technical Data: IP address, browser type, operating system, and device information for security purposes
  • Session Data: Pages visited and actions taken on our website during your session

How We Use Your Data

We use your data to:

  • Process donations and send tax receipts
  • Communicate about our programs, events, and volunteer opportunities
  • Send newsletters (only with your consent)
  • Send SMS updates (only with your explicit consent)
  • Respond to your inquiries and provide support
  • Improve our website and services
  • Comply with legal obligations
  • Protect against fraud and security threats

Legal Basis for Processing (GDPR)

We process your data based on the following legal grounds:

  • Consent: When you opt-in to newsletters, SMS messages, or other communications
  • Contract: When necessary to fulfill a donation, volunteer application, or account services
  • Legitimate Interest: For security, fraud prevention, and improving our services
  • Legal Obligation: When required by law (e.g., tax reporting for donations)

Data Sharing

We never sell or rent your personal information. We only share data with:

  • Payment Processors: Stripe processes donations securely
  • Email Service Providers: For sending newsletters and transactional emails
  • SMS Providers: Twilio for SMS messages (only if you consent)
  • Legal Authorities: When required by law or to protect our rights

Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing
  • Access controls and authentication
  • Regular security assessments
  • Limited employee access to personal data

Data Retention

We retain your data only as long as necessary:

  • Donation Records: 7 years (legal requirement)
  • Account Data: Until you request deletion
  • Newsletter Subscriptions: Until you unsubscribe
  • Contact Form Submissions: 2 years
  • Security Logs: 90 days

Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (with some exceptions)
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time for consent-based processing

Exercising Your Rights

To exercise any of these rights, contact us at:

We will respond to your request within 30 days.

International Transfers

Your data is primarily stored and processed in the United States. If you are located outside the US, please be aware that your data will be transferred to the US where data protection laws may differ from those in your country.

Updates to This Policy

We may update this policy periodically. Significant changes will be communicated via email or website notice.

Contact Us

Questions about this policy? Contact us at [email protected].

Related Policies