Privacy Policy

Donor Data Protection

The Alghini Institute for Italian Americans (EIN: 99-0439703) is committed to the highest standards of donor stewardship. We adhere to the Association of Fundraising Professionals' (AFP) Donor Bill of Rights and maintain the following institutional commitments:

• Donor names, mailing addresses, email addresses, phone numbers, giving amounts, and giving history are held in strict confidence and will never be disclosed, sold, rented, or exchanged with any third party for any purpose.
• We do not send mailings to our donors on behalf of other organizations.
• Donors may opt out of all communications at any time by contacting us or using the unsubscribe link included in every email.
• All donations are processed securely via Stripe in accordance with PCI DSS Level 1 standards. We do not store credit card numbers on our servers.
• We provide timely, accurate acknowledgment letters and tax receipts for all contributions as required by IRS regulations.
• Donor information is accessible only to authorized staff members who require it to process donations and issue receipts.

This donor data protection policy is reviewed annually by our Board of Directors to ensure ongoing compliance with nonprofit best practices and applicable state and federal regulations.

General Privacy Notice

The Alghini Institute for Italian Americans (“we,” “us,” or “our”) operates italianamericans.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, make a donation, sign up for our newsletter, or otherwise interact with our services.

We reserve the right to update this policy at any time. Changes are indicated by the “Last updated” date above. We encourage you to review this page periodically.

Information We Collect

Personal Data You Provide

We collect personally identifiable information that you voluntarily provide, including:

• Full name and email address (newsletter sign-ups, contact forms)
• Mailing address (donor correspondence)
• Donation and payment information (processed via Stripe; we never store card details)
• User-generated content (heritage recordings, guest blog submissions, community posts)

Automatically Collected Data

When you access the Site, we may automatically collect device and usage information via Google Analytics, including IP address (anonymized), browser type, operating system, pages viewed, referring URLs, and session duration. This data helps us improve site performance and user experience.

Cookies and Tracking Technologies

We use cookies and similar technologies with your consent. Types include:

• Essential cookies: Required for site operation (session management, authentication). These cannot be disabled.
• Analytics cookies: Help us understand site usage (Google Analytics). Enabled only after you provide consent via our cookie banner.
• Functionality cookies: Remember your preferences (language selection, cookie consent status).

You may manage cookie preferences through your browser settings or our cookie banner. Disabling certain cookies may limit site functionality.

How We Use Your Information

• To operate, maintain, and improve the Site and services
• To process and acknowledge donations and issue tax receipts
• To send newsletters and program updates (with your opt-in consent)
• To respond to inquiries and provide support
• To analyze usage patterns for site improvement
• To detect and prevent fraud or unauthorized activity
• To comply with legal obligations

Disclosure of Your Information

We do not sell, trade, or rent your personal information. We may share data in these limited cases:

• Service providers: Trusted vendors who help operate the Site and process payments (e.g., Stripe, Supabase, Google Analytics), under strict confidentiality agreements.
• Legal requirements: When required by law, regulation, or governmental request.
• Protection: To protect rights, property, or safety of the Institute, our users, or the public.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Lawful basis: We process personal data based on consent (newsletter subscriptions, analytics cookies), contractual necessity (processing donations), and legitimate interests (site security, fraud prevention).
• Right of access: Request a copy of all personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data (“right to be forgotten”), subject to legal retention requirements.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing.

To exercise these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

International data transfers: Data may be transferred to and processed in the United States. We take appropriate safeguards, including encryption in transit and at rest, to protect your data during transfer.

California Privacy Rights (CalOPPA & CCPA)

Under the California Online Privacy Protection Act (CalOPPA) and the California Consumer Privacy Act (CCPA), California residents have the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
• Right to delete: Request deletion of personal information we have collected, with certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.
• Do Not Track signals: Our Site currently does not respond to “Do Not Track” browser signals. However, analytics cookies are only activated upon your affirmative consent via our cookie banner.
• Sale of personal information: We do not sell personal information as defined under the CCPA.

To submit a California privacy request, email [email protected] with the subject line “California Privacy Request.” We will verify your identity and respond within 45 days.

Data Security

We implement industry-standard administrative, technical, and physical safeguards to protect your information. These include TLS/SSL encryption for all data in transit, encrypted storage, and role-based access controls. Payment processing is handled entirely by Stripe in compliance with PCI DSS Level 1 standards. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Donation records are retained for a minimum of seven years for tax and audit compliance. Newsletter subscriber data is retained until you unsubscribe. Contact form submissions are retained for up to two years.

Opt-Out & Communication Preferences

You have the right to control how and whether we communicate with you. The Alghini Institute provides the following opt-out mechanisms:

• Newsletter & mailing list: Every email we send includes an “Unsubscribe” link at the bottom. Clicking it will immediately remove you from our mailing list. You may also email [email protected] with the subject line “Unsubscribe” and we will process your request within 5 business days.
• Cookies & analytics: You may withdraw cookie consent at any time via our on-site cookie banner, or by adjusting your browser settings to block cookies.
• Account deletion: If you have created an account, you may request full deletion of your account and associated data by contacting us at [email protected].
• Donor communications: Donors who wish to remain anonymous or cease receiving acknowledgment correspondence may notify us at any time.

Opting out of promotional communications will not affect transactional messages such as donation receipts or account security notifications.

Children's Privacy

Our Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly. If you believe we may have collected information from a child under 13, please contact us immediately.

Third-Party Links

Our Site may contain links to third-party websites, including partner organizations and educational resources. We are not responsible for the privacy practices of external sites. We encourage you to review their privacy policies before providing any personal information.

Contact Us

If you have questions about this Privacy Policy, your personal data, or wish to exercise your rights: