Introduction
This Privacy Policy describes how ChromaDiverse, Inc. (“ChromaDiverse,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit our website at https://chromadiverse.org or interact with our services.
ChromaDiverse is the data controller for the personal information we collect and process. You can contact us at: privacy@ericw190.sg-host.com, or at ChromaDiverse, Inc., 401 Harrison Street, #36F, San Francisco, CA 94105.
What Personal Data We Collect and Why
Public Users
Website Analytics: We utilize Google Analytics to better understand who is visiting our site and to track traffic and other useful information. This service may collect names, email addresses, IP addresses, browser information, device information, and usage patterns. We use this data to improve our website and services.
Newsletter Subscriptions: We use Mailchimp and Bloomerang for email to manage our newsletter subscription forms and submissions. When you subscribe, we collect your email address and any other information you voluntarily provide. We use this data to send you our newsletter and related communications.
Website Performance: Cookies may be installed on your device for use with our caching software which is used to deliver the site as quickly as possible to our return users. These cookies improve your browsing experience by loading pages faster.
Donations: We use Bloomerang, Qgiv, Stripe, and Click & Pledge to process donations through our site. Please click on the name of any company above to view that company’s privacy policy. When you make a donation, we may collect your name, email address, payment information, and donation amount.
Social Media Marketing: We share user traffic and interaction data with Facebook/Meta to inform our advertising, fundraising, and outreach efforts. This data is used to create targeted advertising campaigns and measure their effectiveness
Search and Banner Advertising: We share user traffic and interaction data collected through search ads and banner ads with third-party service providers, such as LinkedIn, Google, Bing, Banner Advertisers, and the like.
ChromaDiverse Staff
In addition to the above (under the heading “Public Users”), if you visit our login page (not intended for public use), we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me,” your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day
Staff User Profiles: For users that register on our website, we also store the personal information they provide in their user profile, including usernames, email addresses, and any profile information voluntarily provided.
Categories of Personal Information We Collect
The following categories of personal information may be collected:
Sensitive Personal Information
We do not intentionally collect sensitive personal information as defined by the California Privacy Rights Act (“CPRA”). If you voluntarily provide sensitive personal information through our contact forms or communications, we will only use it for the specific purpose for which it was provided and in accordance with applicable law.
Sources of Personal Information
We collect personal information directly from you when you:
We also collect information from third parties such as:
Business or Commercial Purposes for Collection
We collect and use personal information for the following business purposes:
Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
Embedded Content from Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who We Share Your Data With
Service Providers: We share data with third-party service providers who help us operate our website and services, including:
Staff Data: If you request a password reset, your IP address will be included in the reset email sent to website administrators.
Legal Requirements: We may disclose your personal data if required by law or to protect our rights, property, or safety.
Sale or Sharing of Personal Information
We do not sell personal information as defined by the CPRA. We may share personal information with third parties for cross-context behavioral advertising purposes, which may be considered “sharing” under the CPRA. Specifically, we share user traffic and interaction data with Facebook/Meta for targeted advertising purposes.
International Data Transfers
Some of our service providers may be located outside your country. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your personal information in accordance with applicable privacy laws.
How Long We Retain Your Data
General Data: We retain personal data for as long as necessary to fulfill the purposes for which it was collected or as required by law.
Newsletter Subscriptions: We retain your email address until you unsubscribe or we discontinue our newsletter.
Donations: We may retain donation records for tax and legal compliance purposes.
Staff Users: We store the personal information staff users provide in their user profiles until the account is deleted or we are requested to remove it.
Cookies: Different cookies have different retention periods as described in the sections above.
Your Rights Over Your Data
All Users
You have the following rights regarding your personal data:
Additional GDPR Rights (for EU residents)
You have the following rights (in addition to those for All Users, above) regarding your personal data:
Additional CPRA Rights (for California residents)
You have the following rights (in addition to those for All Users, above) regarding your personal information:
Note: We do not sell personal information as defined by the CPRA, but we may share information for targeted advertising purposes. We may also disclose your personal data if required by law or to protect our rights, property, or safety.
Exercising Your Rights
To exercise any of these rights, contact us at privacy@ericw190.sg-host.com. We will respond to your request within the timeframes required by applicable law (typically 30 days for GDPR requests and 45 days for CPRA requests).
We may require verification of your identity before processing your request. For CPRA requests, we may ask for information such as your name, email address, and other details to verify your identity.
You may designate an authorized agent to make requests on your behalf. We will require verification of the agent’s authority to act on your behalf.
If you have an account on this site, you can also see, edit, or delete your personal information at any time through your account settings (except you cannot change your username). Website administrators can also see and edit that information.
Where We Send Your Data
Visitor newsletter subscription requests are processed via MailChimp and Boomerang for email. Our Contact Us form submits directly to a ChromaDiverse email inbox. We share user traffic and interaction data to Facebook/Meta to inform our advertising, fundraising, and outreach efforts.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.
Children’s Privacy (COPPA Compliance)
Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately, and we will take steps to delete such information. If you believe we might have any information from or about a child under 16, please contact us at privacy@ericw190.sg-host.com.
Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the “Last Updated” date. For material changes, we may also provide additional notice such as email notification to registered users.
Contact Information
If you have any questions about this privacy policy or wish to exercise your rights, please contact us at: privacy@ericw190.sg-host.com, or at ChromaDiverse, Inc., 401 Harrison Street, #36F, San Francisco, CA 94105.
For GDPR-related complaints, you also have the right to lodge a complaint with your local data protection authority. California residents may also contact the California Attorney General’s office regarding CPRA compliance.
Last Updated: August 10, 2025