How It’s Supposed to Work Foundation (HISW)
San Francisco, California

Last Updated: December 10, 2025

How It’s Supposed to Work Foundation (“HISW,” “we,” “our,” or “us”) is a 501(c)(3) nonprofit based in San Francisco. This Privacy Policy explains how we collect, use, disclose, and retain personal information when you use our website.

1. Information We Collect

a. Information You Provide

• Contact information (name, email, phone, address)
• Donation information (amount, date; payment details handled by processors)
• Program, event, or volunteer form submissions
• Messages or inquiries you send to us

b. Information Collected Automatically

We and our service providers (Squarespace, Google Analytics, etc.) may collect:
• IP address
• Device identifiers
• Browser type
• Pages viewed
• Time on site
• General location (approximate)
• Cookies and tracking technologies necessary for site performance and analytics

c. Information from Third Parties

Payment processors, email platforms, and analytics tools may provide:
• Donation confirmations
• Updated contact information
• Engagement metrics

Sensitive Personal Information

We do not collect or use sensitive personal information as defined by the California Privacy Rights Act (CPRA).

2. Purposes for Collecting Personal Information

We use personal information to:
• Process donations and provide IRS-required receipts
• Communicate about programs, updates, and events
• Maintain operational and financial records
• Respond to inquiries
• Improve site functionality
• Meet legal, audit, and regulatory obligations

We do not use personal information for targeted advertising or profiling.

3. How We Share Information

We share personal information only as needed to:
• Process donations (Stripe, PayPal, Givebutter)
• Deliver email communications (Mailchimp)
• Host and operate the website (Squarespace, Google services)
• Conduct audits or comply with legal obligations

We do not sell or “share” personal information as those terms are defined under CCPA/CPRA.

4. Retention of Personal Information

We retain information only for as long as necessary for operational or legal purposes.

Examples:
• Donation records: minimum 7 years (IRS requirement)
• Email lists: until you unsubscribe or request deletion
• Analytics data: subject to provider retention periods (typically 14–26 months)

5. Your Rights (California Residents)

California residents have the right to:
• Access personal information we hold
• Request correction of inaccurate information
• Request deletion (with legal exceptions)
• Receive information about how we collect, use, and share personal information
• Opt out of sale or sharing (HISW does neither)
• Limit use of sensitive personal information (not applicable; we do not collect it)

You may submit a request at: privacy@howitssupposedtowork.org
Authorized agents may submit requests with appropriate written authorization.

We will verify your identity before responding.

6. Cookies and Tracking

We use necessary cookies for functionality and may use analytics cookies for performance measurement.
We do not use cookies for advertising.

Your browser may send “Do Not Track” signals. Squarespace and our service providers may not respond to such signals.

7. Children’s Information

We do not knowingly collect personal information from children under age 13.
If we learn we have inadvertently collected such information, we will delete it.

8. Security

We use reasonable administrative, technical, and physical safeguards to protect information.
No system is entirely secure, and we cannot guarantee absolute security.

9. External Links

We are not responsible for the privacy practices of external sites. Review their policies before providing information.

10. Changes to This Policy

We may update this policy as laws or operations change.
The “Last Updated” date reflects the latest version.

11. Contact Us

For questions or requests:
How It’s Supposed to Work Foundation
San Francisco, CA
privacy@howitssupposedtowork.org