Last Updated May 2019
The American Heart Association wants you to know how we use and protect the important information you provide to us. This information summarizes our policy, procedures and practices.
- We collect information as a way to further our mission to be a relentless force for a world of longer, healthier lives. The information you provide allows us to help you on a more personal level. We can better respond to your requests, understand your needs, and provide you the information and resources you need. We can also compare your information with the information of others we connect with to identify important trends. Harnessing this information has the potential to lead to breakthroughs in research, product and program development, and more effective services. And these breakthroughs can help lead to healthier lives for all.
- Unless you tell us otherwise, when you provide your information we assume you are agreeing to allow us to use and disclose it as allowed by law and AHA policies to deliver the programs you are involved with and in furtherance of our mission.
- We will comply with all U.S. laws and the laws of countries in which AHA has a business presence
- When we ask for certain types of sensitive information—such as health information—we will tell you how we intend to use and disclose that information.
- We will use—and require our data management vendors to use—reasonable and appropriate security practices to safeguard your information.
- If you change your mind about allowing us to use your information or have questions about our privacy practices, please use the contact options on our Contact Us page to let us know.
This privacy statement is an explanation of what we do with your information. As for why we do these things:
Information We Collect
Personal Information“Personal Information” means information that we can use to identify or contact you. It can also include health and other information you submit when you use our interactive tools and services. We may collect Personal Information in the following ways:
- When you visit or use our online donation and sales systems, whether web-based or mobile, we may collect your name, email address, mailing address, telephone number(s), account numbers, limited location information (for example, to help a mobile app determine the best means of connecting to the database or for shipping something you purchased), user name and password (so you can log in) and personal health information (such as within our health improvement apps);
- We may collect payment card or similar information when you provide it to us as part of a purchase;
- We may capture the IP address and ID of the device you use to connect to the online service, the type of operating system and browser you use, and information about the site you came from, the parts of our online service you access, the type of mobile device you use and the site you visit next (see also the Cookies, Tags & Remarketing Pixels information);
- When you register for or use certain interactive tools and services, many of our mobile Apps, or tools inside many of our Apps;
- When you sign-up for newsletters or other communications from us;
- When you participate in an online survey; or
- When you provide Personal Information in a community area or other public forum.
From time to time, we exchange or share our donor names and mailing addresses with other reputable organizations, predominantly other non-profit organizations, in order to maintain an active donor list to support our mission to be a relentless force for a world of longer, healthier lives. We have found this to be a cost-effective method of reaching additional potential donors. These other organizations are carefully screened and will not have continued access to your name and address unless you choose to respond to them directly. We do not share email addresses and health-related data. As a donor, you may at any time request that your information not be shared with these other organizations. To request that your information not be shared or otherwise change your preferences on how we contact you, please send a request using our online form or use the contact options on our Contact Us page.
We encourage children to participate in age-appropriate activities to promote longer, healthier lives. Although some AHA Sites allow children, with parental consent, to register and participate in certain activities through their schools and communities, we do not collect more information than is necessary to enable children to participate in these activities.
With parental consent, we may collect information from children under the age of 13 such as: name, address, email address, account information, school, messages sent to us through our chat interface, and content they create themselves. That information allows us to fulfill requested transactions, respond to questions about our website and programs, facilitate their participation in activities and other programs, keep records, or to otherwise customize or enhance the website experience for children. Children under the age of 13 may be able to make certain content such as content they create themselves visible to others or the public. This might include, for example, a webpage or parts of webpages operated by children that have been designed for group or public viewing, or photos of themselves involved in our programs or other activities.
We engage third-party service providers to help us develop and operate our web sites and Apps and to help us provide age-appropriate prizes and other rewards for children who participate in our activities. Our service providers include Blackbaud, Inc., Boundless Network, Inc., Charity Dynamics, Inc., Google LLC, Zuri, Mitek Systems, Inc., Ensenta Corporation, PMX Agency, and JotForm, Inc. If you have questions about the involvement of third parties in providing our services, including their privacy practices, please use the information at the bottom of this page to contact our offices by phone or email.
Regardless of what is displayed or submitted, parents can revoke their consent, request that information about their children be hidden or, in some cases, deleted, by contacting our offices by phone at the number at the bottom of this page or via email. When a parent revokes consent, we will stop knowingly collecting, using or disclosing information from that child. To comply with such a request, we must verify the identity of the requesting parent. To respect the privacy of parents, we dispose of information that is collected and used solely for obtaining verifiable parental consent or providing notice after a reasonable time after parental consent is declined or revoked.
Information from Other Sources
We may also collect information about you from additional online and offline sources including from social media activities, other nonprofits, and commercially available third-party sources. We may combine this information with the personal and other information we have collected about you.
How We Use Information We CollectWe use the information discussed above in a number of ways, such as:
- Processing donations and purchase transactions;
- Verifying your identity (such as when you access your account information);
- Preventing fraud and enhancing the security of your account or our online services;
- Responding to your requests and communicating with you;
- Managing your preferences;
- Performing analytics concerning your use of our online services, including your responses to our emails and the pages and advertisements you view;
- Providing you tailored content and marketing messages;
- Operating, evaluating and improving our programs (including developing new products and services; improving existing products and services; performing data analytics; and performing accounting, auditing and other internal functions);
- Complying with and enforcing applicable legal requirements, relevant industry standards, contractual obligations and our policies;
- Helping you understand your personal health information; and
- For any other purposes that we may specifically disclose at the time you provide or we collect your information.
We may also use data that we collect on an aggregate or anonymous basis (meaning it does not identify any individuals) for various purposes, where permissible under applicable laws and regulations, to help deliver products, services, and content that are better tailored to the users of our services and for other purposes.
What We Disclose to OthersWe may share the information we collect from and about you within our organization and with certain third parties. For example, we may share your information with:
- Credit card processing companies, to process your payments and donations;
- Our other websites in an effort to bring you improved service across our large range of products and services, when permissible under relevant laws and regulations;
- Other organizations we work with to provide services, research, products or programs;
- Other similar charities; and
Updating Your Information and Contacting Us with Questions
Keeping your account information and preferences up-to-date is very important. You may review your information, request that we exclude your information from any donor list exchange activity, request that we stop using it, or update certain account information by logging in and accessing the account profile section of each online service for which you have registered. If you cannot locate, access or make changes to the information or permissions online, you may send a request using our online form or use the Contact Us options on our site. Of course, we cannot track down “de-identified” information to change it or undo any prior use of data we already used with your actual or implied consent.
Changes to This Privacy Statement
Other Privacy Policies and Practices
This Privacy Statement describes our practices related to our most common data collection activities. We have other policies, procedures and statements that apply to other activities and programs. If you have a question about privacy protections related to “offline” programs, please contact the program staff or use the contact options on our Contact Us page.
Our network is composed of access controlled measures, security monitoring tools, vulnerability management program, SSL encryption, scheduled network scans, and internal and external penetration tests. When it is necessary for our service providers to have access to your information, we expect the same level of data security, integrity and confidentiality standards as the AHA itself provides. Additionally, we conduct security awareness training for our staff and volunteers.
While the AHA uses its best efforts to maintain this level of security across all of our systems we cannot guarantee or warrant that our systems or our service providers are not vulnerable to viruses, hacking or other security threats.
Cookies, Tags & Remarketing Pixels
A cookie is a small piece of text sent to your browser by a website you visit. It helps the website to remember information about your visit, like your preferred language and other settings. Cookies are also used by web sites for authenticating users, tracking a user’s session, and/or for storing other essential textual information. AHA tracks your interests on our sites so that we can provide you with additional content that might be of importance to you. Providing you with fresh and engaging content is important to us, as we know it is important to you.
We use tools, cookies and services such as AdWords, DoubleClick and Google Analytics, and Hotjar for tracking, reporting and analyzing website activity. Some cookies are used to measure conversion events. Pixel tags might be used together with some of the advertising cookies described above, to operate, evaluate, and improve our programs, and to perform data analytics, accounting, auditing, and other internal functions.
We also use AddThis, a service provided by Oracle America, Inc., to help add social networking and content sharing features to our web sites.
We do not run interest-based advertising campaigns that collect personally identifiable information including, but not limited to, email addresses, telephone numbers, and credit card numbers, nor do we use or associate Personal Information with remarketing lists, cookies, data feeds, or other anonymous identifiers. We do not use or associate targeting information, such as demographics or location, with any Personal Information collected from the ad or its landing page. AHA does not share Personal Information with Google through our remarketing tag or our product data feeds that might be associated with our ads. AHA will not send Google precise location information without obtaining your consent.
To see how Google may use information collected through your use of Google's search services visit Google’s Ads Help Center.
If you want to opt out of Hotjar’s creating of a user profile, Hotjar’s storing of data about your usage of our site, and Hotjar’s use of tracking cookies on other websites by following Hotjar's opt-out link.
To opt out of cookies or remarketing pixels by Network Advertising Initiative member companies (not all members support cookie preferences for all browsers), please visit the Network Advertising Initiative opt-out page.