Privacy Policy

01Who we are

Collective Impact (“Collective Impact,” “CI,” “we,” “us”) is a San Francisco civic innovation company that brings together community, business, government and philanthropic partners to strengthen local places and connection. Collective Impact is the trade name of Collective Impact Network LLC.

This Privacy Policy explains what personal information we collect through collectiveimpact.co and related pages, newsletters, forms and events (together, the “Site”), how we use and share it, and the choices you have. It also covers our programs and initiatives when you engage with them through the Site, including Beyond Homeless, the Connection Fund, and Chamber of Connection San Francisco.

By using the Site, you acknowledge this Policy. If you do not agree with it, please do not use the Site.

02Information we collect

We collect only what we need to run our programs and stay in touch with our community.

We do not knowingly collect sensitive personal information such as Social Security numbers, health information, or financial account numbers through the Site. Please do not send it to us.

03How we use information

We use personal information to:

• Respond to inquiries and requests you send us
• Send newsletters, event invitations and updates you’ve signed up for
• Run our programs, convenings and memberships, including Beyond Homeless and Chamber of Connection
• Connect partners, property owners, businesses and community organizations when you’ve asked us to
• Deliver our consulting and advisory services, and manage client contracts, invoices and payments
• Understand how the Site is used so we can improve it
• Keep the Site secure and prevent fraud or misuse
• Meet legal, tax and reporting obligations

We may combine information you give us with information from your use of the Site to keep our records accurate and our communications relevant. We may use de-identified or aggregated information (which can’t reasonably identify you) for reporting to clients, funders and partners.

04How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only in these situations:

• Service providers. Vendors that help us run the Site and our work, such as website hosting, email and newsletter platforms, CRM, forms, scheduling, analytics and payment processing. They may use it only to provide services to us.
• Program partners, with your direction. When you ask to be connected to a partner, or join a coalition or convening, we share what’s needed for that purpose. Coalition participant lists are shared with other participants only if you’ve agreed.
• Funders, in aggregate. We report program results to funders using aggregated or de-identified data, not individual contact details, unless you’ve agreed otherwise.
• Legal and safety reasons. To comply with law, subpoena or court order; to protect the rights, property or safety of CI, our community or others.
• Business transfers. If CI is involved in a merger, acquisition, financing, reorganization or sale of assets, information may transfer as part of that transaction, subject to this Policy.
• With your consent. For any other purpose we tell you about when we ask.

05Cookies, analytics and tracking signals

The Site uses cookies and similar technologies to keep it working, remember your preferences and understand how visitors use it. We use them for:

• Essential functions, such as security and form submissions
• Analytics, through PostHog, to see which pages are visited and how people find us. These run only if you accept them in the cookie banner, and you can change your choice any time under Cookie settings at the bottom of every page.
• Email and CRM tracking, through HubSpot and Substack, to know whether a newsletter was opened or a link was clicked

We do not use advertising cookies or allow ad networks to track you across other sites. You can block or delete cookies in your browser settings; some Site features may not work without them.

Global Privacy Control and opt-out signals. If your browser sends a Global Privacy Control (GPC) or similar opt-out preference signal, we treat it as a request to opt out of any sale or sharing of your information for that browser. Because we don’t sell or share data for advertising, the practical effect is that we won’t start doing so for you. On the Site, GPC also turns analytics off, the same as declining them in the cookie banner.

Do Not Track. Some browsers send a “Do Not Track” signal. There is no common standard for responding to it, so the Site does not change its behavior in response to DNT. We honor GPC as described above.

06Third-party services and links

Some features of the Site are provided by third parties that may collect information directly from you under their own privacy policies. These currently include:

The Site may also link to partner, coalition and news sites we don’t control. We are not responsible for their privacy practices, and we encourage you to read their policies.

07Your choices and rights

You can, at any time:

• Unsubscribe from emails using the link at the bottom of any message, or by emailing us
• Ask to see the personal information we hold about you
• Ask us to correct information that’s inaccurate or out of date
• Ask us to delete your information, subject to records we must keep for legal, tax or accounting purposes
• Opt out of sale or sharing — we don’t do either, but you may still send a request or use GPC

To make a request, email hello@collectiveimpact.co with the subject line “Privacy Request.” We may need to verify your identity before acting on it, and we will respond within 45 days. You may use an authorized agent with your written permission. We will not treat you differently for exercising these rights.

California residents. Under California’s “Shine the Light” law (Civil Code § 1798.83), you may ask whether we disclosed personal information to third parties for their own direct marketing in the prior year. We do not make such disclosures. If you would like confirmation, contact us at the address below.

08How long we keep information

We keep personal information only as long as we need it for the purposes above. Newsletter and contact records are kept until you unsubscribe or ask us to delete them. Billing and transaction records are kept for at least seven years to meet tax and accounting requirements. Site analytics are kept in aggregated form.

09How we protect information

We use reasonable administrative, technical and physical safeguards, such as access controls and encrypted connections (HTTPS), and we limit access to staff and vendors who need it. No method of transmission or storage is completely secure, so we can’t guarantee absolute security. If a breach affects your information, we will notify you as required by law.

10Children’s privacy

The Site is intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 for California residents). If you believe a child has given us information, contact us and we will delete it.

11Visitors outside the United States

CI is based in California and the Site is hosted in the United States. If you visit from another country, your information will be processed in the U.S., where data protection laws may differ from those in your country.

12Changes to this Policy

We may update this Policy as our programs, tools or the law change, and we will review it at least once a year. We will post the updated version here with a new “Last updated” date. If we make material changes, we will also notify subscribers by email or post a notice on the Site before the changes take effect.

13Contact us

Questions or requests about this Policy or your information: