Privacy Policy

1. Introduction and Scope

• Purpose: This policy explains how The ASL Impact Program collects, uses, and protects user data.

• Effective Date: 9/01/2025

2. Information We Collect

• Information You Provide to Us:

  • Contact information (Name, Email, Phone Number) from newsletter sign-ups or general inquiries.

  • Donation/Payment Information (Collected via third-party processors, e.g., Stripe, PayPal—clarify that you do not store full credit card numbers).

  • Application/Professional Information (For interpreter and intern applications).

• Information Collected Automatically (Usage Data):

  • IP address and browser type.

  • Pages viewed, time spent on the site, and referral sources (via analytics).

3. How We Use Your Information

• To process and acknowledge donations.

• To send updates, newsletters, and communications about our mission and programs.

• To process and evaluate applications for employment or internships.

• To improve our website functionality and user experience (using anonymous usage data).

• For internal record-keeping and statutory reporting (as a non-profit).

4. Sharing Your Information

• Third-Party Service Providers: Wix, Google, Apple Pay, Zeffy.

• Legal Requirements: This data may be disclosed if required by law (e.g., subpoenas, court orders).

• The ASL Impact Program does not sell personal data to third parties.

5. Cookies and Tracking Technologies

• What is a Cookie? A cookie is a small text file stored on your device by a website that acts as a memory, allowing the site to recognize you during current and future visits. This stored information is mainly used for session management (like keeping you logged in) and remembering your personalized preferences.e.

• Types Used: Essential, functional, and analytical cookies.

• User Control: A user can manage cookies primarily through their web browser's settings, which offers control over how websites store data. These options are typically found under a browser's Settings or Preferences menu, within the Privacy and Security section.

6. Data Security

• Core Security and Compliance

  • Data Encryption: They use HTTPS/TLS 1.2+ and automatic SSL certificates for data in transit, and AES-256 (an industry standard) for data at rest. Sensitive data within their Payment Card Industry (PCI) environment uses a FIPS 140-2-certified Hardware Security Module (HSM).  

  • Global Compliance: Wix maintains certifications and compliance with major global standards, including:  

  • PCI DSS Level 1 (the highest standard for handling credit card data).  

  • SOC 2 Type 2 and SOC 3 certifications.  

  • Various ISO certifications (e.g., ISO 27001 for information security management).  

  • Compliance with GDPR, CCPA, and LGPD privacy regulations.  

• Threat Detection and Response

  • 24/7 Monitoring: A dedicated Security Operations Center (SOC) team works around the clock, using advanced System Information and Events Monitoring (SIEM) tools.  

  • Anti-DDoS Protection: They have systems in place for immediate detection and response to Distributed Denial of Service (DDoS) attacks.  

  • Vulnerability Testing: They regularly perform penetration tests and maintain a bug bounty program that rewards independent security researchers for finding and reporting vulnerabilities.  

• Platform and Account Security

  • Secure Infrastructure: Wix services are hosted on secure, cloud-based data centers like AWS and Google Cloud Platform.  

  • Account Features: They offer security features for users to implement, such as:

  • Two-Factor Authentication (2FA) for added account protection.  

  • Roles & Permissions for site owners to control access for collaborators.  

  • Password hashing, meaning they store a scrambled version of your password rather than the original password itself.

• NOTE: No internet transmission is 100% secure.

7. Your Rights and Choices

• Opt-Out: Users may easily unsubscribe from receiving emails and newsletters by sending an email request to info@aslimpact.org.

• Access/Correction: How users can request to see or correct the data you hold about them.

• This site is hosted by Wix and therefore does not honor "Do Not Track" signals.

8. Changes to This Policy

• This policy may be updated at any time, and the date of the latest revision will be clearly noted.

9. Contact Us

• For more information about our Privacy Policy contact us at info@aslimpact.org.