Privacy Policy

Craft3 (“Craft3”, “we”, or “us”) is a Washington nonprofit organization that can be contacted at Craft3, PO Box 530233, Atlanta, GA 30353-0233.

‍

In this policy, “Craft3” also refers to Craft3 staff, board members, cooperating attorneys, consultants, or others who are bound by law or contract to keep confidential information they receive as part of their assistance to Craft3.

‍

Craft3’s headquarters is in the State of Washington in the United States, and therefore will transfer, process, and store your information in the State of Washington, which may not provide as much protection as your home country or state. Craft3 makes loans supporting communities in Oregon and Washington, and we generally do not make loans to residents of other states.

‍

We are committed to protecting the privacy of visitors to our website (craft3.org, the “Website”), as well as our borrowers, vendors, and partners. Craft3 has established this Privacy Policy to explain what information we collect through our website and applications, how the information is used, and how personal information received through our website is protected.

While using our website and the various resources, features, functionality, or services made available on it (collectively the “Application”), you may provide us with anonymous information, personal information, and additional materials.

You provide us and we may collect anonymous information such as your IP address (which may reveal location information about you or your internet service provider), browser information, identifiers related to the computer or mobile devices you use to access the website or Application, whether or not you clicked on links, as well as other demographic, aggregated, or de-identified data. We use technologies such as cookies to collect this information. A cookie is data stored on your computer. We use both temporary (like session ID that confirms login) and persistent (help with future logins and remembering your preferences) cookies. You can configure your browser to block cookies, but if you do, the Application may not function properly or at all. If you choose to click on a link to any outside website, anonymous information may be provided to that website.

‍

We use third-party platforms (Google Analytics and HubSpot) to help analyze how users use the website and the Application. These platforms use cookies to collect information about how often users visit the website, what pages they visit, and what other sites they used prior to coming to the website. We use the information we get from these platforms only to improve our website, the Application, and services we may offer to you. These platforms only collect your IP address instead of any name or personally identifying information. These platforms use cookies that only they can use, and their information about your visits to Craft3’s website is restricted by their applicable Terms of Use and Privacy Policies.

‍

Depending on how you interact with us, we will use your data for different purposes, as follows:

‍

To handle your registration with Craft3. If you decide to register with us and create an account, we will use your data to handle your registration.

‍

To respond to your questions and claims. If you contact us to ask any questions or raise a claim, we will use your personal information to respond to your questions or to handle your claims.

‍

To receive and review your loan application. If you begin a loan application or submit a completed loan application to us, we will use your personal data to review, underwrite, and evaluate your loan application or communicate with you regarding an application in progress, as well as marketing, offering, or providing other products and services to you. We may also provide your information (in aggregate and de-identified form) to funding partners to help them understand their actual and potential impacts and programs.

‍

To notify you of Craft3 news. If you provide your email address through the website or Application, we may use your email address to contact you and notify you of any Application or Craft3 news. We may also contact you regarding your loan application, or request additional information regarding your loan application. You can choose to opt-out of such emails on our website. Generally, you cannot opt out of receiving certain communications that are inextricably linked to the Application, such as service-related announcements and administrative messages, except by terminating your account.

‍

To improve our website and your Application experience. You may view different parts of the website or the Application, and we will use any data we receive from you to provide better products or services to you, and to administer, maintain, develop, and improve the website and the Application. 

‍

If you receive a loan from Craft3. During the loan process, we may reserve the right to sell that loan to another financial institution or organization. If your loan gets sold under such circumstances, we also reserve the right to confidentially disclose and transfer your personally identifiable and company information in connection with such sale. We may also use your information in servicing your loan, reporting to credit bureaus, managing credits or accounts, performing or complying with regulatory or oversight functions, and communicating with you.

‍

Craft3 does not sell or rent applicant, borrower, donor, or website visitor information under any circumstances, and we do not share applicant, borrower, donor, or website visitor information without prior consent except as compelled by law. You agree that if we comply with such requests in good faith, Craft3 will not be liable for any resulting disclosure, retention, or treatment. This restriction applies to applicants, borrowers, donors, and applicants who contact Craft3 both online and offline. 

You can delete your account at your user profile page, but deletion will not remove information you have entered into or received from the Application. You can edit your personal information to ensure that it is correct and up to date. You may delete your information from the Application if you have not submitted a loan application to Craft3 via the website.

Information regarding loans and loan applications (including in process, submitted, declined, and approved) is kept for a minimum of 7 years, and may be kept longer depending on applicable legal and regulatory requirements.

‍

For other information, we will generally only retain your information as long as it is necessary to perform our contractual obligations, answer your questions, handle your claims, or continue improving our website, services, or Application. We may also keep your data for some additional time in case we need it in relation to any liabilities that may arise in connection with the use of your data, as permitted by applicable law.

Craft3 does not offer services to, or knowingly collect or solicit information from, anyone under the age of 18. If you are under 18, do not provide us with any information. Any information we receive from people we believe to be under 18 will be purged from our systems.

Our website provides links to or interacts with third-party websites, including social media sites, donation platforms, or media hosting sites. Craft3 is not responsible for, and does not have any control over, the privacy practices or content of such third parties.

‍

We encourage users to read the privacy policies of any website visited via links from or interactions with the Craft3 website.

If you choose to use our website or the Application, your use is subject to the current Terms of Use and Privacy Policy. We reserve the right to change this Privacy Policy from time to time. If we do make changes, we will do our best to notify you of the changes, such as by posting any changes on the Application and indicating the date the changes were made in the Privacy Policy. Material changes are effective 15 days after posting. Unless stated otherwise, our current Privacy Policy applies to all information in our possession.

Craft3 employs industry standard security measures to protect against the loss, misuse, or alteration of the information under our control, including appropriate technical and organizational measures to ensure a security level appropriate to the risk, such as encryption of personal data, data backup systems, and engaging security professionals to evaluate our systems effectiveness.  Craft3 has turned on HTTPS by default.

‍

Although we make good faith efforts to store information collected by Craft3 in a secure operating environment, we cannot guarantee complete security.

You can choose to opt out of receiving marketing emails from Craft3 by clicking on the “unsubscribe” link in any such email. Your unsubscribe or email preference change will be processed promptly, and in no event longer than 10 business days. Alternatively, you can contact us or reach us at the contact information provided at the beginning of this Privacy Policy.

January 19, 2023 Policy completely overhauled to focus on clarity, readability, and compliance with evolving standards and law.

‍

May 31, 2019 Policy revised and updated.