Network for Good

Network for Good is a donations processor and service provider for non-profit organizations.

4.6/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? Yes

0/10

Does the service allow you to permanently delete your personal data? Yes, by contacting someone

3/5

Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.

Score

Yes, by contacting someone

60%

Yes, using an automated mechanism

100%

N/A

The service doesn't collect any personal information.

100%

Citation

If you would like to access, modify, correct, or delete your personal information, please contact us via the methods listed in the “Contact Us” section below. When you contact us, you may be required to provide us some details to verify your identity in this case. We may not accommodate a request to change or delete information if we believe the change would violate any law or legal requirement, cause the information to be incorrect, or we are unable to verify your identity. In addition, if you have provided your information to the charity or charities you supported through Network for Good in accordance with this Privacy Policy, you may need to contact that charity instead, if the relevant personal information is only accessible by that charity. If we have received your information from a third party, we may not be able to modify, correct or delete your information.

Does the service allow third-party access to private personal data? Yes, all parties specified (including non-critical service providers such as advertisers)

3/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Notes

See section on “How We Share Your Information”.

For advertising and/or analytics, Network for Good shares personal data with Bing (Microsoft), Crazy Egg, Facebook, FullStory, Google Analytics, Linkedin.

When does the policy allow law enforcement access to personal data? When reasonably requested

3/5

Score

Always

This includes cases in which law enforcement either runs the service or has a known backdoor into (or relationship with) the service.

Not specified

When reasonably requested

60%

Only when required by a court order or subpoena

80%

N/A (no personal data to share)

The service would have no personal data to share with law enforcement.

100%

Never (special legal jurisdiction)

The service operates in a jurisdiction in which sharing data with law enforcement is never required.

100%

Citation

We also may disclose your personal information to third parties if we have reason to believe that disclosing such information is necessary to conduct investigations of possible breaches of law, to cooperate in any legal investigation, or to identify, contact, or bring legal action against someone who may be violating any agreement with us, including our Terms & Conditions.

Transparency

Does the policy outline the service's general security practices? Yes

2/3

Score

Somewhat

The policy provides only a very vague overview of its security practices.

30%

Yes

60%

Yes, including audits

"Reviews," "monitoring," etc. also count as audits.

80%

Yes, including independent audits

Independent "reviews," "monitoring," etc. also count as independent audits.

100%

N/A

The service doesn't collect any personal information.

100%

Citation

We take reasonable security precautions to protect the personal information that we collect and you provide to us. We meet commercially reasonable standards for online payment protection. We use up-to-date industry-accepted tools and technology protocols, including but not limited to, firewalls and encryption, to protect against the loss, misuse and unauthorized alteration of the information we collect. Network for Good helps to protect your information by working with our service providers who provide a secure and safe environment for credit card donations. Please remember that the safety and security of your information also depends on you. Where we have given you (or you have chosen) a logon ID or password to access certain services or areas of the Websites, you are responsible for keeping this ID and/or password confidential. We ask that you not share such information with anyone or allow anyone to sign-in using your credentials.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to us. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we put in place for your protection.

[…]

We will protect the privacy and security of personal information according to this Privacy Policy regardless of where it is processed or stored.

Is the policy's history made available? Only the date it was last modified

3/5

Does the policy require users to be notified in case of a data breach? Not necessarily

0/7

Will affected users be notified when the policy is meaningfully changed? Yes

5/5

Collection

Does the service collect personal data from third parties? Yes

0/10

Is it clear why the service collects the personal data that it does? Yes

10/10

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? On an opt-out basis, for all non-critical data/uses

6/10

Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.

Score

On an opt-out basis, but only for some non-critical data/uses

30%

On an opt-out basis, for all non-critical data/uses

60%

On an opt-in basis

60%

N/A (no data used for non-critical purposes)

100%

Citation

Visitors can opt-out of Google Analytics for Display Advertising, customize Google Display Network ads using Google’s Ads Settings page.

[…]

Visitors can customize their Linkedin advertising settings using Linkedin’s Ads Settings page.

Visitors can customize their Facebook advertising settings using Facebook’s Ads Settings page.

Visitors can customize their Bing advertising settings using Bing’s Ads Settings page.

[…]

When you, if a nonprofit, submit your organization’s contact information to sign up for an account with Network for Good, you agree and consent that Network for Good may send your organization communication relating to our products, events, or other business information. Please contact us via the methods listed in the “Contact Us” section below to opt out of receiving such communication or you may opt out by clicking on the “unsubscribe” link at the bottom of our emails.

Does the policy list the personal data it collects? Yes, generally

7/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Notes

See section on “What Information Do We Collect?”

Last Updated

June 24, 2020

Sources

Source #1 ↗

Contributors

4Iufy