Privacy Policy North America
At Blackbaud, we are committed to protecting your privacy. This Policy applies to Blackbaud’s collection and use of personal data in connection with our marketing and provision of the Blackbaud Solutions, customer support and other services (collectively, the “Services”), for example if you are a customer, visit the website, interact with us at industry conferences, or work for a current or prospective customer of the Services. In addition, our service Target Analytics® collects data on individuals in the United States to provide non-profit customers with accurate information on their prospective constituents in the Social Good space. You can read more about our privacy practices for Target Analytics® below. The Services don’t include JustGiving, which has its own privacy policy. The terms “personal data” or “personal information” refer to information that can reasonably identify an individual.
If you’re a constituent, supporter, patient, or student of one of our customers to which we provide the Services, your data will be used in accordance with that customer’s privacy policy. You can read more about this at https://kb.blackbaud.com/knowledgebase/articles/Article/200862. In providing the Services, Blackbaud acts as a service provider and thus, this Policy will not apply to constituents of our customers.
Collection and Use of Personal Information
We collect personal data that you provide to us, either by creating a Blackbaud account, using the website, submitting ‘Contact Us’ forms, or otherwise interacting with us (like at conferences and trade shows). Generally, this information is requested when you are asked to register for a Blackbaud ID, subscribe to e-mail newsletters, complete an online form, download resource information, or when requesting information about or purchasing our Services.
We may collect data about you from third parties. As is typical for businesses that market their products to other organizations, sometimes we obtain your work contact information from third party data suppliers or joint marketing partners to contact you with communications containing promotions, customer stories, Blackbaud news and updates or thought leadership. We may also get your information from publicly-available sources and social networking sites, like LinkedIn or your organization’s website. Blackbaud collects data in the following categories:
| Categories | Examples |
|---|---|
| Identifiers | Name, postal address, email, IP address |
| Commercial or transactions information | Your organization’s purchase of our Services |
| Internet/Solutions activity | Your interaction with our websites or Solutions |
| Professional information | Role at your organization |
In addition to the purposes described when we collect data from you, we may use your personal information in the following ways:
- Log In: Using your Blackbaud-associated login (such as Blackbaud ID), we allow you to sign into the secure portion of our website or a Blackbaud Solution. We also use your data to give you access to the Blackbaud Community, where we may notify you of important news and alerts about our Services. For more information about Blackbaud ID, please see https://www.blackbaud.com/company/privacy-policy/blackbaud-id.
- Information Requests: We send you information you request about the Blackbaud Services.
- Marketing Communications: We may contact you about promotions, customer stories, Blackbaud news and updates, or thought leadership content. We may send these communications via email or postal mail, call your organization, or serve you advertisements on our website and others. If you would no longer like to receive such emails, please follow the “Unsubscribe” instructions at the end of each email. Your e-mail address will be removed from our marketing list. Please allow us a reasonable period of time in order to satisfy your request, as some promotions may already be in process. To opt out of being contacted by any other communication methods, please contact us at webmaster@blackbaud.com.
- Customers: If you’re a Blackbaud customer, we may use your personal data to provide Services you request and in connection with payments.
- Improving Blackbaud: We use aggregated and personal data about you and/or your constituents’ use of our websites and the Blackbaud Services to develop, improve, and test those services.
- Compliance and Safety: We may use your personal data to comply with our legal obligations and to identify and remediate suspected or actual fraudulent activity or security incidents. We keep your personal information in an identifiable form for as long as we have a legitimate reason to use the data and as required by law.
Blackbaud may share your personal information as necessary to provide the Services or as you specifically request. We may disclose your data to our affiliated organizations and subsidiaries, and to service providers who render services to us or you on our behalf. We also may disclose your information if required by law or to enforce our legal rights or defend us against a legal claim or for the identification or remediation of suspected or actual fraudulent activity or security incidents. We may share your information in connection with a sale or reorganization of Blackbaud. We may also share your personal data if it is necessary to act in urgent circumstances to protect the safety of Blackbaud customers, website visitors, or the public.
Except as described below for Target Analytics®, Blackbaud doesn’t sell any of your personal information, or share your personal information with any third parties for targeted behavioral advertising. We also don’t collect, use, or disclose any sensitive personal information, as defined under applicable state or federal law.
Information about opting out of the sale or sharing of your personal information can be found below and at
https://www.blackbaud.com/company/Data-Subject-Rights-Request.
Access to your Personal Information
If you are a registered user of our website, you may review and update this information at any time on www.blackbaud.com. Registered users can view and edit personal information they have already given us.
Information Collected from Children
Blackbaud’s websites are general audience sites, and we do not knowingly collect information about children or sell products to children under the age of 13. If you are under the age of 13, you must ask your parent or guardian to assist you in using our website. Furthermore, we may restrict entries to any contests, sweepstakes or promotions to entrants who are at least 18 years of age. We certainly don’t sell data of children under 16.
Security of your Personal Information
We restrict access to personal information collected about you at our website to our employees, our affiliates’ employees, those who are otherwise specified in this Policy or others who need to know that information to provide the Services to you or in the course of conducting our business operations or activities. While no website can guarantee exhaustive security, we maintain appropriate physical, electronic and procedural safeguards to protect your personal information collected via the website. We protect our databases with various physical, technical and procedural measures and we restrict access to your information by unauthorized persons. We also advise all Blackbaud employees about their responsibility to protect customer data and we provide them with appropriate guidelines for adhering to our company’s business ethics standards and confidentiality policies. Inside Blackbaud, data is stored in password-controlled servers with limited access.
Links to Other Websites
For your convenience, we may provide links to other websites that we do not control. We cannot be responsible for the privacy practices of any websites not under our control and we do not endorse any of these websites, the services or products described or offered on such sites or any of the content contained on those sites.
Use of Cookies
A cookie is a piece of information that a web server may place on your computer when you visit a website. Cookies are commonly used by websites to improve the user experience and have not been known to transmit computer viruses or otherwise harm your computer. Many cookies last only through a single website session, or visit. Others may have an expiration date, or may remain on your computer until you delete them.
We may use cookies for a number of purposes—for example, to maintain continuity during a user session, to gather data about the usage of our website for research and other purposes, to store your preferences for certain kinds of information and marketing offers or to store a user name or encrypted identification number so that you do not have to provide this information every time you return to our website. To ensure we are publishing content customers need and want, Blackbaud collects aggregated site-visitation statistics using cookies. When someone visits the site, a cookie is placed on the customer’s machine (if the customer accepts cookies) or is read if the customer has visited the website previously.
Our cookies will track only your activity relating to your online activity on this website, and will not track your other Internet activity.
You can decide if and how your computer will accept a cookie by configuring your preferences or options in your browser. However, if you choose to reject cookies, you may not be able to use certain of our Services or website features. For example, if you choose to not have your browser accept cookies from Blackbaud’s website, you will need to re-enter your personal information each time that you attempt to access premium information.
Certain pages on our websites contain “web beacons” (also known as Internet tags, pixel tags and clear GIFs). These web beacons allow third parties to obtain information such as the IP address of the computer that downloaded the page on which the beacon appears, the URL of the page on which the beacon appears, the time the page containing the beacon was viewed, the type of browser used to view the page, and the information in cookies set by the third party.
An IP address is a unique identifier that certain electronic devices use to identify and communicate with each other on the Internet. When you visit our website, we may view the IP address of the device you use to connect to the Internet. We use this information to determine the general physical location of the device and understand from what regions of the world our website visitors come. We also may use this information to enhance our website.
Our website detects and honors the Global Privacy Control signal in accordance with applicable privacy laws. The Global Privacy Control is a signal that can be enabled in certain browsers or browser extensions.
Contests, Sweepstakes and Other Promotions
On our website, you may wish to participate in contests, sweepstakes and other promotions that we may offer from time to time. Through these promotions, you may choose to participate in activities such as sharing information found on our websites with others and sending email invitations. If you choose to participate in these promotions, and are eligible to do so, we may ask you for information such as your name, email address, date of birth and telephone number.
In connection with any contests, sweepstakes and other promotions that we may offer from time to time via the website, we use the information you provide to administer the contests, sweepstakes and other promotions. We also may use the information to communicate with you, or the other people you select, about our products and services or our partners may use such information to communicate with you about the contests, sweepstakes or other promotions or their products and services. As mentioned above, if you create a profile and submit an entry in connection with a contest or promotion, your name, profile and entry, but not your email address, phone number and age, will be visible to other website users.
Target Analytics®
Target Analytics® provides data intelligence to nonprofit customers to help them identify and engage constituents to support their missions. This business collects personal information from data compiling companies, non-private websites containing publicly available information, and government entities. We only collect data on US individuals at least 18 years old.
For Target Analytics®, we collect the following categories of personal information:
| Categories | Examples |
|---|---|
| Personal and Online Identifiers | Name; alias; postal address; email address; or similar identifiers. |
| Categories of personal information described in Cal. Civ. Code § 1798.80(e) and § 1798.140(v)(1) | Physical characteristics or description; Telephone number. |
| Commercial or transactions information | Examples include records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
| Internet or other electronic network activity information | Examples include online interests, such as information about categories of consumer interests derived from online usage; and information on a consumer’s interaction with a website, application, or advertisement. |
| Professional or employment-related information | Examples include current or past job history. |
| Inferences about your predicted characteristics and preferences | Examples include inferences drawn to create a profile about you reflecting your preferences, characteristics, behavior, attitudes; and median age, wealth rating and median income. |
| Other information about you that is linked to the personal information above | Examples include any personal information not captured by one of the enumerated categories of personal information listed above that may be linked to the personal information above. |
We collect this data for business purposes of internal research, internal operations, auditing, detecting security incidents, debugging, short-term and transient use, fulfilling and improving our Services, quality control, and legal compliance. We also collect this data for commercial purposes—to share such information with our nonprofit customers. We sell the foregoing categories of information to nonprofit organizations.
Information about opting out of the sale or sharing of your personal information can be found below and at https://www.blackbaud.com/company/Data-Subject-Rights-Request.
We don’t collect, use, or disclose any sensitive personal information, as defined under state or federal law.
We also disclose the foregoing types of data to our service providers for the purposes of rendering services to us.
We keep your personal data in an identifiable form for as long as we have a legitimate reason to use the data and as required by law.
Consumer Privacy Rights Requests
Certain US state laws, including the California Consumer Privacy Act and the Colorado Privacy Act, afford consumers in those states additional privacy protection.
The additional privacy protections provided by those laws include: the right to know what information we collect, disclose, and sell; the right to access a copy of your data; the right to request deletion or correction of your data; and the right to opt out of the sale of your data or the sharing of your data for purposes of targeted behavioral advertising. Businesses can’t discriminate against you for exercising any of these rights.
In the sections above titled “Collection and Use of Personal Information” and “Target Analytics®,” we have included descriptions of: the data we collect; the categories of sources of such information; the purposes for which we use, sell, share, and disclose the data; the types of data we sell and the categories of third parties to whom the data is sold; and the disclosure of data to third parties for business purposes.
Blackbaud does not sell your personal information, except as set forth in the “Target Analytics®” section.
To exercise any of your privacy rights, please see our Data Subject Rights Requests page at https://www.blackbaud.com/company/Data-Subject-Rights-Request, or call our toll-free number at +1 844-532-0022. We will verify your identity where required prior to fulfilling your request, which may require government identification. Authorized agents may be used to submit rights requests, in which cases we will take steps to verify the consumer’s identity and that the agent has authority to act on the consumer’s behalf.
California Disclosure of Privacy Rights Requests
California requires Blackbaud to disclose data on California resident privacy rights requests submitted via Blackbaud’s Data Subject Rights Request page at https://www.blackbaud.com/company/Data-Subject-Rights-Request, or through our toll-free number at +1 844-532-0022.
When submitting a request, consumers select their state of residence, which allows Blackbaud to determine whether someone is a California consumer.
This notice is updated annually. As of July 2024, we updated the metrics for requests between January and December 2023.
2023
| Request Type | Delete | Know or Access** | Opt-out of Sale or Sharing |
|---|---|---|---|
| Complied with in whole or in part | 42 | 2 | 459 |
| Denied* | 1 | 3 | 60 |
| Median response time | 12 | 22 | 10 |
| Mean response time | 10 | 17 | 10 |
* Requests were denied in 2023 due for the following reasons:
- The request was not verifiable: 42
- The request was not made by a consumer: 0
- The request called for information exempt from deletion: 21
- The request was denied on other grounds: 22
**Blackbaud responds to any request to know or access with 1) what personal information is collected and 2) what personal information was sold or shared and to whom, so the numbers are the same for each category.
As noted above, we do not collect, use, or disclose any sensitive personal information. Therefore, we do not offer consumers a way to limit the use of their sensitive data.
De-Identified Data
Blackbaud will maintain and use de-identified data only in a de-identified form and not attempt to re-identify de-identified data.
How to Reach Us
For questions about this Policy or our privacy practices, or to appeal a decision we’ve made regarding your privacy rights where applicable, please email privacy@blackbaud.com.
Transfer of Personal Data to the United States
Blackbaud is headquartered in the United States of America. When Blackbaud collects personal data of individuals located in the European Union, United Kingdom, or Switzerland, we may transfer such data to the United States. If you are a resident of a country other than the United States and provide us with your information, you consent to the transfer of your data into the United States.
Blackbaud has self-certified to the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework (collectively, the “Data Privacy Framework”). For detailed information about our certification and adherence to the Data Privacy Framework, please see our Blackbaud Data Privacy Framework Certification Notice at https://www.blackbaud.com/blackbaud-data-privacy-framework-certification-notice.
Changes to this Policy
Blackbaud may update this Policy at any time and from time to time and we will post any changes to this page. The most recent version of the Policy is reflected by the version date located at the bottom of this Policy.
Last updated August 29, 2024