HUMAN RIGHTS FIRST

Welcome to Human Rights First, a 501(c)(3) international human rights organization. This Privacy Notice explains how Human Rights First ("HRF", "we", "us", or "our") collects, uses, discloses, and otherwise processes personal data in connection with HRF's ReadyNow application and services or applications that reference or link to this Privacy Notice.

This Privacy Notice does not address our privacy practices relating to Human Rights First's job applicants, employees and other employment-related individuals, nor data that is not subject to applicable data protection laws (such as deidentified or publicly available information). This Privacy Notice is also not a contract and does not create any legal rights or obligations not otherwise provided by law.

Our Collection and Use of Personal Data

The categories of personal data we collect depend on how you interact with us and our services. For example, you may provide us your personal data directly when you register for an account, submit a contact form on our website, or otherwise contact us or interact with us.

We also collect personal data automatically when you interact with our websites and other services and may also collect personal data from other sources and third parties.

Personal Data Provided by Individuals

We collect the following categories of personal data individuals provide us:

• Contact and Identification Information, including first and last name, phone number, email address, A-number, mailing address, and communication preferences. We use this information primarily to fulfill your request, to communicate with you directly, and to send you communications in accordance with your preferences.
• Account Information, including first and last name, email address, phone number, account credentials or one-time passcodes. We use this information primarily to administer your account, communicate with you regarding your account, and for customer support purposes.
• Emergency Plan Information, including information about your legal and personal support contacts, and the communications you choose to send them in the event of an emergency.
• Feedback and Support Information, including the contents of custom messages sent via chat platforms, email addresses, or other contact information we make available to users. We use this information primarily to investigate and respond to your inquiries, to communicate with you via online chat, email, phone, text message or social media, and to improve our services.

If you choose to contact us, we may need additional information to fulfill the request or respond to your inquiry. We may provide additional privacy disclosures where the scope of the request we receive or personal data we require fall outside the scope of this Privacy Notice. In that case, the additional privacy disclosures will govern how we may process the information you provide at that time.

Personal Data Automatically Collected

We, and our third-party partners, automatically collect information you provide to us and information about how you access and use our services when you engage with us. Information we collect automatically about you may be combined with other personal information we collect directly from you or receive from other sources.

We use automatic data collection technologies to automatically collect the following data when you use our services or otherwise engage with us:

• Information About Your Device and Network, including the device type, manufacturer, and model, operating system, IP address, browser type, Internet service provider, and unique identifiers associated with you, your device, or your network (including, for example, a persistent device identifier or advertising ID). We employ third-party technologies designed to allow us to recognize when two or more devices are likely being used by the same individual and may leverage these technologies (where permitted) to link information collected from different devices.
• Geolocation Data. You have the option of enabling your device's geolocation data services within the application. If you choose to enable this feature, the application will receive location data from your device. You can configure the service to transmit your last known location to your legal emergency contacts in the event of an emergency. Please see the "Partner-Specific Preferences" section below for more information on updating your geolocation data preferences.

All of the information collected automatically through these tools allows us to operate the service, remember your preferences, and to remember information so that you will not have to re-enter it during your visit or the next time you visit the application.

Personal Data from Other Sources and Third Parties

We may receive the same categories of personal data as described above from the following sources and other parties:

• Emergency Contacts: Where you are listed as a user's emergency contact, we will collect your name and phone number to provide the emergency alert services to the user.
• Service Providers: Our service providers that perform services on our behalf, such as communications vendors, collect personal data and often share some or all of this information with us. For example, we receive personal data you may submit in response to requests for feedback to our survey providers.
• Other Sources: We may also collect personal data about you from other sources, including publicly available sources or through transactions such as mergers and acquisitions.

Additional Uses of Personal Data

In addition to the primary purposes for using personal data described above, we may also use personal data we collect to:

• Fulfill or meet the reason the information was provided, such as to deliver the services requested;
• Communicate with you, including via text message, chat, social media and/or telephone calls;
• Address inquiries or complaints made by or about an individual in connection with our services;
• Create and maintain accounts for our users;
• Administer, improve, and personalize our services, including by recognizing you and remembering your information when you return to our services;
• Help maintain and enhance the safety, security, and integrity of our property, services, technology, assets, and business;
• Defend, protect, or enforce our rights or applicable contracts and agreements (including our Terms of Use), as well as to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties;
• Detect, prevent, investigate, or provide notice of security incidents or other malicious, deceptive, fraudulent, or illegal activity and protect the rights and property of Human Rights First and others;
• Facilitate business transactions and reorganizations impacting the structure of our business;
• Comply with contractual and legal obligations and requirements;
• Fulfill any other purpose for which you provide your personal data, or for which you have otherwise consented.

Our Disclosure of Personal Data

We disclose or otherwise make available personal data in the following ways:

• To Service Providers: We engage other third parties to perform certain services on our behalf in connection with the uses of personal data described in the sections above, such as our communications vendors that enable the emergency communications.
• To Emergency Contacts: As part of the services, we will provide your customized emergency alert messages to the contacts you designate.
• In Connection with a Business Transaction or Reorganization: We may take part in or be involved with a organizational transaction or reorganization, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose, transfer, or assign personal data to a third party during negotiation of, in connection with, or as an asset in such a business transaction or reorganization. Also, in the unlikely event of our bankruptcy, receivership, or insolvency, your personal data may be disclosed, transferred, or assigned to third parties in connection with the proceedings or disposition of our assets.
• To Facilitate Legal Obligations and Rights: We may disclose personal data to third parties, such as legal advisors and law enforcement:
  • in connection with the establishment, exercise, or defense of legal claims;
  • to comply with laws or to respond to lawful requests and legal process;
  • to protect our rights and property and the rights and property of our agents, customers, and others, including to enforce our agreements, policies, and terms of use;
  • to detect, suppress, or prevent fraud;
  • to protect the health and safety of us, our customers, or any person; or
  • as otherwise required by applicable law.
• With Your Consent or Direction: We may disclose your personal data to certain other third parties or publicly with your consent or direction.

Your Privacy Choices

The following privacy choices are made available to all individuals with whom we interact. You may also have additional choices regarding your personal data depending on your location or residency.

Communication Preferences

• Phone Communication Preferences: You can stop receiving phone communications from us by following the instructions provided on the message for opting out (where available), or replying STOP to any one of our text messages. Please note we may need to continue to communicate with you via phone for certain service-related messages (such as, sending a verification code to your phone via call or text for purposes of verifying the authenticity of a log-in attempt).

Withdrawing Your Consent

Where we have your consent for the processing of your personal data (e.g., when you opt in to receive certain types of marketing communications from us), you may withdraw your consent through your profile within the ReadyNow application or by contacting us as set forth in the Contact Us section below.

Automatic Data Collection Preferences

You may be able to utilize third-party tools and features to further restrict our use of automatic data collection technologies. For example, (i) most browsers allow you to change browser settings to limit automatic data collection technologies on websites, (ii) most email providers allow you to prevent the automatic downloading of images in emails that may contain automatic data collection technologies, and (iii) many devices allow you to change your device settings to limit automatic data collection technologies for device applications. Please note that blocking automatic data collection technologies through third-party tools and features may negatively impact your experience using our services, as some features and offerings may not work properly or at all. Depending on the third-party tool or feature you use, you may not be able to block all automatic data collection technologies or you may need to update your preferences on multiple devices or browsers. We do not have any control over these third-party tools and features and are not responsible if they do not function as intended.

Modifying or Deleting Your Personal Data

You can generally update your personal data through your profile on the app. If you have any questions about reviewing, modifying, or deleting your personal data, you can contact us directly at innovationlab@humanrightsfirst.org. We may not be able to modify or delete your personal data in all circumstances.

Partner-Specific Preferences

Certain of our third-party providers and partners offer additional ways that you may exercise control over your personal data, or automatically impose limitations on the way we can use personal data in connection with the services they provide:

• Device-Specific / Platform-Specific Preferences: The device and/or platform you use to interact with us may provide you additional choices with regard to the data you choose to share with us. For example, many mobile devices allow you to change your device permissions to prevent our application from accessing your geolocation data. You may manage your device-level preferences for data collection at any time through your device's settings menu. Please refer to your device or platform provider's user guides for additional information about implementing any available platform-specific targeted advertising opt-outs.

Children's Personal Data

Our services are intended for users over the age of 18. Our services are not directed to, and we do not intend to, or knowingly, collect or solicit personal data from children under the age of 13. If an individual is under the age of 13, they should not use our services or otherwise provide us with any personal data either directly or by other means. If a child under the age of 13 has provided personal data to us, we encourage the child's parent or guardian to contact us to request that we remove the personal data from our systems. If we learn that any personal data we collect has been provided by a child under the age of 13, we will promptly delete that personal data.

Security of Personal Data

We have implemented reasonable physical, technical, and organizational safeguards that are designed to protect your personal data. The personal data you provide is stored primarily within the ReadyNow application locally on your device. We do not transfer your data outside the app unless you activate the alert button feature to send out emergency communications.

Updates to This Privacy Notice

We may update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify individuals through in-app notifications, prominent posting on this website or our other platforms, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.

Contact Us

If you have any questions or requests in connection with this Privacy Notice or other privacy-related matters, please send an email to innovationlab@humanrightsfirst.org.