Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how Iron Stewards ("we," "us," or "our"), a registered 501(c)(3) nonprofit organization, collects, uses, shares, and protects information about you when you interact with our website, ironstewards.org (the "Site"), make donations, or otherwise engage with our services (collectively, the "Services").

By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services. We may update this Policy from time to time; if we make material changes, we will update the "Last Updated" date at the top and may provide additional notice as required by law.

2. Information We Collect

We collect information in three main ways: (1) information you provide directly; (2) information collected automatically; and (3) information from third parties.

2.1 Information You Provide Directly

• Contact and Application Information: Name, email address, phone number, business name, and any information you provide when you apply for membership, submit a contact form, or otherwise communicate with us.
• SMS Opt-In: If you provide a mobile phone number and check the SMS consent checkbox on our contact or application forms, we record your consent to receive text messages. We store the fact of your consent, the date it was given, and the channel through which it was collected.
• Donation Information: If you give online, our payment processors (e.g., Stripe, GoHighLevel) collect payment card numbers or bank information. We receive limited information such as the amount, date, and confirmation of your transaction but do not store full card numbers on our own servers.
• Communications: Emails, messages submitted through contact forms, survey responses, and other communications.

2.2 Information Collected Automatically

• Device and Usage Data: When you visit the Site, we automatically collect your IP address, device type, operating system, browser type, pages viewed, and links clicked. We use this to understand how our Site is used and to improve it.
• Cookies and Analytics Tracking: We use essential cookies for site functionality. We also use Google Analytics 4 to understand traffic patterns and user behavior on the Site. Google Analytics uses cookies and similar tracking technologies to collect anonymized data about your visit. You can control cookies through your browser settings or opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

2.3 Information from Third Parties

We may receive information from our payment processors and CRM systems (GoHighLevel / Leadconnector) to confirm donations, manage member relationships, and maintain financial records.

3. How We Use Your Information

We use the information we collect for purposes including:

• Providing and Improving the Services: To operate, maintain, secure, and improve our Site and ministry programs.
• Communications: To respond to your messages and requests; send administrative notifications (like donation receipts); and send ministry updates and resources we believe may be helpful, in compliance with applicable laws like CAN-SPAM and TCPA.
• SMS / Text Messaging: If you have opted in, to send you text messages about your inquiry, application status, event reminders, and ministry-related community updates. We only send SMS messages to individuals who have explicitly opted in.
• Donations and Financial Stewardship: To process donations, maintain records for accounting and legal obligations, and communicate with you about your giving.
• Legal and Compliance: To comply with applicable laws, respond to lawful requests, and maintain appropriate records for our 501(c)(3) status.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following limited ways:

• Service Providers: With third-party vendors who perform services on our behalf, such as payment processing (e.g., Stripe), CRM and email services (e.g., GoHighLevel / Leadconnector), community platform (Mighty Networks), and website hosting (e.g., Hostinger). These providers are contractually required to protect your information and use it only for the services they provide to us.
• Legal and Safety: We may disclose information if we believe in good faith that it is necessary to comply with applicable law, protect the rights and safety of our users or the public, or to prevent fraud or abuse.
• Organizational Transitions: If Iron Stewards undergoes a merger or transfers substantial assets, we may transfer information as part of that transition.

5. SMS / Text Message Opt-In Data — No Sharing Policy

We do not sell, rent, share, or disclose your SMS opt-in consent data or mobile phone number to any third party for their own marketing or messaging purposes. Your decision to opt in to text messages from Iron Stewards is personal and confidential. It will never be used to enroll you in any other organization's messaging program, and it will never be sold to data brokers, advertisers, or any other entity.

The only parties who may access your SMS opt-in record are Iron Stewards staff and our CRM service provider (GoHighLevel / Leadconnector), which processes messages on our behalf under strict data processing agreements.

6. Donor Privacy

We are committed to protecting the privacy of our donors. We will not share, sell, or trade donor personal information with other organizations for their own fundraising or marketing purposes. We may publicly acknowledge donors only with their permission.

7. Your Privacy Choices and Rights (United States)

7.1 Email Communications (CAN-SPAM)

You can opt out of promotional emails by clicking the "unsubscribe" link in any such email. Even if you opt out, we may still send you essential administrative or transactional messages.

7.2 SMS / Text Message Communications (TCPA)

You may opt out of SMS/text messages at any time by replying STOP to any message we send. You may also contact us at info@ironstewards.org to request removal from our messaging list. Even if you opt out of SMS, we may still send you essential administrative or transactional emails.

You have the right to update your contact information at any time by contacting us at the address below.

7.3 State-Specific Privacy Rights (e.g., CCPA)

If you are a resident of a U.S. state with applicable privacy laws (such as California), you may have the right to:

• Request access to the personal information we hold about you.
• Request deletion of your personal information.
• Request correction of inaccurate personal information.
• Request that we stop sharing your personal information with third parties (where applicable).

To exercise these rights, please contact us at the address below. We will not discriminate against you for exercising your privacy rights.

8. Data Security and Retention

We use reasonable administrative, technical, and physical safeguards to protect your information, including encrypted data transmission (HTTPS), access controls, and secure third-party service providers. We retain personal information as long as reasonably necessary to fulfill ministry, accounting, and legal obligations. When information is no longer needed, we take reasonable steps to delete or anonymize it.

9. Children's Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. Contact Us

If you have questions about this Privacy Policy, wish to update your information, or want to exercise your privacy rights, you can contact us at: