Privacy Policy & Data Protection Standards
Quinsigamond Village Community Center, Inc. is committed to protecting the privacy, dignity, and personal data of every client, donor, volunteer, and community member.
Core Privacy Commitments at a Glance
1. We NEVER Sell or Rent Personal Data
We do not sell, rent, lease, or monetize client or donor information under any circumstances.
2. Zero Food Assistance Stigma or Tracking
Accessing emergency food does not require public disclosure, citizenship verification, or credit/income checks.
3. Donor Privacy Bill of Rights
Donor contact details and giving records are kept strictly confidential and never shared with commercial telemarketers.
4. Global Privacy Control (GPC) Honored
Our systems automatically recognize browser GPC signals to disable non-essential telemetry.
1. Identity of the Data Controller
For the purposes of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), the Connecticut Data Privacy Act (CTDPA), and Massachusetts Data Privacy Regulations (201 CMR 17.00), the Data Controller is:
Entity Name: Quinsigamond Village Community Center (in partnership with Friendly House, Inc.)
Corporate / 501(c)(3) Status: Friendly House, Inc. (Est. 1920, EIN: 04-2104239)
Physical Address: 200 Greenwood Street (Emanuel Lutheran Campus), Worcester, MA 01607
Telephone: (508) 755-7481
Designated Contact: Alison Mallett, Program Director (amallett@friendlyhousema.org)
2. European Union & UK GDPR Disclosures (Articles 13 & 14)
Although Quinsigamond Village Community Center is rooted locally in South Worcester, Massachusetts, our public web platforms welcome international visitors, diaspora researchers, and global donors. We adhere fully to the principles of GDPR:
2.1 Lawful Bases for Processing (Article 6 GDPR)
- Consent (Art. 6(1)(a)): When you voluntarily submit forms (contact, volunteer registrations, donation pledges, newsletter subscriptions) or consent to analytics cookies.
- Contractual / Service Performance (Art. 6(1)(b)): To coordinate emergency food boxes, diaper packages, or volunteer shift confirmations.
- Legitimate Interests (Art. 6(1)(f)): Maintaining website security, protecting against malicious bot submissions, and monitoring aggregate site traffic to report public community impact to civic grant foundations.
2.2 Data Subject Rights
Under GDPR, you have enforceable legal rights regarding your personal information:
To exercise any GDPR right, contact our Data Protection Coordinator at privacy@quinsigamondvillage.com. We respond within 30 days free of charge.
3. California Privacy Rights (CCPA / CPRA Notice at Collection)
This section informs California consumers of our privacy practices under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CPRA):
| Category of Personal Information | Specific Data Collected | Business Purpose | Sold / Shared? |
|---|---|---|---|
| Identifiers | Name, email address, phone number, physical mailing address (for checks). | Responding to inquiries, fulfilling volunteer signups, issuing 501(c)(3) tax receipts. | NEVER SOLD / SHARED |
| Internet / Electronic Activity | Anonymized IP address (2 bytes masked), browser type, pages viewed, referring URL. | Aggregated telemetry, preventing DDoS attacks, verifying site uptime. | NEVER SOLD / SHARED |
| Commercial / Donation Information | Pledge amounts, donation frequency, corporate match requests. | Non-profit accounting, grant compliance, donor recognition (if permitted). | NEVER SOLD / SHARED |
| Sensitive Personal Information | Self-reported diaper sizes, dietary requests, emergency intake notes. | Direct relief fulfillment only. Never used to infer consumer traits. | NEVER SOLD / SHARED |
Explicit "Do Not Sell or Share" Statement
Quinsigamond Village Community Center does not sell personal information and does not share personal information for cross-context behavioral advertising. We have not sold or shared any consumer personal information in the preceding 12 months.
4. Connecticut Data Privacy Act (CTDPA) Disclosures
Pursuant to Connecticut Public Act No. 22-15 (An Act Concerning Personal Data Privacy and Online Monitoring), Connecticut residents have the right to:
- Confirm whether QVCC is processing your personal data and access such data.
- Correct inaccuracies in your personal data.
- Delete personal data provided by or obtained about you.
- Obtain a portable copy of your personal data.
- Opt-out of personal data processing for targeted advertising, sale, or profiling.
We respond to authenticated Connecticut consumer requests within 45 days. You may appeal any decision by emailing privacy@quinsigamondvillage.com.
5. Massachusetts 201 CMR 17.00 Data Protection Standards
As a Massachusetts non-profit entity operating in the Commonwealth, QVCC maintains a comprehensive Written Information Security Program (WISP) in strict compliance with 201 CMR 17.00: Standards for the Protection of Personal Information of Residents of the Commonwealth:
All data transmitted through our web portal is encrypted using TLS 1.3 cryptographic protocols with modern cipher suites.
Physical paper intake records at 200 Greenwood Street are locked in secure files with restricted staff-only access.
Only authorized pantry directors and coordinators have administrative credentials to view volunteer and donor records.
6. Telephone Consumer Protection Act (TCPA) Notice
When you submit a telephone number through any contact, emergency food callback, or volunteer scheduling form on this website:
Consent to Direct Communication: You provide express consent for Quinsigamond Village Community Center staff or designated volunteer coordinators to contact you via telephone call or SMS text message solely regarding your specific inquiry or food support coordination.
Zero Commercial Marketing / Robo-calls: We will never use automated autodialers, pre-recorded promotional telemarketing, or sell your phone number to marketing lists.
Revocation of Consent: You may revoke telephone consent at any time by replying "STOP" to any text message, asking our representative on the call, or emailing privacy@quinsigamondvillage.com.
7. Non-Profit Donor Bill of Rights & Privacy Pledge
Philanthropy is an act of trust. QVCC endorses the Association of Fundraising Professionals (AFP) Donor Bill of Rights:
Our Solemn Pledge to Donors:
- We will never sell, trade, rent, or lease our donor mailing lists to any commercial or charitable entity.
- Donors have the right to remain completely anonymous in all public reports, plaques, and annual newsletters upon request.
- All donation records are treated with the highest degree of confidentiality and used exclusively for 501(c)(3) tax acknowledgment and grant accountability.
- Donors can request prompt removal from our mailing or newsletter lists at any time.
8. USDA & TEFAP Non-Discrimination Statement
In accordance with federal civil rights law and U.S. Department of Agriculture (USDA) civil rights regulations and policies, this institution is prohibited from discriminating on the basis of race, color, national origin, sex (including gender identity and sexual orientation), disability, age, or reprisal or retaliation for prior civil rights activity.
Program information may be made available in languages other than English. Persons with disabilities who require alternative means of communication for program information (e.g., Braille, large print, audiotape, American Sign Language) should contact QVCC or Emanuel Lutheran Church staff directly.
9. Children’s Online Privacy Protection Act (COPPA)
Our website is not directed to children under the age of 13. We do not knowingly collect personal information online from children under 13 without verified parental or legal guardian consent. If we learn that personal data from a child under 13 was submitted through our site without parental consent, we will delete that data immediately.
10. Contacting Our Privacy Officer
For any privacy questions, data access requests, or donor record amendments, please reach out directly:
200 Greenwood St, Worcester MA 01607