Privacy Policy

Effective Date: May 5, 2026  ·  Last Updated: May 5, 2026

Community Cargo ("we," "us," or "our") is a registered 501(c)(3) nonprofit organization based in Oak Park, Illinois (EIN: 39-4582419). This Privacy Policy explains how we collect, use, disclose, and protect information when you visit communitycargo.org (the "Site") or interact with us in any way.

By using our Site, you agree to the practices described in this policy. If you do not agree, please do not use our Site.

1. Information We Collect

Information you provide directly:

• Email signup form: When you sign up to hear from us, we collect your name, email address, and your role (e.g., donor or nonprofit seeking help).
• Donation processing: When you make a donation, you are directed to our third-party donation processor, Donorbox. We do not directly collect or store your payment card information. Donorbox may collect your name, email address, billing address, and payment information in accordance with their own privacy policy.
• Freight help inquiries: If you contact us by email to request freight assistance, we collect the information you choose to share in your message.

Information collected automatically:

• Usage data: Like most websites, our Site may collect standard technical information such as your browser type, operating system, referring URLs, and pages visited. This data is used in aggregate form and is not linked to individual identities.

2. How We Use Your Information

We use the information we collect to:

• Send you updates, news, and information about Community Cargo (only if you have subscribed)
• Process and acknowledge your donations and issue tax receipts
• Respond to freight help inquiries and assess eligibility for our services
• Improve and maintain our Site
• Comply with legal obligations

We do not use your information for automated decision-making or profiling. We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Consent: For email communications — you have explicitly opted in via our signup form. You may withdraw consent at any time by unsubscribing.
• Legitimate interests: For responding to freight help inquiries and general site operation, where our interests do not override your rights.
• Legal obligation: Where processing is necessary to comply with applicable law (e.g., donation record-keeping).

4. Third-Party Service Providers

We share information with trusted third-party service providers only to the extent necessary to operate our Site and fulfill our mission:

• Mailchimp (Intuit Inc.) — We use Mailchimp to manage our email list and send communications. Your name, email address, and role are stored on Mailchimp's servers. Mailchimp is a processor acting on our behalf. View their Privacy Policy.
• Donorbox — We use Donorbox to process donations securely. When you donate, you are interacting with Donorbox's platform. Community Cargo receives a confirmation of the donation but does not store your payment card information. View their Privacy Policy.

All third-party providers are contractually required to protect your information and may only use it as directed by Community Cargo or as required by law.

5. Email Communications and CAN-SPAM Compliance

If you subscribe to our mailing list, you will receive emails from Community Cargo. Every email we send will include:

• Our organization name and physical mailing address
• A clear and easy way to unsubscribe

You may unsubscribe at any time by clicking the "unsubscribe" link in any email or by contacting us directly at john@communitycargo.org. We will process unsubscribe requests promptly.

6. Your Rights

Depending on where you live, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate information.
• Deletion: Request that we delete your personal information, subject to legal retention obligations.
• Opt-out: Unsubscribe from marketing emails at any time.
• Portability (EEA/UK): Request your data in a structured, machine-readable format.
• Objection (EEA/UK): Object to processing based on legitimate interests.
• California residents (CCPA/CPRA): You have the right to know, delete, correct, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at john@communitycargo.org. We will respond within 30 days. EEA and UK residents may also lodge a complaint with their local data protection authority.

7. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy:

• Email subscribers: Until you unsubscribe, after which we remove your data from active lists within 30 days.
• Donation records: Retained for seven (7) years in accordance with IRS requirements for nonprofit record-keeping.
• Freight inquiries: Retained for the duration of any active engagement, then deleted within 12 months unless a longer period is legally required.

8. Cookies and Tracking

Our Site may use cookies or similar technologies for basic functionality (such as remembering your preferences). We do not use third-party advertising cookies or behavioral tracking cookies. You can instruct your browser to refuse cookies; however, some features of the Site may not function correctly as a result.

9. Children's Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will delete it.

10. Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure. We encourage you to use caution when sharing personal information online.

In the event of a data breach that is likely to affect your rights or freedoms, we will notify affected individuals and, where required, relevant regulatory authorities, without undue delay.

11. International Visitors

Community Cargo is based in the United States. If you access our Site from outside the United States — including from the European Economic Area, United Kingdom, or other jurisdictions — your information will be transferred to and processed in the United States. By using our Site, you consent to this transfer. We take steps to ensure your information receives adequate protection consistent with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our Site after any changes constitutes your acceptance of the updated policy.