U.S. Privacy Notice

Updated November 18, 2024

Introduction

St. Jude Children’s Research Hospital (“St. Jude”) leads the way the world understands, treats, and defeats childhood cancer and other catastrophic diseases. Five years before St. Jude was founded, American Lebanese Syrian Associated Charities Inc. (“ALSAC” “we,” “us” or “our”) was created to raise the funds needed to build and operate St. Jude, and ALSAC remains the fundraising and awareness organization for St. Jude today. This Privacy Notice explains how we collect, use and share personal information about consumers who visit www.stjude.org or the “St. Jude Publications” app (collectively, the “Site”), donate to our organization, or otherwise contact or interact with us, such as when you attend our events and programs. We also describe the choices available to you regarding our use of the information, the measures we take to protect the security of the information and how you can contact us about our privacy practices. This Privacy Notice is directed toward U.S. residents. For information regarding privacy practices for Canadian residents, please view our Canadian privacy notice. To view the privacy notice for St. Jude, please view the St. Jude Privacy Policy Statement.

We value and respect your desire to keep certain personal information private and to have your data protected from unauthorized access and disclosure. Our goal is to be transparent and to protect your information with appropriate security measures designed to prevent unauthorized access and disclosure of your personal information.

Information we collect

ALSAC collects personal information about donors, potential donors and other individuals who use the Site or interact with us. We collect personal information such as contact information, professional information, donation or purchase information, payment card information, social media information, device information, job application information, and any other information submitted through the Site or interactions with us. We may also collect other types of information, as described in the “Information We Collect” section below.

1. The types of personal information we may obtain about you include:

• Contact information, including name, email, mailing address, and phone number;
• Professional information, including job title and company name;
• Donation or purchase information, including transaction history and gift information.
• Payment information, including name, billing and delivery address, bank account information, and payment card details and identification information (such as driver’s license number);
• Social media information, including your social media handle;
• Device and online activity information, as described in the Automated Data Collection section below;
• Job application information, including resume and any additional application information provided to us, such as employment history and education; and
• Communications and interactions, including any information you submit to us through our Site or interactions with us, including through forms, surveys, registrations, emails, calls, comments, support tools and other features on the Site or other communications.

We may obtain this information from you when you use our Site (for example, donate, register, or purchase items) or otherwise interact with us (for example, call or email us or when you attend our events and programs). In some cases, we also may obtain your personal information from other parties, such as when someone requests a memorial or honor donation notice or gift be sent to you. We may combine this personal information with information you provide to us. We also may obtain other personal information about you in ways that we describe at the time of collection.

Automated data collection

When you use our Site or open our emails, we may collect certain information by automated means, such as cookies, web beacons (including pixels and tags), web server logs, session replay technology, and other technologies. A “cookie” is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon” (also known as an internet tag, pixel tag, or clear GIF) links web pages to web servers and cookies and may be used to transmit information collected through cookies back to a web server. These technologies help us (1) remember your information so you will not have to re-enter it; (2) track, understand, and analyze how you use and interact with our Site; (3) personalize your experience with our Site, including providing you advertising and content based on your interests and location; (4) measure the usability of our Site and the effectiveness of our communications; (5) authenticate your identity, protect against fraud and provide our products and services; and (6) otherwise manage and enhance our products and services, and help ensure they are working properly.

We may use these automated technologies to collect information about your equipment, browsing actions, usage patterns, and the region or general location from where your device is accessing the internet. The information we collect in this manner may include your device IP address, unique device identifiers, web browser type and characteristics, language preferences, domain name, referring URLs, Site traffic patterns (such as referring or exit URLs and the dates and times of visits), server usage statistics, device type and characteristics, operating system information, location information, and information about your interactions with our Sites (such as pages visited, links clicked, scrolling, features used, dates and times of access, and other information about your use of our Site). We may collect your device’s geolocation information through GPS and other technologies. Your device’s operating platform may provide you with a notification when our apps attempt to collect your precise geolocation. Please note that if you decline to allow our apps to collect your precise geolocation, you may not be able to use all of our apps’ features or the offers available through them.

Your browser or device may tell you how to be notified about certain types of automated collection technologies and how to restrict or disable them. Please note, however, that without these technologies, you may not be able to use all of the features of our Site. For mobile devices, you can manage how your device and browser share certain device data by adjusting the privacy and security settings on your mobile device.

How we use personal information

ALSAC uses personal information collected to communicate with you, other donors, members of the public and other visitors to the Site to support the lifesaving mission of St. Jude Children’s Research Hospital. We may also use this information to process donations, improve the Site, advertise and market St. Jude and supporting foundations raise funds, hire employees in support of these goals, and as listed in the section below.

We may use personal information for the purposes listed below, or as otherwise disclosed at the time of collection:

Operating our organization. We use personal information to provide services and operate our organization consistent with our mission, including:

• To process donations and orders, including to notify you of your order status or gift, provide a receipt, and ship your products;
• To administer participation in surveys, sweepstakes, promotions and other programs;
• To manage career opportunities with us, including for recruitment purposes, candidate screening and evaluation, and employee onboarding;
• To improve and personalize the Site, including to improve and personalize the performance, content, and layout of our web pages;
• To compile, anonymize, or aggregate personal information for our business purposes;
• To operate, evaluate, and improve our organization (including developing new services, enhancing and analyzing our services, managing our communications, and performing accounting, auditing, and other internal functions); and
• To perform analytics, market, trend or statistical research and analysis, including developing, deriving, and compiling market research, data sets, insights, and other metrics.

Communicating with you. We use personal information to communicate with you, including to respond to your requests or inquiries, provide information about your account, donations, and our services and events, and deliver personalized news and other types of communications;

Marketing and advertising. We use personal information to advertise and market our services and charitable mission, including:

• To send you promotional messages and deliver advertisements about our services, charities, events and other programs;
• To request donations and help us engage with persons who may wish to donate to St. Jude Children’s Research Hospital; and
• To conduct internal and market research, identify usage trends, and determine marketing and advertising campaign effectiveness.

Security, compliance and enforcement. We use personal information for security, legal, regulatory, compliance, and enforcement purposes, including:

• To protect or exercise the rights of ALSAC or others;
• To protect against, identify, and prevent fraud, unauthorized activities and other criminal activity, claims, and other liabilities; and
• To comply with the law, relevant standards, and policies and to maintain and enhance the security of our Site
• To comply with requests from law enforcement agencies for enforcement purposes

Tailored advertising and analytics

We may use third-party ad services (e.g., ad networks and ad servers) to deliver relevant content and advertising (including ads for St. Jude) on the Site, as well as on other websites you visit and other applications you use to improve the effectiveness of our marketing. Through these ad services, we can target our messaging to users considering demographic data, users’ inferred interests, and browsing context. These third parties may use cookies, web server logs, web beacons, or other similar technologies to track your online activities over time and across multiple websites and apps in order to serve you ads that may be tailored to your individual interests. The ad services may collect data about your visits to websites that serve our advertisements, such as the pages or ads you view and the actions you take on the websites or apps. This data collection takes place both on our Site and on third-party websites and apps that participate in these ad services. This process also helps us track the effectiveness of our marketing efforts.

You can learn more about such tailored advertising and how you can generally opt out of certain interest-based advertising in the U.S. by visiting the Network Advertising Initiative’s Consumer Opt-Out link or the DAA’s Consumer Opt-Out link for this browser, the DAA’s opt-out link for your mobile device, or TrustArc’s choices link. In addition, your Facebook account settings may allow you to adjust the ads you see while on Facebook and the information Facebook can use to show you ads on Facebook. Note that electing to opt out will not stop advertising from appearing in your browser or applications. Opting out may make the ads you see less relevant to your interests. We do not control any of the above opt-out links or whether any particular company chooses to participate in these opt-out programs, and we are not responsible for the continued availability or accuracy of these mechanisms. If you delete your cookies or use a different browser or mobile device, you may need to renew your opt-out choices exercised through these mechanisms.

We may also use third-party analytics services on the Site. The providers of these analytics services use technologies such as cookies and web beacons to collect data about your use of the Site and other sites or apps over time for analytics purposes. The information collected through these means may be disclosed or collected directly by these services. We use Google Analytics and other third-party services to improve the performance of the Site and for analytics and marketing purposes. For more information about Google Analytics, visit www.google.com/policies/privacy/partners/, and to learn how to opt out of Google Analytics, visit tools.google.com/dlpage/gaoptout/.

How we share personal information

We may share your personal information with third parties who are facilitating the delivery of services or assisting us in supporting the mission of St. Jude. We may also share it with affiliate organizations, like St. Jude and other third parties, such as where required by law or contract, to prevent harm or financial loss, and as otherwise described in the section below.

We may share personal information described in the “Information We Collect” section with certain third parties, including:

• Affiliated Entities: We may share your information with St. Jude to advance our fundraising and awareness and the mission of ALSAC and St. Jude.
• Service Providers: We may share personal information with service providers, such as marketing firms, print, shipping and/or fulfillment vendors, technology providers, data analytics providers, and credit card processors, which may use or disclose the information to perform services on our behalf or to comply with the law.
• Cooperatives and Other Charitable Organizations: From time to time, ALSAC may exchange or share personal information, including name and contact information, with cooperatives of other charities. This allows ALSAC to better utilize its resources to reach new donors and audiences in a more cost effective manner.
• Volunteers: We may share personal information such as contact information with volunteers for the purpose of facilitating or coordinating activities, fundraising opportunities, or events.
• Business Transfers: We reserve the right to transfer to relevant third parties any personal information we have about you in the event of a potential or actual sale or transfer of all or a portion of our organization or assets (including in the event of a merger, acquisition, joint venture, reorganization, dissolution, or liquidation).
• Others: We may share your information when required by law, including pursuant to a subpoena, governmental reporting requirement, court order, governmental inquiry, law enforcement request, or other legal process; as necessary to establish, exercise or protect our legal rights, users, donors, and services; when we believe disclosure is necessary or appropriate to prevent physical or other harm or financial loss; in connection with an investigation of suspected or actual illegal activity; or otherwise with your consent or as directed by your representative.

How we protect personal information

We maintain administrative, technical, and physical safeguards designed to protect the personal information you provide against accidental, unlawful, or unauthorized access, destruction, loss, alteration, disclosure, or use.

Third-party links and features

The Site may provide links to third-party websites or apps, including our social media pages. These online services and third-party features may operate independently from us, and we do not control the privacy and security practices of sites, online services, or third-party features (including social media tools or “plug-ins” described below) not owned by ALSAC. We are not responsible for these third parties’ information practices. Rather, the privacy practices of the relevant third parties, including details on the information they may collect about you, are subject to the privacy statements of these parties, and you should review the privacy notices of other websites or apps that you use to learn about their data practices.

This Site may also include integrated social media tools or “plug-ins,” such as social networking, photo sharing, and video streaming tools offered by third parties. Your interactions with third-party social media companies and the use of their features are governed by the privacy policies and practices of the social media companies that provide those features. We encourage you to carefully read the privacy notices of any relevant social media providers, including for the accounts you create and use

Children's information

Our Site is designed for a general audience and is not directed to children. We do not knowingly collect personal information from children under the age of 13 through our Site. We value and respect the rights of children to have their personal information protected. In the event that we become aware that we have collected such personal information from a child under 13, we will promptly delete that information from our records. If you believe a child under 13 may have provided us with personal information through the Site, please contact us as specified in the Contact Us section below.

Changes to our Privacy Notice

Any changes to our Privacy Notice will be posted on this page. We may update this Privacy Notice from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the policy when it was most recently updated and any changes will become effective when posted unless indicated otherwise. We encourage you to visit this page periodically to learn of updates.

Your choices

To request that ALSAC discontinue sending you promotional emails, please contact us at:

ALSAC
Attn: Donor Services
501 St. Jude Place
Memphis, TN 38105
(800) 822-6344
donors@stjude.org

The quickest means of unsubscribing from promotional emails is through the Email Management Center or by using the unsubscribe function on the eNewsletter you are receiving.

Contact us

If you have any questions about this Privacy Notice, please contact us at:

ALSAC Legal
501 St. Jude Place
Memphis, TN 38105
(901) 578-1009
privacy@alsac.stjude.org

If you have questions about an order with the Gift Shop, please contact us at:

St. Jude Gift Shop
onlinegiftshop@stjude.org

U.S. State Consumer Privacy Statement

Updated November 18, 2024

This U.S. State Consumer Privacy Statement supplements the information in our Privacy Notice and applies solely to residents of Colorado, Delaware and New Jersey who interact with us in an individual or household capacity. It is our goal to be transparent, protect your desire to keep your personal information private and to comply with all applicable U.S. State Privacy laws . This Statement uses certain terms that have the meaning given to them in applicable U.S. State Privacy laws.

Collection, use and sharing

From time to time, ALSAC may exchange or share personal information to better utilize its resources to reach new donor sand audiences in a more cost-effective manner to raise funds and awareness for St. Jude. In an effort to be transparent, we have provided the following chart regarding how we may collect, use, and share information.

We also may share the personal data described above with government entities, and third parties in connection with the potential or actual sale or transfer of our organization or assets. Please see our U.S. Privacy Notice for additional details regarding the categories of personal data we collect, purposes for which we use personal data, and categories of third parties with whom we share personal data.

We do not sell your personal data for monetary compensation. As described in the chart above, we may share your personal data by allowing third parties, such as online advertising services, social networks and data analytics providers, to collect personal data via automated technologies and cookies on websites and apps, which may be considered an exchange for value or sale under U.S. State Privacy laws. From time to time, ALSAC may also exchange or share personal information, including name and contact information, with cooperatives of other charities. This allows ALSAC to better utilize its resources to reach new donors and audiences in a more cost effective manner. You may have the right to opt out of this sharing of your personal data as described below in the Your Privacy Rights section and on these platforms through their privacy policies.

We do not knowingly process personal data from children under the age of 13 or other sensitive data as defined in applicable U.S. State Privacy laws. We also do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers, as defined in applicable U.S. State Privacy laws.

To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.

Your Privacy Rights

If you are a resident of Colorado, Delaware or New Jersey who interacts with us in an individual or household capacity, you may have the right to: (1) request to access, correct or delete your personal data; and (2) opt-out of the processing of your personal data for purposes of targeted advertising or the exchange for value or sale of your personal data. In addition, you may have the right to obtain your personal data in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the personal data to another entity.

To exercise your access, correction, deletion and portability rights, you may click here to submit a request or call us at (888) 318-0778. To exercise your opt-out rights, follow the instructions provided in this link. To appeal our decision with respect to a request you have submitted you may click here or call us at (888) 318-0778.

To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to your personal data or complying with your request. This verification process may require you to authenticate your email address we have in our records or provide pieces of personal data that we already hold about you, such as last donation amount. In certain circumstances, we may ask you to provide a signed declaration under penalty of perjury that you are the consumer whose personal data is the subject of the request.

To submit a request as an authorized agent on behalf of a consumer, please contact us as described above. If you submit a request through an authorized agent, we may ask for your written permission or a power of attorney. Where you provided your authorized agent with a written permission, we may require that you also verify your identity.

For any questions of concerns regarding our privacy practices or this U.S. State Consumer Privacy Statement, you may contact us at privacy@alsac.stjude.org as described in the Contact Us section of our Privacy Notice above.

Changes to the U.S. State Consumer Privacy Statement

Any changes to our U.S. State Consumer Privacy Statement will be posted on this page. We may update this Privacy Statement from time to time and without prior notice to you to reflect changes in our personal information practices. We will indicate at the top of the Privacy Statement when it was most recently updated and any changes will become effective when posted unless indicated otherwise.