Last Modified: January 14, 2021
The American Cancer Society, Inc. (the “Society”) values your trust, and we understand the importance of protecting your privacy. We want to make sure that you understand how your information is collected and used by the Society. This privacy statement (“Privacy Statement”) describes what information we collect about you, including when and how we collect it; how we use it; with whom we may share it; and what choices you have regarding our use of your information.
This Privacy Statement applies to all information collected through your communications with the Society, whether electronic, written or oral; information collected through Society mobile applications (“Apps”) or Society websites (“Sites”) that include a link to this Privacy Statement; as well as any other information about you that we may collect offline or receive from third parties (collectively, Apps, Sites, and offline or third-party information are referred to as the “Services”). By accessing our Services or providing your information to us, you accept and agree to the practices described in this Privacy Statement.
This Privacy Statement describes our privacy practices. The links below go straight to more detailed information on that topic.
- What types of personal information we collect about you
- How we collect personal information about you
- How we may use your personal information
- With whom we may share your personal information
- Other information collected
- Our data security protections
- Your privacy options and access
- Notices and Disclosures
- How to contact us
- Updates to this privacy statement
When you engage with the Society or visit or use our Services, we collect a variety of information. In general, the type and amount of information we collect on you will depend on how you choose to interact with the Society. For instance, if you are a patient or caregiver contacting us for assistance, we will need different information to assist you than if you are using our website to gather information on cancer-related topics or donate to the Society.
The Society collects information that identifies you as an individual or information which is linked or linkable to you as an individual, which will collectively be referred to throughout this Privacy Statement as “Personal Information”: including contact information, demographic information, health and financial information, as well as call recordings and transcripts.
The categories of information are outlined below.
Contact Information and Preferences. We may request contact information such as your name, mailing address, telephone number, e-mail address, and your preferences for how you would like to be contacted by the Society. We may also use third-party services to supplement or to ensure accuracy of contact information.
Demographic Information. We may request limited demographic information such as your gender, race or ethnicity, marital status, geographic location, and/or primary language. We may also use publicly available data or third-party services to supplement this information.
Sensitive Personal Information (other than Health Information). Unless we specifically request or invite it, we ask that you not send or otherwise disclose to us your political opinions, religion or other beliefs, passport or national identity number, criminal background, or trade union membership. In those cases where we may request or invite you to provide the foregoing information, we will only do so with your express consent or where there is a clear reason for doing so—such as where the Society is arranging your travel and accommodations for your participation in a sponsored event—and then only to the extent such data is required to ensure that we provide appropriate facilities or support to enable you to participate in the event.
Health Information. We may request limited health information about you such as your relationship to cancer or, if applicable, your type of cancer, date of diagnosis, stage, or current treatment. For instance, this information may be needed to assist you if you contact the Society seeking cancer information or requesting support from the Society. If you register to participate in a Society event, we may ask you about your relationship to cancer so that we can let you know about special activities for caregivers and survivors. This health information may be transmitted electronically for the uses and/or disclosures described in this Privacy Statement. We may request more detailed information if you enroll in a research study.
Financial Information. If you make a donation to the Society or make a retail purchase on a Society Site, we will collect payment information such as your credit card number to process your transaction. We may also collect the name of your employing company, if you would like for that company to make a matching donation. We may use a third-party payment service to process payments made through the Services. We will retain your credit card information only for as long as necessary to process the transaction.
Call Recordings and Chat Transcripts. If you contact the Society for information or assistance by calling our National Cancer Information Center or online via the “Contact Us” chat feature, we may record your call or maintain a transcript of the chat for training and quality assurance purposes. The information contained in these transcripts will depend on what you voluntarily provide to the Society.
The Society and its service providers may collect Personal Information in a variety of instances. For example, we may collect information about you in the following circumstances:
Requests for Information and Resources. The Society’s National Cancer Information Center (“NCIC”) is available to answer your questions 24/7, 365 days a year. When you contact NCIC or your local Society office for information and resources, we will collect the Personal Information you provide in order to assist you.
Patient Support Services. The Society offers many free or reduced-cost programs and services to help cancer patients and their caregivers manage cancer treatment and recovery and find the emotional support they need. For example, the Society provides transportation and lodging assistance to help cancer patients overcome barriers to treatment. If you contact the Society to utilize these support services, we may ask you for contact and demographic information as well as limited health information.
Site and App Use. We may collect Personal Information through your use of the Sites and Apps, including the Society’s online public forums, discussion boards, or chat rooms. If you become a registered user of a Site or App, we will collect login and profile information and may also collect information about your areas of interest. Please note that any information you post within these public forums will become public and may be read, collected, and used by anyone. Please exercise caution when deciding whether to disclose your Personal Information in public forums.
Donations. If you make a donation to the Society, we will collect Personal Information from you that may include: your name, address, telephone number, and/or e-mail address so that we can send you a receipt and thank you for your donation. We may also collect limited financial information to process your donations.
Employment or Volunteer Participation. If you seek employment with the Society or volunteer for the Society, we will collect information related to your role. For instance, we will collect employment history information if you submit a resume to the Society. If you are volunteering to provide peer-to-peer support for cancer patients, we may ask about the languages you speak. Or, if you are volunteering to provide transportation assistance through our Road to Recovery program, we will collect information on your driving history. Depending on your role, we may also request a background check.
Research Participation. If you inquire about (or enroll in) a Society research study, we may collect information from you related to the study or studies, which may include health information. Research participant data is maintained in a secure, restricted environment and is accessed only for research purposes.
Event Registration. If you register to participate in a Society event, such as Relay For Life® or Making Strides Against Breast Cancer,® we may also ask about your relationship to cancer, but you are not required to provide this information to participate in Society events. This information, however, is useful for event purposes and helps us let you know about special activities for caregivers and survivors.
Health Provider, Health Plan or Caregiver Referral. Your healthcare provider or health plan may put you in touch with the Society if they believe we have information or resources that can assist you with your care. These referrals may occur through fax or another referral method. If you are referred to the Society through a healthcare provider or health plan, we will receive contact and demographic information, as well as limited health information from the healthcare provider or health plan.
Individual as Service Provider. If you partner with ACS to provide services, we may collect information such as name, employer, title, contact information. We collect this information for the purposes of contacting you about the partnership. If it is necessary for purposes of paying you for services provided, we may also collect bank account information, address, etc.
Third-party Fundraising Campaigns, Promotions or Events. We may use or interact with third-parties to conduct fundraising campaigns, promotions or events, including online platforms such as Crowdrise or PledgeIt. In these instances, we may receive access to donor reports which includes donor name, contact information and donation amount. We also may receive your Personal Information if you respond to a cause-related marketing campaign or other promotion benefitting the Society that is conducted by a corporate partner.
Social Media Interfaces. If you elect to connect your social media account to your Site account, certain Personal Information from your social media account will be shared with us, which may include Personal Information that is part of your profile or your friends’ profiles; in addition, if you log-in to our website using your social media account, use a “like” button or use other social media features while visiting our website, those social media companies may collect information about you. Your interactions with social media companies and the use of their features are governed by their privacy policies.
Other Sources. We may receive your Personal Information from other sources, including Society affiliates that you engage with such as the American Cancer Society Cancer Action Network, Inc. [“ACS CAN,” our nonprofit, nonpartisan advocacy affiliate and the nation’s leading voice advocating for public policies that are helping to defeat cancer and make cancer a top national priority”]; third-party organizations we collaborate with to provide support services and information to cancer patients and their caregivers; or supplemental data sources to supplement or link the information we collect from you.
We and our service providers may use Personal Information for the following purposes:
Mission Delivery and Support Operations. We will use your Personal Information to respond to your inquiries and to provide you with the information, resources and support services you request. We may use your Personal Information to help us better understand the individuals we serve, to better communicate with you, and to better serve you and your community with relevant programs, services and information. We may also use your Personal Information to develop, evaluate and improve our programs and services. For instance, we may contact you with a survey seeking voluntary feedback on services you have received.
We may use your Personal Information to keep you informed about cancer-related news developments, to notify you of Society services that may be of interest to you, to invite you to upcoming Society events in your area (such as Relay For Life®), to request voluntary time or monetary contributions to the Society, or to request your participation in a Society research study.
If you are enrolled in a research study, your information is used to help advance our understanding and prevention of cancer.
If you are referred to the Society through your healthcare provider and/or health plan, we will use and disclose your Personal Information as necessary, including electronically, to provide you with the assistance, programs or services you have requested, as well as program follow up and evaluation. For example, if you need lodging assistance related to your treatment, your healthcare provider may provide your information to the Society so that we can evaluate eligibility and availability for placement in one of the Society’s Hope Lodge facilities or through our Hotel Partners Program.
If a patient referral is your first interaction with the Society, we will limit our contact with you to the provision of services and follow up, unless you consent to receiving communication(s) regarding additional resources, opportunities or engagement, or unless you contact us or otherwise provide specific consent. If you have an existing relationship with the Society at the time of referral, we will maintain your current contact preferences and apply them to the information we receive from your referring provider or health plan. If you choose to later engage with the Society in another way, like by participating in a Society event, volunteering for the Society, or donating to the Society, we may use your Personal Information and/or contact you for purposes related to that engagement.
Data Analytics. We also perform data analysis and research activities to gain a greater general understanding of cancer, cancer treatment and the related needs of patients and their caregivers. This analysis can help us improve patient experiences, mission delivery, and support. We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.
Targeted Fundraising. We may use certain information (name, address, telephone number or e-mail information, date of birth, gender, dates of service, department of service information, etc. ) to contact you for the purpose of raising money for the Society, but any such communication will provide you with the opportunity to opt-out of receiving such future communications with each solicitation. If you reengage with the Society without indicating your intent to opt-out, we will re-subscribe your email in order to ensure that you do not miss out on Society updates. You are free to opt-out of fundraising solicitations and your decision will have no impact on your ability to receive services from the Society.
Other Business Purposes. We may use Personal Information for other business purposes, such as conducting audits, fraud monitoring and prevention, data analysis, recordkeeping, developing new services, enhancing, improving or modifying our programs and our Services, identifying usage trends, determining the effectiveness of fundraising campaigns and mission activities, and updating and expanding our business activities.
With your consent. In addition to the other uses described in this section, we may also use your information as you expressly authorize us to do so.
The Society does not sell Personal Information of donors, volunteers, or event participants. In furtherance of our mission, your Personal Information may be shared with:
Third-Party Service Providers. We may need to share Personal Information with third-parties that provide operational services on our behalf (such as website hosting, information technology and infrastructure, data analytics, email delivery, order fulfillment, auditing or other services) or that assist the Society in providing you with support and resources.
Society Affiliates. We may provide your information to affiliated organizations that share a common mission with the Society, such as ACS CAN. Use of your information by ACS CAN is governed by ACS CAN’s Privacy Statement available at www.fightcancer.org/privacy_policy.
Referring Health Care Providers and Health Care Plans. If you were referred to the Society by your health care provider, we may also report back to your referring provider regarding your usage of Society programs and services or to coordinate treatment-related services.
Mission Collaborators. We may also collaborate with organizations to provide or improve the Society’s services and operations. For example, we may share Personal Information, as applicable, with organizations that are working with the Society to provide free or discounted transportation or lodging services to our constituents or with organizations to conduct data analytics projects that allow us to better understand the use of our services.
Volunteers. We may share limited personal information, such as contact information, with volunteers who are assisting the Society and who require the information as part of their duties. Volunteers who are entrusted with personal information execute confidentiality agreements with the Society prior to receiving any such information.
Third-Party Charitable Promotions. We may also share your Personal Information, excluding health information, with third-party companies that are conducting charitable sales promotions to benefit the Society. You are under no obligation to respond to those promotions, and if you choose not to, the company is restricted from using your contact information for any other purpose.
Donor Privacy. From time to time, the Society may also share donor names and mailing addresses with other nonprofit organizations on a limited basis in exchange for limited access to the names and mailing addresses of their constituents. These organizations will not have continued access to your name and address unless you choose to respond to them directly. We do not share email addresses or health-related data in connection with this list exchange. You, as a donor may, at any time, have your name excluded from any donor list exchange activity. To ask that your name be excluded from list exchange activity or to otherwise change how the Society contacts you, please email us at firstname.lastname@example.org or complete our Opt Out Form.
Memorial and Honor Giving. You may choose to honor someone whose life has been impacted by cancer by making a donation in their name. Once your gift is received and you have requested a notification be sent to the honoree or family, the Society will send a card to the honoree or family acknowledging your gift. The amount of money donated through memorial or honor donations is kept confidential, but the individual (or their immediate family in the case of a memorial donation) may be provided with the name and address of those individuals who have donated in honor of their loved one, whether in the card itself or at the request of the honoree or family.
Your Consent. In addition to the other disclosures described in this section, we may also disclose your information as you expressly authorize us to do so.
The Society may also collect information that does not reveal your specific identity or does not directly relate to an identifiable individual, referred to throughout this Privacy Statement as “Other Information,” including browser and device information, App usage data, Internet Protocol address, information collected through cookies, pixel tags and other technologies. Other Information also includes information that has been anonymized or aggregated in a manner that it no longer reveals your specific identity.
If we are required to treat Other Information as Personal Information under applicable law, then we may use and share it for the purposes for which we use and share Personal Information as detailed in this Privacy Statement.
Browser and Device Information. Certain information is collected by most browsers or automatically through your device, such as your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, Internet browser type and version and the name and version of the Services (such as the App) you are using. We use this information to ensure that the Services function properly.
Society App Usage Data. When you download and use Society Apps, we and our service providers may track and collect App usage data, such as the date and time your device accesses our servers and what information and files have been downloaded to the App based on your device number.
Internet Protocol Address. Your IP address is automatically assigned to your computer by your Internet Service Provider. An IP address may be identified and logged automatically in our server log files whenever a user accesses the Services, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications, and other services. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems and administering the Services. We may also derive your approximate location from your IP address.
Web Server Traffic Pattern Information and Browsing History. We collect standard web server traffic pattern information and your browsing history. General traffic, Site usage, browser information and length of stay information is collected and stored in log files.
Using pixel tags and other similar technologies. Pixel tags (also known as web beacons and clear GIFs) may be used to, among other things, track the online actions of users of the Services (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Services and response rates.
Do Not Track. Some browsers have a “Do Not Track” feature that lets you tell websites that you do not want to have your online activities tracked. We do not currently respond to browser do-not-track signals at this time.
Physical Location. We may collect the physical location of your device by, for example, using satellite, cell phone tower or Wi-Fi signals. We may use your device’s physical location to provide you with personalized location-based services and content. In some instances, you may be permitted to allow or deny such uses and/or sharing of your device’s location, but if you do, we may not be able to provide you with the applicable personalized services and content.
De-Identified or Aggregate Information. We use De-Identified Information and Aggregate Information for activities including data analysis and research to gain a greater general understanding of cancer, cancer treatment and the related needs of patients and their caregivers. “De-Identified Information” means information where identifiers have been removed so that it does not directly or indirectly identify and cannot reasonably be used to identify an individual. “Aggregate Information” means information about groups or categories of individuals which does not identify and cannot reasonably be used to identify an individual. For example, we may use Aggregate Information to compare the types of services our constituents utilize in one geographic location with another to understand how the two groups are different or similar.
Uses and Disclosures of Other Information. We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law. In some instances, we may combine Other Information with Personal Information. If we do this, we will treat the combined information as Personal Information. For example, we may work with data providers to tailor our communications to you, including fundraising and outreach communications, based on your areas of interest and other information about you. To do this, we may place cookies on your browser and combine IP address or browsing history with other de-identified data (such as a hashed, non-readable e-mail or postal address). We may then communicate with you through mail, email or other channels.
We seek to use reasonable organizational, technical and administrative measures reasonably designed to secure the information to protect Personal Information within our organization. We incorporate industry-standard security controls (like firewalls) and protocols (like SSL/TLS) to create a site that is resistant to standard internet-based threats. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “How to Contact Us” section below.
The Society retains Personal Information that we receive for as long as necessary to fulfill the purpose(s) for which the information was collected, to provide our services and products, to pursue legitimate business purposes, to enforce our agreements, and comply with all applicable laws.
Contact Preferences and Restrictions. We respect your privacy and recognize that you may wish to limit the ways in which we contact you and/or share your Personal Information, including for fundraising purposes. An “Unsubscribe” button will be provided at the top or bottom of each email marketing communication sent by the Society, so that you may opt-out of further email communications. However, we will continue to send transaction-related emails regarding our relationship and the services you have requested. If you later reengage with the Society without indicating your intent to opt-out, we will re-subscribe your email in order to ensure that you do not miss out on Society updates. The Society offers the following options for restricting use and disclosure of your Personal Information:
1. Do not contact me by postal mail.
2. Do not contact me by telephone.
3. Do not contact me by e-mail.
4. Do not share my contact information with other nonprofit organizations.
5. Do not contact me with fundraising requests supporting the Society.
6. Do not contact me.
You may also be able to limit the frequency of postal mail. To inform us of any desired restrictions, please complete our Opt Out Form. If you contact us with an opt-out request, we will honor the request in accordance with timelines set forth in applicable law. Please note that if you opt-out of receiving e-mails but later reengage with the Society without indicating your intent to opt-out, we will re-subscribe your email in order to ensure that you do not miss out on Society updates. We may also still send you important administrative messages, from which you cannot opt-out.
Mobile Applications. You can stop collection of information by mobile applications easily by uninstalling the application. You may use the standard uninstall processes available as part of your mobile device or network. To discontinue the collection of geolocation data within a mobile application, you can modify your privacy settings on your mobile device.
To Request a Copy of your Personal Information. Subject to applicable law, you may have the right to obtain confirmation regarding whether the Society processes Personal Information about you and/or to request access to and receive information about the Personal Information that we maintain. To make such a request, please submit a Data Request Form.
In your request, please make clear what Personal Information you would like to review. For your protection, we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable, consistent with applicable law.
Subject to applicable law, you may also have the right to object to the Processing of your Personal Information, and have the information blocked, anonymized, or deleted, as appropriate. Please note that in cases of deletion, limited personal information will remain to document the request. The right to access Personal Information may be limited in some circumstances by local law. To exercise these rights, please submit a Data Request Form.
Subject to applicable law, although the Society makes good faith efforts to provide individuals with access to their Personal Information, there may be circumstances in which the Society is unable to provide access, including but not limited to: where the information would compromise others’ privacy or other legitimate rights, where the burden or expense of providing access would be disproportionate to the risks to the individual’s privacy in the case in question, or where the information is subject to legal privilege. If the Society determines that access should be restricted in any instance, we will endeavor to provide you with an explanation of why that determination has been made and a contact point for any further inquiries. To protect your privacy, the Society will take commercially reasonable steps to verify your identity before granting access to or making any changes to your Personal Information.
Children’s Privacy. The Society does not knowingly request or collect information from any person under 13 years of age without parental consent. If you believe that your child has submitted Personal Information to the Society without your consent and you would like this info restricted or removed, please contact us using one of the methods provided in “How to Contact Us” below.
Links to Third-Party Websites. Our Services may contain links to third-party websites, whose privacy practices may be different from the Society’s. This Privacy Statement does not address, and we are not responsible for, the privacy, information or other practices of any third-parties, including any third-party operating any website or service to which the Services link. Links to other sites do not imply the Society’s endorsement of the products or services or privacy or security practices of those websites. In addition, we are not responsible for the information collection, use, disclosure or security policies or practices of other organizations, such as Facebook, Apple, Google, Microsoft, RIM or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or device manufacturer, including with respect to any Personal Information you disclose to other organizations through or in connection with the Sites or our Social Media Pages.
For California Residents. California Civil Code Section 1798.83 permits California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes during the preceding calendar year. To make such a request, please complete a Data Request Form or contact us using one of the methods provided in “How to Contact Us” below. In addition, if you are a California resident under the age of 18 and a registered user of the Services, you may ask us to remove content or information that you have posted to the Sites. To request removal, please contact us using one of the methods provided in “How to Contact Us” below. We will respond to your request consistent with applicable law. Please note that your request does not ensure complete or comprehensive removal of the content or information, as, for example, some of your public content may have been reposted by another user. Limited personal information will remain to document the request for deletion.
Lawful Basis for Processing. The laws in some countries require us to tell you about the lawful grounds we rely on to collect, use, disclose, and otherwise process your Personal Information. To the extent those laws apply, we have several different lawful bases for processing your Personal Information including: (a) as necessary to provide a service or information you request; (b) to comply with legal obligations; (c) based on your consent, and (d) in support of our legitimate interests, where those interests are not overridden by your fundamental rights and freedoms. In many cases, we handle Personal Information because it furthers our legitimate business and charitable interests. This includes:
-Providing a safe user experience on our Site;
-Sending communications to you to let you know about what we are doing with your donations and to solicit additional donations;
-Protecting users, our employees, our volunteers, and our property;
-Analyzing and improving our operations (e.g., optimizing the design and operation of our Site); and
-Managing legal issues.
Jurisdiction and Cross-Border Transfer. The Society is headquartered in the United States and has service providers in other countries, and your personal information may be transferred to the United States or other locations outside of your state, province, country, or other governmental jurisdiction where privacy laws may not be as protective as those in your jurisdiction. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities may be entitled to access your Personal Information. Where required, data transfers will be made subject to the terms of the applicable Standard Contractual Clauses or with your consent.
Information on Third-parties. If you disclose any Personal Information relating to other people to us, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Statement.
Privacy Questions and Requests. If you have any questions about this Privacy Statement or believe your privacy rights may have been violated, please contact us at:
American Cancer Society, Inc.
ATTN: Security and Privacy Requests
Shared Services Business Center
8400 Silver Crossing
Oklahoma City, OK 73132
Communication Preferences. If you wish to update or correct your personal profile or if you want to change your communication preferences or limit communications, please contact us at:
American Cancer Society, Inc.
ATTN: Security and Privacy Requests
Shared Services Business Center
8400 Silver Crossing
Oklahoma City, OK 73132
EEA Resident. If you reside in an EEA country and have questions regarding your privacy rights, you may reach the Data Protection Officer for the Society by sending an email to: email@example.com
Data Access Rights. Subject to applicable law, you may have the right to obtain confirmation regarding whether the Society processes Personal Information about you and/or to request access to, remove and/or receive information about the Personal Information that we maintain. To make such a request, please submit a Data Request Form.
Security Breach or Fraud Notification. If you witness or become aware of any suspected privacy or security breach of Society constituent data (i.e., mishandling, theft, loss, or improper disclosure of personal information) or potentially fraudulent activity, please call our toll-free hotline at 1-800-539-7202 or report online. The hotline is available 24 hours a day and is managed by an independent organization.
The Society may modify this Privacy Statement at any time. When changes are made, we will update the “last modified” section at the top of our Privacy Statement. Your use of the Society’s Services following these changes means that you accept the revised Privacy Statement.
Last Modified: January 14, 2021