Collection and Use of Personal Information
We collect personal data that you provide to us when you are asked to register for a Blackbaud ID and when you use the Services you access through BBID, including your name, email address, phone number, IP address, and organization you’re affiliated with that has contracted for the Services you are using BBID to access.
Blackbaud collects data in the following categories:
|Identifiers||Name, email, phone number, IP address|
|Internet/Solutions activity||Your interaction with our websites or Solutions|
|Professional information||Organization for which you are a user|
In addition to the purposes described when we collect data from you, we may use your personal information in the following ways:
- Log In: Using your Blackbaud ID, we allow you to sign into the secure portion of our website or a Blackbaud Solution. We also use your data to give you access to the Blackbaud Community, where we may notify you of important news and alerts about our Services.
- Improving Blackbaud: We use aggregated and personal data about you and your use of our websites and the Blackbaud Services to develop, improve, and test those services.
- Compliance and Safety: We may use your personal data to comply with our legal obligations and to identify and remediate suspected or actual fraudulent activity or security incidents.
We keep your personal data in an identifiable form for as long as we have a legitimate reason to use the data and as required by law.
Blackbaud may share your personal information as necessary to provide the Services or as you specifically request. We may disclose your data to our affiliated organizations and subsidiaries, and to service providers who render services to us or you on our behalf. We also may disclose your information if required by law or to enforce our legal rights or defend us against a legal claim or for the identification or remediation of suspected or actual fraudulent activity or security incidents. We may share your information in connection with a sale or reorganization of Blackbaud. We may also share your personal data if it is necessary to act in urgent circumstances to protect the safety of Blackbaud customers, website visitors, or the public.
Blackbaud does not sell your personal information collected in connection with BBID or share your personal information with any third parties for targeted behavioral advertising. We also don’t collect, use, or disclose any sensitive personal information, as defined under applicable state or federal law, except as described below (see “Children’s Privacy”).
Information about your consumer privacy rights can be found below and at: https://www.blackbaud.com/company/data-subject-rights-request
Access to your Personal Information
If you are a registered user of our website, you may review and update this information at any time on www.blackbaud.com. Registered users can view and edit personal information they have already given us.
Blackbaud does not knowingly collect any information from children under the age of 13 in the United States unless and until a student’s school has obtained appropriate parental consent for a student under the age of 13 to use BBID. Because Blackbaud collects and uses personal information of students at the direction of and under the control of a school, Blackbaud relies on each school to provide appropriate notice to parents of the school’s use of third party service providers such as Blackbaud, and for the schools to provide consent, if necessary, and authorization for Blackbaud to collect personal information of students, as permitted by the Children’s Online Privacy Protection Act (COPPA) and other applicable data protection laws. We collect, use, process and retain personal information of students solely to provide the educational services on behalf of the school and for the purposes set forth in our agreement with the school. Please contact us at firstname.lastname@example.org if you believe we have inadvertently collected personal information of a child without proper consent so that we may delete such data as soon as possible.
Security of your Personal Information
We restrict access to personal information collected about you a t our website to our employees, our affiliates’ employees, those who are otherwise specified in this Policy or others who need to know that information to provide the Services to you or in the course of conducting our business operations or activities. While no website can guarantee exhaustive security, we maintain appropriate physical, electronic and procedural safeguards to protect your personal information collected via the website. We protect our databases with various physical, technical and procedural measures and we restrict access to your information by unauthorized persons. We also advise all Blackbaud employees about their responsibility to protect customer data and we provide them with appropriate guidelines for adhering to our company’s business ethics standards and confidentiality policies. Inside Blackbaud, data is stored in password-controlled servers with limited access.
Links to Other Websites
For your convenience, we may provide links to other websites that we do not control. We cannot be responsible for the privacy practices of any websites not under our control and we do not endorse any of these websites, the services or products described or offered on such sites or any of the content contained on those sites.
A cookie is a piece of information that a web server may place on your computer when you visit a website. Cookies are commonly used by websites to improve the user experience and have not been known to transmit computer viruses or otherwise harm your computer. Many cookies last only through a single website session, or visit. Others may have an expiration date, or may remain on your computer until you delete them.
Our cookies will track only your activity relating to your online activity on this website, and will not track your other Internet activity.
You can decide if and how your computer will accept a cookie by configuring your preferences or options in your browser. However, if you choose to reject cookies, you may not be able to use certain of our Services or website features. For example, if you choose to not have your browser accept cookies from Blackbaud’s website, you will need to re-enter your personal information each time that you attempt to access premium information.
Certain pages on our websites contain “web beacons” (also known as Internet tags, pixel tags and clear GIFs). These web beacons allow third parties to obtain information such as the IP address of the computer that downloaded the page on which the beacon appears, the URL of the page on which the beacon appears, the time the page containing the beacon was viewed, the type of browser used to view the page, and the information in cookies set by the third party.
An IP address is a unique identifier that certain electronic devices use to identify and communicate with each other on the Internet. When you visit our website, we may view the IP address of the device you use to connect to the Internet. We use this information to determine the general physical location of the device and understand from what regions of the world our website visitors come. We also may use this information to enhance our website.
Our website detects and honors the Global Privacy Control signal in accordance with applicable privacy laws. The Global Privacy Control is a signal that can be enabled in certain browsers or browser extensions.
Keeping Your Data
We keep your personal data in an identifiable form for as long as we have a legitimate reason to use the data and as required by law.
Blackbaud will maintain and use de-identified data only in a de-identified form and not attempt to re-identify de-identified data.
US Consumer Privacy Rights Requests
Five states afford consumers in those states additional privacy rights. These states are:
- The California Consumer Privacy Act (the “CCPA”);
- The Colorado Privacy Act (the “CPA”);
- The Connecticut Act Concerning Personal Data Privacy and Online Monitoring (the “CTDPA”);
- The Utah Consumer Privacy Act (the “UCPA”); and
- The Virginia Consumer Data Protection Act (the “VCDPA”).
The additional privacy protections provided by those laws include: including the right to know what information we collect, disclose, and sell; the right to access a copy of your data; the right to request deletion or correction of your data; and the right to opt out of the sale of your data or the sharing of your data for purposes of targeted behavioral advertising. Businesses can’t discriminate against you for exercising any of these rights.
In the section above titled “Collection and Use of Personal Information,” we have included descriptions of: the data we collect; the categories of sources of such information; and the purposes for which we use and disclose the data.
Blackbaud does not sell your personal information collected in connection with BBID or share your personal information with any third parties for targeted behavioral advertising. We also don’t collect, use, or disclose any sensitive personal information, as defined under applicable state or federal law.
To exercise any of your rights, please see our Data Subject Rights Request page at https://www.blackbaud.com/company/Data-Subject-Rights-Request or call our toll-free number at +1 844-532-0022. We will verify your identity where required prior to fulfilling your request, which may require government identification. Authorized agents may be used to submit rights requests, in which cases we will take steps to verify the consumer’s identity and that the agent has authority to act on the consumer’s behalf.
Individuals in the UK, EEA, and Switzerland
Legal Bases for Using Your Data
We process your personal data on a variety of legal bases depending on the use. Blackbaud has a legitimate commercial interest in using your data to improve Blackbaud. When you request that we perform certain functions for you, these activities require that we process your personal details, or else we can’t perform the function you’re requesting. The functions you can request are to provide you with a Blackbaud ID and provide you with the Services you use. These uses of your data are necessary for us to perform a contract or a request you’ve made.
Our Legitimate Interests
We may process your personal data for the purposes of our legitimate interests, provided that these uses aren’t outweighed by your rights or interests. For any uses we justify on the basis of legitimate interest, you have the right to opt out of such processing by contacting us. For each of the following purposes, we have conducted a legitimate interest assessment to ensure that such processing isn’t overridden by your rights or interests.
Making Blackbaud Better: As stated above, we use aggregated and personal data about you and your use of our website and Services to develop and test such Services. These activities are necessary to fulfill our interest in creating better tools for enhancing the ecosystem of good by helping us create better technology, better communications and a better website.
Consequences of Not Providing Data
You are not required to provide personal data to us. Note, however, that your failure to do so may affect our ability to provide the Services and fulfil your requests. For example, we cannot provide you access to the Services without authorising you as a user for your organisation.
Blackbaud does not conduct automated decision-making on BBID users.
Blackbaud recognises that your personal data belongs to you and we don’t wish to use it in ways that you don’t want us to.
- You can exercise a variety of rights regarding our use of your data:
- You can ask us for a copy of the information we have about you.
- You can ask us to correct any incorrect data we have about you. If you are a registered user of our website, you may review and update this information at any time on www.blackbaud.co.uk. Registered users can view and edit personal information they have already given us.
- You can ask us to delete your data.
- You can ask for your data in a common, machine-readable format.
- You can object to any processing we do on the basis of legitimate interests.
- You can ask us to restrict the processing of your data. We may send you e-mails with promotional offers, special event information, sales notifications or other messages. If you would no longer like to receive such e-mails from us, please follow the “Unsubscribe” instructions at the end of each email or contact us. Your e-mail address will be removed from our marketing list.
To exercise your access, correction, or deletion rights, please see our Consumer Privacy Rights Request page [add link]. For all other requests, please contact us at email@example.com. Note that some of these rights aren’t absolute—for example, we may not be able to forget you if we have to keep some of your data to comply with the law—but we’ll evaluate your request in accordance with applicable data protection laws. Blackbaud will respond to your request within one month of receiving it. Also, note that you have the right to lodge a complaint with the UK Information Commissioner’s Office or the supervisory authority in your country of residence or place of work.
Individuals in Australia
You can notify us of any complaint you may have about our handling of your personal information by emailing firstname.lastname@example.org. We will endeavor to reply to you within 30 days of receipt of the complaint and, where appropriate, will advise you of the general reasons for the outcome of the complaint. While we hope that we will be able to resolve any complaints you may have without needing to involve third parties, if you are not satisfied with the outcome of your complaint, you can refer your complaint to the Office of the Australian Information Commissioner.
How to Reach Us
For questions about this Policy or our privacy practices or to appeal a decision we’ve made regarding your privacy rights, please email email@example.com.
Changes to this Policy
Blackbaud may update this Policy at any time and from time to time and we will post any changes to this page. The most recent version of the Policy is reflected by the version date located at the bottom of this Policy.
Last updated January 1, 2023