Privacy Policy
Last updated: August 16, 2026
This policy explains what personal information this website collects, why we collect it, who else sees it, how long it is kept, and what you can ask us to do about it. It covers this website only.
Who is responsible for your information
The Harry Garewal for Isaac School Board campaign committee is the data controller for this website. [TODO: insert registered committee name and mailing address before launch.]
For any question about this policy or about your personal information, contact us at [TODO: campaign email address].
What this website collects
The Get Involved form
If you sign up to volunteer, request a yard sign, host a conversation, or endorse Harry, we collect:
| What | Required | Why |
|---|---|---|
| Your name | Yes | So the campaign knows who you are |
| Your phone number | Phone or email required | So the campaign can reach you |
| Your email address | Phone or email required | So the campaign can reach you |
| Your ZIP code | No | So the campaign can plan events and sign placement near you |
| How you want to help | Yes | So the right campaign team member follows up |
| Your message | No | So the campaign can respond to what you actually asked |
Your submission is stored in a campaign database. It is held in a secure database operated by our hosting provider and is also emailed to the campaign inbox. It is used only for campaign purposes: contacting you about volunteering, signs, events, endorsements, and campaign updates. We do not sell or rent your details to anyone.
Donations
When you click a donation button you leave this site and complete your contribution on Stripe's secure checkout. The information you give Stripe is covered by Stripe's own privacy policy. The campaign receives your contact and contribution details from Stripe because Arizona campaign-finance law requires the campaign to collect and report contributor information. This website itself never sees or stores your card number.
Server logs
This happens on every website, including this one. Our hosting provider records the IP address a request came from, the page requested, the time, and your browser's user agent string. It is used to keep the site available and to investigate faults or abuse. We do not use these logs to identify you or to build a profile.
What this website does NOT do
- It sets no cookies. There is nothing for you to accept or reject, which is why you have not seen a cookie banner.
- It stores nothing in your browser and runs no analytics.
- It runs no advertising or tracking scripts, and no social media pixels.
- It loads no third-party fonts. The fonts on this site are hosted on this site, so viewing a page does not report you to a font provider.
The form does contain one hidden field that you cannot see and should leave empty. It exists only to catch automated spam. It collects nothing about you.
Our legal basis for using your information
- Legitimate interests, for responding to a signup you chose to send and for keeping this website secure and working.
- Legal obligation, where campaign-finance law requires us to collect, keep, and report contributor information.
We do not make any decision about you by automated means, and we do not profile you.
Who else sees it
We do not sell your personal information and we do not share it for advertising. It reaches the following parties only because they are needed to run the site and the campaign:
| Who | What they do with it |
|---|---|
| Cloudflare | Hosts this website, runs the code that handles the form, and operates the database where signups are stored. Your submission passes through their network, and they keep the server logs described above. |
| Twilio SendGrid | Delivers the form submission to the campaign inbox as an email. |
| Stripe | Processes donations on its own secure checkout pages and shares contributor details with the campaign for finance reporting. |
| 4ward Motion Solutions, Inc. | Built and maintains this website for the campaign and operates the form email route. They act on the campaign's instructions and do not use your information for their own purposes. |
We may also disclose your information where election or campaign-finance law requires it, or to a public authority where the law requires it.
Where your information is held
The providers above may process information outside Arizona and outside the United States. Where they do, that transfer is covered by the safeguards the law requires, which in practice means standard contractual clauses or an adequacy decision covering the country concerned.
How long we keep it
- Signup submissions: kept for the duration of the campaign and afterwards only as long as election-record rules require.
- Contribution records: kept as long as campaign-finance law requires.
- Server logs: only as long as our hosting provider retains them for security and operational purposes, which is a short rolling window rather than an archive.
Your rights
Wherever you are, you can contact us to ask what we hold about you, to have it corrected, or to have it deleted. We will not charge you for asking and we will not treat you differently for having asked. Deletion does not apply to contribution records the law requires us to keep.
If you are in the UK or the European Economic Area
The UK GDPR and the EU GDPR give you the right to access your information, to have inaccurate information corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent you can withdraw it at any time.
If you think we have handled your information badly, please tell us first so that we can put it right. You also have the right to complain to your local data protection authority. Complaining to them does not stop you contacting us.
If you are a California resident
The CCPA, as amended by the CPRA, gives you the right to know what personal information we collect and why, to request a copy of it, to have it corrected, and to have it deleted. You also have the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising any of these rights.
We do not sell or share your personal information, and we do not process it for cross-context behavioral advertising. There is therefore nothing for you to opt out of, but the right stands and the statement above is what we are held to.
Children
This website is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.
Changes to this policy
If this policy changes we will update the date at the top. If a change materially affects how we use your personal information, we will say what changed rather than quietly replacing the page.
Contact
Harry Garewal for Isaac School Board campaign, Phoenix, Arizona. [TODO: campaign email and mailing address before launch.] This policy is governed by the law of Arizona, United States.