ChangeLab Solutions Privacy Policy

Updated January 1, 2024

ChangeLab Solutions is a nonprofit organization that works to advance equitable laws and policies that ensure healthy lives for all. Our Privacy Policy (“Privacy Policy”) is designed to help you understand how we collect, use, and disclose your personal information.


This Privacy Policy applies to personal information we process on our websites and subdomains, including the website located at, and other online or offline offerings (collectively, the “Services”).


Below are ways we collect personal information.

Personal Information You Provide to Us Directly

  • Your Communications with Us. We collect your first and last names and email when you subscribe to receive updates from us. We may collect your first and last names, email, zip code, and organization name when you download a document from our website. We collect your first and last names, email, phone, organization name, zip code, and country when you contact us. We may also collect personal information from you when you interact with us and/or the Services at conferences, webinars, or other events.
  • Surveys. We may contact you to participate in surveys. If you decide to participate, we may collect personal information from you in connection with the survey.
  • Interactive Features. We may collect personal information that you submit or make available through our interactive features, such as blogs and social media pages. Any information you provide using the public sharing features of the Services will be considered “public” and may not be subject to the privacy protections referenced in our Privacy Policy.
  • Requests for Proposals (“RFPs”) and Job Applications. We may post job openings, RFPs, and other opportunities on our Services. If you respond to one of these postings, we may collect your personal information, such as your application, CV/résumé, cover letter, and/or any other information you provide to us.

Personal Information We Collect Automatically

  • Automatic Collection of Personal Information. We may collect certain personal information automatically when you use the Services, such as your Internet protocol (IP) address, device identifiers, cookie identifiers, other unique identifiers, location information (including approximate location derived from IP address), and Internet service provider. We may also automatically collect information about your use of our Services, such as pages that you visit, your search queries, information about the links you click, the frequency and duration of your activities, and other information about how you use the Services.
  • Cookie Notice (and Other Technologies). We, as well as third parties that provide content or other functionality on the Services, may use cookies, pixel tags, and other technologies (“Technologies”) to automatically collect information through your use of the Services.
    • Cookies. Cookies are small text files placed in device browsers that store preferences and facilitate and enhance your experience.
    • Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded in the Services that collects information about engagement on the Services. The use of a pixel allows us to record, for example, that a user has visited a particular web page. We may also include web beacons in emails to understand whether messages have been opened, acted on, or forwarded.

See “Your Privacy Choices” below to understand your choices regarding these Technologies.

Personal Information We Collect from Third-Party Sources

  • Donations. We have registered with PayPal Charitable Giving Fund (“PayPal Giving Fund”) to raise donations to support our Services. We may receive your personal information, including your name, email address, and physical address from PayPal Giving Fund unless you have elected to donate anonymously. We may collect personal information from other sources that we use to receive donations, which are described here
  • Event Registrations. We use Zoom to host our webinars and other online meetings. We may receive your personal information from Zoom, such as your first and last names, email, physical address, organization name, job title, and other information that you provide when you register via Zoom. Personal Information you provide to Zoom is processed in accordance with Zoom’s Privacy Statement published at
  • Partner Organizations and Coalitions. We may collect personal information from partner organizations and coalitions (“Partners”) to provide you with services you have requested. We may collect your name, phone number, email, state, and organization name. We provide a list of our Partners at
  • Other Third-Party Sources. We may obtain personal information about you from other sources, including through third-party services and organizations. For example, we may obtain your personal information from event registrations, conference session rosters, or third-party lists. Additionally, if you access our Services through a third-party application, such as a social networking site, we may collect personal information about you from that third-party application that you have made public via your privacy settings. This supplemental information allows us to verify information that you have provided to us and to enhance our ability to provide you with information about our Services.


We use your personal information for a variety of business purposes, including:

  • To provide the Services, such as:
    • Managing your information;
    • Responding to your questions, comments, and requests for support, and communicating with you;
    • Providing access to certain areas, functions, and features of our Services;
    • Communicating with you about your activities on our Services and policy changes;
    • Processing your donations and other payments related to the Services;
    • Disclosing personal information to third parties as needed to provide the Services;
    • Processing applications, if you apply for a job or respond to an RFP we post on our Services;
    • Allowing you to register for events; and
    • Soliciting donations and cy pres awards.
  • To analyze and improve our Services pursuant to our legitimate interest, such as:
    • Measuring interest in and engagement with our Services;
    • Conducting research and development;
    • Carrying out analytics;
    • Improving, upgrading, or enhancing the Services;
    • Developing new products and services; and
    • Ensuring internal quality control and safety.
  • For administrative purposes, such as:
    • Enforcing our agreements and policies;
    • Carrying out activities that are required to comply with our legal obligations, protect your vital interest, or as may be required for the public good;
    • Auditing related to interactions, transactions, and other compliance activities;
    • Verifying your identity and preventing fraud;
    • Debugging to identify and repair errors with the Services;
    • Preventing potentially prohibited or illegal activities; and
    • Detecting security incidents, protecting against malicious, deceptive, fraudulent or illegal activity, and prosecuting those responsible for that activity.
  • To provide you with marketing and other content, such as:
    • Notifying you about offers, products, and services that may be of interest to you.
    • You may contact us at any time to opt out of the use of your personal information for marketing purposes, as described in “Contact Us” below.
  • With Your Consent
    • We may use personal information for other purposes that are clearly disclosed to you when you provide personal information or with your consent.
  • Creating De-identified and/or Aggregated Information. We may use personal information to create de-identified and/or aggregated information, such as demographic information, location information, information about how you use the Services, information about the device from which you access our Services, or other analyses we create. If we create or receive de-identified information, we will not attempt to re-identify such information, unless permitted by or required to comply with applicable laws. De-identified and/or aggregated information is not personal information, and we may use, disclose, and retain such information as permitted by applicable laws, including, but not limited to, for research, analysis, analytics, and any other legally permissible purposes.


We disclose personal information to third parties for a variety of business purposes, including to provide the Services, to protect us or others, or in the event of a major business transaction, as described below.

  • Service Providers. We may disclose personal information to our third-party service providers and vendors that assist us with providing the Services. This includes service providers and vendors that provide us with analytics, IT support, hosting, marketing services, payment processing, customer service, and related services.
    • Google Analytics. Because we use Google Analytics to understand how you engage with our Services, we may disclose data to Google, such as data related to your device or browser, IP address, and on-site activities, to measure and report statistics about your interactions on our Services. For more information about Google’s collection and processing of data generated by your use of the Services, please visit If you don’t want Google Analytics to be used in your browser, you can install the Google Analytics Opt-out Browser Add-on at
    • Mailchimp. Because we use Mailchimp to manage subscriptions and registrations on our Services and to manage marketing campaigns, we may disclose your personal information to Mailchimp. You can learn more about Mailchimp’s processing of your personal information from Mailchimp’s Global Privacy Statement at
  • Partners. We may disclose personal information to our Partners. In such case, our Partner’s name will appear along with ours.
  • Disclosures to Protect Us or Others. We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal processes, such as a court order or subpoena; protect your, our, or others’ rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.
  • Disclosure in the Event of Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, purchase, or sale of assets, transition of service to another provider, or other similar corporate transaction, your personal information may be disclosed, sold, or transferred as part of such a transaction.


The privacy choices you may have about your personal information are determined by applicable law and are described below.

  • Email Communications. If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails. We may also send you certain non-promotional communications regarding us and our Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to this Privacy Policy).
  • “Do Not Track.” Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
  • Cookies. You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, the Services may not work properly. Please note that you must separately opt out in each browser and on each device.


We provide our Services in the United States only and do not purposefully direct activities toward the citizens of the European Economic Area, Switzerland, and/or the United Kingdom.

All personal information processed by us may be transferred, processed, and stored anywhere in the world, including but not limited to the United States or other countries, which may have data protection laws that are different from the laws where you live. We endeavor to safeguard your personal information consistent with the requirements of applicable laws.

If we transfer personal information that originates in the European Economic Area, Switzerland, and/or the United Kingdom to a country that has not been found to provide an adequate level of protection under applicable data protection laws, one of the safeguards we may use to support such transfer is the EU Standard Contractual Clauses.


We store the personal information we collect as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.


The Services are not directed to children under 13 (or other age as required by local law outside the United States), and we do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it.


The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policy of each website and application with which they interact. We do not endorse, screen, or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.


We may update this Privacy Policy from time to time in our sole discretion. If we do, we’ll let you know by posting the updated Privacy Policy on our website and/or sending other communications. You understand and agree that you will be deemed to have accepted the updated Privacy Policy if you continue to use the Services after the new Privacy Policy takes effect.


If you have any questions about our privacy practices or this Privacy Policy, please contact us at:

ChangeLab Solutions
Attention: Privacy
2201 Broadway, Suite 701
Oakland CA 94612