Privacy Policy

Effective date: September 10, 2025
Campaign name: Aaron Thomas Campaign (the “Campaign,” “we,” “us,” or “our”)
Contact: privacy@[replace-with-your-domain].com — please replace with the Campaign’s official contact address.

This Privacy Policy explains what personal information we collect, how we use it, when we disclose it, and the legal requirements that affect how the Campaign handles personal data under applicable federal law and Alabama law. It is written to be practical for campaign use, but does not replace legal advice — you should have counsel review it for compliance with campaign finance and privacy laws.

1. Scope — when this policy applies

This policy applies to personal information collected by the Campaign from visitors to our website and mobile apps, donors and contribution forms, event RSVPs, volunteer and employment applicants, phone and SMS lists, and other offline or online interactions with the Campaign.

2. Categories of personal information we collect

We may collect the following categories of personal information:

Identifiers & contact: name, postal address, email address, telephone number.
Financial / donation data: credit/debit information supplied to our payment processor (we do not retain raw card numbers), donation amounts, transaction dates, contribution method, and any FEC-required donor details (see Section 6).
Political data & preferences: voter registration data, party affiliation (if provided), issues and preference data collected from surveys, and volunteer interests.
Communications & usage: cookies, IP address, device identifiers, analytics and website usage logs, and messages you send to us.
Employment/Volunteer Information: résumé, references, and eligibility details for staff/volunteers.
Special categories (limited): We do not intentionally collect information about race, religion, or health unless it is voluntarily and explicitly provided for a specific purpose.
Minor’s data: we do not knowingly collect information from children under 13 online (see Section 8).

3. How we collect personal information

We collect information:

Directly from you (donation forms, volunteer sign-ups, event RSVPs, email signups, surveys).
From third-party service providers we use (payment processors, CRMs, email providers, analytics vendors).
From public sources such as voter registration or election data provided by state offices (e.g., Alabama Secretary of State voter/election data).
Automatically via cookies and similar technologies when you visit our website.

(If you provide data about others — e.g., giving a friend’s contact to invite them to an event — do so only if you have their permission.)

4. Primary uses of your personal information

We use personal information to:

Process and record campaign contributions and comply with federal and state campaign finance reporting and recordkeeping obligations.
Communicate with supporters and voters (email, phone, SMS, direct mail).
Manage volunteers, staff, events, and campaign operations.
Run targeted outreach and issue-based communications consistent with political speech and organizing.
Improve our website and user experience (analytics, security, fraud prevention).
Respond to requests, legal processes, and safety or law enforcement needs.

5. Legal basis and required disclosures for political campaigns

Federal campaign finance law requires campaigns to collect, keep, and disclose certain donor information and records. We will request and maintain any information necessary to satisfy FEC reporting and recordkeeping obligations and will disclose contributor information as required by law and FEC rules. In particular, federal law requires campaigns to use “best efforts” to collect and report the name, mailing address, occupation, and employer of individuals whose contributions aggregate in excess of $200 in a calendar year; these records must be retained and may be disclosed in public filings. Additionally, information taken from FEC reports may not be sold or used for commercial solicitation in certain ways. Legal Information InstituteFEC.gov

6. Communications: email, phone, and text messages

Email (CAN-SPAM): When we send campaign-related emails, we follow federal email rules (including CAN-SPAM); emails include an easy way to opt out/unsubscribe. CAN-SPAM applies to commercial messages and the FTC enforces related rules for email practices; we follow its guidance to respect opt-outs and provide clear sender identification. Federal Trade Commission
Phone & SMS (TCPA / FCC rules): If you provide a mobile phone number, we may contact you by call or text for campaign-related purposes. Use of automated dialing or prerecorded messages to wireless numbers is regulated under the TCPA and FCC rules; we will attempt to obtain appropriate consent before sending autodialed texts or prerecorded calls and will honor opt-out requests promptly. Please note that certain political communications remain regulated, and the Campaign follows applicable FCC/TCPA guidance. Federal Communications Commissionmslawgroup.com

7. Donor information, public filings, and restrictions

Contributions to federal campaigns are reportable and may be included in public FEC filings. Donor name, mailing address, occupation, and employer are required for contributors whose contributions exceed certain thresholds and are subject to public disclosure per FEC rules. We will notify donors when additional information is required for reporting. Legal Information Institute
The Campaign will not sell contribution lists for commercial use; any reuse of FEC public data must follow federal rules about the sale/use of contributor information. FEC.gov

8. Children’s data

The Campaign does not knowingly collect personal information from children under 13 online. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information. COPPA (the Children’s Online Privacy Protection Act) imposes special obligations on operators of sites or services that collect data from children; we comply with the FTC’s COPPA guidance where applicable. Federal Trade Commission+1

9. Data security and retention

Security: We implement reasonable administrative, technical, and physical safeguards to protect personal information (access controls, encryption where possible for stored sensitive data, secure payment processors for donations).
Retention: We retain records required by law (for example, federal campaign records and contribution records must be kept for at least three years) and otherwise retain personal data only as long as necessary for campaign operations, legal compliance, or as requested by you. FEC.gov

10. Data breach notification (Alabama requirements)

If the Campaign experiences a security breach that results in unauthorized acquisition of sensitive personally identifying information and that breach is reasonably likely to cause substantial harm, the Alabama Data Breach Notification Act and the Alabama Attorney General’s guidance require notice to affected Alabama residents and to the Attorney General’s office. We will follow Alabama law’s notification procedures and timelines for breaches affecting Alabama residents.

11. Voter file and public records

We may use publicly available voter registration and election data from the Alabama Secretary of State and other public sources for voter outreach and list-building. These records are subject to state rules and the public-records framework; when using such data, we follow state guidance on permitted uses. (If you have questions about how your voter registration data is used, you can consult the Alabama Secretary of State’s voter data pages.) Alabama Secretary of State+1

12. Sharing with third parties

We share information only as necessary to operate the Campaign and as required by law. Typical disclosures include:

Service providers (payment processors, email/SMS platforms, CRM vendors, analytics providers) who process data under contractual obligations to the Campaign.
Legal or compliance advisors and government agencies, when required by law (e.g., FEC disclosures, subpoenas).
With your consent or as otherwise disclosed at collection (for instance, when you agree to volunteer with a third-party organizer).

We require vendors to maintain appropriate security and to use personal information only for the Campaign’s purposes.

13. Your choices and rights

Opt-out/unsubscribe: You can opt out of campaign emails by following the unsubscribe link in emails. To opt out of calls/texts, reply “STOP” (where available) or contact privacy@[replace-with-your-domain].com. We will honor reasonable requests to stop direct communications.
Access & correction: You may request access to or correction of personal information the Campaign holds about you by contacting privacy@[replace-with-your-domain].com. Note: Some information (such as donor records reported to the FEC) may be subject to legal reporting obligations that limit what can be changed or removed.
Requests about public filings: If you have questions about donor information included in government disclosures, please contact the Campaign’s privacy contact or the FEC about redaction procedures where applicable.

14. Cookies, tracking, and analytics

Our website uses cookies and tracking tools (e.g., analytics providers) to improve site performance and measure engagement. You can manage cookie preferences in your browser. Third-party analytics and advertising platforms may collect information in accordance with their privacy policies.

15. International transfers

We principally operate within the United States. If personal information is processed or stored outside the U.S. (e.g., by a vendor hosting services overseas), we will require appropriate protections consistent with this Policy and applicable law.

16. Changes to this policy

We may update this Privacy Policy. We will post the updated policy on our website with the new effective date. Material changes will be communicated where practicable.

17. How to contact us / complain

If you have questions, requests, or complaints about this policy or our data practices, contact:
privacy@[replace-with-your-domain].com (please replace with the Campaign’s official email)
Mailing address (replace with Campaign office address): [Campaign address]
You may also contact the Alabama Attorney General regarding state privacy/breach concerns or the Federal Election Commission regarding federal campaign reporting questions.

18. Important legal notes / recommended next steps

This Policy summarizes applicable obligations but is not legal advice. Campaigns must follow FEC recordkeeping and disclosure rules, TCPA/FCC rules for calls/texts, CAN-SPAM for email practices, COPPA for children’s data, and Alabama breach-notification law where applicable. We strongly recommend review and sign-off by the Campaign’s legal counsel to ensure full compliance with FEC rules, state law, and recent regulatory updates.