Privacy Policy

Effective Date: May 17, 2024

The Nonprofit Risk Management Center (“NRMC”) is a nonprofit organization that provides risk management consulting services to other nonprofits and is a membership organization for nonprofit organizations and for-profit insurance and risk management providers. NRMC respects the privacy of visitors to its website. NRMC understands the importance of your personal information and provides this “Privacy Policy” below so you can understand our privacy practices and our efforts to protect your information. Personal information includes information that can be used to identify you individually and as it is defined by applicable law (referred to throughout this Privacy Policy as “personal information”).

This Privacy Policy applies to the website located at http://www.nonprofitrisk.org/, http://www.risk-resoures.org/, and any other websites, web applications, mobile applications, and other platforms or services (the “Sites”) that are owned and controlled by NRMC (hereafter referred to as “NRMC,” “we,” “us,” or “our,” where this Privacy Policy is posted. This Privacy Policy applies to all users of any of the Sites (“you,” “your,” “user”). Please read this Privacy Policy carefully as we want you to understand our privacy practices. By using the Sites, you agree to our Terms of Use agreement for the Sites and to be bound by this Privacy Policy, which is incorporated by reference into the Terms of Use agreement. Below are more details about how NRMC processes personal information from you, and your rights related to your personal information.

Our Collection and Use of Personal Information

Most of the data and personal information we collect through our Sites is used to help NRMC achieve its mission of helping nonprofit organizations strengthen risk management. NRMC collects information voluntarily given by users as well as automatically collected information as you navigate the Sites.

We may collect the following personal information from you.

Contact information when you complete the contact us form;
Newsletter sign-up information when you request to receive our weekly newsletter;
Membership information when you complete or renew a membership application;’
App User information when you use our apps, such as My Risk Assessment;
Event Registration information when you register for our events;
Payment Card information when you purchase a product, service or register for an event. NRMC utilizes a third-party payment processor that uses secure transaction methods when processing credit card information online.
Purchase and participation history, such as information about donations you have made, purchases, and events you have attended;
Demographic data, such as your gender, age, location;
Recordings from online events (audio and video);
Account creation and log-in credentials for members and Directors;
Survey responses, sharing public or private comments, and content submitted; and
Job application information (e.g., resume and cover letter).
Site Use Information: Like many organizations, we place a “cookie” (a small data file) or similar technologies such as web beacons on your computer when you visit our Sites. This allows us to recognize your computer’s IP address on return visits and helps us understand traffic patterns on our Sites so we can operate and improve them. For more information about cookies and similar technologies, and guidance about how to refuse cookies, see the below section, “How we use cookies and similar technologies.” In addition to providing our Sites to you, for security and fraud detection purposes, and to detect and evaluate malware and spam, we may scan, collect, and store data including emails, attachments, email addresses, metadata, and URLs, and traffic data from these Sites.

In most cases, NRMC asks individuals to provide their name, title, organization name, address, telephone, and e-mail. If you’re making a purchase, you may be asked for credit card information in order to complete your purchase. Similar information may be submitted to NRMC on a catalog order form or registration form.

Our Use of Personal Information

We use the personal information collected to operate our Sites, administer our events, provide our products and services, and to help us personalize and continually improve your experience with our Sites. We use your personal information when you use the Sites as follows:

Responding to your inquiries;
To collect and process donations or payments to NRMC;
To provide access to resources, products, services or purchases made with NRMC;
Communicating with you about your account or transactions with us and sending you information about features on our Sites or about NRMC;
Communicating with you about changes to our policies;
Personalizing content and experiences through our Sites;
Sending you newsletters, mailings, and information about programs, initiatives, activities, and events by email or another medium;
Processing your contractor information or employment application;
Event or program registration;
To receive event information via websites, mobile apps, email, push alerts, or social media;
When you participate as a speaker, volunteer to assist the Institute, or apply to participate in an activity we organize;
To record events or webinars;
Optimizing or improving our programs, services, and operations;
Verifying your account and account activities;
Detecting, investigating, and preventing activities that may violate our policies or be illegal;
Performing statistical, demographic, and marketing analyses of users of the Sites and their usage patterns (e.g., interactions with content such as blogs or online posts);
Managing our organization; and
For other purposes disclosed to you at the time you provide personal information to us.

NRMC may also use your personal information to protect the safety, rights, property, or security of NRMC, the Sites, or the general public; to detect, prevent, or otherwise address fraud, security, or technical issues; to prevent or stop activity which NRMC may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity; to use as evidence in litigation; to enforce this Privacy Policy and/or our Terms of Use; to comply with applicable legal or regulatory obligations; or as part of an investigation or request from law enforcement or a governmental authority.

Customer Lists

Our client list is not for sale. When you visit our website or become an Affiliate Member or consulting client of NRMC, your name and mailing information will not be sold to a commercial organization.

Individuals who register for NRMC events, such as the Risk Summit, are included on an attendee roster to support networking during and after the event. The attendee roster is an alphabetical list of attendees that will include your name, title, organization, address, email, and phone number. Sponsors of the event are notified that use of the roster for marketing purposes is strictly prohibited. If you do not want to be included on the roster, which is shared with attendees only, please let us know at info@nonprofitrisk.org.

How We Use Cookies

NRMC and its service providers may use cookies and other tracking technologies to better understand your use of our Sites. Some cookies allow us to make it easier for you to navigate our Sites, while others are used to enable a faster log-in process or to allow us to better understand usage of our Sites and interactions with content (e.g., page or post views). Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block non-essential cookies. See below for more details on how to block certain cookies.

Pixel tags display tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your device, pixels are embedded on pages. We may use pixel tags (also referred to as clear GIFs or beacons), in connection with our Sites to understand the activities of users of our Sites, help us manage content, and compile statistics about usage of our Sites. We or our third-party service providers may use similar methods in emails to help us understand email response rates and identify when our emails are viewed.

NRMC provides a cookie consent banner that allows users to our Sites to accept or reject cookies and to set their preferences related to cookies and similar technologies.

Cookies we use include:

Strictly Necessary: Some cookies are essential to enable you to move around our Sites and use their features, such as accessing secure areas of the Sites via your account login. Strictly Necessary cookies are also used to manage technical processes like server load balancing, caching, and security; to anonymize user sessions; and to store your cookie preferences so that we can honor them. Without these cookies, we cannot enable appropriate content based on your permission level. You generally cannot opt-out of these cookies.

Functional: Functional cookies store data for essential website services such as account creation, online learning modules, and media players. They may also be used to customize the user interface, and to store settings, and other user-based preferences. These cookies may be set by us or by third-party providers whose services are used on our pages. If you do not allow these cookies, then some or all of these services may not function properly.

Performance: We use our own cookies and/or third-party cookies to see how visitors use our Sites in order to enhance performance and improve our Sites.

Analytic: These cookies and other technologies allow us to understand how you interact with our Sites (e.g., how often you use the websites, where you are accessing the websites from (e.g., country, state), the content that you are interacting with). Analytic cookies enable us to support and improve how the Sites operate. For example, we use Google Analytics cookies to help us measure traffic and usage trends for the Sites, and to understand more about the demographics of our users. We also may use web beacons to gauge the effectiveness of certain communications and the effectiveness of our marketing campaigns via HTML emails. If you do not allow Analytic Cookies, then we will not know when you have visited the Sites and we will not be able to monitor its performance. For information on how to opt-out of Google Analytics, please see Google Analytics Opt-out Browser Add-on Download Page and Google’s privacy practices.

You may set your email options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our email and interacted with the content. For example, web beacons in emails may be blocked by setting your email preferences to “Plain Text Only.”

Social Media: We provide social media widgets on our Sites that link to social media pages for NRMC, NRMC events, or our specific products and services. These social media services are not owned or operated by NRMC. If you click on the social media widget, you will be taken to our page and a cookie may be set by the social media service to enable you to share our content with your friends and networks. It is your choice whether to log-in to your social media account. These sites are governed by their own privacy and related policies. Please read them to understand how they may use your information.

Vimeo: NRMC uses the available privacy functionality in Vimeo to display video content on Vimeo. Vimeo’s embeddable video player uses first-party cookies that they consider essential to the video player experience. Vimeo does not use third-party analytics or advertising cookies when their video player appears on a third-party website, unless (i) the website visitor is logged in to their Vimeo account and (ii) the user who embedded the video has not implemented the DNT Parameter. This means that Vimeo does not place cookies on a video embedded on the Site unless you press “play” to view the video. For more information, please see Vimeo’s Privacy Policy and Cookie Policy. If you choose to view an NRMC video on the Vimeo website, you should review Vimeo’s privacy and cookie policies to understand how your information is used on their website.

Ways to Manage Cookies:

There are several ways to manage cookies. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provide information on how to accept cookies, disable cookies, or to notify you when receiving a new cookie. Please note, however, that many of the cookies we use are “strictly necessary” cookies. By blocking or deleting them, you will not be able to access certain features of the Sites. For more information about cookies and how to block them, please visit allaboutcookies.org.

See All About Cookies article to learn more about blocking cookies. Note that opting out does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns.

Marketing Communications

We will send marketing and informational communications to individuals if they have affirmatively indicated they want to receive them by providing their contact. You may opt-out of these mailings, future marketing, and informational materials at any time by contacting us as noted below in the “Contact Us” Section, or by emailing us at info@nonprofitrisk.org and indicating you changed your preference or clicking the unsubscribe or opt-out feature at the bottom of electronic marketing and informational materials. If you choose to no longer receive marketing information, we may still communicate with you regarding transactional or administrative topics such as your membership, your account and service requests.

Our Disclosure of Information

NRMC may disclose your personal information in the following ways:

To vetted services providers or contractors who perform functions on our behalf (e.g., consultants, event registration platforms and apps, site analytics providers, and payment card processors);
as part of, including during negotiations or planning for, a business transfer, such as a merger or asset sale;
to protect the safety, rights, property, or security of NRMC, the Sites, or the general public; to detect, prevent, or otherwise address fraud, security, or technical issues;
to prevent or stop activity which NRMC may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity;
to use as evidence in litigation; to enforce this Privacy Policy or the Terms of Use; to comply with applicable legal or regulatory obligations; or as part of an investigation or request from law enforcement or a governmental authority.

Please note that we may also use and disclose information about you that does not identify you individually. For example, we may conduct research and publish reports that contain aggregated and statistical data about our programs, members, participants, sponsors, donors and others. We may also disclose aggregated, anonymized information about users for marketing, advertising, research, compliance, or other purposes.

Your Choices and Rights

Personal information processed by our Sites or service providers will be used for the purpose it was provided as described in this Privacy Policy. Once personal information is no longer reasonably necessary for business purposes, we will destroy or archive it in accordance with our retention and destruction policies.

We also respect your rights related to your personal information under applicable law. You may have certain rights related to your personal information including being informed about our processing of it, receiving a copy of it and to update if inaccurate, to object to processing for certain purposes and to withdraw your consent to certain processing of your personal information, to delete it, or to file a complaint with your applicable regulator.

NRMC does not sell or share your personal information with third parties for their own commercial use.

You can send us your request related to your personal information to info@nonprofitrisk.org. We may require that you verify your identity before we can honor your request. Please note that these rights are not absolute. For example, your deletion request does not ensure complete deletion as the content may be retained subject to applicable law, investigation or government order, or where we have a legitimate interest to retain the information.

California Shine the Light Law: NRMC does not share information that identifies you personally with non-affiliated third parties for their own marketing use without your permission.

Global Privacy Controls: Global Privacy Controls and requests are sent from your browser to websites you visit indicating that you do not want to be tracked or monitored. Currently, Global Privacy Controls are honored on this website.

Complaint Procedure

If you suspect that we have handled your personal information in a manner that doesn’t comply with this privacy statement, please contact us by e-mailing an explanation to Melanie Herman or by calling 703.777.3504.

Security Measures

We use appropriate technical and organizational security measures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, both during transmission and once we receive it. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Links to Other Websites

Our Sites may contain links to sites operated by third parties (“Third-Party Sites”). Please be advised that the practices described in this Privacy Policy do not apply to information gathered through these Third-Party Sites. NRMC does not endorse, review, or have any control over the content, products, or services of linked websites or their privacy policies, and NRMC is not responsible for the privacy practices of unaffiliated companies or organizations, and once you leave the Sites, you should read the applicable privacy policy of the other organization. If you decide to access any of the linked websites, please understand you do so at your own risk.

Transfer of Information

We store information processed by our Sites or service providers in the United States. If you are providing the information from another country, you agree to this transfer and understand that the information will be transferred, stored, processed and used in the United States.

Our Site is Not Directed to Children

Our Sites are not directed to children. We do not knowingly collect information from individuals under the age of thirteen. If we obtain actual knowledge that we have collected information from an individual under the age of thirteen, we will promptly delete that information, unless we are legally obligated to retain it. If you believe we have mistakenly collected information from an under thirteen individuals, please contact us as noted below.

Website Terms of Use

Your visit to the Sites is subject both to this Privacy Policy and our Terms of Use, where applicable. You can read our Terms of Use at this link.

Changes to the Privacy Policy

We may update our Privacy Policy from time to time, so please visit this page periodically and review it for any changes that may affect you. We will notify you of material changes to this Privacy Policy by posting a notice on our Site home page for a reasonable period of time and changing the “Effective Data” above. Your continued use of the Sites following the posting of the changes will constitute your acceptance of the changed policies.

Contact Information

If you have any questions or concerns about our privacy practices described above, you may reach us at info@nonprofitrisk.org or at 703-777-3504 or by regular mail at NRMC, 204 South King Street, Leesburg, VA 20175.