Last Prisoner Project Privacy Statement
Effective as of January 1, 2021.
The Last Prisoner Project ( herein referred to as "LPP," “we,” “our,” “us”) are committed to protecting the personal information that you provide and entrust to us when using our websites.
This Online Privacy Statement describes how we treat data collected during your visit to LPP “Sites.” The LPP Sites include the LPP website at lastprisonerproject.org, and all web pages whose domain name contains www.lastprisonerproject.org, and any other websites which are operated by LPP and link to this privacy statement.
To be clear, this is not the online privacy statement for websites operated by the LPP that do not contain these domain names and do not link to this online privacy statement – for example, www.cannabisclemency.org. Those websites have site-specific privacy terms, which are posted on those sites.
This privacy statement also does not apply to websites that LPP does not operate where an LPP entity has a presence, such as LPP pages on Facebook.
Privacy and the Internet
The Internet, generally speaking, is not currently a private place. As you visit websites, use search engines, and conduct business on the Internet, many different companies and organizations are gathering information about your online behavior by tracking your searches, visits, and transactions, and then matching that data with other information about you or leveraging algorithms to predict your behavior.
Like most websites, our Sites collect and process a range of data about their visitors to enable full functionality of the website and to deliver requested services. We take many steps to protect your privacy when you visit our Sites. How and when we do so is explained below.
Data We Collect
In order to advance our advocacy and outreach programs, and to provide you with a better experience when interacting with LPP, we rely on data collected from our supporters. Data collected includes information that you provide directly and web data that may be automatically received and recorded by us from your browser. This section outlines what data is collected, as well as information on how we use collected data.
Information you provide directly
Certain pages on the Site may invite you to share personally identifying information, such as your name, address, email address, telephone number, payment information (e.g., credit card information to complete a transaction), or other information you provide when submitting an application. Sharing this information will allow you to make a donation, make a purchase in our online store, join our email list, sign a petition, register for an event or volunteer shift, send us a message or feedback, or to participate in other similar online activities.
Web data
We may automatically receive and record information from your browser when you visit our Sites. The information that we collect with these automated methods may include your IP address, cookie information, browser type, system type, and the referring URL.
In addition, if you sign up for our email list, we may send you an email that includes an embedded image to track open rates or URLs that allow us to track click-rates.
We may also use cookies to improve website performance, to remember user preferences and settings, and to collect analytic data. By “cookies” we mean small files placed on to your device by websites you visit. “Cookies” may also refer to local storage, which is a mechanism similar to cookies where the information is stored within your web browser. In some instances, we place these cookies ourselves. In other instances, we allow outside service providers to place these cookies, but only if those providers abide by our requirements described below under “How We Work with Service Providers.”
Third Party Links and Hosted Content
Our Sites are connected in a variety of ways to content hosted by third parties, including links to social media sites, links to other sites, and embedded media. When you access this content, including content that loads when you browse on the lastprisonerproject.org domain, third party content hosts may place tracking devices (e.g. cookies or pixels) on your computer, access existing tracking devices that were set when you previously visited other websites, or otherwise gather information about you as you access their content.
When you click on links to third party websites, including social media sites, you will leave our Site. To learn about how those third parties treat the data they collect through tracking devices and otherwise, see their respective online privacy policies and other posted guidance.
When you view embedded media, such as videos, that are hosted on other platforms, such as YouTube, but viewable directly through the buttons we provide, you will remain on our Site but you will be visiting these third party’s web environments. In these instances, we make clear that you are viewing external content when you click on links or buttons.
Our Data Practices
Data Uses
We may use your data to:
- Fulfill your orders or complete transactions.
- Contact you about other LPP activities or news, or about opportunities to support the LPP.
- Conduct research in order to learn about our constituents as a whole and about ways we might engage you individually.
- In the case of petitions, we may display your first name, last initial, and city and state on our website.
- In the case of petitions or other direct messages to advocacy targets (such as your member of congress), all required information fields (e.g. name, email address, etc.) will be, and some optional information fields may be, passed on to the advocacy target with your message.
- Use or share your information as otherwise disclosed at the point of collection. For example, when you elect to take an action on our website—such as sign a petition or pledge—we may request information about you and provide a notice that completing and submitting the form will mean that you permit us to share the data you have entered with other parties, such as coalition partners for that campaign.
- Deliver targeted content—including advertisements—to you over the phone, through the mail, and using digital platforms such as social media, other websites, search results pages, and mobile applications.
- Measure and improve the performance of our Site.
- Investigate or maintain the stability and security of our Site.
To perform each of these functions, we may share your information with Service Providers that support our operations. For an understanding of how your data is shared with those vendors, please see “How We Work with Service Providers” below.
Additional Uses
This section provides additional information on some special circumstances where we may use or share your data with other organizations. We believe you should have choice regarding these activities and have included information on how you can choose whether your data is used for these practices in the section Communication Preferences below. For an understanding of how your data is shared with those vendors, please see “How We Work with Service Providers” below. These additional uses are:
- Delivering targeted content, including advertisements, to you on non-LPP digital platforms such as social media, other websites, search results pages and mobile apps.
- Engaging in list sharing agreements with non-partisan organizations that may be of interest to you.
Deliver targeted content on non-LPP platforms
To enable us to provide the most relevant information on our activities, we may share your personal information with communications platforms, such as Facebook and Action Network including to deliver our content to you or to identify other people who may enjoy our content.
We may also share LPP supporter information with organizations that display our advertisements or petitions to their subscribers. This practice helps us engage in effective fundraising and advocacy operations and enables our teams to communicate more effectively with known supporters.
Importantly, we want you to have the opportunity to learn about these practices and give you the opportunity to opt out of them. Additional information on how to change your communication preferences is outlined in the section on Communication Preferences below.
Data Sharing
How We Work with Service Providers
We work with a variety of service providers who help us undertake the activities outlined in “Our Data Collection Methods,” including processing data; facilitating the operation of our site; supporting our fundraising, marketing, communications, and advocacy programs; and delivering messages to you on other platforms. For example, service providers may help us analyze traffic on our site, process credit card transactions, or facilitate activities such as the collection and delivery of petition signatures or surveys.
To the extent that any service provider has access to personally identifiable data about you, (1) it is transmitted by us to that service provider in a secure manner (please see Security Measures and Data Transmission below for more information on our security practices) and (2) we require that service provider to promise to keep that data confidential and use it only for the purpose of carrying out the functions we have engaged it to perform.
We allow some service providers to compile and use certain aggregated data for other purposes once it has been anonymized. This may include, for example, analyzing anonymized data in order to assess donor trends across organizations over time, or allowing a service provider to take aggregated and anonymized data about activity on our Site, and using that data for other purposes such as improvement of their products or benchmarking for their other clients. But we won’t agree to that unless we are confident, in each instance, that the data won’t be recombined with other information to create any record about you as an identifiable individual.
Additionally, we may share your data with service providers to deliver targeted content to you on non-LPP platforms, as described in the above section “Additional Uses.” Data shared with these service providers are transmitted in a secure manner (as described below under “Security Measures and Data Transmission”), and additionally hashed to improve privacy (hashing data refers to the practice of scrambling data in a pre-defined manner to make it more difficult to recognize). As we have limited ability to perform detailed reviews of these service providers’ security practices, and the service providers’ terms are subject to change without notice, we rely on publicly posted information to ensure their data practices meet our standards. We review these terms on a quarterly basis to ensure they have not changed their assurances.
Other Disclosures
We may also disclose your data if we are required to do so by law, such as to comply with a subpoena or other legal process, a court order, or government reporting obligations.
If we determine we are required by law to disclose your data and if we are legally permitted to do so, we will provide you with notice of the request prior to making the disclosure to give you an opportunity to object to the disclosure. We will not provide such notice, however, if the disclosure is pursuant to our regular government reporting obligations, such as financial disclosures required for tax law compliance.
Security Measures and Data Transmission
We have taken physical, electronic, and administrative measures to safeguard the information we collect. We work to ensure data accuracy and protect against unauthorized access to, and improper use of, information we collect online.
Information that can be readily linked to you personally, such as your name and address, is stored by us on servers subject to security safeguards. Additionally, all data transmitted to and from our website, including credit card numbers, are encrypted in transit.
We require our service providers to whom we transfer your information to agree to take reasonable security measures in the handling and storage of your data. For service providers with access to particularly sensitive information, we may also undergo a more intensive assessment of their platforms and security practices to verify their commitments to maintain the confidentiality and privacy of data in their possession. We may also hash data in order to improve privacy. This is true when sharing data to deliver targeted content on non-LPP platforms.
Consistent with these practices, we attempt to transmit emails to you using opportunistic Transport Layer Security (TLS). If your email provider does not accept our initial attempt to transmit using TLS, your message will be sent in plain text, which is not secure.
Communication Preferences
If you wish to update personal information or change your communication preferences, you may contact us to update our records. You have the following options to do this:
- If you are enrolled to receive our newsletter email communications: click on the “Unsubscribe” link in the footer of any LPP email to change your communication preferences.
- If you are enrolled to receive automated recurring text messages from 24365, text or reply “STOP” to 24365 to opt out, and for other autodialed text messages we send via an autodialer, reply “STOP” or follow instructions in the text message.
- To change your communications preferences for information you shared with us previously for the following:
- Paper mail communications
- Phone communications
- Data sharing with non-LPP platforms that deliver targeted content (Please note, opting out of this practice will also unsubscribe you from our email communications.)
Send an e-mail to: info@lastprisonerproject.org with the subject line: Communications Preferences
How to Disable Cookies
To provide you with maximum choice in deciding what data is collected about you, we have designed our website to work perfectly fine without cookies. If you would like to minimize the information about you collected by LPP and its third party content hosts, please see the below instructions for blocking and purging cookies. Please note disabling cookies on your browser may impact the operability of other sites you visit.
How to disable cookies in:
Procedure When We Update This Statement
Our privacy statement may change from time to time. We will post privacy statement changes on this page and, if the changes are significant, we will provide a more prominent notice on our website. We will also keep prior versions of the Online Privacy Statement available for your review in this section.
