Data privacy and protection
American First Responder Association (AFRA) is responsible for ensuring that it uses your data in compliance with applicable data protection laws. The purpose of this notice (the “Privacy Policy”) is to explain what personal data AFRA collects, how we use it, and how we protect it.
For the purposes of data protection law, AFRA is a data controller in respect of your personal data.
“Personal data” means any information that can identify you or that AFRA can link to you, and which AFRA has in its possession or control.
How we use your data
Personal data may be stored and processed by the American First Responder Association (AFRA) in the following ways and for the following purposes:
-
To provide AFRA programs and services, including processing membership applications, program registrations, donations, and providing confirmations, updates, and resources to our members and users.
-
To verify your identity (where applicable), especially for access to member-only sections or services that require secure login.
-
To contact you in connection with your involvement with AFRA programs, membership activities, events, volunteer opportunities, or other services you or your organization participate in.
-
To perform AFRA’s obligations under any agreement we have with you (such as membership agreements, volunteer agreements, or service participation).
-
To engage in outreach, education, and community development activities, and to inform you about AFRA programs, initiatives, events, and opportunities similar to those you’ve participated in before.
-
To administer AFRA-led community projects, training programs, or networking events when you choose to participate.
-
To notify you of changes to AFRA programs, services, or organizational policies.
-
To respond to and manage any complaints, questions, or inquiries you submit.
-
To comply with legal and regulatory obligations, including recordkeeping for IRS reporting, grant compliance, and any other applicable nonprofit governance requirements.
-
To prevent and respond to fraudulent or illegal activities impacting AFRA, its members, or stakeholders.
Legal Bases for Processing Your Data
AFRA is entitled to use your personal data under the following legal bases:
-
Consent: In situations where your consent is required (e.g., for email marketing), we will seek it in advance and you may withdraw it at any time by contacting us.
-
Performance of a contract: We may need to collect and use your data to fulfill obligations under a membership agreement, volunteer agreement, donation transaction, or other AFRA service contract.
-
Legitimate interest: We may process your data where it aligns with AFRA’s mission-driven interests (e.g., sending you information about related programs, career resources, or networking events), provided it does not override your rights and freedoms.
-
Legal compliance: We may use your data to comply with legal obligations applicable to nonprofit organizations under U.S. law