Privacy Policy

Last Updated: 02/24/2025

1. Introduction

Campus to Commerce (“we,” “our,” or “us”) is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [campustocommerce.org], use our services, or participate in our micro-internship programs.
This policy has been developed in compliance with applicable privacy laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and relevant regulations concerning payment data protection.
Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our website or services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

Register on our website
Create a profile as a student or business
Apply for or offer micro-internships
Make donations or payments
Subscribe to newsletters
Participate in surveys or feedback
Contact us

Depending on your interaction with us, this personal information may include:

For Students:

Full name and contact information
Educational background
Employment history
Skills and qualifications
Portfolio samples
Career interests
Demographic information
Payment details (for receiving compensation)

For Businesses:

Company name and contact information
Business type and industry
Representative names and positions
Project requirements
Company description
Payment information

For Donors/Supporters:

Name and contact information
Donation history
Payment information
Communication preferences

2.2 Micro-Internship Data

In addition to general personal information, we collect and process data specific to our micro-internship programs, including:

Internship applications and selections
Project assignments and descriptions
Performance evaluations
Feedback and testimonials
Time tracking records
Skill development assessments
Completion certificates

2.3 Payment Information

When you make or receive payments through our platform, we collect payment data necessary to process transactions. This may include:

Credit/debit card details
Bank account information
PayPal account information
Billing addresses
Transaction histories

Important: Full payment card details are processed through secure, PCI-DSS compliant payment processors. We do not store complete credit card numbers on our servers.

2.4 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device and usage, including:

IP address
Device type
Browser type and version
Operating system
Access times and dates
Pages viewed
Links clicked
Referring websites
Search terms used to reach our site
Interactions with site elements

2.5 Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information and enhance your experience. These technologies help us:

Remember your preferences
Understand how you use our website
Personalize content
Improve site functionality
Analyze traffic patterns
Secure your account

For detailed information about our use of these technologies, please see our Cookie Policy.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we collect and process your personal information based on one or more of the following legal grounds:

Consent: You have given clear consent for us to process your personal information for a specific purpose.
Contract Performance: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided those interests don’t override your fundamental rights and freedoms.
Legal Obligation: Processing is necessary for compliance with a legal obligation.
Vital Interests: Processing is necessary to protect someone’s life.
Public Interest: Processing is necessary for the performance of a task carried out in the public interest.

4. How We Use Your Information

We may use the information we collect for various purposes, including to:

4.1 Provide and Manage Services

Operate and maintain our website and platform
Facilitate micro-internship programs
Match students with business opportunities
Process applications and placements
Facilitate payments and donations
Provide customer support

4.2 Improve and Develop

Personalize user experiences
Analyze usage patterns and trends
Develop new features and services
Test and troubleshoot site functionality
Conduct research and surveys

4.3 Communicate

Send service notifications and updates
Provide administrative information
Respond to inquiries and requests
Send marketing communications (with consent)
Share newsletters and educational content
Solicit feedback

4.4 Ensure Security and Compliance

Verify identities
Detect and prevent fraud
Enforce our terms of service
Comply with legal obligations
Resolve disputes
Protect our rights and property

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you
Whether there is a legal obligation to retain the data
Whether retention is advisable considering our legal position (such as statutes of limitations, litigation, or regulatory investigations)

5.1 Specific Retention Periods

Account information: Retained until you delete your account or request deletion
Transaction records: Retained for 7 years for tax and accounting purposes
Communications: Retained for 2 years after your last interaction with us
Internship records: Retained for 5 years after completion
Inactive accounts: Subject to deletion after 2 years of inactivity

6. Disclosure of Your Information

We may share information we have collected about you in certain situations, including:

6.1 Service Providers

We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf. These third parties are contractually obligated to use your information only for the services they provide to us and are prohibited from using or disclosing your information for other purposes.

6.2 Program Participants

For Students: Your profile and application information may be shared with business partners offering internships.
For Businesses: Your company information and internship details may be shared with student applicants.

6.3 Business Transfers

If we or our assets are acquired by another company, or in the unlikely event of a merger, restructuring, reorganization, dissolution, or similar event, your information may be part of the transferred assets.

6.4 Legal Requirements

We may disclose your information where required by law, governmental request, judicial proceeding, court order, or legal process.

6.5 Protection

We may disclose information when we believe disclosure is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation.

6.6 With Consent

We may share your information with your consent or at your direction.

7. International Data Transfers

We are based in the United States and the information we collect is governed by U.S. law. If you are accessing our website from outside the United States, please be aware that information collected through the website may be transferred to, processed, stored, and used in the United States and other jurisdictions.
For transfers from the EEA to countries not deemed by the European Commission to provide an adequate level of personal data protection, we use Standard Contractual Clauses approved by the European Commission or rely on other legal bases for transfer, such as the derogations available under Article 49 of the GDPR.

8. Data Security

We implement appropriate technical and organizational security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of sensitive data
Regular security assessments
Access controls and authentication requirements
Secure data storage and transmission protocols
Staff training on data protection
Incident response procedures

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. These may include:

9.1 For All Users

Access: Request access to your personal information
Correction: Request correction of inaccurate data
Opt-out: Unsubscribe from marketing communications

9.2 GDPR Rights (EU/EEA Residents)

Access: Obtain confirmation that we process your data and receive a copy of your data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data under certain circumstances
Restriction: Limit how we use your data under certain circumstances
Data Portability: Receive your data in a structured, commonly used format
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw previously given consent for processing

9.3 CCPA Rights (California Residents)

Right to Know: Request disclosure of personal information collected, used, disclosed, or sold
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt out of the sale of personal information
Right to Non-Discrimination: Not be discriminated against for exercising these rights

To exercise your rights, please contact us using the information in the “Contact Us” section. We may need to verify your identity before fulfilling your request.

10. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected personal information from a child under 16, we will delete this information promptly. If you believe we might have any information from or about a child under 16, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date. If we make material changes to this Privacy Policy, we will notify you by prominently posting a notice of such changes or by directly sending you a notification.
We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Campus to Commerce
2615 Pickway Dr.
Charlotte, NC 28269
Email: [email protected]
Phone: 980-819-9267
For EU/EEA residents: You have the right to lodge a complaint with a supervisory authority in your country of residence.

Cookie Policy

Last Updated: 02/24/2025

1. Introduction

This Cookie Policy explains how Campus to Commerce (“we”, “us”, “our”) uses cookies and similar technologies on our website campustocommerce.org. This policy should be read alongside our Privacy Policy, which explains how we use personal information.

2. What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to the website owners. Cookies enhance user experience by remembering your preferences and enabling certain site functions.

3. Types of Cookies We Use

3.1 Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as security, account management, and network management. You cannot opt out of these cookies.

3.2 Preference Cookies

These cookies remember your choices and settings to enhance your experience, such as language preferences or region selection.

3.3 Analytics Cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this information to improve our website and services.

3.4 Marketing Cookies

These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share information with other organizations or advertisers.

3.5 Third-Party Cookies

Some pages on our website may include content from third-party services (like social media, video platforms, or payment processors) which may use their own cookies. We do not control these cookies.

4. Specific Cookies We Use

5. Managing Cookies

Most web browsers allow you to control cookies through their settings. You can:

Delete cookies from your device
Block cookies by activating browser settings
Set your browser to notify you when you receive a cookie

Please note that restricting cookies may impact the functionality of our website.

6. Changes to This Cookie Policy

We may update this Cookie Policy from time to time. We encourage you to periodically review this page for the latest information.

7. Contact Us

If you have any questions about our use of cookies, please contact us at [email protected].

Payment Data Processing Notice

Last Updated: 02/24/2025

1. Payment Processing

Campus to Commerce uses trusted third-party payment processors to handle payment transactions. These processors may include:

PayPal
Zeffy
Give
Venmo

When you make or receive a payment through our platform, you provide your payment information directly to these third-party processors, who maintain the security and compliance of that information according to their respective policies and industry standards.

2. Payment Information We Collect

While we do not directly collect or store full payment card details, we may receive and store certain limited payment information, including:

The last four digits of your credit/debit card
The expiration date of your card
Your billing address
Transaction records (amounts, dates, status)
Payment method type

3. PCI-DSS Compliance

Our payment processing partners are Payment Card Industry Data Security Standard (PCI-DSS) compliant. This compliance ensures that your payment card information is processed according to strict security standards.

4. How We Use Payment Information

We use payment information to:

Process transactions
Verify your identity
Prevent fraud
Resolve disputes
Maintain transaction records for accounting and tax purposes

5. Payment Data Security

We implement appropriate security measures to protect the payment information we receive, including:

Encryption of data transmission
Secure storage practices
Access restrictions
Regular security assessments

6. Third-Party Payment Processors

Each third-party payment processor has its own privacy policy and terms of service that govern their collection and use of your payment information. We encourage you to review these policies before completing a transaction.

7. Data Retention

We retain transaction records for [7 years] to comply with tax regulations and accounting practices. Limited payment information is retained for the duration of our relationship with you, or as needed for legal and operational purposes.

8. Your Rights

You have the right to:

Request information about the payment data we store
Request deletion of your payment information (subject to legal retention requirements)
Update your payment information

9. Contact Us

For questions regarding payment data, please contact:
Campus to Commerce
Email: [email protected]