Privacy Policy

Last updated April 29, 2026

Notice at Collection. When you submit your name, email address, or other personal information to us through a contact form, a newsletter subscription form, or any other interaction with the Services, we collect the information you provide for the purposes described in this notice. We do not sell your personal information for monetary or other valuable consideration; we do not share your personal information for cross-context behavioral advertising; and we do not knowingly collect or process sensitive personal information about you. To exercise your privacy rights, see the rights section below or contact us at info@nokilladvocacycenter.org.

This privacy notice for The No Kill Advocacy Center ("we," "us," or "our") describes how and why we may collect, store, use, or share ("process") your information when you use our services ("Services"), including when you visit https://nokilladvocacycenter.org or any related website that links to this notice; subscribe to our newsletter on Substack; or contact us in any other way.

Reading this notice will help you understand your privacy rights and choices. If you have questions, contact us at info@nokilladvocacycenter.org.

Summary of Key Points

What personal information do we process? Names, email addresses, and technical information collected automatically when you visit the Services (Internet Protocol address, browser type, device type, page view history, approximate region).

Do we knowingly collect sensitive personal information? No. We do not knowingly collect data that reveals categories of sensitive personal information under applicable law (such as health information, biometric data, precise geolocation, financial account numbers, racial or ethnic origin, religious beliefs, or political opinions).

Do we receive information from third parties? Aggregated and pseudonymous event-level analytics from Google Analytics 4 and Vercel Analytics. Subscriber records and engagement metrics from Substack for newsletter subscribers (we are the controller of subscriber data; Substack acts as our service provider for newsletter delivery).

How do we process your information? To deliver the Services you requested; to send you the newsletter you subscribed to; to understand site usage in aggregate; to secure the site; and to comply with law.

With whom do we share information? Vercel (our website host); Google (analytics); Vercel Analytics; Substack (newsletter platform); and, when required by law, regulators or law enforcement.

Do we sell or share your information for advertising? No. We do not sell your personal information in exchange for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising.

Do we transfer your information internationally? Yes. Our service providers (Vercel, Google, and Substack) operate in the United States and other jurisdictions. Where we transfer personal information of European Economic Area, United Kingdom, or Swiss residents to the United States, we rely on the European Union–United States Data Privacy Framework, the United Kingdom Extension to the Data Privacy Framework, the Swiss–United States Data Privacy Framework, and Standard Contractual Clauses, depending on the recipient.

How do we keep your information safe? Through technical and organizational safeguards. No system is one hundred percent secure. We will notify you and applicable regulators of a personal information breach where required by law and within the deadlines required by law.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, or port your information; to object to processing; to opt out of sale or sharing; to opt out of profiling; or to lodge a complaint with a regulator. To exercise any of these rights, contact us at info@nokilladvocacycenter.org.

Table of Contents
  1. What information do we collect?
  2. How do we process your information?
  3. What legal bases do we rely on?
  4. When and with whom do we share your information?
  5. Do we use cookies and similar tracking technologies?
  6. Do we transfer your information internationally?
  7. How long do we keep your information?
  8. How do we keep your information safe?
  9. Do we knowingly collect information from children?
  10. What are your privacy rights?
  11. Controls for Do Not Track features and Global Privacy Control
  12. Rights under United States state privacy laws
  13. Notice for Nevada residents
  14. Authorized agents and how to appeal a decision
  15. Rights for residents of the European Economic Area, the United Kingdom, Switzerland, and Canada
  16. Do we make updates to this notice?
  17. How can you contact us?
  18. How can you review, update, or delete your information?

1. What Information Do We Collect?

Information you give us

We collect personal information that you voluntarily provide when you contact us, subscribe to our newsletter, or otherwise interact with the Services. This typically includes:

  • Names
  • Email addresses

We do not knowingly collect sensitive personal information about you. We do not knowingly collect categories of sensitive personal information defined under the California Privacy Rights Act, the General Data Protection Regulation Article 9, or any analogous state law (such as health information, biometric data, precise geolocation, financial account numbers, government identifiers, racial or ethnic origin, religious beliefs, or political opinions).

When you donate, your payment details are collected directly by our third-party payment processors (e.g., Stripe or PayPal). We do not knowingly collect or process sensitive financial account numbers on our systems.

Information collected automatically

When you visit the Services, the following information is collected automatically by our hosting and analytics providers:

  • Internet Protocol address
  • Browser type, version, and language
  • Operating system
  • Device type
  • Pages visited and time spent on each page
  • Referring website
  • Approximate geographic region (country and region, derived from the Internet Protocol address; we do not collect precise geolocation)
  • Date and time of visit

This information is used for security, performance monitoring, and aggregate analytics.

Information from Substack

If you subscribe to our newsletter, Substack collects your email address, subscription preferences, and (if you read the newsletter on Substack's site or app) reading and engagement data. Substack provides our newsletter platform; that processing is governed by the Substack privacy notice at substack.com/privacy.

2. How Do We Process Your Information?

We process your information for these purposes:

  • To deliver the Services you requested
  • To send you the newsletter you subscribed to (through Substack)
  • To respond to your inquiries and correspondence
  • To understand site usage in aggregate and improve the Services
  • To detect, prevent, and address technical issues, security threats, and fraud
  • To comply with legal obligations and to protect our rights or those of others

We process your information only when we have a valid legal reason to do so.

3. What Legal Bases Do We Rely On?

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation, the United Kingdom General Data Protection Regulation, and the Swiss Federal Act on Data Protection:

  • Consent. Where you have given clear consent (for example, by submitting a contact form or subscribing to the newsletter). You may withdraw consent at any time.
  • Legitimate interests. For aggregate analytics, security monitoring, and fraud prevention.
  • Legal obligation. Where required by applicable law.
  • Vital interests. In rare cases involving threats to safety.

If you are in the United States, we process your information consistent with applicable federal and state privacy law, including the laws referenced in section 12.

4. When and With Whom Do We Share Your Information?

We share information with the following categories of recipients, who act as our service providers (processors) under written terms or otherwise as described:

  • Vercel, our website host. Vercel acts as our service provider for hosting and for first-party Vercel Analytics under Vercel's published terms.
  • Google, our analytics provider. We have configured Google Analytics 4 to disable Google Signals, ad-personalization signals, and ad storage; we treat the Google Analytics 4 data flow as a service-provider relationship under the Google Ads Data Processing Terms.
  • Substack, our newsletter platform. Where Substack processes newsletter subscriber data on our behalf, it acts as our service provider; Substack is independently a controller of certain platform-level data for its own operational purposes.
  • Legal authorities, when required by law, court order, or to defend our rights.
  • Successors in interest, in the event of a merger, acquisition, sale of assets, or similar transaction.

We do not sell your personal information in exchange for monetary or other valuable consideration. We do not share your personal information with third parties for cross-context behavioral advertising.

5. Do We Use Cookies and Similar Tracking Technologies?

Yes. See the Cookie Notice below for the inventory and details on how to control cookies.

6. Do We Transfer Your Information Internationally?

Yes. Our service providers (Vercel, Google, and Substack) operate in the United States and may transfer personal information across borders during processing. Where personal information of European Economic Area, United Kingdom, or Swiss residents is transferred to the United States, we rely on:

  • The European Union–United States Data Privacy Framework, the United Kingdom Extension to the Data Privacy Framework, and the Swiss–United States Data Privacy Framework for transfers to providers that are self-certified under those frameworks; and
  • The European Commission's Standard Contractual Clauses (and the United Kingdom International Data Transfer Addendum) for transfers to providers that are not self-certified under the Data Privacy Framework.

7. How Long Do We Keep Your Information?

We retain personal information until you request its deletion or until applicable law requires us to delete it sooner. To request deletion, contact us at the email above.

8. How Do We Keep Your Information Safe?

We implement reasonable technical and organizational security measures designed to protect your information. However, no electronic transmission or storage system is one hundred percent secure. Transmission to and from the Services is at your own risk.

If we become aware of a breach of personal information that creates a material risk to affected individuals, we will notify affected individuals and applicable regulators in accordance with applicable law and within the deadlines required by law. State breach-notification statutes (including California Civil Code Section 1798.82, the New York SHIELD Act, and similar laws in other states) and the General Data Protection Regulation Articles 33 and 34 may apply, depending on where you live.

9. Do We Knowingly Collect Information From Children?

The Services are not directed to children under thirteen years of age. We do not knowingly collect personal information from children under thirteen, and we do not knowingly target children under thirteen with marketing. If you believe a child under thirteen has provided personal information to us, please contact us at info@nokilladvocacycenter.org and we will investigate and respond.

Federal Children's Online Privacy Protection Act protections apply to users under thirteen. If you are the parent or legal guardian of a child whose information we may have collected, you have the right to review the information, request deletion, and refuse further collection.

For users between the ages of thirteen and sixteen who reside in California, we do not knowingly sell or share personal information without affirmative opt-in consent from the user.

Some states grant California residents under eighteen who have a registered account the right to request removal of unwanted data they publicly post on the Services. See section 12 below for the California-specific provisions.

10. What Are Your Privacy Rights?

Depending on where you live, applicable law may give you the following rights:

  • Access. Request a copy of the personal information we hold about you.
  • Rectification. Ask us to correct inaccurate or incomplete information.
  • Erasure. Ask us to delete your information.
  • Restriction. Ask us to restrict how we process your information.
  • Objection. Object to processing based on our legitimate interests.
  • Portability. Receive your information in a portable format.
  • Withdraw consent. Withdraw consent at any time, without affecting the lawfulness of prior processing.
  • Opt out. Opt out of the sale or sharing of personal information for targeted advertising, and (where applicable) of profiling that produces legal or similarly significant effects.
  • Non-discrimination. Exercise your rights without retaliation, denial of services, or different pricing.

To exercise any of these rights, contact us at info@nokilladvocacycenter.org. We will respond within the time required by applicable law.

Opting out of marketing. You can unsubscribe from the newsletter at any time using the unsubscribe link at the bottom of every email or through your Substack account. We may still send service-related messages (for example, security or legal notices).

11. Controls for Do Not Track Features and Global Privacy Control

Most browsers include a "Do Not Track" feature. We honor DNT signals and treat them as a deny signal for analytics_storage and ad-related processing categories.

For California residents (and for residents of any other state that recognizes opt-out preference signals), we honor a Global Privacy Control signal sent by your browser as a request to opt out of the sale or sharing of personal information. When the Services detect a Global Privacy Control signal, we suppress non-essential analytics scripts and treat the visit as opted out.

12. Rights Under United States State Privacy Laws

Several United States states have enacted comprehensive consumer privacy laws. As of the date of this notice, those states include California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Other states may enact comparable laws while this notice is in force.

Several of these state laws exempt nonprofit organizations or apply only to controllers above specified revenue or volume thresholds that we do not meet.

The rights granted by each state's law generally include the rights to know, access, delete, and (where the controller sells or shares for advertising) opt out of sale or sharing. Most states (Iowa is one exception) also grant a right to correct inaccurate information; several states also grant the right to appeal a denied request and the right to opt out of profiling that produces legal or similarly significant effects.

We treat the limited information shared with Google through Google Analytics 4 as a service-provider relationship under the Google Ads Data Processing Terms; we have configured Google Analytics 4 to disable Google Signals, ad-personalization signals, and ad storage.

Specific points worth noting:

  • The California Consumer Privacy Act, as amended by the California Privacy Rights Act, also grants California residents the right to limit the use and disclosure of sensitive personal information. We do not knowingly collect or process sensitive personal information.
  • California Civil Code Section 1798.83 (the "Shine the Light" law) entitles California residents (where the law applies) to request information about disclosures of personal information to third parties for direct marketing purposes. We do not disclose personal information for direct marketing.
  • If you are a California resident under eighteen years of age and have a registered account with the Services, you have the right to request removal of unwanted data you publicly post on the Services under California Business and Professions Code Section 22581. Contact us at info@nokilladvocacycenter.org.
  • Rhode Island law requires us to identify by name the third parties to whom we sell personal information. We do not sell personal information; the third parties to whom we disclose information for service-provider purposes are listed in section 4 above.

To exercise any of these rights, contact us at info@nokilladvocacycenter.org with your name, the state in which you reside, and the right you wish to exercise. We may ask you to confirm details we already have on file (for example, your email address) to verify the request.

13. Notice for Nevada Residents

Nevada Senate Bill 220 (codified at Nevada Revised Statutes Chapter 603A) gives Nevada residents the right to direct an operator of a commercial website not to sell their covered information. We do not sell personal information. If you are a Nevada resident and would like to submit a verified request to opt out of any future sale of your covered information, contact us at info@nokilladvocacycenter.org with the subject line "Nevada Privacy Request" and a statement that you are a Nevada resident.

14. How to Appeal a Decision

Right to appeal. Under the laws of Colorado, Connecticut, Virginia, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, and Texas, if we deny your privacy request in whole or in part, you may appeal our decision. To appeal, reply to the email in which we delivered our decision, or send a new email to info@nokilladvocacycenter.org with the subject line "Privacy Appeal" within a reasonable period after our decision. We will respond to your appeal within the time required by your state's law (typically 45 to 60 days, with one extension where state law permits). If we deny your appeal, you may file a complaint with your state Attorney General. California residents may also file a complaint with the California Privacy Protection Agency.

15. Rights for Residents of the European Economic Area, the United Kingdom, Switzerland, and Canada

If you are located in the European Economic Area or the United Kingdom and believe we are unlawfully processing your information, you have the right to lodge a complaint with your supervisory authority. A list of European Economic Area authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en. The United Kingdom authority is the Information Commissioner's Office at ico.org.uk.

If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner at edoeb.admin.ch/en.

16. Do We Make Updates to This Notice?

We may update this notice from time to time. The updated version will be indicated by a revised "Last updated" date and will take effect as soon as it is published. Where required by law, we will notify you of material changes.

17. How Can You Contact Us?

If you have questions or comments about this notice, contact us at info@nokilladvocacycenter.org or by mail at:

The No Kill Advocacy Center
P.O. Box 182, Canyon, CA 94516, United States

18. How Can You Review, Update, or Delete Your Information?

You have the right to request access to, correction of, or deletion of the personal information we hold about you. Send your request to info@nokilladvocacycenter.org. We will respond within the time required by applicable law.