Privacy Policy
GoodLocally (“we,” “our,” or “us”) operates the website goodlocally.co (the “Platform”) — a cause-marketing directory that connects consumers with local businesses that give back to their communities. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what choices you have.
By creating an account, claiming a listing, or using the Platform in any way, you agree to the practices described in this policy. If you do not agree, please do not use GoodLocally.
Who This Policy Covers
This policy applies to three types of users:
Consumers — people who browse the Platform to discover charitable businesses and events
Business users — owners or representatives who claim, manage, or pay for a listing
Charity users — nonprofit representatives who register or manage a charity profile
Where a section applies to all users, we say “you” without qualification. Certain sections below apply more specifically to business or charity users and are labeled accordingly.
Information We Collect
Information you give us directly
When you create an account:
- Name and email address
- Password (stored in encrypted form — we never see it in plain text)
- Account type (consumer, business, or charity)
When you claim or create a business listing:
- Business name, address, phone number, website, and hours
- Business category and description
- Photos you upload
- Charitable giving information you choose to disclose (charity name, giving structure, amounts or percentages)
- Documents uploaded for verification purposes (donation receipts, acknowledgment letters) — used solely to issue a Verified Giving badge and not shared publicly
When you register a charity profile:
- Organization name, address, phone, website
- Organization type and cause category
- Representative name and contact information
When you subscribe to a paid plan:
- Billing name and email address
- Payment information — we use Stripe to process all payments. GoodLocally never stores your full credit card number. Stripe’s own privacy policy governs how your payment data is handled. You can review it at stripe.com/privacy.
When you contact us:
- Your name, email address, and the content of your message or support request
Information we collect automatically
When you visit or use GoodLocally, we automatically collect:
- Usage data — pages viewed, searches performed, listings clicked, time spent, and navigation paths
- Device and browser data — browser type, operating system, screen resolution, and language settings
- IP address and approximate location — used to surface relevant local results and for security monitoring
- Referring URL — the link or page that brought you to GoodLocally
We collect this data through cookies and similar technologies. See Section 8 (Cookies) for more detail.
Information from third parties
- Google — with your permission, we may use your browser’s geolocation to show you nearby businesses
- Facebook — if you use “Continue with Facebook” to sign in, we receive your name and email address from Facebook
- Google Maps / Places — some listings are pre-populated with publicly available business data (name, address, phone, hours) sourced from Google Maps to help consumers find local businesses; business owners may claim and update this data at any time
How We Use Your Information
We use the information we collect to:
Operate the Platform
- Display business listings and charity profiles to consumers
- Enable business owners to claim and manage their listings
- Enable charities to confirm the giving relationships that businesses claim
- Process subscription payments and send receipts
- Enable event discovery and charitable event promotion
Verify charitable giving
- Contact named charities to confirm the giving relationships that businesses list
- Review documents submitted for Verified Giving badge status
- Display appropriate verification badges (Self-Reported, Charity Confirmed, Verified Giving) on listings
Communicate with you
- Send transactional emails: account confirmation, password reset, payment receipts, and claim notifications
- Send onboarding email sequences to new business users to help them complete their listing
- Send the weekly consumer digest to subscribers who opt in
- Respond to support requests, questions, and feedback
Improve the Platform
- Analyze usage patterns to understand which features are most valuable
- Identify and resolve technical problems
- Develop new features informed by how people use GoodLocally
Comply with legal obligations
- Respond to lawful requests from government authorities
- Enforce our Terms of Service
- Detect and prevent fraud and abuse
What Is Public on GoodLocally
The following information is visible to any visitor of the Platform — logged in or not:
- Business listing details: name, address, phone number, website, hours, category, photos, and description
- Charitable giving information that a business has chosen to disclose (charity name, giving structure, giving frequency)
- Verification badge status (Self-Reported, Charity Confirmed, or Verified Giving)
- Consumer reviews and star ratings, associated with the reviewer’s display name
- Charity profile information: organization name, cause category, partner business count, and upcoming events
Verification documents (donation receipts, acknowledgment letters) submitted for the Verified Giving badge are never made public. They are reviewed by GoodLocally staff only and stored securely.
Data Retention
We retain your information for as long as your account is active or as needed to provide our services. More specifically:
- Account data is retained until you request account deletion
- Business listing data is retained as long as the listing is active; pre-populated unclaimed listings may be retained as directory records indefinitely
- Payment and billing records are retained for seven years for accounting and tax compliance purposes
- Verification documents (receipts, acknowledgment letters) are retained for two years after the verification decision
- Analytics data is retained for 26 months in aggregated, non-identifiable form
- Email correspondence and support tickets are retained for three years
You may request deletion of your personal account data at any time by contacting diego@goodlocally Note that deleting your account does not automatically remove public directory listing information, which exists as an independent business record. To request removal of a listing, contact us separately.
Your Rights and Choices
California residents (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect and how we use it, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise any CCPA right, contact diego@goodlocally.co.
Wisconsin residents
GoodLocally is headquartered in Madison, Wisconsin and complies with applicable Wisconsin consumer protection and privacy law. Contact us at diego@goodlocally.co with any questions or concerns.
To exercise any right, email diego@goodlocally.co with “Privacy Request” in the subject line. We will respond within 30 days.
Security
We take reasonable technical and organizational measures to protect your personal information, including:
- Encrypted data transmission (HTTPS / TLS) across all pages
- Encrypted password storage using industry-standard hashing
- Role-based access controls limiting who within our organization can access personal data
- Regular security updates to our WordPress platform and plugins
- Payment data handled exclusively by Stripe — we never process or store card numbers directly
No method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
Children’s Privacy
GoodLocally is not directed at children under the age of 13 and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information without parental consent, we will delete that information promptly. If you believe a child under 13 has created an account or submitted information on GoodLocally, please contact us at diego@goodlocally.co.
Third-Party Links
GoodLocally contains links to external business websites, charity websites, and third-party platforms (including Google Maps, Facebook, and Stripe). This Privacy Policy does not apply to those external sites. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies before sharing personal information with them.
Changes to This Policy
We may update this Privacy Policy from time to time as the Platform evolves. When we make changes, we will update the “Last updated” date at the top of this page. For significant changes — such as new categories of data collection or new ways of sharing your information — we will notify you by email or by a prominent notice on the Platform at least 14 days before the change takes effect.
Your continued use of GoodLocally after changes are posted constitutes your acceptance of the updated policy. If you do not agree with a change, you may delete your account before it takes effect.
Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please reach out:
- General support: diego@goodlocally.co
- Website: goodlocally.co
- Location: Madison, Wisconsin, USA
We aim to respond to all privacy-related requests within 2 business days and to resolve them within 30 days.