Privacy Policy

1. Introduction

This Privacy Policy explains how Nontoxic Certified Inc., a 501(c)(3) nonprofit corporation organized under the laws of the State of New York and operating as MADEWORKS Intelligence ("we," "us," "our"), collects, uses, and shares information when you visit MADEWORKS-intelligence.org (the "Site").

We publish research on substances used in consumer products. We are aware that people come to our Site because they are concerned about their health, their families, or their products, and that the act of reading our research can itself reveal something personal. We have designed our data practices around that.

This policy is incorporated into our Terms of Use.

2. Our commitments

Plainly stated, and before the detail:

• We do not sell your personal information, and we never have.
• We do not share your personal information for cross-context behavioral advertising.
• We do not use advertising or remarketing pixels on this Site. We do not build advertising audiences from what you read here, and we do not use remarketing to show you advertisements elsewhere on the internet based on the research you have viewed.
• We do not use what you read on this Site to infer health conditions, and we do not share browsing behavior with data brokers or advertising networks.
• We collect the minimum we need to run the Site and to communicate with people who have asked to hear from us.

3. Information we collect

3.1 Information you give us

If you subscribe to our mailing list, we collect your email address and any name you choose to provide.

If you contact us through the Site or by email, we collect your name, email address, and whatever you choose to tell us in your message.

If you make a donation, our payment processor, Give Lively LLC, collects your payment details directly. We receive your name, email address, mailing address, and donation amount, but we do not receive or store your full card number or bank details.

If you enquire about certification for a product or brand, we collect the contact and company information you provide.

We do not require you to provide any personal information in order to read the Content on this Site.

3.2 Information collected automatically

Like most websites, our servers record certain technical information when you visit: your IP address, browser type and version, operating system, device type, the pages you view, the time and date of your visit, and the referring website.

We use [Plausible / Fathom / Google Analytics] to understand how the Site is used, in aggregate.

[If privacy-first analytics (recommended):This service does not use cookies, does not collect personal information, and does not track visitors across websites or over time.]

[If Google Analytics: We have enabled IP anonymization and have disabled Google Signals, all advertising features, remarketing, and data sharing with Google. We do not use Google Analytics for Display Advertising, and we do not permit our analytics data to be used to serve advertising.]

We do not use Remarketing with Google Analytics, DoubleClick, Meta Pixel, LinkedIn Insight, or any comparable advertising or retargeting technology on this Site.

[CONFIRM which analytics service is in use and which settings are applied.]

3.3 Cookies

[Choose the accurate version.]

[If no cookies beyond strictly necessary:] This Site uses only cookies that are strictly necessary for it to function. We do not use advertising, tracking, or profiling cookies.

[If any non-essential cookies:] We use the following cookies Cookiebot™. You can control cookies through your browser settings. Blocking cookies may affect how parts of the Site work. [A consent banner will be required for EU and UK visitors—see Section 9.]

3.4 Information we do not collect

We do not knowingly collect: precise geolocation; biometric data; government identifiers; or health information about you as an individual. We do not ask you to tell us about your health, and we ask that you do not send us health information about yourself or others through the Site.

4. How we use information

We use the information described above to:

• Publish and operate the Site, and diagnose technical problems;
• Send our newsletter and other communications to people who have asked to receive them;
• Respond to your enquiries;
• Process and acknowledge donations, and meet related legal and reporting obligations;
• Understand, in aggregate, which research is being read, so we can decide what to publish next;
• Comply with law and protect our legal rights.

We do not use your information to profile you, to target advertising, or to draw inferences about your health, and we do not permit our service providers to do so on our behalf.

5. How we share information

We do not sell personal information. We do not share it for cross-context behavioral advertising.

We share information only in these circumstances:

Service providers. With vendors who perform functions on our behalf—email delivery, website hosting, analytics, payment processing—under contracts that limit them to processing information for us and prohibit them from using it for their own purposes. [LIST the actual vendors, or maintain a current list and link to it.]

Legal requirements. Where we are required to do so by law, or where we have a good-faith belief that disclosure is necessary to comply with legal process, enforce our Terms, or protect the rights, safety, or property of any person.

Organizational changes. In connection with a merger, acquisition, or transfer of assets, in which case we will give notice before your information becomes subject to a different privacy policy.

[MODULE — affiliated entities] [If information is shared with any affiliated organization—for example an entity conducting certification, or a related advocacy organization—that must be disclosed here, named, and the purpose stated. Note that EWG shares supporter information with its 501(c)(4) sister organization; if we have an equivalent arrangement, it must be described. CONFIRM whether Wise Group, Inc. or any other affiliate receives any personal information.]

6. How long we keep information

Information

Retained for

Newsletter subscribers

Until you unsubscribe, plus [12] months

Contact and enquiry correspondence

[24] months

Donation records

[7] years, as required for tax and audit purposes

Server logs

[30–90] days

Aggregate analytics

[26] months, in non-identifying form

We delete or anonymize information when it is no longer needed for the purpose for which it was collected.

7. Your choices

Unsubscribe. Every email we send includes an unsubscribe link.

Access, correction, deletion. You may ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. We will respond within 30 days.

Do Not Track. Some browsers send a "Do Not Track" signal.

Cookies. See Section 3.3.

8. Your rights under US state privacy laws

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you may have the right to:

• Know what personal information we collect, use, and disclose;
• Access a copy of that information;
• Correct inaccurate information;
• Request deletion;
• Opt out of sale, sharing for cross-context behavioral advertising, and profiling—we do not engage in any of these;
• Not be discriminated against for exercising these rights.

To exercise any of these rights, contact [EMAIL]. We may need to verify your identity before responding. You may designate an authorized agent to act for you.

California residents. In the twelve months preceding the date of this policy, we have collected the categories of information described in Section 3, for the purposes described in Section 4, and disclosed them only to the service providers described in Section 5. We have not sold or shared personal information. [CONFIRM before publication.] If we deny your request you may appeal by writing to us.

9. Visitors from the European Economic Area and the United Kingdom

Our research is read internationally. If you are in the EEA or UK, the following applies. [CONFIRM with counsel whether GDPR applies to us — see questions below.]

Controller. Nontoxic Certified Inc.

Legal bases. We process personal information on the basis of: your consent (newsletter, non-essential cookies); our legitimate interests in operating and improving the Site and communicating with people who contact us; and compliance with legal obligations.

Your rights. You have the right to access, rectify, erase, restrict, and object to processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your national supervisory authority.

International transfers. Our servers are located in the United States, so information is transferred out of the EEA and UK. [Describe the transfer mechanism — Standard Contractual Clauses, or reliance on processor certifications. CONFIRM with counsel and with each vendor.]

[EU/UK representative.] [Article 27 may require the appointment of a representative in the EU and UK. CONFIRM.]

10. Children

The Site is intended for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13.

If you are under 13, please do not send us your name, address, telephone number, email address, or any other personal information.

If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

[If any part of the Site is directed at teenagers — for example guidance aimed at young people — additional obligations may apply under state laws covering minors under 16 or 18. CONFIRM.]

12. Third-party links

Our research cites and links to external sources, including scientific publications, regulatory databases, and other organizations. We are not responsible for the privacy practices of any third-party site. We encourage you to read the privacy policy of any site you visit from ours.

13. Changes to this policy

If we change this policy, we will post the revised version here and update the "last updated" date. If we intend to use personal information we have already collected in a materially different way, we will seek your consent by email before doing so.

14. Contact us

Questions, requests, or complaints about this policy:

Nontoxic Certified Inc.
145 Palisade Street, Suite 200
Dobbs Ferry, NY 10522