Privacy Policy

Effective Date: October 7, 2025

MCM Fundraising (“we,” “us,” “our”) is committed to maintaining the confidentiality, integrity, and security of your Personal Data when you use our website (my.mcmfundraising.com) and related Application Programming Interfaces (APIs) (collectively, “Services”). Our Services are intended for residents of the United States only. This Privacy Policy explains how we collect, use, share, and protect your Personal Data. We do not sell your Personal Data or share it for monetary gain. Please read this policy carefully before using our Services.

Scope of This Policy

This Privacy Policy applies to:

  • Our website (my.mcmfundraising.com).
  • APIs and tracking tags used to integrate third-party services (e.g., payment processing, email delivery, analytics).

If you do not agree with this policy, please do not use our Services.

Information We Collect and How We Use It

We collect the following Personal Data from Group Leaders (individuals managing fundraisers), Participants (individuals fundraising), and Buyers (individuals making purchases) to provide and improve our Services:

Data Type Purpose Required/Optional
Group Leader and Participant First and Last Name Generate a unique link for the online storefront and display on their storefronts. Required
Participant Phone Number Send notifications during the fundraising event and SMS alerts (via Twilio). Required
Group Leader Phone Number Send notifications during the fundraising event, delivery confirmation, and marketing SMS messages (via Twilio). Required
Participant or Parent/Guardian Email Address Send email alerts about the fundraiser (e.g., store link, order notifications) via Mailgun. Required
Buyer Name, Email, Phone Number, Billing Address, Delivery Address Fulfill orders and troubleshoot issues. The name of the Buyer are displayed on the Seller orders page. Required
Browser and Device Data (e.g., IP Address, Device Type, Operating System, Browser Type, Screen Resolution) Analyze site usage via Google Tag Manager and Facebook tags to improve performance and user experience. Automatically Collected
Usage Data (e.g., Time Spent on Site, Pages Visited, Links Clicked, Referring Pages) Improve user experience and site functionality via Google Tag Manager and Facebook tags. Automatically Collected


How We Use Your Information

We use your Personal Data to:

  • Generate unique fundraising store links for Group Leaders and Participants.
  • Process and fulfill Buyer orders.
  • Send email and SMS notifications about fundraising events (e.g., store links, order notifications, delivery dates, marketing messages for Group Leaders).
  • Verify ownership during self-registration.
  • Improve our Services through analytics and tracking (e.g., Google Tag Manager, Facebook tags).
  • Troubleshoot technical issues and ensure platform security.

Opt-Out of Analytics and Tracking

We do not sell your Personal Data or share it for monetary gain, as defined by the California Consumer Privacy Act (CCPA) or Connecticut Data Privacy Act (CTDPA). However, we use Google Tag Manager and Facebook tags for analytics and tracking to improve our Services, which may qualify as “sharing” for targeted advertising under CCPA and CTDPA. You have the right to opt out of such analytics and tracking.

How to Opt-Out

  • Opt-Out Page: Visit our Do Not Sell or Share My Personal Information page to submit an opt-out request.
  • Global Privacy Control (GPC): Enable GPC in your browser (supported by most modern browsers, e.g., Firefox, Chrome). We honor GPC signals to disable non-essential tracking, as required by CCPA and CTDPA.
  • Email Request: Contact MCM Fundraising at officemcmteam@mcmfundraising.com with the subject line “Opt-Out Request.”
  • Mail Request: You may mail us at
    MCM Fundraising
    672 Dart Hill Rd.
    Vernon, CT, 06066
  • Third-Party Tools:
  • Browser Settings: Clear cookies or enable “Block Third-Party Cookies” in your browser to limit tracking.

We will not discriminate against you for exercising your opt-out rights. If you opt out, we will disable non-essential tracking (e.g., analytics via Google Tag Manager, Facebook tags) while maintaining essential functionality (e.g., shopping cart).

How We Share Your Information

We share Personal Data only as necessary to provide our Services or comply with legal obligations:

  • Third-Party Service Providers: We use APIs and tracking tags to integrate trusted third-party services for operational and analytics purposes, including:
    • Stripe: Processes payment information securely via its Payments API.
    • Mailgun: Sends email communications via its API.
    • Twilio: Sends SMS alerts via its API.
    • USPS: Manages shipping logistics via its Web Tools API.
    • Google Tag Manager: Manages analytics tags (e.g., Google Analytics) to collect anonymized site usage data for improving our Services.
    • Facebook Tags: Tracks user interactions on storefront pages for analytics to enhance user experience.
    • View their privacy policies: Stripe, Mailgun, Twilio, USPS, Google, Facebook.
  • Legal Requirements: We may disclose Personal Data if required by law, regulation, subpoena, or to prevent illegal activities, as determined in our sole discretion.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for core functionality, such as remembering items in your shopping cart and maintaining session data (no opt-out available).
  • Analytics Cookies: Collect anonymized data via Google Tag Manager (e.g., Google Analytics) and Facebook tags to improve site performance and user experience.
  • Debugging Tools: Help diagnose technical issues.

You can opt out of non-essential cookies and tracking:

We are working to implement a cookie consent banner for more granular control in the future. For more information, see the privacy policies of our third-party providers (e.g., Google, Facebook).

How We Protect Your Information

We implement industry-standard security measures to protect your Personal Data, including:

  • AES-256 encryption for data at rest and TLS 1.2/1.3 for data in transit.
  • Role-based access controls to limit data access to authorized personnel.
  • Regular vulnerability scanning to detect and address security risks.

In the event of a data breach, we will notify affected users and relevant authorities within 72 hours, as required by applicable law.

Data Retention

We retain all Personal Data indefinitely to fulfill the purposes outlined in this policy, such as maintaining fundraising records, supporting ongoing analytics, and ensuring operational continuity, or as required by law. For example:

  • Group Leader, Participant, and Supporter data is retained indefinitely after the fundraising event to support future fundraisers and analytics.
  • Backups of files and data are kept for no longer than 35 days.
  • You may request deletion of your data at any time (see “Your Privacy Rights”). We will honor deletion requests unless an exception applies (e.g., legal obligations). Deleted data may be retained in anonymized form for analytics or as required by law.

Your Privacy Rights

You have rights regarding your Personal Data, depending on your jurisdiction:

  • Connecticut Residents (CTDPA):
    • Right to Access: Request details about the categories, sources, and purposes of Personal Data we collect.
    • Right to Delete: Request deletion of your Personal Data, subject to legal exceptions.
    • Right to Opt-Out: Opt-out of analytics and tracking for targeted advertising (see “Opt-Out of Analytics and Tracking” above).
    • Non-Discrimination: We will not discriminate against you for exercising your CTDPA rights.
  • California Residents (CCPA):
    • Right to Know: Request details about the categories, sources, and purposes of Personal Data we collect.
    • Right to Delete: Request deletion of your Personal Data, subject to legal exceptions.
    • Right to Opt-Out: Opt-out of analytics and tracking for targeted advertising (see “Opt-Out of Analytics and Tracking” above).
    • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
  • Other Jurisdictions: Similar rights may apply under laws like Virginia’s VCDPA or Colorado’s CPA [Lawyer to specify applicable state laws].

To exercise your rights, contact MCM Fundraising at officemcmteam@mcmfundraising.com with the subject line “Privacy Request.” We may verify your identity to process requests, as required by law.

Children’s Privacy (COPPA)

Our Services are not directed to children under 13. We do not knowingly collect Personal Data from children under 13 without parental or guardian consent, in compliance with the Children’s Online Privacy Protection Act (COPPA). If you are under 13, please ask a parent or guardian to register for you.

Parents or guardians may:

  • Revoke consent and request deletion of their child’s data.
  • Contact us at officemcmteam@mcmfundraising.com with the subject line “COPPA Request” if they believe a child under 13 has provided Personal Data.

International Data Transfers

Personal Data is stored and processed on servers in Ohio, United States. As our Services are intended for US residents only, we comply with US data protection laws. If any data is processed outside the US by our third-party providers (e.g., Mailgun, Twilio), we ensure they adhere to industry-standard security practices.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies before providing Personal Data.

Do Not Track Signals

We do not respond to “Do Not Track” (DNT) browser settings, as there is no universal standard for interpreting them. Instead, use our opt-out mechanisms described in “Opt-Out of Analytics and Tracking.”

Policy Updates

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Changes are effective when posted on our website. We will notify you of significant changes via email or a website notice.

Contact Us

For questions, comments, or concerns about this Privacy Policy, contact us at: