OUR DISCLOSURE OF PERSONAL DATA 

We disclose personal data with your consent or as we determine necessary to complete your transactions or provide the services you have requested or authorized. In addition, we disclose each of the categories of personal data described above, to the types of third parties described below, for the following business purposes:

• Public information. In the event our services enable sharing of user-generated content, you may opt to publicly display and disclose your name and/or username and certain other information, such as your profile, demographic data, content and files, or geolocation data.

• Service providers. We provide personal data to vendors, agents, or partner entities working on our behalf for the purposes described in this statement. For example, companies we’ve hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data to provide those functions.

• Home project support entities. We may share data with contractors working on home projects.

• Financial support entities. We may share data with partner entities or lenders to facilitate their provision of financial support (e.g., subsidies or loans) to a household.

• Other partner entities. We provide personal data to community navigators and coaches and other such partner entities, who visit households to assess eligibility for services. This may include partners who serve as an intermediary between RA, the contractor, the homeowner, any entity providing loans or financial subsidies, and the government.

• Affiliates. We enable access to personal data across our subsidiaries, affiliates, and related companies, for example, where we share common data systems or where access helps us to provide our services and operate our business.

• Other like-minded organizations. We may share home and energy data in exchange for home and energy data from other like-minded organizations to train our machine learning model, which helps us identify households that are more likely to save money when switching to electric. 

• Corporate transactions. We may disclose personal data as part of a transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our services or assets.

• Legal and law enforcement. We will access, disclose, and preserve personal data when we believe doing so is necessary to comply with applicable law or respond to valid legal process, including from law enforcement, national security, or other government agencies.

• Security, safety, and protecting rights. We will disclose personal data if we believe it is necessary to:

  • protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone;

  • operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks; or

  • protect the rights or property of ourselves or others, including enforcing our agreements, terms, and policies.

We do not share your mobile text messaging opt-in data and consent with third parties or affiliates for their direct marketing or promotional purposes.

Third party analytics and advertising companies also collect personal data through our website including identifiers and device information (such as cookie IDs, device IDs, and IP address), geolocation data, usage data, and inferences based on and associated with that data, as described in the “Cookies” section of this statement. These third-party vendors may combine this data across multiple sites to improve analytics for their own purpose and others. For example, we use Google Analytics on our website to help us understand how users interact with our website; you can learn how Google collects and uses information at www.google.com/policies/privacy/partners.

Some of the data disclosures to these third parties may be considered a “sale” or “sharing” of personal information as defined under the laws of U.S. states. Please see the “Choice and Control” section below for more details.

Please note that some of our services also include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal data to any of those third parties, or allow us to share personal data with them, that data is governed by their privacy statements.

Finally, we may disclose de-identified information in accordance with applicable law.

CHOICE AND CONTROL OF PERSONAL DATA 

We provide a variety of ways for you to control the personal data we hold about you, including choices about how we use that data. In some jurisdictions, these controls and choices may be enforceable as rights under applicable law.

Access, portability, correction, and deletion. If you wish to access, copy, correct, or delete personal data about you that we hold, you may access your account by logging into the RA services you use. 

If you are unable to access, copy, correct, or delete certain personal data we have via the means described above, you can send us a request by using contact methods described at the bottom of this privacy statement. 

Communications preferences. You can choose whether to receive promotional communications from us by email, SMS, physical mail, and telephone. If you receive promotional email or SMS messages from us and would like to stop, you can do so by following the directions in that message or by contacting us as described in the “Contact Us” section below. If you receive a sales call from us, you can ask to be placed on our do-not-call list. These choices do not apply to certain informational communications including surveys and mandatory service communications.

Targeted advertising. To opt out from or otherwise control targeted advertising, you have several options. First, you can use the controls available through our website cookie banner to decline advertising-related cookies. Second, you can use the Global Privacy Control setting in a web browser or browser extension as described below. Third, you can use the opt-out controls offered by the organizations our advertising partners may participate in, which you can access at NAI (http://optout.networkadvertising.org) and DAA (http://optout.aboutads.info/)

Fourth, you can use the other cookie or mobile ID controls described below.

These choices are specific to the device or browser you are using. If you access our services from other devices or browsers, take these actions from those devices or browsers to ensure your choices apply to the data collected when you use them.

Personal data sharing with other organizations. To opt-out from personal data and home and energy data sharing with other organizations, as described in the “Disclosures” section of this statement, please send us a request using the contact methods described at the bottom of this privacy statement.

Data sales. Some privacy laws define “sale” broadly to include some of the disclosures described in the “Our Disclosure of Personal Data” section above. Please see below for more details about opting out from such data “sales.”

Browser or platform controls.

• Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our website. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may be deleted and may need to be recreated.

• Global Privacy Control. Some browsers and browser extensions support the “Global Privacy Control” (GPC) or similar controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales and/or targeted advertising, as specified by applicable law. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting or similar control that is recognized by regulation or otherwise widely acknowledged as a valid opt-out preference signal.

• Do Not Track. Some browsers include a "Do Not Track" (DNT) setting that can send a signal to the websites you visit indicating you do not wish to be tracked. Unlike the GPC described above, there is not a common understanding of how to interpret the DNT signal; therefore, our websites do not respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the GPC, cookie controls, and advertising controls described above.

Email web beacons. Most email clients have settings that allow you to prevent the automatic downloading of images, including web beacons, and the automatic connection to the web servers that host those images.

Except for the automated controls described above, if you send us a request to exercise your rights or these choices, to the extent permitted by applicable law, we may decline requests in certain cases. For example, we may decline requests where granting the request would be prohibited by law, could adversely affect the privacy or other rights of another person, would reveal a trade secret or other confidential information, or would interfere with a legal or business obligation that requires retention or use of the data. Further, we may decline a request where we are unable to authenticate you as the person to whom the data relates, the request is unreasonable or excessive, or where otherwise permitted by applicable law. If you receive a response from us informing you that we have declined your request, in whole or in part, you may appeal that decision by submitting your appeal using the contact methods described at the bottom of this privacy statement.

RETENTION OF PERSONAL DATA 

We retain personal data for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations. 

SECURITY OF PERSONAL DATA

We take reasonable and appropriate steps to help protect personal data from unauthorized access, use, disclosure, alteration, and destruction.

To help us protect personal data, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.

CHANGES TO THIS PRIVACY STATEMENT

We will update this privacy statement when necessary to reflect changes in our services, how we use personal data, or the applicable law. When we post changes to the statement, we will revise the "Last Updated" date at the top of the statement. If we make material changes to the statement, we will provide notice or obtain consent regarding such changes as may be required by law.

HOW TO CONTACT US

If you have a privacy concern, complaint, or a question for Rewiring America, please contact us at privacy@rewiringamerica.org.

Our address is 6218 Georgia Avenue NW, Suite #1, Washington, D.C. 20011, USA.