Privacy Policy
Who we are
Our website address is: https://tommy4spdchief.com. If you have questions about this policy or your personal data, you can contact us via the site’s Contact page.
Comments
When visitors leave comments on the site we collect the data shown on the comment form (name, email, website) and may also collect the visitor’s IP address and browser user agent string to help detect spam. If you provide an email address, an anonymized hash of that address may be sent to the Gravatar service to check for a profile image. Gravatar’s privacy policy is here: Gravatar’s privacy policy: . Approved comments and the commenter’s profile image (if available) are visible publicly next to the comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms and messages: If you use a contact or volunteer form we collect the information you provide (name, email, phone number, message) so we can respond to inquiries and process volunteer requests.
Log data and diagnostics: We may collect technical data such as IP addresses, browser type, referring pages, and other usage data for security, site performance, and spam prevention.
Cookies
Comment cookies: If you leave a comment you may choose to save your name, email, and website in cookies for your convenience. These cookies persist for one year.
Login and session cookies: If the site includes a login area, we set temporary cookies to check whether your browser accepts cookies. Login cookies (if used) last two days by default; screen options cookies last one year. If you select “Remember Me,” your login may persist for up to two weeks. Logging out will remove login cookies.
Post editing cookies: If you edit or publish a post, we may set a temporary cookie that indicates the post ID you edited; it expires after one day.
Cookies and Tracking from Embedded Facebook Content: Embedded Facebook content may set cookies or use similar tracking technologies to deliver, measure, and personalize content or advertising. These cookies are set by Facebook and are subject to Meta’s cookie practices. To opt out of Facebook’s personalized tracking, adjust your Facebook ad and privacy settings or use browser-based cookie controls. In jurisdictions where applicable, our cookie consent banner may block embedded social content until you grant consent.
Embedded content from other websites
Pages on this site may include embedded content such as YouTube videos, social posts, or other third-party media. Embedded content behaves the same as if you had visited the third-party site directly. Those third-party sites may collect data about you, use cookies, include additional tracking, and monitor your interactions with the embedded content (including when you are logged into those services).
Facebook Feed and Embedded Content: We display a Facebook Page feed on this site using a third‑party plugin and connect to Facebook (Meta Platforms, Inc.) via an access token associated with our Page. The feed displays public posts from our Facebook Page; the access token is stored securely and is not exposed to site visitors. When you visit pages that include embedded Facebook content (for example, an embedded timeline, posts, or videos), Facebook may collect information about your visit, set or read cookies, and track your interactions with the embedded content. This data collection and processing are governed by Meta’s privacy policy: . We do not control Facebook’s data collection practices and we do not sell your personal information to Facebook. If you wish to limit Facebook’s tracking, review your Facebook privacy settings and use your browser or device cookie controls or privacy extensions.
Donations and payment processing:
If you make a donation through this Site, we collect the information necessary to process and record the contribution (for example: name, billing address, contribution amount, and email). Payment card or bank account information is processed by third‑party payment processor(s) used on this Site (for example, Stripe, PayPal, or similar). We do not store full payment card numbers or full bank account credentials on our servers unless explicitly stated; payment card data is handled according to the payment processor’s security and PCI‑DSS requirements. We store transaction records, processor reference IDs, and any donor information required for campaign accounting and legal reporting. By making a contribution you represent that the funds are from permissible sources under applicable law. Contributions to the Thomas Williams Campaign Fund are not tax‑deductible as charitable contributions.
Email delivery and WP Mail SMTP / Google OAuth:
The Site uses WP Mail SMTP (or similar) and may use Google APIs to reliably deliver form notifications to the campaign email account (). To do this we request only the minimum Gmail permissions required to send email (for example, gmail.send) and basic profile/email scopes to confirm the authorized sending account. We do not read or store the contents of the campaign Gmail mailbox. Only the minimal OAuth tokens/credentials required to send mail are stored on the Site and are protected by the Site’s security measures. The Gmail account owner can revoke the Site’s access at any time: Google Account → Security → Third‑party apps with account access → select the app → Remove Access. Deleting the OAuth client in Google Cloud Console will also invalidate issued tokens.
Communications and opt‑out:
If you provide your email address or otherwise opt in, we may send campaign updates, event notices, volunteer requests, and fundraising communications. You can opt out of marketing or fundraising emails at any time by following the unsubscribe link in any such email or by contacting us at . Please note that transactional or administrative emails (such as donation receipts, volunteer confirmations, or important account notices) may still be sent even if you opt out of marketing messages.
Data retention — donations, forms, and records:
We retain personal data only as long as necessary to fulfill the purposes described in this policy, to maintain campaign records, and to meet legal and regulatory obligations. Donation and campaign finance records may be retained for multiple years as required by applicable election laws and for audit purposes. Form submissions (contact, volunteer, endorsement, sign requests) are retained for campaign and administrative use and will be deleted earlier upon valid request where permitted by law.
Security:
We implement reasonable administrative, technical, and physical safeguards intended to protect personal data from unauthorized access, disclosure, alteration, or destruction. These measures include secure hosting, access controls, and encryption where appropriate. However, no method of electronic transmission or storage is completely secure; we cannot guarantee absolute security. If you believe your data has been compromised, contact us immediately at .
Children: The Site is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have inadvertently collected such information, we will take steps to delete it.
Paid for by: Thomas Williams Campaign Fund. Contributions are subject to applicable campaign finance laws. For campaign finance questions, contact the campaign at or refer to the appropriate election authority.
Third‑party processors and transfers:
We use third‑party service providers (for payment processing, hosting, analytics, email delivery, and embedded/social content). These providers may collect, store, or process personal data on our behalf and have their own privacy practices. We require service providers to protect personal data and to use it only to perform services for us. Personal data may be transferred to and processed in the United States or other countries; by using the Site you consent to such transfers.
To request deletion of your personal data, please visit our Data Deletion Instructions page: or contact .
How we use your data
To respond to messages and volunteer inquiries, to moderate and display comments, to prevent and detect spam or abuse, and to operate and secure the website. We may also use aggregated or anonymized data for site analytics and performance improvements.
Who we share your data with
Third-party services used to operate the site (for example, spam detection services, hosting providers, and embedded content providers) may receive the data needed to perform their services. If you request a password reset (where applicable), your IP address may be included in the reset email for security.
We will not sell your personal information. We may disclose data if required by law or to protect the rights, property, or safety of the site or others.
We use third-party services, including Meta, to display social content. While we do not transfer or sell your personal data to Meta for our own purposes, Meta may process information about you when you view or interact with embedded content. For details on Meta’s data practices, see .
How long we retain your data
Comments and associated metadata are retained indefinitely to help us recognize and approve follow-up comments automatically.
For users who register (if registration is available), we retain the information provided in their user profile. Registered users can view, edit, or delete their personal information at any time (except usernames may not be changed). Site administrators can also view and edit user information.
Your rights over your data
If you have an account on this site, or have left comments, you can request an exported copy of the personal data we hold about you. You may also request that we erase any personal data we hold about you, subject to legal and administrative retention obligations. To exercise these rights, contact us through the site’s Contact page or email us at .
Where your data is sent
Visitor comments and form submissions may be checked by automated spam detection or security services. Embedded content is provided by third parties and is subject to those services’ own privacy practices.
Changes to this policy
We may update this privacy policy from time to time. When we make changes we will post the revised policy on the site with an updated effective date.
Effective date
This policy is effective as of the date it is published on the site: October 27, 2025.