This Privacy Policy describes how Hubbard Chapel & Community Center (“Hubbard Chapel,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit our website at www.hubbardchapel.com (the “Site”) or interact with us in connection with our services.

We are committed to protecting your privacy and complying with applicable privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) or United Kingdom, and other applicable U.S. state and federal privacy laws.

Please read this Privacy Policy carefully. By using our Site or services, you acknowledge that you have read and understood this Policy.

1. Information We Collect

We collect the following categories of personal information:

A. Information You Provide Directly

•       Contact and inquiry information: name, email address, phone number, and message content submitted through our contact form, inquiry form, or lead-capture popup

•       Event booking information: event date, event type, estimated guest count, venue preferences, and any other details you share when inquiring about or booking our venue

•       Communication records: emails, messages, and other correspondence you send to us

•       Payment information: billing name and address (payment card processing is handled by our third-party payment processor; we do not store full payment card numbers)

B. Information Collected Automatically

When you visit our Site, we and our third-party service providers automatically collect certain technical and usage information, including:

•       Log data: IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of your visit

•       Device information: device type, screen resolution, and hardware configuration

•       Usage data: pages viewed, links clicked, time spent on pages, and navigation paths

•       Cookie and tracking data: information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 5 for details)

C. Google Analytics Data

We use Google Analytics (provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043) to understand how visitors interact with our Site. Google Analytics collects and processes data including:

•       Anonymous usage statistics, session data, and traffic sources

•       Demographic and interest data (if enabled via Google Signals or advertising features)

•       Device and browser information

•       Geographic location at the city or region level

Google Analytics uses cookies to collect this information. Google may use data collected through Google Analytics for its own purposes, including improving Google products and services. For more information on how Google uses data from websites that use Google Analytics, please visit: https://policies.google.com/technologies/partner-sites.

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at: https://tools.google.com/dlpage/gaoptout.

D. Meta Pixel and Advertising Tags

We may use the Meta Pixel (Facebook Pixel) and related advertising tags on our Site to measure the effectiveness of our advertising campaigns, build retargeting audiences, and track conversions. These tools may collect information about your visits to our Site and your actions, including pages viewed and forms submitted, for advertising optimization purposes.

E. Information from Third Parties

We may receive information about you from third-party platforms such as Facebook, Instagram, or wedding planning directories (such as WeddingWire or The Knot) when you interact with our content or advertisements on those platforms.

2. How We Use Your Information

We use the information we collect for the following purposes:

•       To respond to your inquiries, provide venue information, and process booking requests

•       To communicate with you about your event, confirm reservations, and send relevant updates

•       To send marketing communications, newsletters, or promotional offers (with your consent where required by law)

•       To operate, maintain, and improve our Site and services

•       To analyze website traffic and user behavior through Google Analytics and similar tools

•       To run and optimize paid advertising campaigns on Google, Meta (Facebook/Instagram), and other platforms

•       To build retargeting audiences and measure ad performance

•       To comply with applicable laws, regulations, and legal obligations

•       To protect against fraud, abuse, or unauthorized access to our Site

•       To enforce our Terms of Service and other agreements

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases under the GDPR:

•       Contract performance: processing necessary to fulfill a booking or service agreement with you

•       Legitimate interests: operating and improving our Site, preventing fraud, and direct marketing to existing customers (where our interests are not overridden by your rights)

•       Consent: sending marketing communications to new contacts, placing non-essential cookies, and using advertising tracking technologies (where consent is required)

•       Legal obligation: complying with applicable laws and regulations

Where we rely on consent as a legal basis, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

4. Sharing and Disclosure of Information

We do not sell your personal information for monetary consideration. We may share your information in the following circumstances:

A. Service Providers

We share information with trusted third-party vendors and service providers who assist us in operating our Site and business, including:

•       Website hosting providers (Bluehost)

•       Analytics providers (Google Analytics / Google LLC)

•       Advertising platforms (Google Ads, Meta Ads / Facebook, Instagram)

•       Email service providers

•       Payment processors

•       Customer relationship management (CRM) tools

These providers are contractually obligated to protect your information and use it only for the purposes for which we disclose it.

B. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will provide notice of any such transfer and any resulting changes to this Privacy Policy.

C. Legal Requirements

We may disclose your information if required by law, legal process, or government authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

D. With Your Consent

We may share your information with other parties with your explicit consent.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Site. Cookies are small data files placed on your device that help us provide a better user experience and understand how our Site is used.

Types of Cookies We Use

•       Strictly necessary cookies: required for the Site to function properly (e.g., session management, security)

•       Analytics cookies: used to collect information about how visitors use our Site, including Google Analytics cookies (_ga, _gid, _gat, and related variants)

•       Marketing and advertising cookies: used to track conversions and build retargeting audiences for Google Ads and Meta advertising (e.g., Meta Pixel cookies, Google Ads conversion tracking cookies)

•       Preference cookies: used to remember your settings and preferences

Google Analytics Cookies

Google Analytics sets the following primary cookies:

•       _ga — used to distinguish users; expires after 2 years

•       _gid — used to distinguish users; expires after 24 hours

•       _gat / _gat_UA-XXXXXXXX — used to throttle request rate; expires after 1 minute

•       _gac_UA-XXXXXXXX — stores campaign-related information; expires after 90 days

If you have enabled Google Signals or advertising features, additional cookies may be set by Google for cross-device tracking and demographic reporting purposes.

Cookie Consent and Opt-Out

When you first visit our Site, we will present you with a cookie consent banner (where required by applicable law) allowing you to accept or decline non-essential cookies. You may also manage or disable cookies through your browser settings at any time; however, disabling certain cookies may affect the functionality of our Site.

Additional opt-out options:

•       Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout

•       Google Ads personalization: https://adssettings.google.com

•       Meta Ad preferences: https://www.facebook.com/ads/preferences

•       Network Advertising Initiative opt-out: https://optout.networkadvertising.org

•       Digital Advertising Alliance opt-out: https://optout.aboutads.info

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

•       Inquiry and lead data: retained for up to 24 months from the date of last contact, or longer if a booking relationship exists

•       Booking and event records: retained for 7 years following the event date for accounting and legal purposes

•       Website analytics data: Google Analytics retains data in accordance with your account settings (default: 26 months); we review and adjust retention settings periodically

•       Marketing communications: retained until you unsubscribe or request deletion

When personal information is no longer needed, we delete or anonymize it in accordance with our data retention practices.

7. Your Privacy Rights

A. California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA, effective January 1, 2023:

•       Right to Know: the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we share your information

•       Right to Delete: the right to request deletion of personal information we have collected about you, subject to certain exceptions

•       Right to Correct: the right to request correction of inaccurate personal information we maintain about you

•       Right to Opt-Out of Sale or Sharing: the right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Note: we do not sell your personal information for monetary consideration, but we may share data with advertising platforms in a manner that may constitute “sharing” under the CPRA

•       Right to Limit Use of Sensitive Personal Information: where applicable, the right to limit our use of sensitive personal information to purposes permitted by law

•       Right to Non-Discrimination: the right not to receive discriminatory treatment for exercising your privacy rights

To exercise your California privacy rights, please contact us using the information in Section 11. We will respond to verifiable consumer requests within 45 days, with one 45-day extension if necessary.

California’s “Shine the Light” law (Civil Code Section 1798.83) permits California residents to request information about our disclosure of personal information to third parties for direct marketing purposes. To make such a request, please contact us as described in Section 11.

B. EEA and UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the GDPR or UK GDPR:

•       Right of access (Article 15): the right to obtain confirmation of whether we process your personal data and to receive a copy of it

•       Right to rectification (Article 16): the right to request correction of inaccurate or incomplete personal data

•       Right to erasure (Article 17): the right to request deletion of your personal data under certain circumstances

•       Right to restriction of processing (Article 18): the right to request that we limit how we use your personal data

•       Right to data portability (Article 20): the right to receive your personal data in a structured, commonly used, machine-readable format

•       Right to object (Article 21): the right to object to processing based on legitimate interests or for direct marketing purposes

•       Right to withdraw consent: where processing is based on consent, the right to withdraw consent at any time

To exercise your GDPR rights, please contact us using the information in Section 11. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

C. Other U.S. State Residents

Residents of Colorado (CPA), Virginia (VCDPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other states with applicable privacy laws may have similar privacy rights. We honor valid rights requests from residents of all states with enacted comprehensive privacy legislation. Please contact us using the information in Section 11 to submit a request.

8. Children’s Privacy

Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verifiable parental consent, we will take prompt steps to delete that information. If you believe we have inadvertently collected information from a minor, please contact us immediately at hubbardchapel@gmail.com.

9. Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, access controls, and regular security monitoring.

However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

10. International Data Transfers

Our Site is hosted and operated in the United States. If you access our Site from outside the United States, your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. Data protection laws in the United States may differ from those in your country. By using our Site, you consent to the transfer of your information to the United States.

For transfers of personal data from the EEA or UK to the United States, we rely on applicable transfer mechanisms, including Standard Contractual Clauses where required, or the exemption for transfers necessary for the performance of a contract.

11. Contact Us — Privacy Inquiries

To exercise your privacy rights, submit a privacy-related request, ask questions about this Privacy Policy, or report a privacy concern, please contact us:

•       By email: hubbardchapel@gmail.com

•       By mail: Hubbard Chapel & Community Center, 2934 H Street, Hubbard, Oregon 97032

Please include “Privacy Request” in the subject line of your email. We will acknowledge your request within 10 business days and respond substantively as required by applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this Policy and post the revised Policy on our Site. Where required by law, we will provide more prominent notice or seek your consent. Your continued use of our Site after the effective date of any changes constitutes your acceptance of the updated Policy.