Privacy Policy
Effective date: October 3, 2026
This Privacy Policy explains how the campaign for Andreas Sanchez for NATCA Southwest Region Vice President (“Campaign,” “we,” “us,” or “our”) collects, uses, stores, and discloses information through www.s4sw.org, campaign forms, donation and merchandise pages, and Campaign communications.
The Campaign is directed to individuals in the United States, primarily in Oklahoma, Texas, New Mexico, Alaska, and Louisiana. This Policy does not govern NATCA, your employer, Stripe, Facebook, Instagram, TikTok, YouTube, Cloudflare, or other third parties when they independently control their own information practices. Those entities’ own policies may apply.
1. Information We Collect
Depending on how you interact with the Campaign, we may collect:
A. Contact and identifying information
Name;
Email address;
Telephone number;
Facility of record;
Facility code or similar facility information; and
State or other location information that you provide.
B. Information you provide
Questions, comments, and messages;
Support statements;
Volunteer interests;
Form responses;
Communication preferences;
Email or text-message consent and opt-out records; and
Information included in correspondence with the Campaign.
Please do not submit Social Security numbers, financial-account credentials, medical information, or confidential workplace information through the website unless the Campaign specifically requests it and explains why it is needed.
C. Campaign and outreach information
Authorized Campaign administrators may create or update:
Contact records;
Outreach history;
Contact notes;
Supporter or volunteer labels;
Communication records;
Consent records; and
Administrative audit records.
The Campaign may receive information from NATCA, Campaign personnel, volunteers, or other sources. The Campaign represents that NATCA-provided information is received and used in accordance with applicable NATCA election policies and rules. The Campaign will not use information supplied by NATCA for a purpose prohibited by those policies or rules.
D. Website, device, and security information
The website or its service providers may collect:
Internet Protocol (“IP”) address;
Browser and device type;
Operating-system information;
Timestamps;
Pages viewed;
Referring URLs;
Form-interaction information;
Shopping-cart clicks and related website interactions;
Security and access logs; and
Bot-protection or fraud-prevention responses.
E. Donations and merchandise
If you make a voluntary donation or purchase merchandise, the Campaign may receive information such as:
Donation or purchase amount;
Date and time of the transaction;
Order status;
Refund or cancellation status;
Shipping information;
Items purchased; and
Limited payment-related identifiers or payment status returned by the payment processor.
Stripe or another payment processor handles payment-card and banking information. The Campaign does not store full payment-card numbers, bank-account numbers, or payment-security codes in its own systems, to the extent that accurately describes the actual payment flow.
2. How We Use Information
We may use information to:
Respond to questions, requests, and messages;
Communicate Campaign updates;
Organize Campaign outreach, volunteer activity, and supporter communications;
Maintain Campaign records;
Process voluntary donations;
Process voluntary merchandise orders;
Fulfill shipments and handle returns, refunds, and customer-service requests;
Maintain records of consent and communication preferences;
Protect the website and Campaign systems;
Detect abuse, fraud, or unauthorized activity;
Investigate security incidents;
Comply with applicable law, NATCA rules, and lawful requests;
Establish, exercise, or defend legal claims; and
Administer and improve Campaign operations.
Submitting a comment, question, or support statement does not guarantee a personal response, endorsement, or publication. The Campaign may retain and use submissions for Campaign operations, communications, compliance, or historical recordkeeping, subject to this Policy and applicable law.
3. Donations and Merchandise Are Voluntary
Donations are voluntary contributions to the Campaign. A donation is not required to access the website, purchase merchandise, communicate with the Campaign, vote, participate in NATCA, or receive any Campaign service.
Merchandise purchases are voluntary commercial transactions. A merchandise purchase is not a donation unless the Campaign expressly identifies a particular payment as a donation. The Campaign will not condition the availability of merchandise on making a donation.
The Campaign will maintain separate records for donations and merchandise transactions to the extent reasonably practicable and required by applicable NATCA rules, election requirements, tax requirements, or other law.
4. Campaign Emails and Text Messages
The Campaign may send updates by email and, if enabled, by text message.
Campaign emails will include an unsubscribe mechanism when required by applicable law. You may unsubscribe by:
Using the unsubscribe link in the email; or
Emailing alex@s4sw.org with the subject line “Unsubscribe.”
The federal CAN-SPAM Act requires commercial email senders to use accurate routing and header information, identify commercial messages appropriately, provide a valid opt-out method, and honor opt-out requests.
Text messages
The Campaign will send campaign text messages only when the Campaign has obtained any consent required for the particular message, recipient, number, and messaging technology. Merely providing a telephone number will not automatically be treated as consent to receive campaign text messages unless that method of consent is legally sufficient.
You may opt out of Campaign texts by:
Replying STOP, when supported by the messaging service;
Following the instructions in the message; or
Emailing alex@s4sw.org with the subject line “Text Opt-Out.”
The Campaign will maintain records of consent language, date, time, telephone number, and method of consent where applicable. Consent is not a condition of purchasing merchandise.
Message and data rates may apply. Message frequency varies. For help, reply HELP where supported or email alex@s4sw.org.
The Campaign will not send text messages until the Campaign has confirmed that the proposed consent language, vendor, dialing technology, and opt-out process satisfy applicable federal law and provider requirements, including the Telephone Consumer Protection Act and applicable Federal Communications Commission rules.
5. Cookies, Analytics, and Security Tools
The website may use essential cookies or similar technologies for:
Session management;
Security;
Fraud prevention;
Form protection;
Administrative access; and
Protection against unauthorized activity.
The website may use Cloudflare Turnstile or a similar bot-protection service. That service may process technical information, including IP address, browser or device data, and form-interaction information, to distinguish legitimate visitors from abusive traffic. Information about Turnstile is available in Cloudflare’s Turnstile Privacy Policy.
The Campaign uses advertising platforms operated by Meta, including Facebook and Instagram; TikTok; and Google, including YouTube. The Campaign uses those platforms’ own in-platform audience-targeting and ad-delivery tools. Campaign audience criteria may include:
Oklahoma, Texas, New Mexico, Alaska, and Louisiana;
Individuals approximately 18 through 50 years of age; and
Job-title or professional-interest criteria such as ATC.
These criteria are selected within the platforms’ tools and are not necessarily information collected directly by the Campaign. The platforms may independently process information about their users, activity, and ad interactions under their own privacy policies and terms.
The Campaign should not publish this paragraph without confirming whether the website or any Campaign vendor uses:
Meta Pixel or Conversions API;
TikTok Pixel or Events API;
Google tags, Google Ads conversion tracking, or YouTube tracking;
Cookies other than essential cookies;
Conversion tracking;
Retargeting;
Customer-list or audience uploads; or
Any other transfer of website or contact information to an advertising platform.
If any such practice is used, the Campaign will update this Policy to describe it accurately and provide any legally required opt-out or privacy-control mechanism.
6. How We Share Information
We may disclose information:
To hosting, database, email, messaging, security, bot-protection, analytics, shipping, and other service providers acting on the Campaign’s behalf;
To Stripe or another payment processor as necessary to process a donation, merchandise purchase, refund, or payment-related request;
To NATCA only where the Campaign is authorized to make the disclosure and the disclosure is consistent with applicable NATCA rules and the purpose for which the information was obtained;
To comply with law, legal process, or a lawful government request;
To protect the rights, safety, and security of the Campaign, individuals, or systems;
To investigate fraud, abuse, or security incidents; or
In connection with a Campaign transition or organizational change, subject to applicable law and this Policy.
The Campaign does not sell personal information for money. The Campaign will not characterize data transfers as “not sharing,” “not targeted advertising,” or otherwise unless the Campaign has verified the actual data flows and the applicable legal definitions.
7. Retention and Security
The Campaign retains information for as long as reasonably necessary for:
Campaign operations;
Communications;
Donation and order administration;
Security;
Legal and NATCA compliance;
Recordkeeping;
Dispute resolution; and
Establishing, exercising, or defending legal claims.
Retention periods vary by information type and purpose. The Campaign periodically reviews information and, where appropriate, deletes or minimizes information that is no longer needed.
The Campaign uses reasonable administrative, technical, and organizational safeguards designed to protect information. No website, system, or transmission method can be guaranteed to be completely secure.
Campaign information may be stored or processed in the United States, including through service providers located in or operating from states other than the states in which the Campaign’s supporters reside.
8. Privacy Requests
You do not need an account or login to submit a privacy request. You may request access to, correction of, or deletion of information associated with you by emailing:
Please use the subject line “Privacy Request” and identify the email address, telephone number, facility, order, or communication channel associated with the request.
The Campaign may request reasonable information to authenticate the request and protect against unauthorized disclosure. Do not send passwords, full payment-card numbers, bank-account credentials, or other sensitive credentials by email.
The Campaign will review and respond to requests within the period required by applicable law. The Campaign may decline or limit a request where permitted or required by law, including where information must be retained for legal compliance, security, fraud prevention, transaction administration, recordkeeping, or the establishment, exercise, or defense of legal claims.
If the Campaign declines a request in whole or in part and applicable law requires an appeal process, the Campaign will provide instructions for submitting an appeal in its response.
A deletion request directed to the Campaign will not necessarily delete information controlled independently by NATCA, Stripe, Meta, TikTok, Google, Cloudflare, an email or messaging provider, or another third party. You must contact those entities directly regarding information they independently control.
9. Children
The website and Campaign communications are not directed to children under 13. The Campaign does not knowingly request or collect personal information from children under 13. If you believe a child under 13 has provided information to the Campaign, contact alex@s4sw.org.
10. Changes to This Policy
The Campaign may update this Policy to reflect changes in Campaign practices, service providers, election rules, or applicable law. The Campaign will post the revised Policy on the website and update the effective date. If a change materially affects information already collected, the Campaign will provide any notice required by law.