The Action Lab Privacy Policy

Privacy Policy

Your privacy is very important to The Action Lab (TAL) . This privacy statement provides information about the personal information that TAL  collects, and the ways in which TAL uses that personal information.

Personal Information Collection

TAL may collect and use the following kinds of personal information:

  • information about your use of this website,
  • information that you provide when registering on the website to receive emails from TAL,
  • information about transactions carried out over this website; and
  • any other information that you send to TAL via the website.

Using Personal Information

TAL may use your personal information to:

  • administer this website,
  • personalize the website for you,
  • enable your access to and use of the website services,
  • collect payments from you; and
  • send you marketing communications, which may include from our partners.

In addition to the disclosures reasonably necessary for the purposes identified elsewhere above, TAL may disclose your personal information to the extent that it is required to do so by law, in connection with any legal proceedings or prospective legal proceedings, and in order to establish, exercise or defend its legal rights.

Securing Your Data

TAL will take all reasonable technical and organizational precautions to prevent the loss, misuse or alteration of your personal information.  TAL will securely store all the personal information you provide.

Cross-border Data Transfers

Information that TAL collects may be stored and processed in and transferred between any of the countries in which TAL operates to enable the use of the information in accordance with this privacy policy. You agree to such cross-border transfers of personal information.

Updating This Statement

TAL may update this privacy policy by posting a new version on this website. You should check this page occasionally to ensure you are familiar with any changes.

Other Websites

This website contains links to other websites. TAL is not responsible for the privacy policies or practices of any third party.

Important Information: Your Privacy Rights

TAL strives to uphold best practices when it comes to privacy rights. As a nonprofit, the obligations under the California Consumer Privacy Act of 2018 (“CCPA”) do not apply to TAL. However, TAL endeavors to comply with the CCPA as the most comprehensive data privacy law in the United States, and as it encompasses obligations on TAL imposed by other jurisdictions.  The CCPA provides additional rights to know, delete and opt out, and requires businesses collecting or disclosing personal information to provide notices and means to exercise those rights. The words used in this section have the meanings given to them in the CCPA, which may be broader than their common meaning. For example, the definition of “personal information” under the CCPA includes your name, but also more general information such as age.

Notice of Collection

Although the information we collect is described in greater detail above, the categories of personal information that we have collected in the past 12 months are:

  • Identifiers, including name, email address, and an ID or number assigned to your account.
  • Constituent records, billing and shipping address, and credit or debit card information.
  • Demographics, such as your age or gender. This category includes data that may qualify as protected classifications under other California or federal laws.
  • Employment and education data, including information you provide when you apply for a job with us.
  • Inferences, including information about your interests, preferences and favorites.

For more information on our collection practices, including the sources we receive information from, please review the different forms of information collected through various means as described in more detail above. We collect and use these categories of personal information for the business purposes also described above.

Right to Know and Delete

Under the CCPA, you have the right to delete the personal information we have collected from you and the right to know certain information about our data practices in the preceding 12 months. In particular, you have the right to request the following from us:

  • The categories of personal information we have collected about you;
  • The categories of sources from which the personal information was collected;
  • The categories of personal information about you we disclosed for a business purpose or sold;
  • The categories of third parties to whom the personal information was disclosed for a business purpose or sold;
  • The business or commercial purpose for collecting or selling the personal information; and
  • The specific pieces of personal information we have collected about you.

To exercise any of these rights, please submit a request via email  at In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days.

We have a duty as the holder of certain personal information to verify your identity when making requests to know or delete personal information and to ensure that dissemination of that information would not cause harm to you if it were distributed to another person. To verify your identity, we will request and collect additional personal information from you to match it against our records. We may ask for additional information or documentation if we feel it is necessary to confirm your identity with the necessary degree of certainty. We may communicate with you through email, a secure message center, or other reasonably necessary and appropriate means. We do have the right to deny requests under certain circumstances. In such cases, we will notify you of the reasons for denial. We will not provide you with specific pieces of personal information if the disclosure creates a substantial, articulable, and unreasonable risk to the security of that personal information, your account with us, or the security of our systems or networks. In no event will we disclose, if we have collected it, your Social Security number, driver’s license number or other government-issued identification number, financial account number, any health insurance or medical identification number, an account password, or security questions and answers.

Right to Opt-Out

To the extent we sell your personal information as the term “sell” is defined under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information by us to third parties at any time. You may submit a request to opt-out by submitting a request via email at .

Authorized Agent

You may submit a request through a designated agent. You must instruct that agent that they will need to state that they are acting on your behalf when making the request, have reasonably necessary documentation, and be prepared to provide the necessary personal information to identify you in our database.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

Shine the Light

Similarly California’s “Shine the Light” law does not apply to TAL as a nonprofit, however we endeavor to comply with its provisions as a matter of best practice. California’s “Shine the Light” law permits customers to request certain details about how certain types of their information are shared with third parties and, in some cases, affiliates, for those third parties’ and affiliates’ own direct marketing purposes. Under the law, a business should either provide customers certain information upon request or permit customers to opt out of this type of sharing.

To exercise a Shine the Light request, please contact us by mail at The Action Lab, 23 Barnes Road, Ossining, NY 10562. You must put the statement “Your California Privacy Rights” in the body of your request, as well as your name, street address, city, state, and zip code. In the body of your request, please provide enough information for us to determine if this applies to you. Please note that we will not accept inquiries via the telephone, email, or by facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

Contact TAL

If you have any questions about this privacy policy or TAL’s treatment of your personal information, please write:

  • by email to or
  • by post to The Action Lab, 23 Barnes Road, Ossining, NY 10562.