Privacy Policy
This policy explains how the Sanchez for Southwest campaign collects, uses, stores, and shares information provided through campaign websites, forms, and internal outreach tools. It is written for campaign operations in the United States, with campaign data currently stored in infrastructure managed from Iowa.
Information we collect
We may collect names, email addresses, phone numbers, facility codes, questions, support statements, outreach notes, email-consent choices, bot-protection responses, basic request metadata, and admin audit records.
Internal campaign administrators may also create or update contact records, labels, and contact logs to coordinate outreach and respond to members.
How we use the information
Campaign information is used to answer questions, track support, manage outreach, organize volunteer or supporter communications, protect the website from abuse, and maintain secure administration of the platform.
If you opt in to campaign emails, we use that consent to send campaign updates. Transactional security messages related to admin access are handled separately from campaign-update preferences.
Consent and communications
Email-update consent is stored separately from other contact details, along with the source and timing of the opt-in when available. You can unsubscribe from campaign-update emails using the unsubscribe link included in those messages.
Submitting a question or support form does not guarantee a personal reply, endorsement, or publication, but the campaign may retain the submission for campaign operations and historical recordkeeping.
Cookies, sessions, and bot protection
The site uses essential cookies for security functions such as admin sessions, CSRF protection, and related safeguards. Public and admin forms may use Cloudflare Turnstile or similar bot-protection checks. Turnstile responses are processed to help distinguish legitimate visitors from abusive traffic.
For more details about Turnstile processing, review Cloudflare’s Turnstile Privacy Policy.
Storage, retention, and access
Campaign data is stored in systems controlled by the campaign and its service providers. Access is limited to authorized administrators who need the information for campaign work. Records may be retained as long as reasonably necessary for campaign operations, security review, legal compliance, or dispute resolution.
Campaign staff should review records periodically and remove or minimize data that is no longer needed.
Sharing and disclosure
The campaign does not sell personal information. Information may be shared with hosting, email, database, analytics, security, and similar service providers acting on the campaign’s behalf, or when disclosure is reasonably necessary to protect the campaign, respond to legal process, or investigate abuse.
Your requests
If you want to update, correct, unsubscribe, or request deletion of contact information, use the campaign’s published contact channels. The campaign will review requests in light of operational, security, and legal needs.