Privacy policy
Yes PAC Privacy Policy
Effective Date: May 25, 2026
Last Updated: May 25, 2026
1. ABOUT THIS POLICY
Yes PAC ("Yes PAC," "we," "us," or "our") is a Virginia state political action committee registered with the Virginia State Board of Elections (Committee ID: PAC-24-00062). Our principal mailing address is:
Yes PAC
9890 Liberia Ave #1166
Manassas, VA 20110
This Privacy Policy explains how we collect, use, share, and protect personal information when you visit yespacva.com, sign a petition, attend an event, contribute, subscribe to our emails, opt in to text messages, or otherwise interact with us.
By using our website or services, you agree to the practices described here. If you do not agree, please do not use our services.
2. INFORMATION WE COLLECT
We collect information directly from you when you choose to provide it, and automatically through technology when you interact with our website.
2.1 Information you give us directly
• Identity and contact information: name, email address, mailing address, phone number
• Communication preferences: language, email subscription status, SMS opt-in status, contact channel preference
• Engagement information: petitions signed, events RSVP'd, volunteer interests, issues you care about, personal stories you share with us
• Donation information: amount, payment processor identifiers, recurring donation status, donation history
• Compliance information required by law for donors: employer, occupation, citizenship/residency status, attestation that the donation is from your own funds and that you are not a federal contractor
• Volunteer information: availability, skills, willingness to participate in specific activities
2.2 Information collected automatically
• Email engagement: opens, clicks, unsubscribes (via our email service provider)
• Website usage: IP address, browser type, device type, pages visited, referring URL, date/time of visit (via standard web server logs)
• UTM parameters and form referral data: which campaign or link brought you to our site
2.3 Information from third parties
• Donation processor data: when you contribute through Anedot, we receive transaction confirmation and your contact information
• Geographic enrichment: we may use third-party services to determine your congressional or state legislative district from your address
We do not purchase, rent, or otherwise acquire your information from data brokers or list rental providers without your prior consent.
3. HOW WE USE YOUR INFORMATION
We use your information to:
• Send you email and (with your opt-in) SMS communications about our work
• Process your donations and provide receipts
• Comply with federal and Virginia campaign finance reporting requirements
• Invite you to events and follow up with you afterward
• Match you with volunteer opportunities
• Personalize content based on your stated issue interests and location
• Improve our outreach by analyzing what resonates with our supporters
• Detect and prevent fraud, abuse, or unauthorized use
• Comply with legal obligations
4. HOW WE SHARE YOUR INFORMATION
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We share your information only in the limited circumstances described below.
4.1 SMS Data Non-Sharing (Mobile Information)
No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services (e.g., customer service) is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
4.2 Service providers
We share information with vendors who help us operate, including:
• Anedot - donation processing
• GoHighLevel - email/SMS delivery, CRM
• Google Workspace - internal email
• Other service providers acting on our behalf, bound by confidentiality
These vendors may only use your information to perform services for Yes PAC and must protect it consistent with this Policy.
4.3 Required public disclosure (campaign finance law)
Important: If you contribute to Yes PAC, your name, mailing address, employer, occupation, contribution amount, and contribution date may be reported publicly to the Virginia State Board of Elections (and, if Yes PAC becomes a federal committee, to the Federal Election Commission). These disclosures are required by law and the resulting reports are searchable by members of the public.
You will be reminded of this disclosure at the point of contribution.
4.4 Legal compliance
We may disclose information when required by law, subpoena, court order, or to protect our rights, safety, or property, or that of others.
4.5 Business transfers
Yes PAC has no current plans to merge with or transfer assets to any other organization. If a transfer ever occurs, you will be notified and your information will continue to be governed by this Policy or a successor policy of equivalent protection.
5. COOKIES AND TRACKING
Our website uses standard web server logs and basic functional cookies necessary for site operation. We currently do not use advertising retargeting, third-party advertising cookies, or pixels from advertising networks (Meta, Google Ads, TikTok, etc.).
If we add tracking technologies in the future, we will update this Policy and (where required by law) request your consent.
6. YOUR PRIVACY RIGHTS
6.1 Email and SMS opt-out
You may unsubscribe from our emails at any time by clicking the "Unsubscribe" link in any email. You may opt out of SMS messages at any time by replying STOP to any text message.
6.2 California residents (CCPA / CPRA)
If you are a California resident, you have the right to:
• Know what personal information we have collected about you
• Access a copy of your personal information
• Delete your personal information, subject to legal exceptions (such as records we must retain under campaign finance law)
• Correct inaccurate personal information
• Opt out of sale or sharing - we do not sell or share your information, so there is nothing to opt out of, but you may confirm this
• Non-discrimination - we will not deny services or charge different prices for exercising these rights
• Limit use of sensitive personal information to the extent applicable
To exercise these rights, contact us at yespac@yespacva.com with "California Privacy Request" in the subject line.
6.3 Virginia residents (VCDPA)
If you are a Virginia resident, you have the right to:
• Confirm whether we process your personal data
• Access your personal data
• Correct inaccuracies
• Delete personal data, subject to legal retention requirements
• Receive a portable copy of your data
• Opt out of targeted advertising, sale of personal data, or profiling with legal/significant effects (we do not engage in these activities)
To exercise these rights, contact us at yespac@yespacva.com with "Virginia Privacy Request" in the subject line.
6.4 Response timeline
We will acknowledge requests within 15 days and complete them within the timeframe required by applicable law (typically 45 days under CCPA/VCDPA, extendable once for an additional 45 days where reasonably necessary).
6.5 Verification
To protect your information, we may need to verify your identity before fulfilling a request. We will only use the information you provide for verification.
6.6 Appeals (Virginia)
If we deny your VCDPA request, you may appeal by replying to our denial within 30 days. We will respond to your appeal within 60 days. If your appeal is denied, you may contact the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform.
7. DATA RETENTION
We retain personal information for as long as needed to:
• Maintain ongoing communication with you (until you unsubscribe)
• Comply with campaign finance recordkeeping requirements (typically 3 years after the relevant election cycle for Virginia state committees)
• Resolve disputes and enforce our agreements
Contribution records required by Virginia law are retained for the legally required period regardless of deletion requests.
8. DATA SECURITY
We use commercially reasonable administrative, technical, and physical safeguards to protect your information, including:
• Encrypted connections (HTTPS) for our website and forms
• Authenticated email sending (SPF, DKIM, DMARC)
• Limited access to personal data on a need-to-know basis
• Vendor agreements requiring equivalent security from service providers
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and applicable regulators as required by law.
9. CHILDREN'S PRIVACY
Our services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Additionally, Yes PAC does not knowingly accept contributions from anyone under 18 years of age. If you believe a child has provided us with personal information, please contact yespac@yespacva.com and we will delete it.
10. THIRD-PARTY LINKS
Our website may contain links to third-party sites (donation processor, social media, news articles). We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing personal information.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The "Last Updated" date at the top will reflect the most recent revision. Material changes will be communicated via email or website notice when feasible. Your continued use of our services after changes take effect indicates your acceptance of the revised Policy.
12. CONTACT US
For questions, concerns, or requests about this Privacy Policy or your personal information:
Email: yespac@yespacva.com (please put "Privacy Request" in the subject)
Mail:
Yes PAC
Attn: Privacy Officer
9890 Liberia Ave #1166
Manassas, VA 20110
Paid for by Yes PAC. Not authorized by any candidate or candidate's committee.