Last updated as of July 2021
What Information Do We Collect?
We collect both personally identifiable information (“Personal Information”) and non-personally identifiable information. This information includes:
“Personal information” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
We collect the following types of personal information:
- Physical Address;
- Email Address;
- Phone Number;
- Personal Health Information that you choose to disclose;
- Geolocation Information; and
- Credit Card Numbers;
Non-Personal Information refers to information that we may collect about you that cannot be used to identify you by itself. Non-Personal Information is information that by itself typically cannot be used to identify or contact you, such as demographic information (e.g., age, profession, or gender), browser types, domain names, and other anonymous statistical data involving the use of our online platforms.
Non-Personal Information includes certain information that we automatically collect when you visit or interact with the Online Platforms (“Use Information”). Use Information may include the browser you use to access the Online Platforms, URL that referred you to the Online Platform, the areas within the Online Platforms you visit, time of day, geographic location and other information. The Society may use Use Information for various purposes, including but not limited to, enhancing or otherwise improving the Online Platforms. In addition, we collect your IP address or other unique identifier (“Device Identifier”) for your computer, tablet, mobile or other device used to access the Online Platforms (each a “Device”). A Device Identifier is a number that is automatically assigned to your Device used to access the Online Platforms, and our computers identify your Device by its Device Identifier. Use Information may be associated with you or non-identifying. Whenever we associate Use Information or a Device Identifier with your Personal Information, we will treat it as Personal Information.
Information Third Parties May Provide About You
The Society may monitor the Online Platforms to analyze trends, administer the Online Platforms, track your actions and use of the Online Platforms, record transactions, and gather demographic information for aggregate use. Such analysis is not linked to Personal Information. We use Google Analytics for tracking where visitors come from and what they are doing on our Online Platforms. This information helps us evaluate our marketing efforts and how visitors use our Online Platforms, so we can make improvements to the user experience. This information is anonymous. The Society may share aggregated demographic and usage information with its vendors, consultants, and contractors. This aggregated information is not linked to any personal information that can identify any individual person.
Cookies and Other Technologies
We use the following technologies to collect Personal and Non-Personal Information:
Certain features of our Online Platforms may use local stored objects (or Flash cookies) to collect and store information about your preferences and navigation to, from and on our Online Platforms. Flash cookies are not managed by the same browser settings as are used for browser cookies.
Pages of our Online Platforms and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs. pixel tags and single-pixel gifs) that permit us to count users who have visited those pages or opened an e-mail and for other related website statistics (for example, recording the popularity of certain Online Platform content and verifying system and server integrity).
If you are traveling in a vehicle when accessing the Online Platforms, your Device may send your GPS coordinates. GPS enabled mobile Devices can define your location to within 50 feet. We collect this information for various purposes - including to provide you geographically relevant information.
We may associate your unique mobile Device Identifier or mobile application usage information with any Personal Information you provide. We will treat the combined information as Personal Information.
We also may use Behavioral Advertising cookies which are a way of providing advertisements on the websites you visit and making them more relevant to your interests. Your web browsing activity is grouped together with your shared interests and advertising is then displayed to you when you visit a website which matches these interests. Behavioral advertising works based on your web browsing over time.
While a service provider may use some of the information it collects in order to personalize the ads it shows you, its system(s) are typically designed to select ads only on data that does not personally and directly identify you. For example, it may select the ads it displays according to certain general interest categories or segments that it has inferred based on (a) demographic or interest data, including any you may have provided when creating an account on the Online Platforms (e.g., age, address, zip or postal code, gender), demographic or interest data acquired from other companies, and a general geographic location derived from your IP address and (b) the pages you view and links you click when using our service provider’s and its advertising partners’ websites and services. For more information about how targeted ads work, visit Managing Your Privacy at the Network Advertising Initiative website.
How Can I Opt-Out of Behavioral Advertising?
You can opt out of targeted advertising by e-mailing firstname.lastname@example.org. Please note that is only to opt you out of targeted ads, but that you may continue to receive online advertising from us; however, such ads may not be as relevant to you. In order for behavioral advertising opt-outs to work on your Device, you must have your browser set to accept browser cookies. If you delete cookies, use a new Device, access the Online Platforms from a different Device or browser, login under a different screen name, you will need to opt-out again.
You have the right to opt out or block cookies from being installed. As mentioned above, you can decline the consent to of non-essential cookie usage using the banner at the bottom of our website. You can opt-out using the following tools: (1) the Networking Advertising Initiative Opt-Out Tool, (2) the Digital Advertising Alliance Opt-Out Tool, or (3) The Google Opt-Out Browser Add-On (available at https://tools.google.com/dlpage/gaoptout. You can also remove cookies in the settings of your internet browser.
How We Collect Information
We collect Personal Information when you:
- register to use and access the Online Platforms;
- connect your profile with your social network account;
- transmit any form or email to us;
- register for a Society event; or
- make a donation.
We may also collect information under the following circumstances:
Registration and Account Information
Certain Online Platforms require that you register. To register, you will be prompted to provide Personal Information, such as your name and email address. You may also provide other optional information.
When you choose to connect your social media account to your profile in an Online Platform, we collect Personal Information from that social media website. For example, when you connect your Facebook account, we may collect the Personal Information you have made publicly available in Facebook, such as your profile picture, gender, age range, locale, and friend list. We may also obtain other non-public information from the social network website with your permission.
Additionally, we collect the information you post through the Online Platforms. For example, when you interact with other users by posting messages or uploading photographs, the Online Platforms will collect the information you provide in such submissions, including any Personal Information. Any health-related information added to your profile may be used to include you as part of related interest groups
How We Use Your Information
The information we collect is used to provide you with information about our events, programs and services available through the Society. Specifically, we may use Personal Information:
For United States Residents
- to provide you with information that you request or agreed to receive including, but not limited to, newsletters, announcements, information about MS, special offers or promotional materials on our behalf or third parties;
- to process your Online Platform or event registration, including verifying your information is active and valid;
- to process your credit card and event signup;
- to enable you to use the Online Platforms’ features;
- to contact you with regard to your use of the Online Platforms and, in our discretion, changes to the Online Platforms and/or policies;
- for internal business purposes, and to improve the Online Platforms, to customize your experience, or to serve you specific content that is tailored to your interests;
- for inclusion in our data analytics; and
If you provide your postal address, telephone number, or e-mail address to the Society online, you may receive any of the following periodic contacts from us:
- Mailings with information about multiple sclerosis and the Society's programs and events;
- Mailings to invite you to join the Society or to help achieve our mission;
- Telephone contact to invite you to help the Society achieve its mission;
- E-mail contact to respond to your questions, comments or suggestions;
- E-mail contact to alert you to multiple sclerosis news updates and programs, as well as invitations to join the Society or to help the Society achieve its mission.
How and When Will We Disclose Information to Third Parties
We also may share your information with the following entities or under the following circumstances:
Third Parties Providing Services on Our Behalf
We may use third party companies and individuals to assist us in the operation of the Online Platforms and related activities (“Vendors”). Such Vendors provide or perform certain services on our behalf (e.g., host the Online Platforms, track the analytics, process credit card payments, provide automated email services, engage security measures, provide customer support, provide GPS location information and perform technical services (e.g., without limitation, maintenance services, database management, web analytics and improvement of the Online Platforms, or perform other administrative and back office services. We may use these vendors to process your usage and Personal Information. We limit such sharing to only the minimum information needed by the Vendor to carrying out the services they are performing for you or for us. We require each Vendor to protect the Personal Information and Use Information and not to use or disclose the Personal Information for any other purpose.
Google Analytics 360
We use Google Analytics 360 to track website user data, website usage, and personal information to better serve you. This information is collected by the user consenting to the installation of cookies. When you consent to the installation of cookies, we gather and record your demographic, interest, and other analytical data, including personal information. You will be able to consent or decline to cookie usage on a banner that appears at the bottom of the website when you first arrive on the website. You can find out more information regarding Google Analytics and cookie usage at https://policies.google.com/technologies/cookies?hl=en-US.
Additionally, when you consent to cookie usage by Google Analytics 360, information regarding your use of the website is sent to Google and stored for analytical purposes. Third-parties may have access to this information. Information regarding which subpages of the website you have visited and for how long you interacted with each page is recorded so that we can understand which parts of our website are the most used and how users interact with our website. Your IP address is also collected by Google Analytics 360. By using Google Analytics 360, the National Multiple Sclerosis Society can provide you with a better website experience.
Cookies that have been installed on your browser on behalf of Google Analytics 360 can be removed at any time by using the settings on your internet browser. However, when you visit the website again, you will be prompted with the cookie consent banner.
Governmental, Law Enforcement and Similar Disclosures
We may access, preserve, and disclose your Personal Information, other account information, and content if we believe doing so is required or appropriate:
- to satisfy or comply with any applicable law, regulation, subpoenas, governmental requests or legal process;
- to protect and/or defend the TOU or other policies applicable to the Online Platforms or mobile application, including investigation of potential violations thereof;
- to protect the safety, rights, property or security of the Society or any user or any third party;
- to protect the safety of the public for any reason;
- to detect, prevent or otherwise address fraud, security or technical issues; and/or
- to prevent or stop activity we may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity.
Further, we may use IP address and/or Device Identifiers, to identify users, and may do so in cooperation with third parties such as copyright owners, ISPs, service providers and/or law enforcement, including without limitation, disclosing such information to third parties, all in our discretion. Such disclosures may be carried out without notice to you.
Merger, Sale, or Other Asset Transfers
If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of assets, or transition of service to another provider, your Personal Information may be sold or transferred as part of such a transaction as permitted by law and/or contract or as a standalone asset. We cannot control how such entities may use or disclose such information. We also reserve the right to disclose and transfer all such information: (i) to a subsequent owner, co-owner or operator of the Services or applicable database; or (ii) in connection with a corporate merger, consolidation, restructuring, the sale of substantially all of our membership interests and/or assets or other corporate change, including, during the course of any due diligence process.
Except as described below, we do not rent, sell, or share Personal Information about you with other people or nonaffiliated companies for their direct marketing purposes, unless we have your permission. We may allow access to other data collected by the Online Platforms to enable the delivery of online advertising on this website, or otherwise facilitate transmittal of information that may be useful, relevant, valuable or otherwise of interest to you.
From time to time, the Society makes postal addresses available to other reputable non-profit organizations whose products, programs or activities may be of interest to you. The Society carefully screens all organizations before allowing the use of our list. The list is never sold.
We do not knowingly collect personal information of users under the age of 13 without the consent of a parent to do so. Parents have the ability to control what, if any, personal information about their child may be disclosed to third parties, by regulating the actions and behavior of their children using the internet.
If you believe we have collected the personal information of an individual under the age of 13, please let us know immediately by emailing email@example.com.
How We Protect Personal Information
We maintain reasonable technical, physical, and administrative safeguards to help protect against loss, misuse or unauthorized access, disclosure, alteration or destruction of the information you provide through our Online Platforms.
Personal data stored within our systems have no public facing interfaces and are password-protected behind our firewall. Data exchanged between systems is secured and encrypted using HTTPS.
All Third-Party Systems (“Vendors”) that collect personal and/or payment information on our behalf (e.g., our online donation platform) are thoroughly vetted from a security perspective and must follow the Payment Card Industry Data Security Standard (PCI DSS) if they process or store credit cards.
Unfortunately, no data transmission over the internet or stored on a server can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information and privacy, we cannot guarantee or warrant the security of any information you disclose or transmit to us online and cannot be responsible for the theft, destruction, or inadvertent disclosure of your personal information.
If you would like to opt out of any or all of these types of contacts, please either send us an e-mail at firstname.lastname@example.org, call 1-844-MS LISTS (1-844-675-4787) or write us at National Multiple Sclerosis Society, 733 Third Avenue, New York, New York 10017. Please state your wishes clearly, referencing the following contact types:
- No e-mail for fundraising purposes
- No postal service mail for fundraising purposes
- No telephone calls for fundraising purposes
If you provide Personal Information changes by email or physical mail we will endeavor to process the request expediently.
Notice to EU Residents
Legal Basis for Processing Information
If you are located in the EU or Switzerland, we rely on several legal bases to process your personal information. These legal bases include where:
- The processing is necessary to perform our contractual obligations, such as to provide you with our services;
- You have given your prior consent, which you may withdraw at any time (such as for marketing purposes or other purposes we obtain your consent for from time to time);
- The processing is necessary to comply with a legal obligation, a court order or to exercise or defend legal claims;
- The processing is necessary for the purposes of our legitimate interests, such as in improving, personalizing, and developing our services, marketing new features or products that may be of interest, and promoting safety and security as described above.
- If you have any questions about or would like further information concerning the legal basis on which we collect and use your personal information,
If you have any questions about or would like further information concerning the legal basis on which we collect and use your personal information, please contact us by emailing email@example.com
Rights Under the General Data Protection Regulation
If you are located in the EU or Switzerland, you have the following rights in respect of your personal data that we hold:
- Right of access. The right to obtain access to your personal data.
- Right to rectification. The right to obtain rectification of your personal data without undue delay where that personal data is inaccurate or incomplete.
- Right to erasure. The right to obtain the erasure of your personal data without undue delay in certain circumstances, such as where the personal data is no longer necessary in relation to the purposes for which it was collected or processed.
- Right to restriction. The right to obtain the restriction of the processing undertaken by us on your personal data in certain circumstances, such as where the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of that personal data.
- Right to portability. The right to portability allows you to move, copy or transfer personal data easily from one organization to another.
- Right to object. You have a right to object to processing based on legitimate interests and direct marketing.
If you wish to exercise one of these rights, please email us at firstname.lastname@example.org.
You also have the right to lodge a complaint to your local data protection authority. Further information about how to contact your local data protection authority is available at https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
Obligations to Data Protection Officers (DPAs)
We will respond diligently and appropriately to requests from DPAs about this policy or compliance with applicable data protection privacy laws and regulations. We will, upon request, provide DPAs with names and contact details of the individuals designated to handle this process. With regard to transfers of personal information, we will (1) cooperate with inquiries from the DPA responsible for the entity exporting the data and (2) respect its decisions, consistent with applicable law and due process rights. With regard to transfers of data to third parties, we will comply with DPAs’ decisions relating to it and cooperate with all DPAs in accordance with applicable legislation.
Your California Privacy Rights
If you are a California resident, you have the right to request information from us regarding the manner in which the Society shares certain categories of personal information with third parties for their direct marketing purposes, in addition to the rights set forth above. Under California law, you have the right to send us a request at the designated address listed below to receive the following information:
- The categories of information we disclosed to third parties for their direct marketing purposes during the preceding calendar year;
- the names and addresses of the third parties that received the information; and
- if the nature of the third party's business cannot be determined from their name, examples of the products or services marketed.
This information may be provided in a standardized format that is not specific to you. The designated email address for these requests is: email@example.com.
Also, please note that we have not yet developed a response to browser “Do Not Track” signals, and do not change any of our data collection practices when we receive such signals. We will continue to evaluate potential responses to “Do Not Track” signals in light of industry developments or legal changes.
The National MS Society is a tax exempt 501(c)3 nonprofit organization and our Identification number (EIN) is 13-5661935.
Address: National Multiple Sclerosis Society
733 Third Avenue, 3rd Floor
New York, New York 10017.
Last updated as of July 2021.
All information on this site is the property of the National Multiple Sclerosis Society. Copyright © 1995-2014, the National Multiple Sclerosis Society. All rights reserved.