Privacy Policy

1. Introduction

ThinkPad Foundation (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

This Privacy Policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

We collect several types of information from and about users of our Service:

2.1 Personal Information

• Contact Information: Your name, email address, phone number, and message when you submit our contact or partnership forms

2.2 Technical Information

• Device Information: Browser type, operating system, device identifiers
• Log Data: IP addresses, access times, pages viewed

3. How We Use Information

We use the collected information for the following purposes:

3.1 Service Provision

• Respond to inquiries submitted through our forms

3.2 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Notify you of changes to our Service or policies

SMS/Text Messaging

Program Description: By opting in verbally during the call from our representative, you agree to receive text messages from ThinkPad Foundation regarding appointment confirmation.

Message Frequency: Message frequency varies.

Pricing: Message and data rates may apply.

Opt-Out: You can cancel the SMS service at any time. Just text “STOP” to the short code or number you received the message from. After you send the SMS message “STOP” to us, we will send you an SMS message to confirm that you have been unsubscribed. After this, you will no longer receive SMS messages from us.

3.3 Service Improvement

• Monitor service performance and reliability

3.4 Legal and Security

• Comply with legal obligations and regulations
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service
• Resolve disputes and investigate violations

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:

4.1 Service Providers

• Infrastructure: Cloud hosting providers for data storage and service delivery
• Email Delivery: Resend, which delivers form submissions to our staff

4.2 Legal Requirements

We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Investigate potential violations of our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Information may be retained longer if required by law or legal proceedings.

You can request deletion of your data at any time by contacting us.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: Data encryption in transit and at rest
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Procedures for detecting and responding to security breaches

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

7.1 GDPR Rights (EU Users)

If you are located in the European Union, you have additional rights under the GDPR:

• Legal Basis: We process your data based on contract performance, legitimate interests, and consent
• Data Protection Officer: You can contact our DPO at info@thinkpadfoundation.org
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
• Automated Decision-Making: We do not engage in automated decision-making that significantly affects you

7.2 CCPA Rights (California Users)

If you are a California resident, you have specific rights under the CCPA:

• Right to Know: Request disclosure of personal information collected, used, or shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

8. Cookies and Tracking Technologies

This website does not set cookies or use analytics or tracking technologies. It stores your light or dark theme choice in your browser's local storage. For more detailed information, please see our Cookie Policy.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Standard Contractual Clauses: EU-approved contractual protections
• Certification Programs: Privacy Shield successors and similar frameworks
• Consent: Your explicit consent for transfers where required

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we learn that we have collected personal information from children under 13 without verification of parental consent, we will take steps to remove that information from our servers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Displaying a prominent notice on our Service

Your continued use of our Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your requests within the timeframes required by applicable law, typically within 30 days.

Last Updated: 2026-10-17