Privacy Notice
Last Update: 10 September 2026
Who are we?
United to Stop Online Scams is a campaign run by a coalition of organizations, including but not limited to Advocating Against Romance Scammers, Alliance for Retired Americans, Asian Americans Advancing Justice, Center for Countering Digital Hate, Consumer Federation of America, Consumer Reports, Electronic Privacy Information Center, Fight Cybercrime, Legal Assistance for Seniors,Lifespan, Motion Picture & Television Fund, National Consumers League, The National Council on Aging, Public Citizen, Reset Tech, Tech Justice Law, and ZETA. In this notice, we'll refer to it as the Campaign.
This website domain is operated by Reset Tech, a global non-profit public policy organization. We operate in the US, UK, Germany, and Australia. For more information about Reset Tech and how it handles personal data outside the Campaign, please see our website and our privacy notice.
What personal information do we collect and why?
Contact Us field. If you use the Contact Us field, we collect your name, email address, and whatever message you share with us.
If you click yes to whether we may contact you about the Campaign, we will use this information to reach out in the future with newsletters and information about the Campaign and its progress. We may also use this information to communicate with you, should you contact us about the Campaign.
Sign up for the National Day of Action field. When you sign up, we collect your first name, last name, email address, and state. You'll choose whether you're joining the virtual briefing or an in-person event near you (selected from a map).
You can separately opt in to receive campaign emails from United to Stop Online Scams. Submitting the form registers you for the event, whether or not you opt in to those emails.
Share your story field. If you enter information here, we collect your first name, last name, email address, the state where you live, and whatever you enter in the field “What is your scam story?”.
If you click yes to whether we may contact you about the Campaign, we will use this information to reach out in the future with newsletters and information about the Campaign and its progress. We may also use this information to communicate with you, should you contact us about the Campaign.
Sign-up, story, and contact submissions are recorded in separate tabs in a private Google Sheet available to the Campaign. Contact messages are also emailed to the Campaign so a person can read and reply to them. Sign-up and story submissions are not emailed.
Other.
We place cookies on our website. This helps us track engagement with our messaging. We do not use the information collected by this code for any other purposes (or to monitor any other activity, except for engagement with our website).
We will also keep records of our interactions with you (for example, our email correspondence and notes of meetings).
We use your postal code to monitor engagement across regions.
Depending upon your email address, this may also give us information about your work (for example, if you sign up with your name@work.com email address).
What about sensitive personal information?
Some personal information is more sensitive than other information (for example, information about your health, your sexual orientation or sex life, your political affiliation, or your race and ethnicity). We try to minimise our collection of sensitive personal information, but sometimes it's necessary (for example, if you're a politician, we will naturally keep a record of your political party). We will always make sure we collect and use such information lawfully. The only circumstance we foresee collecting any sensitive personal information is if you proactively share it in your personal story with us.
Do we keep your personal information secure?
We try as hard as we can to keep your information safe. For example, we limit access to your personal information to only those staff and vendors who need to see it for the purposes outlined above, we encrypt information where we can, we have strict contracts with our vendors handling personal information, and we train our staff.
Do we share your personal information?
Yes. We share your personal information with the following parties:
- Any of the coalition member organizations;
- Different entities within Reset Tech (as we have shared systems and staff);
- Contractors who provide services to us (for example, PR and marketing companies for the Campaign, or IT service providers;
- Regulators for the purposes of our legal compliance;
- Advisors (for example, tax advisors and lawyers) who advise Reset Tech.
Do we transfer your personal information internationally?
Yes. Reset Tech is a global network, and our entities share systems. We also use vendors in different countries. We try as hard as we can to keep your personal information secure when shared internationally, including carefully vetting our vendors, entering into agreements that guarantee the security of your personal information and your rights, and — of course — only transferring personal data that is necessary.
You acknowledge and agree that, as a result, your personal information may be processed, used, stored, or accessed in other jurisdictions and may be subject to the laws of those jurisdictions. For example, information may be disclosed in response to valid demands or requests from government authorities.
Managing Your Personal Information
We limit the personal information we collect and use
As mentioned above, we take care to ensure that the information you provide to us is accessed and used only by those who need it. This includes both internal staff and external third parties. For staff, we have access restrictions, policies that limit the onward use of personal information for new purposes, and training on the importance of protecting personal information. For external third parties, we have contracts that limit their use of personal information exclusively to the purpose of providing the services.
We try to make sure your personal information is accurate
We take reasonable steps to make sure your personal information is accurate, complete, and up to date. For example, if we receive a bounce-back from an email sent to you we will remove that email from our lists. If you have concerns, you can always contact us to verify your information (see the contact details set out below).
Despite our best efforts, errors sometimes happen. If you see anything incorrect with your information, please let us know, and we will remedy it.
We only keep your information for as long as we reasonably need it
We will only keep your personal information for as long as is reasonably necessary to fulfil the purposes set out above. When we determine retention periods, we consider the amount, nature, and sensitivity of the personal information and the potential risk of harm from authorised use of such information.
You can request access to your personal information
Subject to certain limitations, you can request access to your personal information. We may need to check to make sure that it's really you — for example, by asking for an ID. This is just to make sure we don't disclose your personal information to anyone who doesn't have the right to see it.
You can request the deletion or removal of your personal information
In some circumstances, you have the right to request that we delete or remove your personal information. For example, you can withdraw your consent if you no longer wish to receive communications about the Campaign. We may not always be able to comply with your request if there are specific legal reasons we need to use your information, but we will let you know if that's the case.
Who can I contact?
If you have any questions or wish to exercise any of your rights, you can email our Data Protection Officer at dpo@reset.tech.