Privacy Policy

Klamath Lodge #77, F&AM ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website klamathlodge77.org (the "Site"), submit forms, or communicate with us via email.

By using our Site, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Site.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Submit a membership application or petition form (name, address, email, phone number, date of birth, occupation, references)
• Contact us through our contact form (name, email, phone number, message content)
• Subscribe to our newsletter (email address)
• Register for events (name, email, phone number)
• Communicate with us via email (email address, message content)

1.2 Information Collected Automatically

When you visit our Site, we may automatically collect certain information about your device and browsing activity, including:

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, and referring website
• Cookies and similar tracking technologies (see Section 3 below)

1.3 Information from Third Parties

We do not purchase or receive personal information from data brokers. We may receive information from third-party services we use to operate our Site (see Section 4 below).

2. How We Use Your Information

We use the information we collect to:

• Process membership applications and petitions for initiation
• Respond to inquiries and provide customer support
• Send newsletters, event announcements, and lodge updates (with your consent)
• Maintain member directories and communication preferences
• Improve our Site, services, and user experience
• Ensure Site security and prevent fraud or unauthorized access
• Comply with legal obligations and lodge regulations

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our Site.

Types of Cookies We Use:

• Essential Cookies: Required for Site functionality (e.g., authentication, security)
• Performance Cookies: Help us understand Site usage and improve performance (future analytics implementation)
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling essential cookies may affect Site functionality. For more information, visit our Cookie Settings page.

4. Third-Party Services

We use the following third-party services to operate our Site and communicate with you:

4.1 Resend (Email Service)

We use Resend to send transactional emails (e.g., application confirmations, newsletter subscriptions). Resend processes email addresses and message content on our behalf. Review Resend's privacy policy at https://resend.com/legal/privacy-policy.

4.2 Cloudflare (Infrastructure & CDN)

Our Site is hosted on Cloudflare's infrastructure, which provides content delivery, DDoS protection, and security services. Cloudflare may process IP addresses and technical information to deliver these services. Review Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.

4.3 Future Analytics Services

We may integrate analytics services (e.g., Google Analytics, Plausible) in the future to understand Site usage patterns. If implemented, we will update this policy and provide cookie consent options.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• With the Grand Lodge of Oregon: Membership applications and petitions are submitted to the Grand Lodge of Oregon for processing per Masonic regulations.
• With Service Providers: Third-party vendors (e.g., Resend, Cloudflare) who process data on our behalf under strict confidentiality agreements.
• For Legal Compliance: When required by law, court order, or legal process, or to protect our rights, safety, and property.
• With Lodge Officers: Membership applications and contact information are shared with authorized lodge officers for administrative purposes.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or Masonic regulations:

• Membership Applications: Retained permanently per Grand Lodge of Oregon record-keeping requirements
• Newsletter Subscriptions: Retained until you unsubscribe or request deletion
• Contact Form Submissions: Retained for 2 years for customer support and reference purposes
• Email Communications: Retained for 2 years or as required for legal compliance
• Website Analytics: Aggregated and anonymized after 26 months (if analytics implemented)

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Rights Under GDPR (European Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for email communications at any time

7.2 Rights Under CCPA (California Users)

• Right to Know: Request information about data collection, use, and sharing
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal data)
• Right to Non-Discrimination: Equal service and pricing regardless of privacy rights exercise

To exercise your privacy rights, please contact us using the information in Section 10 below. We will respond to your request within 30 days (GDPR) or 45 days (CCPA).

8. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or disclosure:

• Encryption: HTTPS encryption for data in transit
• Access Controls: Restricted access to personal data for authorized personnel only
• Secure Infrastructure: Cloudflare security features (DDoS protection, Web Application Firewall)
• Regular Security Reviews: Periodic audits of security practices and third-party services

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

9. Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately, and we will delete such information.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by updating the "Last Reviewed" date at the top of this page and, where appropriate, by posting a notice on our homepage or sending you an email.

Your continued use of our Site after any changes indicates your acceptance of the updated Privacy Policy.