Last updated: July 1, 2026
Curiosity Research Corporation ("we," "us," "the Organization") is the controller of the personal information described in this policy. We are a research institute headquartered at 200 Henrietta St, Ravenswood, WV 26164, USA, with a 501(c)(3) tax-exempt application pending IRS determination (EIN 33-3478603). This policy explains what personal information www.curiositycorp.org (the "Site") collects, why, who we share it with, and the choices and rights you have over it. Questions about this policy or your data can be sent through our contact page or by phone at +1 929-229-2917.
What We Collect, Why, and On What Legal Basis
We only collect the categories of personal information below, each tied to a specific purpose and legal basis:
- Contact and form data (name, email, message content, and similar fields you type into the contact, volunteer, advocacy, chapter, or job/internship forms) — used to respond to your inquiry or application. Legal basis: your consent in submitting the form, and our legitimate interest in operating the programs you're contacting us about.
- Donation and payment data (name, email, donation amount, and payment details) collected when you give through the Site — used to process your contribution and send a receipt. Payment details are captured and processed directly by Stripe, our payment processor; we do not store your full card number on our own servers. Legal basis: performance of the transaction you initiate (contract), and our legitimate interest in maintaining accurate donor and financial records.
- Newsletter sign-up data (email address, and name if provided) — used to send the updates you sign up for. Form validation and list management run through Mailchimp. Legal basis: your consent, withdrawable at any time via the unsubscribe link in every email.
- Spam-prevention signals on our forms, via Google reCAPTCHA, which may process your IP address and device/browser signals to distinguish human visitors from automated abuse. Legal basis: our legitimate interest in keeping the Site's forms secure and free of abuse.
- Map interaction data — our contact page embeds Google Maps to show our location; loading it lets Google process standard technical data (e.g., your IP address) under Google's own privacy terms. Legal basis: legitimate interest in providing a usable location reference.
- Embedded video interaction — video thumbnails on the Site link out to YouTube and only load the YouTube player (and any associated Google data collection) after you click to play a video, not automatically on page load. Legal basis: your action in clicking play.
We do not knowingly collect more than the above, and we do not use any automated decision-making or profiling that produces legal or similarly significant effects on you.
Cookies
The Site carries no advertising and sets no non-essential tracking cookies, so it does not use a cookie-consent banner. The only cookies it sets are: the session cookie Stripe's checkout uses to complete a donation, reCAPTCHA's abuse-prevention cookie on a form you are actively submitting, and — only if you click to play an embedded video — cookies YouTube sets once its player loads. Each is either strictly necessary for the feature you're using or set only after your affirmative action of clicking play, so none require a consent mechanism.
Who We Share Data With
We do not sell personal information. We share it only with the service providers named above (Stripe, Mailchimp, and Google — for reCAPTCHA, Maps, and YouTube), each acting as a processor for the specific purpose described, and only to the extent needed to provide that service. These providers are based in or operate infrastructure in the United States and may process data internationally under their own privacy and data-transfer terms; we encourage you to review Google's, Stripe's, and Mailchimp's privacy policies for how each of them handles data transfers. We otherwise disclose personal information only if required by law, or to protect the rights, property, or safety of the Organization, our users, or the public.
How Long We Keep It
We keep contact-form and application submissions for as long as reasonably needed to respond to and follow up on your inquiry, typically no more than 24 months. Donation and payment records are kept for as long as required by financial-recordkeeping and (once granted) tax-exemption obligations. Newsletter data is kept until you unsubscribe. You can ask us to delete data sooner at any time, subject to the legal retention exceptions above.
Your Rights
Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion; restrict or object to certain processing; receive a portable copy of your data; and withdraw consent at any time (which does not affect processing already carried out). EU/UK residents also have the right to lodge a complaint with their local data-protection supervisory authority. To exercise any of these rights, contact us through our contact page; we will respond within a reasonable time.
California Privacy Rights (CCPA/CPRA)
We do not sell personal information for money, and we do not share it for cross-context behavioral advertising — the Site carries no advertising and no advertising trackers. California residents therefore have nothing to opt out of under the CCPA/CPRA's "Do Not Sell or Share" provisions. California residents have the same access, deletion, and correction rights described above.
Children's Privacy
The Site is intended for a general adult audience — donors, partners, volunteers, and program stakeholders — not for direct data collection from children. We do not knowingly collect personal information from children under 13 (or under 16 where GDPR's stricter default applies) without verified parental consent. If you believe a child has provided us personal information, contact us and we will remove it.
Curiosity Score™
Curiosity Score™ is our public program-engagement metric: aggregated, anonymized statistics on how our educational programs are used, published to advocate for SDG 4 (Quality Education) progress. Any personal information that feeds into it (for example, that a registered participant completed a program milestone) is processed under our legitimate interest in measuring and reporting program impact, is aggregated before publication, and is not published in a form that identifies you individually. It is retained for as long as we continue tracking the relevant program, and you may request that your individual data be excluded from future aggregation by contacting us. Public aggregate statistics are available on our impact data page.
Email Privacy
Curiosity Research Corporation does not provide, sell, or rent your email address to anyone outside the organization, other than the processors named above strictly as needed to deliver the communications you signed up for.
External Links
www.curiositycorp.org includes links to external websites. These links do not fall under the www.curiositycorp.org domain, and Curiosity Research Corporation is not responsible for the privacy practices or the content of external websites. Your use of any linked website is solely at your own risk.
Changes to This Policy
We may amend this privacy policy from time to time; please review it periodically. Material changes will be reflected in the "Last updated" date above. Your continued use of the Site after such changes are posted constitutes your agreement to the revised policy.