top of page

Privacy Policy

Dubuque Main Street (“DMS,” “we,” “our,” or “us”) is a 501(c)(3) nonprofit dedicated to a vibrant, welcoming downtown Dubuque. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website and any pages, forms, or services we operate that link to this Policy (collectively, the “Site”).
By using the Site, you agree to this Policy. If you do not agree, please do not use the Site.


1) What we collect

a) Information you provide

  • Contact details (name, email, phone) when you subscribe, contact us, nominate someone, register for events, or apply for programs/grants.

  • Business details when you create or update a listing (e.g., address, hours, category, description).

  • Payment/donation details if you donate, buy tickets, or pay fees (handled by our payment processors; we do not store full card numbers).

  • Media (photos, stories, testimonials) you choose to submit.

  • Account or admin access info if you help us manage content (limited, role-based).
     

b) Information collected automatically

  • Device and usage data (IP address, browser, pages viewed, referring/exit pages, timestamps).

  • Cookies and similar technologies for site functionality, preferences, and analytics (see “Cookies & tracking” below).
     

c) Information from third parties

  • Event and ticket platforms, donation/payment processors, email platforms, survey tools.

  • Map and media embeds (e.g., map tiles/providers, video players, social embeds).

  • Social media (e.g., public comments, messages, or insights tied to our official pages).
     

2) How we use information
We use information to:

  • Operate, maintain, and improve the Site and our services.

  • Communicate with you (newsletters, confirmations, event updates, program info).

  • Process donations, registrations, tickets, sponsorships, and grants.

  • Publish and maintain business listings and neighborhood information.

  • Run outreach and impact reporting, including aggregate analytics.

  • Detect, prevent, and respond to security, fraud, and abuse.

  • Comply with laws, regulations, audits, and reporting requirements.

Legal bases (for EEA/UK visitors): consent, legitimate interests (community programming, outreach, site operation and security), contract performance, and legal obligations.

3) When we share information
We do not sell your personal information. We may share with:

  • Service providers that help us operate the Site and programs (e.g., website host, email, analytics, payment/ticket processors, survey tools, map/hosting providers).

  • Program and event partners (only what’s needed to coordinate an event, nomination, or program you participate in).

  • Sponsors and funders in aggregate/de-identified form to demonstrate reach and impact.

  • Law enforcement or regulators when required by law or to protect rights and safety.

If we use advertising or measurement pixels, certain states may consider that “sharing” for cross-context behavioral advertising; see “Your privacy rights” and “Cookies & tracking” for choices.

4) Cookies & tracking
We and our providers use cookies, pixel tags, and similar tools to:

  • Keep the Site working (session management, security).

  • Remember preferences (e.g., filters on maps, saved categories).

  • Measure traffic and performance (which pages are helpful, errors).

  • If enabled, measure campaign effectiveness.

Your choices:

  • Use your browser settings to block or delete cookies.

  • If we present a cookie banner or “Cookie Settings” link, use it to adjust optional analytics/ads cookies.

  • Blocking cookies may impact certain features (e.g., map filters, logins).

Do Not Track: We don’t respond to browser DNT signals due to industry variability.

5) Data retention
We keep personal information only as long as needed to run programs, fulfill the purposes above, and meet legal/financial/reporting obligations. Donation and financial records may be kept for 7 years (or as required by law). We may retain aggregate/de-identified analytics after deletion of personal data.

6) Security
We use reasonable administrative, technical, and physical safeguards appropriate for a nonprofit website. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7) Children’s privacy
Our Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided us information, contact us and we will delete it.

8) International visitors
If you access the Site from outside the United States, you understand your information may be processed in the U.S. and other countries that may have different data-protection laws than your home jurisdiction.

9) Your privacy rights
Depending on where you live, you may have rights such as access, correction, deletion, portability, and the right to opt out of targeted advertising or certain profiling. These rights may be available under laws in California, Colorado, Connecticut, Iowa, Utah, Virginia, the EEA, the UK, and others.

  • To submit a request, email privacy@dubuquemainstreet.org with your name, state/country of residence, the right you wish to exercise, and a way for us to verify your identity.

  • Authorized agents (where allowed) should include proof of authority and the resident’s authorization.

  • We do not discriminate against you for exercising privacy rights.

California/CPRA: We do not “sell” personal information. If we use advertising or measurement cookies that qualify as “sharing,” you may opt out by adjusting cookie preferences (see banner or “Cookie Settings” link when available). You may also email us to request an opt-out.
EEA/UK: Where processing is based on consent, you can withdraw consent at any time (this won’t affect prior lawful processing). You may also lodge a complaint with your local data-protection authority.

10) Email communications
You can unsubscribe from non-transactional emails using the link in the message or by contacting us. We may still send you transactional or service messages (e.g., receipts, confirmations, essential updates).

11) Third-party links & embeds
Our Site may link to or embed third-party services—e.g., map tiles/providers (such as Mapbox/OpenStreetMap/Google Maps), video players (e.g., YouTube, Vimeo), social media feeds, event/ticketing or donation widgets. Those services may set their own cookies and collect data under their own privacy policies. We encourage you to review their policies.

12) Platform notes (hosting & tools)

  • Website hosting/CMS: We operate on a modern website platform that uses cookies and analytics to keep the Site secure and functioning.

  • Interactive maps: Our maps may load tiles, icons, or geocoding from third-party map providers and CDN hosts.

  • Analytics: We may use analytics to understand performance and improve the Site.

  • Payments/Donations: When you donate or pay for tickets/fees, your information is processed by our payment processor(s). We receive limited info (e.g., amount, time, payer name/email) needed for receipts, acknowledgments, and accounting.

(If you need a current list of core service providers, contact us and we’ll share the latest version.)

13) Facebook/Instagram data & “User Data Deletion”
If you connect a Dubuque Main Street Facebook Page or otherwise interact with our Facebook/Instagram integrations:

  • We may receive page-level tokens, page ID/name, and content you authorize for publishing, scheduling, or analytics on your behalf.

  • We do not collect personal profile data about your followers from Facebook/Instagram through this connection.

  • We store only what’s necessary to provide the integration (e.g., tokens) and revoke or refresh them as required.

How to request deletion of Facebook/Instagram-related data:
Send an email to privacy@dubuquemainstreet.org with the subject line “Facebook Data Deletion Request.” Include the Page name/ID you connected and the email you used. We will delete associated tokens and logs (except records we must retain for security, audit, or legal obligations) and confirm once complete.
You can also revoke our access at any time in your Facebook/Instagram settings.

14) Accessibility
We’re committed to an accessible experience. If you need this Policy in an alternative format or have accessibility questions, contact us.

15) Changes to this Policy
We may update this Policy from time to time. The “Effective date” above shows when it last changed. Material changes will be posted on this page and, when appropriate, highlighted on the Site.

16) Contact us
Dubuque Main Street
Email: privacy@dubuquemainstreet.org
Mailing address: 1069 Main Street Dubuque, IA 52001
Phone: 563-588-4400

bottom of page