Privacy Policy

Last Updated: May 2026

David's Harp is a nonprofit organization dedicated to raising the next generation of church musicians. We are committed to handling your personal information with care and transparency. This Privacy Policy explains what information we collect, how we use it, and how we protect it.

By using our website at davidsharpmusic.org, you agree to the practices described in this policy.

1. Information We Collect

Information you provide directly:

• Name, email address, mailing address, and phone number (via contact forms, event registration, or checkout)
• Payment information (processed securely through Stripe, we do not store your card details)
• Church name, role, and ministry context (via discovery call forms and lead intake forms)
• Subscriber account credentials for the David's Harp Subscriber Portal

Information collected automatically:

• Browser type, device type, and operating system
• Pages visited, time spent on site, and referring URLs
• IP address and general geographic location
• Interaction data collected through cookies and analytics tools (see Section 4)

2. How We Use Your Information

We use your information to:

• Process orders for physical and digital products
• Provide access to the Subscriber Portal and digital resources
• Send order confirmations, receipts, and account-related communications
• Respond to inquiries and support requests
• Send newsletters, resource updates, and mission-related communications (you may unsubscribe at any time)
• Understand how people engage with our website and improve our content and offerings
• Fulfill grant reporting and organizational accountability requirements

3. How We Share Your Information

David's Harp does not sell, rent, or trade your personal information. We will never share your information with outside organizations for their own marketing purposes.

We may share information only in the following limited circumstances:

• Service providers: Trusted third-party platforms that help us operate, including Stripe (payments), Klaviyo (email), ClickUp (CRM), Make.com (automation), Tally (forms), and SKOOL (community platform). These providers are bound by their own privacy policies and are only permitted to use your data to perform services on our behalf.
• Legal requirements: If required by law, court order, or to protect the rights and safety of our organization or others.
• Conservatory partnerships: If you are affiliated with a partner conservatory, aggregate and operational data may be shared internally in accordance with our Conservatory Data Privacy & Sharing Agreement.

SMS data: Phone numbers collected through our SMS notification program (including opt-in consent records, message logs, and delivery status) are used solely to operate that program. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information sharing with subcontractors in support services, such as customer service, is permitted. SMS messages are delivered through our messaging provider, which processes the data on our behalf under its own privacy terms. You may opt out of text messages at any time by replying STOP.

4. Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve your experience and to understand how visitors engage with our content. This may include tools such as Google Analytics.

Cookies may collect information about your browsing behavior on our site, pages visited, and how you arrived at our site. This data is used in aggregate and is not sold to third parties.

You may disable cookies through your browser settings, though doing so may affect certain site functionality.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and support our organizational records. You may request deletion of your information at any time by contacting us (see Section 8).

6. Children's Privacy

Our website is not directed toward children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly remove it.

7. Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, or misuse. Payment data is handled exclusively through Stripe, a PCI-compliant payment processor. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your Choices

You have the right to:

• Opt out of marketing emails at any time using the unsubscribe link in any email we send
• Request access to the personal information we hold about you
• Request correction or deletion of your information

To exercise any of these rights, contact us at admin@davidsharpmusic.org.

9. Governing Law

This Privacy Policy is governed by the laws of the State of Iowa.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us