Skip to content
Close
JOIN CCA
JOIN CCA

Privacy Policy

TABLE OF CONTENTS
loading...

Effective Date: April 2, 2026

Last Updated: April 2, 2026

The Central City Association of Los Angeles ("CCA," "we," "us," or "our") is committed to protecting the privacy of visitors to our website at www.ccala.org (the "Site"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have regarding your data.

The Site is powered in part by HubSpot (our customer relationship management and marketing platform) and Cannolai (our AI-powered Association Management System, built natively on the HubSpot platform). Together, these platforms support our membership management, event registration, marketing, analytics, and member engagement operations. This Privacy Policy covers data collected through both platforms.

By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Site.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you interact with the Site, including when you:

  • Complete a contact form or inquiry.
  • Register for events, conferences, or programs.
  • Apply for or renew a CCA membership.
  • Subscribe to newsletters, publications, or email communications.
  • Participate in surveys, polls, or feedback requests.
  • Make a donation or payment through the Site.
  • Submit comments, questions, or other correspondence.

This information may include your name, email address, phone number, mailing address, organization name, job title, membership type, payment information, and any other details you choose to provide.

1.2 Information Collected Automatically

When you visit the Site, we and our third-party service providers automatically collect certain technical and usage information, including:

  • Device and Browser Information: Your IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
  • Usage Data: Pages visited, links clicked, time spent on pages, referring and exit URLs, date and time of your visit, and the order in which you navigate the Site.
  • Location Data: Approximate geographic location based on your IP address.

1.3 Information Collected Through Cookies and Tracking Technologies

The Site uses cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activity. We use HubSpot as our customer relationship management (CRM) and marketing automation platform, and Cannolai as our AI-powered Association Management System (AMS). Both platforms operate within the HubSpot ecosystem and place cookies on your device to support Site analytics, personalization, membership management, and marketing functionality. See Section 5 for a detailed explanation of the cookies we use and how to manage your preferences.

1.4 Information Collected Through the Cannolai AMS

When you interact with membership features, event registration, renewal processes, or member portals on the Site, Cannolai may collect and process additional information, including:

  • Membership Data: Membership type, status, renewal dates, membership history, benefits usage, and dues payment records.
  • Event Participation Data: Event registrations, attendance history, session selections, and feedback responses.
  • Engagement Data: Email open and click-through rates, content interaction patterns, login frequency, and feature usage within the member portal.
  • AI-Generated Insights: Member engagement scores, churn risk assessments, renewal likelihood predictions, and personalized content or communication recommendations generated by Cannolai's artificial intelligence features.

This data is used to personalize your experience, optimize CCA's member services, and support targeted communications. See Section 6 for information about AI-powered processing and automated decision-making.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Operate and Improve the Site: Maintaining, securing, and improving the functionality and performance of the Site, including our membership portal and event registration systems.
  • To Communicate With You: Responding to inquiries, sending event confirmations, delivering membership information, renewal reminders, and providing customer support.
  • To Send Marketing Communications: Sending newsletters, advocacy updates, event invitations, and promotional materials about CCA's programs and initiatives (with your consent where required).
  • To Process Transactions: Processing event registrations, membership applications, renewals, donations, and payments.
  • To Personalize Your Experience: Tailoring content, recommendations, and communications based on your interests, membership profile, and activity on the Site, including through Cannolai's AI-powered personalization and segmentation features.
  • To Manage Memberships: Tracking membership status, processing renewals, administering benefits, segmenting members for targeted communications, and generating member engagement analytics through the Cannolai AMS.
  • To Conduct Analytics: Analyzing usage trends, measuring the effectiveness of our content and communications, generating member engagement scores, and understanding how visitors and members interact with the Site.
  • To Support AI-Powered Operations: Using Cannolai's artificial intelligence capabilities to generate member engagement insights, predict renewal patterns, automate workflows, and deliver personalized experiences (see Section 6).
  • To Comply With Legal Obligations: Fulfilling our legal and regulatory requirements, enforcing our Terms of Use, and protecting the rights, property, and safety of CCA and others.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including HubSpot (CRM, marketing automation, and analytics), Cannolai (AI-powered association management, membership processing, event management, and member engagement analytics), payment processors, email service providers, event management platforms, and web hosting providers. These providers are contractually obligated to use your information only to perform services for CCA and to protect your data. Cannolai operates natively within the HubSpot ecosystem and processes member data in accordance with HubSpot's data protection framework.

3.2 Business Partners and Sponsors

With your consent, we may share your name, organization, and contact information with event sponsors, co-hosts, or business partners in connection with specific CCA events or programs. You will be notified at the time of collection if your information may be shared with a specific partner.

3.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of CCA, our members, or the public.

3.4 Corporate Transactions

In the event of a merger, reorganization, dissolution, or similar corporate event, your information may be transferred as part of CCA's assets, subject to applicable privacy obligations.

3.5 Aggregated or De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for research, analysis, marketing, or other purposes.

4. Legal Basis for Processing (Where Applicable)

Where required by applicable law (including the California Consumer Privacy Act, or "CCPA," and the California Privacy Rights Act, or "CPRA"), our legal bases for processing your personal information include:

  • Consent: Where you have provided your affirmative consent, such as opting in to marketing emails or accepting cookies through our consent banner.
  • Legitimate Interests: To operate and improve our Site, communicate with members and stakeholders, and promote CCA's advocacy mission, where our interests do not override your fundamental rights.
  • Contractual Necessity: To fulfill obligations arising from membership agreements, event registrations, or other transactions you enter into with CCA.
  • Legal Obligation: To comply with applicable laws, regulations, and legal processes.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites recognize your device, remember your preferences, and collect information about your browsing activity.

5.2 Types of Cookies We Use

We use the following categories of cookies on the Site:

Strictly Necessary Cookies: These cookies are essential for the Site to function properly. They enable core features such as page navigation, access to secure areas, and consent preference storage. These cookies cannot be disabled.

Analytics Cookies: These cookies help us understand how visitors use the Site by collecting information about pages visited, traffic sources, time on site, and other usage metrics. We use HubSpot analytics cookies and may use additional analytics services such as Google Analytics. These cookies are placed only with your consent.

Functional Cookies: These cookies allow the Site to remember choices you make (such as your language or region) and provide enhanced, personalized features. These cookies are placed only with your consent.

Advertising and Targeting Cookies: These cookies are used to deliver content and advertisements that are relevant to your interests. They may also be used to limit the number of times you see an advertisement and to measure the effectiveness of advertising campaigns. These cookies may be set by CCA or by third-party advertising partners and are placed only with your consent.

5.3 HubSpot Cookies

As a HubSpot-powered site, the following cookies may be placed on your device:

  • __hs_opt_out — Stores your cookie consent opt-out preference. When set, the HubSpot tracking code will not attempt to send any data to HubSpot.
  • __hs_do_not_track — Enables the "Do Not Track" setting. When set, the HubSpot tracking code will not send any information to HubSpot.
  • __hs_initial_opt_in — Stores the initial consent status when visitors first arrive on the Site.
  • __hstc — Tracks visitors to the Site. Contains the domain, a unique visitor ID (hubspotutk), the initial timestamp of the first visit, the timestamp of the last visit, the current timestamp, and the session number.
  • hubspotutk — Tracks a visitor's identity. This cookie is passed to HubSpot on form submission and used for de-duplicating contacts.
  • __hssc — Tracks user sessions and determines whether the session counter should be incremented.
  • __hssrc — Determines whether the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.
  • messagesUtk — Used to recognize visitors who interact with the messages tool (live chat or chatbot) and relate them to a known contact in CCA's HubSpot database.

5.4 Managing Your Cookie Preferences

When you first visit the Site, a cookie consent banner will be displayed allowing you to accept or decline non-essential cookies. You can update your cookie preferences at any time by clicking the "Cookie Settings" or "Privacy Preferences" link in the footer of the Site.

You can also manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking all cookies may affect the functionality of the Site.

Do Not Track: Our Site recognizes Do Not Track (DNT) signals sent by your browser. When a DNT signal is detected, HubSpot's tracking code will not send data to HubSpot.

6. AI-Powered Processing and Automated Decision-Making

6.1 How Cannolai Uses AI

Cannolai's AI-powered features process your membership and engagement data to support CCA's operations. These AI capabilities include:

  • Member Engagement Scoring: Analyzing your interactions with CCA (event attendance, email engagement, content consumption, renewal history) to generate engagement scores that help CCA understand and improve member satisfaction.
  • Predictive Analytics: Using historical data patterns to forecast renewal likelihood, identify members at risk of lapsing, and optimize outreach timing.
  • Personalized Communications: Tailoring email content, event recommendations, and resource suggestions based on your membership profile, interests, and behavior patterns.
  • Automated Workflows: Triggering automated renewal reminders, welcome sequences, re-engagement campaigns, and event follow-ups based on predefined rules and AI-driven triggers.
  • Member Segmentation: Grouping members by shared characteristics, interests, engagement levels, or behaviors to deliver more relevant communications and programming.

6.2 Human Oversight

AI-generated insights and automated processes are used to support and enhance CCA's member services. No automated decisions are made that produce legal effects or similarly significant impacts on you without meaningful human review. CCA staff oversee all AI-driven communications and may intervene or override automated processes at any time.

6.3 Your Rights Regarding AI Processing

You have the right to:

  • Opt out of AI-driven personalization by contacting CCA directly. You will still receive standard, non-personalized communications related to your membership.
  • Request information about the logic involved in any automated processing that affects you.
  • Request human review of any decision that was substantially informed by automated processing.

To exercise these rights, please contact us using the information in Section 11.

7. Your Privacy Rights and Choices

7.1 Email Marketing Opt-Out

Every marketing email we send includes an "Unsubscribe" link at the bottom. You may opt out of marketing communications at any time by clicking the unsubscribe link, or by contacting us directly. Please note that even if you opt out of marketing emails, we may still send you transactional or administrative communications related to your membership, event registrations, or other services you have requested.

HubSpot's subscription management allows you to manage your email preferences granularly, choosing which types of communications you wish to receive and which you wish to opt out of.

7.2 Cookie Consent Withdrawal

You may withdraw your consent to non-essential cookies at any time by updating your preferences through the cookie consent banner or the "Cookie Settings" link in the Site footer. You may also set your browser to refuse cookies or to alert you when cookies are being sent.

7.3 HubSpot and Cannolai Tracking Opt-Out

If you wish to opt out of all HubSpot and Cannolai tracking, you may do so through the cookie consent banner. When the __hs_opt_out cookie is set to "yes," neither HubSpot nor Cannolai will collect data about your browsing behavior on the Site. Because Cannolai operates natively within HubSpot, opting out of HubSpot tracking also disables Cannolai's data collection for analytics and personalization purposes.

7.4 Rights Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
  • Right to Delete: You have the right to request that we delete any personal information we have collected about you, subject to certain legal exceptions.
  • Right to Correct: You have the right to request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: CCA does not sell personal information. If our practices change, we will update this Privacy Policy and provide an opt-out mechanism.
  • Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you have the right to limit its use to purposes necessary to perform services or provide goods you request.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please contact us using the information provided in Section 11 below. We will verify your identity before fulfilling your request and respond within the timeframes required by applicable law.

7.5 Rights Under Other Applicable Laws

If you are located in a jurisdiction with applicable data protection laws (such as the General Data Protection Regulation, or "GDPR," if applicable to your circumstances), you may have additional rights including the right to access, rectify, erase, restrict processing of, or port your personal data, and the right to object to processing. To exercise such rights, please contact us using the information in Section 11.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, whether we can achieve those purposes through other means, and applicable legal requirements.

When your data is no longer needed, we will securely delete or anonymize it.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include encrypted data transmission (SSL/TLS), access controls, and regular security assessments. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Site is not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly delete that information. If you believe we have inadvertently collected information from a child under 16, please contact us immediately.

11. Contact Us

If you have questions or concerns about this Privacy Policy, would like to exercise your privacy rights, or wish to file a complaint, please contact us:

Central City Association of Los Angeles

Website: www.ccala.org

You may also reach us through the contact form available on our Site.

For cookie-related inquiries or to update your tracking preferences, use the "Cookie Settings" link in the footer of the Site.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and may provide additional notice (such as a banner on the Site or an email notification). We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.