California Privacy Policy

Privacy Policy (CCPA and CPRA)
Center for Christian Virtue d/b/a Teach for the Kingdom Privacy Policy
(California Residents/CCPA)

Effective Date: March 12, 2026
Last Updated on: March 12, 2026

This California Privacy Policy describes how Center for Christian Virtue, doing business as Teach for the Kingdom (the "Organization," "we," or "us"), collects and processes personal information about consumers who reside in California. The California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), requires us to provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding our collection, use, sale, sharing, and retention of personal information, along with a description of the rights California residents have regarding their personal information. This Privacy Policy provides the information the CCPA requires, together with other useful information regarding our collection and use of personal information. Any terms defined in the CCPA (as amended) have the same meaning when used in this policy. This Privacy Policy does not apply to our collection and use of personal information from residents outside of California. Consumers residing in other locations should refer to our general privacy notice (available on our website) for information about how we handle personal data outside California.

We collect and use information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, which we refer to in this policy as "personal information". Personal information does not include: (a) publicly available information (including information from government records, widely distributed media, or information a consumer makes lawfully available to the general public without restricting it to a specific audience); (b) lawfully obtained, truthful information that is a matter of public concern; (c) deidentified or aggregated consumer information; and (d) information excluded from the CCPA's scope, such as:

• Health or medical information covered by the Health Insurance Portability and Accountability Act (HIPAA) and the California Confidentiality of Medical Information Act, clinical trial data, or other qualifying research data; or
• Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), Gramm-Leach-Bliley Act (GLBA), California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act.

Personal Information Categories Chart

The chart below identifies the categories of personal information we have collected from consumers within the last 12 months and (in general terms) the expected retention period for each category, as required by the CCPA. (A more detailed discussion of our retention practices is provided later in this policy.)

Note: We retain each category of personal information only as long as reasonably necessary to fulfill the purposes described in this policy or as otherwise required by law, considering the nature of the information and the purposes for which it was collected. At the end of the applicable retention period, personal information will be deleted, destroyed, or deidentified in accordance with our record retention policies. (For more information about how long we retain specific categories of personal information, see "How We Retain Personal Information" below.)

Sensitive Personal Information Categories Chart

"Sensitive personal information" is a sub-category of personal information consisting of specific information categories deemed sensitive under the CCPA. We only treat information as "sensitive personal information" under the CCPA when we collect or use it to infer characteristics about a consumer. The chart below identifies which sensitive personal information categories (if any) we have collected and used to infer characteristics about consumers in the last 12 months:

We do not use or disclose any sensitive personal information for purposes other than those authorized by the CCPA (see the "Sensitive Personal Information Use and Disclosure Purposes" section below). In particular, we do not use sensitive personal information for the purpose of inferring characteristics about consumers. Because we already limit our use and disclosure of sensitive personal information to only those purposes permitted by the CCPA, the CCPA's Right to Limit (as described below) is not applicable to our operations.

We obtain the categories of personal information listed above from the following categories of sources:

• Directly from you. For example, we collect information that you provide to us when filling out forms, creating an account, contacting us, or otherwise directly interacting with our Services or organization.
• Indirectly from you. For example, we collect certain information automatically from your interactions with our websites, mobile applications, or online services, such as through cookies and other tracking technologies on our sites. We also may collect information about your interactions with our advertisements on third-party websites or platforms.
• From our service providers. We receive personal data about you from service providers that we engage to perform services on our behalf. For example, our analytics providers and advertising networks may provide us with information they have collected in the course of providing services to us.
• From business partners or affiliates. We may receive personal data about you from our business partners or affiliated organizations. For example, if you are affiliated with a participating Christian school or with Mount Vernon Nazarene University (one of our strategic partners), that institution might share certain information about you with us in connection with joint programs or referrals.
• Through inferences we draw. We may derive information or inferences about your preferences or characteristics based on the other information we collect about you. For instance, we might analyze your interaction with our Services to infer your interests and tailor the content we deliver to you. (However, as noted above, we do not use sensitive personal information to infer characteristics about you.)

Personal Information Collection, Use, and Disclosure Purposes

We may use and disclose the personal information (including sensitive personal information) we collect for a variety of organizational purposes in order to operate, support our mission, and provide our Services. These purposes include, for example, to:

• Provide and improve our services. Develop, offer, deliver, support, and improve our programs and Services to you. For example, we use personal information to register you for Teach for the Kingdom programs, provide educational content, and otherwise fulfill your requests, as well as to improve and personalize those Services over time.
• Meet our contractual and legal obligations. Meet our obligations and enforce our rights arising from any contracts or agreements we enter with you (for example, any program participation agreements, tuition assistance agreements, billing arrangements, or terms of use). This also includes using personal information to comply with legal requirements and applicable laws and regulations.
• Fulfill the purpose for which it was provided. Fulfill the purposes for which you provided the personal information or that were described to you at the time of collection, and as otherwise permitted by the CCPA. For example, if you provide your contact information in order to receive updates or newsletters, we will use it to send you those communications.
• Communicate with you. Reach out to you about your account or participation, provide you with notices about changes to our Services or programs, and respond to your inquiries. We also use your information to notify you about upcoming events or opportunities, and to inform you of changes to any products or services we offer or provide through our programs.
• Improve user experience and operations. Administer our systems and conduct internal operations, including troubleshooting, data analysis, testing, research, and statistical or survey purposes. For example, we may use personal information to better understand usage patterns on our website or to improve our program offerings and user experience.
• Personalize content and marketing. Measure or understand the effectiveness of the content and advertising we serve to you and others, and deliver relevant content and advertising to you. This includes, for example, using inferences about your likely interests to tailor the recommendations or promotional offers you see on our Services or in our communications. We may also make suggestions and recommendations to you and other consumers about services or opportunities that may interest you.
• Protect our organization and users. Protect our Organization, employees, participants, and others by maintaining the safety, security, and integrity of our operations, Services, databases, and other technology assets. This includes detecting, preventing, and responding to fraud or illegal activities, and defending against or prosecuting those responsible for malicious or unauthorized activities directed at the Organization.
• Administer accounts and relationships. Manage your relationship and interactions with us, such as by facilitating online account creation and maintenance, ensuring account security, providing customer or participant support, and contacting you when necessary about your account or participation.
• Data analytics and research. Perform data analytics, including matching or combining information you provide with information from other sources (e.g., from our partners or publicly available data) to enhance our understanding of our participants and improve our Services. We may use techniques like machine learning on de-identified or aggregated data to improve our offerings (for example, analyzing program outcomes or developing new program strategies).
• Other organizational purposes. Carry out any other organizational or commercial purposes for which we collect personal information, as described to you at the time of collection, or for which we obtain your consent. We may also use personal information to exercise or defend the legal rights of the Organization (including our employees, affiliates, customers, and agents) and to respond to law enforcement requests or comply with obligations under applicable laws or court orders.

Sensitive Personal Information Use and Disclosure Purposes

We may use or disclose sensitive personal information we collect only for the following purposes approved by the CCPA (collectively, the "Permitted SPI Purposes"):

• Necessary for expected services. Performing actions necessary to provide our Services and maintain our relationship with you, where an average consumer would reasonably expect such actions as part of that relationship. (For example, if you provide a government ID for age verification, we use it only for that verification.)
• Security and fraud prevention. Preventing, detecting, and investigating security incidents; protecting against malicious, deceptive, fraudulent, or illegal activities; and prosecuting those responsible for such activities.
• Physical safety. Ensuring the physical safety of natural persons.
• Short-term, transient use. Short-term, transient use of sensitive personal information, provided that the information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your experience outside your current interaction with us. (For example, if we temporarily use a session cookie to remember your input in a form, and do not retain or share that information.)
• Service performance on our behalf. Performing services on behalf of the Organization, such as maintaining or servicing accounts, processing transactions or payments, verifying customer information, or providing similar services.
• Quality and safety maintenance and improvement. Activities undertaken to verify or maintain the quality or safety of a service or device that we own or control, and to improve, upgrade, or enhance the service or device that we own or control.
• Not for inferring characteristics. Collecting or processing sensitive personal information without the purpose of inferring characteristics about a consumer.

We do not use or disclose sensitive personal information for any purposes other than the Permitted SPI Purposes listed above. In particular, we do not use sensitive personal information for purposes that would trigger a consumer's right to limit such use (such as for personalized advertising or profiling beyond what is allowed).

Additional Categories or New Purposes: We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice. If required by law, we will also seek your consent before using your personal information for a new or unrelated purpose. We may collect, process, and disclose aggregated or deidentified consumer information (which is not considered personal information) for any purpose, without restriction. When we maintain or receive information in deidentified form, we will not attempt to reidentify it, except to test whether our deidentification processes satisfy applicable legal requirements.

Business Purpose Disclosures

We may disclose the personal information we collect to third parties for our operational business purposes (as described in the "How We Use Personal Information" section above), for example to engage service providers or contractors to support our organization's functions. For example, we may disclose certain information about your visits or usage of our website to a cybersecurity or IT consultant to help us secure and improve our online Services, or share your mailing address with a service that sends out our newsletters on our behalf. We make these business-purpose disclosures under written contracts that describe the limited purposes of the disclosure, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract on our behalf. These contracts also meet the CCPA's requirements for contracts with service providers or contractors.

The chart below identifies the categories of third parties to whom we have disclosed personal information for a business purpose in the preceding 12 months, along with the personal information categories disclosed and the purpose of the disclosure:

Selling or Sharing Personal Information

We do not sell your personal information for monetary consideration. However, we may share your personal information with third parties for the purpose of cross-context behavioral advertising (as defined in the CCPA), and we have shared personal information for this purpose in the preceding 12 months. For instance, as described above, we allow certain advertising and social media partners to collect information via cookies or similar technologies on our website to share with them for advertising purposes (which the CCPA considers "sharing"). Our personal information sharing does not include information about consumers who we know are under 16 years of age (and in fact, our Services are not intended for minors under 16). We also do not have any actual knowledge of selling personal information of consumers under 16. And, as stated above, we do not use or disclose sensitive personal information other than for Permitted SPI Purposes, so we do not sell or share sensitive personal information.

The following chart provides information about the categories of third parties with whom we share personal information (as defined by the CCPA) and the categories of personal information shared, as well as the purpose of such sharing:

Your California Rights

If you are a California resident, the CCPA provides you with specific rights regarding your personal information. This section explains those rights and how you can exercise them:

• Right to Know (Access) and Data Portability: You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and verify your request (see "How to Exercise Your Rights" below), we will disclose to you:
  • The categories of personal information we have collected about you.
  • The categories of sources from which the personal information was collected.
  • Our business or commercial purpose for collecting (and, if applicable, selling or sharing) that personal information.
  • The categories of third parties with whom we have disclosed your personal information, including:
    • The categories of personal information (if any) that we disclosed for a business purpose to each category of recipient; and
    • The categories of personal information (if any) that we sold or shared for cross-context behavioral advertising to each category of third-party recipient.
  • The specific pieces of personal information we collected about you (also called a data portability request).

Note: Our response will cover the 12-month period preceding our receipt of your verifiable request. We will honor requests for information beyond the 12-month period (up to information collected since January 1, 2022) to the extent required by law, unless doing so would prove impossible or involve disproportionate effort. The law permits you to request this information up to twice in a 12-month period.

• Right to Delete: You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and verify your deletion request, we will delete (and direct our service providers and contractors to delete) your personal information from our records, unless an exception applies. For example, we may deny your deletion request if retaining the information is necessary for us or our service providers to complete a transaction you requested, detect security incidents, comply with a legal obligation, or certain other reasons permitted by law. If we cannot comply with part or all of your deletion request, we will inform you of the reason in our response.
• Right to Correct: You have the right to request that we correct any inaccurate personal information that we maintain about you. Upon receiving and verifying your request, we will correct (and direct our service providers and contractors to correct) your information, as required by the CCPA. We may deny a correction request if we determine that the contested information is more likely than not accurate based on the totality of the evidence reasonably available, or if an exception under the law applies. We may also request documentation from you, as needed, to confirm the identity of the person making the request and to validate the accuracy of the new information provided.
• Right to Limit Use of Sensitive Personal Information: In some cases, California residents have the right to direct businesses to limit the use of sensitive personal information to certain permitted purposes (the "right to limit"). However, because we do not use or disclose sensitive personal information for any purposes other than the Permitted SPI Purposes (listed above), this right is not applicable to our operations at this time. In other words, we already limit our use of sensitive information to what is strictly necessary to provide our Services or meet legal obligations, so there is no additional limitation you need to request.
• Right to Opt-Out of Sale or Sharing: You have the right to direct us at any time not to sell your personal information or not to share it for cross-context behavioral advertising purposes (the "right to opt-out"). If you (or your authorized representative) submit a valid request to opt-out of the sale or sharing of your personal information, we will honor that request going forward.
• Right to Opt-In for Minors: We do not knowingly sell or share personal information of consumers under 16. In any event, we will not sell or share the personal information of consumers we actually know are between 13 and 16 years old unless we receive affirmative authorization (opt-in consent) from the consumer, and we will not sell or share the personal information of consumers under 13 years old unless we receive affirmative authorization from the child's parent or guardian. Consumers who opt-in to personal information sales or sharing may opt-out of future sales or sharing at any time.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment from us for exercising any of your CCPA rights. This means we will not deny you services, charge you a different price, provide a different level of quality of service, or suggest any of these actions, solely because you exercised your rights under the CCPA. However, please note that if the exercise of your rights limits our ability to process your personal information (for example, if you request deletion of certain data), we may not be able to provide you the same benefits or services as we could if we had that information.

Exercising Your Rights

Exercising Right to Know, Delete, or Correct: To exercise your Right to Know (access) or data portability, Right to Delete, or Right to Correct described above, please submit a verifiable consumer request to us by either of the following methods:

• Call us at: (513) 733-5775
• Email us at: contact@ccv.org

Please include in your request your name, the California county or city in which you reside, and an explanation of the specific request (whether you are seeking to know/access, delete, or correct your information, or some combination of those). Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will only use personal information provided in a consumer request to verify the requestor's identity or authority to make the request, and to track and respond to the request.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a request on behalf of your minor child. An authorized agent may be required to provide proof of their authorization and we may also verify their identity directly. You may only make a request to know (access) your personal information twice within a 12-month period.

When you submit a request to know, delete, or correct, we will take steps to verify your identity to ensure we are protecting your information. Verification may include matching data points you provide with data we have on record, or requesting additional information if needed. If we cannot verify your identity or authority to make the request and confirm the personal information relates to you, we will not be able to fulfill the request. We will inform you if we need additional information to verify your identity, or if we cannot verify your identity.

Exercising Right to Opt-Out of Sale/Sharing: To exercise the Right to Opt-Out of the sale of your personal information or sharing of your personal information for cross-context behavioral advertising, you (or your authorized representative) may submit a request to us through any of the following methods:

• Interactive form or "Do Not Sell or Share" link: If available, by using the "Do Not Sell or Share My Personal Information" link on our website (or a "Your Privacy Choices" link) which will guide you through submitting an opt-out request.
• Global Privacy Control: By enabling a supported browser or device signal that communicates your choice to opt-out (such as the Global Privacy Control (GPC) signal). If our website detects a valid, browser-based opt-out preference signal indicating a desire to opt-out of the sale or sharing of personal information, we will honor it for that browser and device, as required by law.
• Email or Phone: By emailing us at contact@ccv.org, or calling us at (513) 733-5775, and specifying that you wish to opt-out of personal information sales/sharing. Please provide your name and the email address associated with your account or interactions with us (if applicable).

Once you submit an opt-out request, we will act upon it as soon as feasibly possible, but no later than 15 business days from the date we receive the request. We will also instruct all applicable third parties to whom we have sold or shared your personal information (if any) to stop further selling or sharing of your data and to honor your opt-out request going forward. We will only use personal information provided in an opt-out request to review and comply with the request.

If you have enabled the Global Privacy Control (GPC) or a similar opt-out preference signal on your browser, you do not need to make a separate opt-out request. We will process that preference signal as a valid opt-out for the browser or device you are using, as required by CCPA regulations.

Please note, we may deny an opt-out request (or ignore an opt-out preference signal) if we have a good-faith, reasonable, and documented belief that the request is fraudulent (for example, if we suspect someone is masquerading as you without authorization). If we deny a request, we will explain our basis for doing so. Aside from such circumstances, we will not contact you to ask you to re-authorize the sale or sharing of your data after you have opted out, until at least 12 months have passed.

Response Timing and Format

• Confirmation of Receipt: We will confirm receipt of your verifiable consumer request within 10 business days of receiving it, by either contacting you at the email address or phone number you provided or by other reasonable means. If you do not receive confirmation within 10 days, please contact us at contact@ccv.org to ensure we received your request.
• Response Time: We endeavor to substantively respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to an additional 45 days, for a total of 90 days), we will inform you of the reason and extension period in writing. For requests made online, we will deliver our written response electronically to the verified email associated with the request, or if you have an account with us, we may deliver it through that account.
• Substance of Response: Our response will cover the requested information for the 12-month period preceding the request's receipt (or longer, if you requested and we are able to provide a longer period as described above). If we are unable to comply with a request, either in whole or in part, our response will explain the reasons we cannot comply, if we are permitted to do so (for example, we will not reveal certain sensitive information in response to a Right to Know request due to security or legal restrictions). We might decline to provide specific pieces of information if disclosure poses excessive risk to security or privacy (for instance, we will not reveal your Social Security number or password in response to an access request) in accordance with CCPA guidance. In some cases, we may have deleted, deidentified, or aggregated your personal information in accordance with our data retention practices, in which case we will inform you that we do not have a copy of the information in an identifiable form.
• Format of Data Provided: For data portability requests (requests for specific pieces of information we hold about you), we will provide your personal information in a structured, commonly used, and machine-readable format. For example, we may provide the information in a CSV (Comma-Separated Values) file or Excel file, which should allow you to transmit the information from one entity to another without hindrance.
• No Charge: We will not charge you a fee for processing or responding to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that a fee is warranted, we will tell you why and provide a cost estimate before completing your request.

Response Timing for Opt-Out Requests: As noted above, we will comply with opt-out of sale/sharing requests as soon as feasibly possible, but no later than 15 business days from the day we receive the request. We will notify any third parties to whom we sold or shared your personal information to also honor your opt-out request, and we will instruct our service providers and contractors not to use personal information obtained from us in a manner that would be considered selling or sharing under the CCPA. We will also instruct them to forward your opt-out request down to any other third parties with whom they may have further shared your data (unless such sharing is exempt from the opt-out requirement). We will confirm compliance with your opt-out request within 15 business days. If we have a reasonable basis to believe an opt-out request is fraudulent, we may deny the request, but we will explain our decision to you. Once you have opted out, we will not ask you to reauthorize the sale or sharing of your personal information for at least 12 months.

How We Retain Personal Information

We keep the categories of personal information described in this policy for as long as reasonably necessary to fulfill the purposes outlined above or as otherwise permitted by law. In determining how long to retain personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information and whether we can achieve those purposes through other means, and applicable legal requirements (such as statutes of limitation, recordkeeping, and reporting obligations).

In general, this means that we will retain your personal information for the duration of your relationship with us and for a period thereafter as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and for backup, archival, and audit purposes. For example, we may retain basic contact information of our program alumni to keep in touch with them, unless they request deletion. At the end of the applicable retention period, we will either delete or deidentify your personal information in a secure manner.

For more information about our data retention practices or specific retention periods for certain categories of personal information, you may contact us using the information below.

Contact Information

If you have any questions or comments about this California Privacy Policy, the ways in which the Organization collects and uses your personal information described here, or your choices and rights regarding such use, please do not hesitate to contact us at:

Center for Christian Virtue Teach for the Kingdom
62 East Broad Street
Columbus, OH 43215-3503
Email: contact@ccv.org
Phone: (513) 733-5775

You may also refer to our general Privacy Policy/Notice for further details on our data practices outside the scope of California law. For any complaints or concerns about our privacy practices, you may contact us at the address, email, or phone number above, or you may file a complaint with the California Attorney General or the California Privacy Protection Agency. We will not retaliate against you for exercising your rights.