Rivian Foundation
Data Privacy Notice

Introduction

Rivian Foundation (“we,” “us” or “our”) is committed to protecting your privacy. This Data Privacy Notice (“Notice”) describes our practices regarding the collection, use, disclosure, and retention of data when you use our website rivianfoundation.org (the “Site”).

It is our policy to post any changes we make to this Notice on our Site. Your continued use of our Site following the posting of changes constitutes your acceptance of such changes. This Notice was last updated on September 21, 2024.

Personal data we collect and how we use it

When you use our Site, you may browse the Site without submitting any personal data to us. We may collect the information below directly from you when you voluntarily provide it:

Identifying and contact information, such as first name, last name, and email address, which we use to communicate with you, including to respond to your inquiries and fulfill your requests.
Preferences, such as communication preferences and information about your interests, which we use to communicate with you, including to respond to your inquiries and fulfill your requests.

We may also collect certain information indirectly from you or your device through cookies and other similar technologies, which allow us to improve the quality of our Site and better understand our Site activity. This information may include the number of unique visitors, pageviews, top sources, and top pages, as well as limited device information and IP address. However, the IP address is hashed, the analytics data does not include any information that identifies an individual. You are not required to accept cookies from the Site. Your web browser allows you to disable the cookies function or delete existing cookies. However, if you disable cookies, you may not be able to access certain features on the Site.

Do not provide personal data about anyone else unless you have their consent to do so. If you provide us their information, we may disclose to them that you shared this information.

Our disclosure of your personal data

We may disclose the above information to the following parties:

Service Providers. Companies who process consumers’ personal data on our behalf for a business purpose, pursuant to a written agreement, such as software or IT providers. The contract or other agreement we execute with our service providers describes the purpose and requires the service provider to keep that personal data confidential consistent with this Notice.
Law Enforcement. We may disclose your personal data when legally required or in special circumstances when we deem in good faith that it is advisable to do so.
Merger. If we ever merge with, are acquired by, or otherwise consolidate with another organization, personal data may be transferred along with our other assets.

The Site may contain links to third-party websites. Third-party sites may collect information about you when you interact with them through links on our Site. If you follow any link to a third-party site, you should review those websites’ privacy policies to find out how they protect your privacy. We are not responsible for third-party sites or their privacy practices.

Third-party websites

Data retention and security

Except as otherwise permitted or required by applicable law or regulation, we will retain your personal data only as long as necessary to fulfill the purposes we collected it for. To determine the appropriate retention period for personal data, we consider our legal obligations, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means.

We have implemented reasonable security measures to prevent your personal data from being accidentally lost or used or accessed in an unauthorized way, including controls designed to limit access to your personal data to those Rivian Foundation personnel who have a genuine business need to know it. Those personnel who process your personal data are required to do so only in an authorized manner and are subject to confidentiality.

Despite our implementation of these measures, posting or transmission of personal data via the internet, by email, or by other electronic means is not completely secure and it is possible that third parties may unlawfully intercept or access such data. We cannot guarantee that personal data will be totally secure, so you provide your personal data at your own risk.

International data transfers

Rivian Foundation is based in the United States, and as such your personal data may be processed in the United States. We may transfer your personal data or store it internationally, including to or in countries that do not have data protection laws equivalent to those in the country where you reside or where your personal data is collected, for the purposes described above.

By using the Site or by otherwise providing us with your personal data, you agree to the collection, transfer, storage, and other processing of your personal data to countries outside of your country of residence. Personal data transferred or stored internationally will be subject to the laws of the jurisdiction(s) where it is transferred or stored, and may be accessible to foreign courts, law enforcement, and national security authorities in those jurisdiction(s).

Your privacy rights

You may have the privacy rights described below, depending on applicable laws in your jurisdiction. We will acknowledge and coordinate these requests as timely as possible. Initially, we will respond to and fulfill any such requests within one month or in accordance with applicable laws, which may be slightly longer (e.g., 45 days for California). We will not discriminate against you for exercising any of your privacy rights.

Access/Know. Request confirmation from us as to whether or not your personal data is being processed by Rivian Foundation and, if so, access to such data and/or the more detailed circumstances of the data processing.
Correction/Rectification. Request that we correct any inaccurate or incomplete personal data relating to you without undue delay.
Deletion/Erasure. Request that your personal data be deleted without undue delay. In certain circumstances, it may not be possible for us to accept your request under applicable laws, for example, when the processing is reasonably necessary to comply with a legal obligation, or if the processing is reasonably necessary for the performance of a contract between you and us.

We do not sell personal data, as this term is defined by applicable privacy regulations, or share personal data for targeted advertising purposes. If you wish to stop receiving messages from us, click on the “unsubscribe” link at the bottom of any message you receive from us.

To exercise your privacy rights, please contact us as set forth below. Please note, we may need to obtain specific information from you to confirm your identity and to ensure that you have the right to access information and exercise certain rights under applicable laws. As a result, one of our representatives may contact you to request additional information to verify your identity.

Children's data

The Site is not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us as set forth below. If we become aware that we have collected the personal data of a child, we will take steps to promptly delete such information.