Privacy Policy

Effective Date: July 6, 2026

1. Introduction

ACTIVE IMPLEMENTATION RESEARCH NETWORK (“we,” “our,” or “us”) is a nonprofit research and consulting organization. This Privacy Policy explains how we collect, use, disclose, and safeguard information you provide when you visit https://airn.org (the “Site”), request coaching and consultation services, subscribe to our newsletter, or download research papers and other content.

By using our Site or services, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Site.

2. Information We Collect

2.1 Information You Provide Directly
When you request consultation services, subscribe to our newsletter, or download content from the Site, we collect:

  • Full name
  • Email address
  • Phone number
  • Any additional information you choose to include in a request or inquiry

2.2 Information Collected Automatically
When you visit our Site, we may automatically collect certain technical information, including:

  • IP address and general geographic location
  • Browser type and version
  • Pages visited and time spent on those pages
  • Referring URL
  • Device type and operating system

This information is collected through cookies and similar tracking technologies. See Section 7 for more detail.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to consultation requests and communicate with you about our services
  • To deliver newsletters and research publications you have requested
  • To provide access to downloadable content
  • To improve our Site, services, and research offerings
  • To send administrative communications, such as confirmations or updates
  • To comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Legal Bases for Processing (EU/UK Visitors)

If you are located in the European Union or United Kingdom, we process your personal information under the following legal bases:

  • Consent: Where you have affirmatively provided your information to receive our newsletter, download content, or request consultation.
  • Legitimate Interests: To improve our Site and services, to communicate with you about requests you initiate, and to detect and prevent fraud or abuse.
  • Legal Obligation: Where processing is necessary to comply with applicable law.

You may withdraw consent at any time by contacting us at the address below or using unsubscribe links in our emails. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

5. Disclosure of Your Information

We may share your information in the following limited circumstances:

  • Service Providers: We share information with trusted third-party vendors who assist us in operating the Site and delivering services. Current service providers include: Mailchimp (The Rocket Science Group LLC), which processes email addresses and names to deliver our newsletter and email communications; and Google LLC, which provides website analytics (Google Analytics) and spam/bot protection (Google reCAPTCHA). These vendors are contractually obligated to use your information only as directed by us and consistent with this Policy. Mailchimp’s privacy practices are described at https://mailchimp.com/legal/privacy/. Google’s privacy practices are described at https://policies.google.com/privacy.
  • Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request.
  • Protection of Rights: We may disclose information where we believe disclosure is necessary to protect the rights, property, or safety of our organization, our users, or the public.
  • Organizational Transfers: In the event of a merger, acquisition, or dissolution of our organization, personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site if such a transfer results in a material change to this Policy.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Specifically:

  • Contact information associated with consultation requests is retained for the duration of the consulting relationship and for a reasonable period thereafter for recordkeeping purposes.
  • Newsletter subscriber information is retained until you unsubscribe or request deletion.
  • Content download records are retained as reasonably necessary for reporting and analytics purposes.

You may request deletion of your personal information at any time as described in Section 8.

7. Cookies, Tracking Technologies, and Third-Party Tools

7.1 Cookies Overview
Our Site uses cookies and similar tracking technologies to enhance functionality, gather usage data, and protect the Site from abuse. Types of cookies we use include:

  • Strictly Necessary Cookies: Required for the Site to function, including security and form-processing cookies. These cannot be disabled.
  • Analytics Cookies: Used to understand how visitors interact with our Site. We use Google Analytics for this purpose (see Section 7.2).
  • Security/Bot-Detection Cookies: Used to distinguish human users from automated bots. We use Google reCAPTCHA for this purpose (see Section 7.4).
  • Preference Cookies: Used to remember your settings or choices on the Site.

You may control or disable cookies through your browser settings. Note that disabling certain cookies may affect Site functionality. EU/UK visitors will be presented with a cookie consent banner where required by applicable law.

7.2 Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC (“Google”), to help us understand how visitors use our Site. Google Analytics uses cookies to collect information such as how often users visit the Site, what pages they visit, and what other sites they used prior to arriving. We use this information only to improve our Site and content.

Google Analytics collects only the IP address assigned to you on the date you visit this Site, not your name or other personally identifying information. We have enabled IP anonymization so that Google truncates IP addresses within EU member states and other countries in the European Economic Area prior to transmission. Google may transfer this information to third parties where required by law or where such third parties process the information on Google’s behalf.

You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout. Google’s privacy policy is available at https://policies.google.com/privacy.

7.3 Mailchimp (Email Communications)
We use Mailchimp, a service provided by The Rocket Science Group LLC (“Mailchimp”), to manage our email newsletter subscriptions and to send electronic communications to people who have requested them. When you subscribe to our newsletter or provide your email address to receive communications, your name and email address are transmitted to and stored by Mailchimp on our behalf.

Mailchimp may use this data to provide, operate, and improve its services and as described in its own privacy policy. Mailchimp acts as a data processor on our behalf and is contractually restricted from using your personal data for its own marketing purposes. Mailchimp’s privacy policy is available at https://mailchimp.com/legal/privacy/.

Email communications sent through Mailchimp may include tracking pixels that allow us to see whether an email was opened and which links were clicked. This helps us understand what content is most useful to our audience. You may opt out of email tracking by disabling images in your email client, or by unsubscribing from our communications.

7.4 Google reCAPTCHA
We use Google reCAPTCHA on our Site’s forms to protect against spam and automated abuse. reCAPTCHA is provided by Google LLC and works by collecting hardware and software information, such as device and application data, and sending it to Google for analysis. This data collection is necessary to distinguish human users from bots and is required for the Site’s contact and request forms to function.

Your use of reCAPTCHA is subject to Google’s Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms). The information collected by reCAPTCHA is used by Google in accordance with those policies. We do not control Google’s data practices with respect to reCAPTCHA and encourage you to review Google’s policies directly.

8. Your Privacy Rights

8.1 Rights for All Users
Regardless of location, you may:

  • Opt out of marketing emails at any time by clicking “unsubscribe” in any email we send.
  • Contact us to request access to, correction of, or deletion of your personal information.

8.2 California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information we maintain about you.
  • Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. If this practice changes, we will update this Policy and provide an opt-out mechanism.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a verifiable consumer request, contact us at the information in Section 10. We will respond within 45 days of receipt (extendable by an additional 45 days where reasonably necessary).

Shine the Light (Cal. Civ. Code § 1798.83): California residents may request information about whether we have disclosed personal information to third parties for their own direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes. To confirm this or to submit a written request, please contact us at IMPLEMENT@AIRN.ORG with “California Shine the Light Request” in the subject line. We will respond within 30 days as required by law.

8.3 EU and UK Residents (GDPR / UK GDPR)
If you are located in the EU or UK, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR, as applicable:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (‘Right to be Forgotten’): Request deletion of your personal data under certain circumstances.
  • Right to Restriction of Processing: Request that we limit how we use your data in certain circumstances.
  • Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior processing.

To exercise these rights, contact us at the information in Section 10. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or the relevant supervisory authority in your EU member state).

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

In the event of a data breach that is reasonably likely to result in risk to your rights and freedoms, we will notify affected individuals and applicable regulatory authorities in accordance with applicable law.

10. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to submit a complaint, please contact us at:

Active Implementation Research Network
Email: WEBSITE@AIRN.ORG
Website: https://airn.org/

We will respond to all verifiable requests within the timeframes required by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the Effective Date at the top of this Policy and, where required by law, provide additional notice (such as a prominent notice on our Site or direct notification by email).

We encourage you to review this Policy periodically. Your continued use of our Site or services after any update constitutes your acceptance of the revised Policy.

12. Children’s Privacy

Our Site and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will promptly delete it. If you believe we have collected information from a child under 13, please contact us immediately at the address in Section 10.

13. International Data Transfers

Our organization is based in the United States. If you are located outside the United States, please be aware that information you provide to us will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For EU/UK users, where we transfer personal data outside the European Economic Area or the United Kingdom, we will ensure that appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) to protect your information in accordance with applicable data protection law.

14. California Online Privacy Protection Act (CalOPPA)

In compliance with the California Online Privacy Protection Act (CalOPPA), Cal. Bus. & Prof. Code § 22575 et seq., this section provides California-specific disclosures regarding our online privacy practices.

14.1 Do Not Track
Some browsers transmit Do Not Track (“DNT”) signals to websites. Because there is currently no universally accepted standard for how websites should respond to DNT signals, our Site does not alter its data collection or use practices when it receives a DNT signal. We will update this disclosure if our practices change. All data collection practices applicable to California residents are described in this Privacy Policy.

14.2 Third-Party Collection of Personal Information
CalOPPA requires us to disclose whether third parties may collect personally identifiable information about your online activities over time and across different websites when you visit our Site.

Third parties do collect certain information when you visit our Site. Specifically:

  • Google LLC collects information about your use of our Site through Google Analytics (usage and behavioral data) and Google reCAPTCHA (device and interaction data). Google may use this data in accordance with its own privacy policy, available at https://policies.google.com/privacy. Google Analytics data may be used by Google across other sites and services subject to Google’s policies.
  • Mailchimp (The Rocket Science Group LLC) collects email engagement data (such as opens and clicks) through tracking pixels embedded in emails we send to subscribers. This data is collected in connection with emails you receive from us after providing your address, not through general Site browsing. Mailchimp’s privacy policy is available at https://mailchimp.com/legal/privacy/.

We do not authorize these third parties to use your personal information for their own marketing purposes, and we do not sell or share your information for cross-context behavioral advertising. For full details on these tools and your opt-out options, see Section 7 of this Policy.