Legal
Privacy Policy
Effective October 25, 2026 · Last updated October 25, 2026
This policy explains what personal information the Center for Nonprofit Coaching (CNPC) collects when you visit cnpc.coach, apply for coaching, download a guide, join our newsletter, donate or volunteer as a coach, and what we do with it.
It was written for the people we work with: nonprofit leaders and their organizations, our donors and our volunteer coaches. Using our website is also governed by our Terms of Use.
1Who we are
The Center for Nonprofit Coaching is a 501(c)(3) nonprofit organization based in Texas and founded in 2010. We provide executive coaching, executive team coaching and organizational coaching to leaders of 501(c)(3) nonprofits, government agencies and analogous non-U.S. entities. Our coaches are volunteers, and every CNPC coach is credentialed by the International Coaching Federation (ICF).
In this policy, “CNPC,” “we” and “us” mean the Center for Nonprofit Coaching. “You” means anyone whose information we handle: website visitors, applicants, clients, donors, newsletter subscribers and volunteer coaches.
This policy covers cnpc.coach and the forms and services connected to it. Websites we link to, such as Zeffy, Candid, LinkedIn and Facebook, have their own privacy policies.
2Information you give us
Most of what we know about you is what you type into our forms or tell us directly. The forms on our website run on Gravity Forms, a form plugin for WordPress, and what you submit is stored in our website’s database.
When you apply for coaching
Our application form asks for:
- your first and last name and your email address;
- how you heard about us;
- your organization’s legal name, website, city and state, its type and its size by annual operating budget;
- the kind of coaching you want (individual, team or both) and why you want it;
- up to two coaches you would like to work with, and anything else you choose to tell us.
You tick a consent box before you submit. Someone else may also apply for you: a board chair may apply on behalf of an executive director, and an organization’s HR contact applies for each person in organizational coaching. In that case we receive your information from them.
When you download a free guide
To open one of our free guides, you give your name, your email address and, if you wish, your nonprofit’s name, and you tick a box agreeing that we may store and handle your data.
When you join our newsletter
The newsletter form in the footer of every page, and on our newsletter page, asks for your name and email address.
When you email or call us
If you write to [email protected] or [email protected], or call +1 (855) 755-CNPC (2672), we keep what you tell us so that we can answer you.
During a coaching engagement
If you become a client, we keep the information we need to run your engagement: your engagement agreement, who your coach is, scheduling progress, and your answers to our mid-engagement check-in, feedback form and end-of-engagement survey. Our feedback forms are hosted on Plutio, the system we use to manage client and volunteer records.
When you volunteer as a coach
Volunteer coaches fill in our onboarding form and tell us their availability through forms on Plutio. We use the onboarding form to publish a profile on our Our Coaches page, which can include your name, photo, credentials, LinkedIn link and a description of your experience.
When you donate
Donations are made through a form provided by Zeffy. You give your payment details to Zeffy, not to our website. See section 8.
3Information collected automatically
Like most websites, ours receives technical information every time you visit: your IP address, browser and device type, the pages you open, the page that sent you to us, and the date and time. It reaches us, or the services we use, in these ways:
- Hosting and delivery. Our web server, Cloudflare (which sits in front of our site to keep it fast and secure) and Bunny.net (which delivers our images through our image optimization service) process this information to show you our pages. Our server also keeps logs of some requests, including the IP address and browser.
- Google Analytics. We use Google Analytics, loaded through Google Tag Manager, to count visits, see which pages are read and record when a form is submitted.
- Google Ads. We use Google Ads to reach nonprofit leaders and to see whether our ads lead people to apply, download a guide, join our newsletter or open our donation form. When you arrive by clicking a Google ad, we save the ad’s click identifier in a cookie for 90 days. If you then submit one of our forms or open the donation form, our server, or the automation service we use for this, sends Google that identifier with the type of action, a reference number and the time. We do not send your name, email address or form answers with it.
- Encharge. Encharge, our email marketing service, runs a script on our pages that records which pages are visited. If Encharge already knows your email address, for example because you submitted a form or clicked a link in one of our emails, it can connect those visits to your contact record.
- Our forms. Our form software records the date and time of each submission and the page it came from, and can record your IP address and browser.
- Files from other services. The script that runs our cookie banner is loaded from jsDelivr, the seal that shows our Candid (GuideStar) transparency profile is loaded from Candid, and the donation form is loaded from Zeffy. Loading them sends your IP address and browser details to those services.
Our website does not change what it collects in response to a browser’s Do Not Track signal.
4Cookies
Cookies are small files a website stores in your browser. These are the ones our website sets itself:
| Cookie | What it does | How long it lasts |
|---|---|---|
tc_consent | Remembers the choices you make in our cookie banner | 182 days |
cnpc_gclid | Stores a Google Ads click identifier when you arrive from a Google ad | 90 days |
cnpc_unlocked_pdlcnpc_unlocked_nsmcnpc_unlocked_mnfcnpc_unlocked_mdt | Let you reopen a guide after you have filled in its form | 90 days |
Google (for Analytics and Ads), Encharge and Zeffy set their own cookies, under their own terms, to count visits, measure advertising, recognize returning visitors and run the donation form.
You can block or delete cookies in your browser settings. If you block ours, a guide you unlocked may ask you to fill in its form again. You can also stop Google Analytics from using your visits with Google’s opt-out browser add-on, and turn off personalized Google ads in Google’s My Ad Center.
5How we use your information
We use personal information to:
- review your application, confirm that your organization is eligible and which fee tier applies, match you with a coach and run your engagement;
- answer your questions and give you what you asked for, such as a guide;
- send our newsletter and other emails about our resources and services (section 9);
- process donations and engagement fees, send receipts and keep our accounts;
- check the quality of each engagement and improve our program, through check-ins, feedback and surveys;
- understand who we serve, by looking at applications together (for example, how many come from organizations of each size) and reporting the totals to our board;
- recruit, onboard and list our volunteer coaches and match them with clients;
- run, secure and improve our website and measure our advertising;
- meet our legal, tax and accounting duties and protect our rights.
We sometimes quote a few words from an application or from feedback on our website or in reports, to show the challenges nonprofit leaders bring to coaching. We describe the person only by role, organization size and state, never by name or organization. We publish a testimonial that names you only with your permission.
6Coaching and confidentiality
Who sees your application
Your application is read by our team and by the volunteer coaches who help us with intake and matching, who may also have an intake conversation with you. To make a match, we share your whole application with the coaches you may work with, so they can decide whether they are a good fit and prepare for your work together.
Your sessions are confidential
Every CNPC coach holds an ICF credential and follows the ICF Code of Ethics. The Code requires coaches to keep the strictest level of confidentiality with everyone involved, to have a clear agreement about what information is shared and with whom, and to keep and dispose of any records in a way that protects confidentiality, security and privacy.
What your organization or board sees
When your organization arranges or pays for coaching, we may give its contact person program-level updates, such as participation, scheduling progress and satisfaction. We do not share what is discussed in your sessions, and your board does not receive session content, progress reports or coach assessments from us. You are free to share your own progress with anyone you choose.
Limits of confidentiality
As the ICF Code of Ethics sets out, a coach may have to disclose information when the law or a court order requires it, or when there is a serious risk of harm to you or to others.
How we monitor engagements
To make sure coaching is working, we hold a check-in midway through each engagement, gather feedback and send an end-of-engagement survey. If the match is not working or your needs change, we can adjust it.
7Who we share information with
We share personal information only with the people and services below, and only as far as each needs it:
- Our volunteer coaches, as described in section 6.
- Your organization’s contact person, limited to the program-level updates in section 6.
- Service providers that run parts of our work for us:
- our web host, and Cloudflare and Bunny.net, which deliver and protect our website;
- Google, whose Gmail service sends the notification emails our website forms generate;
- Plutio, for client and volunteer records and our feedback and volunteer forms;
- Encharge, for our newsletter and other emails;
- Zeffy, for donations and online payments;
- our accounting software and bank, for financial records;
- Google Analytics, Google Tag Manager and Google Ads, and the automation service that sends ad measurement data to Google Ads, for visit statistics and advertising measurement;
- the video meeting service your coach chooses for your sessions;
- jsDelivr and Candid, which serve the cookie banner script and our transparency seal.
- Authorities or others, when the law requires it, to protect someone’s safety or to protect CNPC’s rights.
- A successor organization, if CNPC merges with another nonprofit or transfers its programs to one. The information would pass to the organization that continues the work and stay covered by this policy.
We do not sell, rent or trade your personal information, and we do not give our contact lists to other organizations.
8Donations and payments
Our donation form is provided by Zeffy, a fundraising platform for nonprofits. When you give, Zeffy collects your name, email address, payment details and anything else its form asks for, and processes the payment. We can then see a record of your gift, such as your name, email address, the amount and the date, but we do not receive your full card number. Zeffy may invite you to add an optional contribution to Zeffy itself; that contribution goes to Zeffy, not to CNPC. Zeffy’s own privacy policy applies to what you give it.
You receive a receipt for tax purposes. We keep records of donations and payments for our accounts and tax filings.
Engagement fees are paid online through Zeffy, as set out in your engagement agreement.
9Emails and unsubscribing
If you join our newsletter, we send you nonprofit leadership insights, coaching resources and program updates. If you download a guide or apply for coaching, we may also send you emails about our resources and services. We send these emails through Encharge.
Every newsletter and marketing email includes an unsubscribe link. You can also email [email protected] and ask us to stop. Unsubscribing does not stop the messages we need to send you about an application, an engagement or a donation.
10How long we keep information
We keep personal information only as long as we need it for the purpose we collected it for, and then delete it or remove what identifies you. In practice:
- Cookies last for the periods listed in section 4.
- Applications and engagement records, including feedback and survey answers, are kept for seven years and then deleted.
- Donation and payment records are kept for seven years and then deleted.
- Newsletter and email details are kept until you unsubscribe or ask us to delete them. We may keep a note that you unsubscribed, so that we do not email you again.
- Volunteer coach records are kept while you volunteer with us and for seven years afterward. Your public profile comes down when you stop volunteering.
11How we protect information
We use reasonable safeguards, including encrypted (HTTPS) connections to our website, Cloudflare’s security service in front of the site, and password-protected accounts on the systems that hold your information. No website or system is completely secure, so we cannot guarantee that information will never be accessed without permission. If a security breach affects your personal information, we will tell you when the law requires it.
12Your choices and rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your information;
- stop sending you newsletters and other marketing emails;
- stop using your information for a purpose you object to, where the law gives you that right.
If you gave us your consent for something, you can withdraw it at any time; this does not affect what we did before. Volunteer coaches can ask us to update or remove their profile at any time.
To make a request, email [email protected]. We may need to confirm your identity first. We will answer within a reasonable time and tell you if the law requires us to keep something, such as donation records. Asking will not affect how we treat you.
13Leaders outside the United States
CNPC serves leaders of analogous non-U.S. entities as well as U.S. organizations. CNPC is based in the United States, and the information you give us is stored and processed in the United States and in the other countries where our service providers operate. Data protection laws there may differ from the laws where you live.
If you are in the European Economic Area, the United Kingdom or another place whose data protection laws apply to how we handle your information, you have the rights in section 12 and, as those laws provide, the right to restrict how we use your information, to receive the information you gave us in a portable format, and to complain to your local data protection authority. We rely on these legal grounds:
- taking the steps you ask for before an engagement, and carrying out the engagement (applications and coaching);
- your consent (guide downloads, the newsletter and, where the law requires it, cookies);
- our legitimate interests in running and improving a nonprofit coaching program, keeping our website secure and measuring our outreach;
- our legal obligations (for example, tax and accounting records).
14Children
Our website and services are for adults who lead or work with nonprofit organizations. They are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has given us information, email [email protected] and we will delete it.
15Changes to this policy
We will update this policy when our practices change. The date at the top of the page shows the current version. If we make a significant change, we will say so on this page and, where appropriate, by email.
16Contact us
Questions or requests about your personal information go to the Center for Nonprofit Coaching:
Email: [email protected] (questions about gifts: [email protected])
Phone: +1 (855) 755-CNPC (2672)
Mail: Center for Nonprofit Coaching, 104 E Ovilla Rd Ste 1278, Red Oak, TX 75154
See also our Terms of Use.