Privacy notice

What data CALA keeps, what for, who it shares it with, and how to ask for it to be deleted.

Updated October 14, 2026.

Cámara Americana de Latinos Avanzando (CALA) is a Texas nonprofit chamber of commerce. This notice covers calatx.org, the members' portal and the payment page pagos.calatx.org. For any question about your data, write to info@calatx.org.

What we don't do

We don't sell or rent your data. We use no trackers, no third-party analytics and no advertising. The pages of calatx.org load no code, fonts or images from other servers. The only exception is the payment page, which loads Stripe's payment form (see below).

What data we collect

If you apply for membership: your business name, your name, email, phone (and whether you use WhatsApp), line of business, city, website, social media, how you heard about us, the level you chose, your payment method and the IP address the application was sent from. If you pay by transfer or similar, the receipt you upload; and if you appeal a decision, what you write.
If you came through a member's invitation link: which member invited you. Once your membership is paid, that member sees your business name in their portal; before that they only see how many applications are on the way, without names.
If you write to us through the contact form: your name, email, phone if you give it, the topic and your message.
If you register for an event that is open to the public: your name, your email, your phone and the name of your business if you give them, and the IP address you registered from. They are only for that event: knowing how many chairs to set and letting you know if anything changes. We do not share them with anyone, including whoever presents or sponsors the event.
If you are a member and use the portal: your account (name and email; the password is stored irreversibly encrypted), the business details you edit, your logo, your event registrations and the advisory appointments you request. For security we log portal sign-ins with their IP address and browser type.
If you pay online: the amount, the date, the kind of method (for example «card» or «bank account») and the payment reference number. We never see or store your card number or your bank account details: Stripe receives them directly.
When you visit the site: for each visit the server records the IP address, the date, the page requested, the response code and the browser type.

What we use it for

Reviewing your application, admitting you, and sending you the payment instructions and your portal access.
Keeping the membership roll, receipts and the accounting the law requires of us.
Reminding you of events you signed up for and answering what you write to us.
Listing your business in the directory, only as explained below.
Protecting the site and the portal against abuse (hence the IP addresses).

The member directory

If you are an active member, the public directory shows your business name, line of business, city, description, logo, website and social media. Your phone and email appear only if you turn them on from «My business». You can remove your business from the directory yourself from «My business», or ask us to.

Who we share it with

Only with the providers we need in order to operate, and only what is necessary:

OVHcloud — the server that hosts the site and the database, in the United States.
MXroute — the email service we use to send and receive @calatx.org email.
Stripe — processes online payments. It receives your card, bank account or wallet details directly in its own form, and handles them under its own privacy policy. If you pay with a wallet such as Amazon Pay, Apple Pay or Google Pay, that provider also receives your payment details.

Beyond that, we would only share data if an authority lawfully requires it.

Cookies

The public pages of calatx.org set no cookies. The portal uses three first-party cookies, only after you sign in: cala_sesion (your session, up to 30 days), cala_csrf (protects forms) and cala_dispositivo (remembers a device you have already signed in from successfully, up to 90 days). On the payment page, Stripe may use its own cookies to prevent fraud.

How long we keep it

Applications that don't end in membership: your application link is valid for 14 days. After one year the application leaves the system and only a minimal record remains (business, contact, email, level, how it ended and the dates).
Member data: while you are a member. Payment and receipt records are kept as long as the Chamber's accounting and legal obligations require.
Portal sessions: 30 days; a remembered device, 90 days.
Server visit logs: 14 days.
Contact messages: as long as they serve to follow up with you; you can ask for them to be deleted.
Registrations for open events: as long as they serve the event and its attendance record; you can ask for them to be deleted.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, by writing to info@calatx.org. Members can correct their business details directly in the portal. If you ask us to delete your data, we will keep only what the law requires us to keep (for example, the record of a payment) and tell you what it was.

Security

The whole site travels encrypted (HTTPS). Passwords are stored irreversibly encrypted, service keys are encrypted in the database, and the payment receipts you upload cannot be reached from the web without signing in.

Minors

Membership is for businesses; this site is not directed to anyone under 18 and we do not knowingly collect their data.

Changes

If what we do with your data changes, we will publish it here first and change the date above.

Back to the start