Privacy Policy

Operation Shamrock is a U.S. non-profit working to educate people and organizations about scams, fraud, and other forms of digital crime. Operation Shamrock is a public charity exempt from federal income tax under Section 501(c)(3) of the U.S. Internal Revenue Code.

Operation Shamrock (“we,” “our,” “us") is committed to protecting your personal data and privacy rights. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://www.operationshamrock.org (“Site”), attend our virtual events, read our content, join our mail list, download documents, or otherwise engage with us.

If you have questions about this policy, please contact our team via email at ops@operationshamrock.org.

Updated: March 1, 2026

At Operation Shamrock, we believe in being up front about how we handle your information. We handle your data with the same care we’d want for our own information. This policy explains what information we collect, why we need it, and how we use it.

Information We Gather

We collect personal information that you provide to us. We may collect and process personal data in the following categories:

Personal information you provide

The information depends on the context of your interactions with us. The information may include the following:

  • Full name

  • Email address

  • Phone number

  • Job title and organization

  • Country or region

  • Information submitted via forms or surveys

  • Communications with our team

Automatically collected data

We may also collect information about how the Service is accessed and used, including:

  • Log data (IP address, browser type, pages visited)

  • Device information

  • Downloaded assets

  • Cookie and tracking data

  • Usage Data

How We Use Your Information

We process your information to provide, improve, and administer our Services. We may process your information for other purposes with your consent, including:

  • Communicating with you, including newsletters, updates, and invitations

  • Responding to inquiries

  • Providing reports and other assets

  • Improving website functionality and security

  • Complying with legal obligations

We will not:

  • Sell your personal information

  • Use your data for purposes you haven’t agreed to

  • Keep your information longer than we need it

How We Share Your Information

We do not sell your personal information.

We may share data with:

  • Third-party service providers such as email tools (e.g., Mailchimp) and webinar platforms (e.g., Zoom).

  • Hosting and analytics platforms (e.g. Squarespace, Google Analytics)

  • Event partners, only with your explicit consent

  • Sponsors, when you download a report or other asset that we have created together with a Partner(s)

  • Public authorities, where legally required

​All third parties who process personal data on our behalf are bound by a Data Processing Agreement (DPA) in compliance with applicable laws.

Data Security

We use technical and organizational measures to protect your personal data, including:

  • Secure hosting

  • Access controls

  • Encryption (where appropriate)

  • Staff awareness and confidentiality agreements

​While we take data security seriously, no online service can be 100% secure.

Your Rights

Your data belongs to you, and we’ve built our systems to reflect this principle. You can:

  • Access your personal information

  • Correct inaccurate or incomplete information

  • Request deletion of your information

  • Object or restrict processing of your information

  • Withdraw consent

​To exercise any of these rights, contact ops@operationshamrock.org.

We retain your personal data only as long as necessary for the purposes outlined in this policy, unless a longer retention period is required by law. We regularly review and securely delete or anonymize unused data.

California Privacy Rights

California residents have additional rights regarding their personal information under the CCPA and CPRA. This includes the right to know what information we collect, request deletion, and opt-out of data sharing.

European Privacy Rights (GDPR)

For users in the European Economic Area (EEA) and the United Kingdom (UK), we process your personal data based on legitimate interests, consent, contractual necessity, or legal obligations. You have the right to:

  • Access your personal information

  • Correct inaccurate or incomplete information

  • Request deletion of your information

  • Object or restrict processing of your information

  • Withdraw consent

We respond to all data rights requests within 30 days.

Children’s Privacy

Our Site and services are not directed at or intended for children under the age of 16. We do not knowingly collect data from minors. If you believe we have done so, please contact us to request removal of the data.

Cookies Policy

We use cookies and other tracking technologies to keep our Site working properly and to understand how people use our site.

Users with opt-in cookie requirements are presented with a cookie consent banner upon visiting the site. By continuing to use our Site, you consent to our use of cookies unless you use the opt-out function or disable them in your browser.

International Data Transfers

Your personal data may be transferred to and processed in countries outside your own jurisdiction, including countries that may not provide the same level of data protection. When we transfer data internationally, we follow applicable data protection laws and use appropriate safeguards to protect your information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We'll notify you of these changes by updating content on this page and updating the "Last updated" date.

Contact Us

If you have questions or concerns about our Privacy Policy, you can reach us at:

  • Email: ops@operationshamrock.org

  • Address: Operation Shamrock, 1702 Meridian Avenue, San Jose, CA 95125 USA

Governing Law

This policy is governed by United States law. For questions about your privacy or this policy, contact us at ops@operationshamrock.org.

  • Our Site and services are not directed at or intended for children under the age of 16. We do not knowingly collect data from minors. If you believe we have done so, please contact us to request removal of the data.

  • We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by posting the updated policy on our website and changing the “Effective Date“ at the top left.

  • For questions, concerns, or to exercise your privacy rights you can email ops@operationshamrock.org or write to us: 

    Operation Shamrock
    1702 Meridian Avenue
    San Jose, CA 95125 USA

  • We have implemented appropriate and reasonable measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

  • You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us at ops@operationshamrock.org.

    You will then be removed from the marketing lists. However, we may still communicate with you—for example, to send service-related messages necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.