Privacy notice
This notice explains what D2 Team Corp does with personal information collected through
d2teamcorp.org, and in particular through the Center of Excellence intake form.
If anything here is unclear, write to
[email protected]
and we will explain it.
1. Who we are
- D2 Team Corp, a Georgia nonprofit corporation
- Recognized by the IRS as a 501(c)(3) public charity under sections 501(c)(3) and 170(b)(1)(A)(vi)
- EIN 86-2609529, exemption effective 23 February 2021
- SAM.gov Unique Entity ID ZGUUGEM5D9S3, CAGE code 174R4
- Contact for privacy questions and records requests: [email protected]
2. What we collect
The intake form asks different questions depending on whether you say you are an individual or that you are here for an organization. You are only ever asked the questions on your own path.
Everyone
- Name and email address
- Where you are based, as a US state or territory, or a country if you are outside the US
- Whether you are a Space ISAC member
- What you are getting in touch about, and which of our focus areas it relates to
- Your consent choices, the wording you agreed to, and when
If you are here for an organization
- Organization name and type, and your role or title
- Whether the work would involve export controlled or otherwise restricted technical data
- For a federal subaward: the funding agency, solicitation or opportunity number, proposal due date, prime applicant, anticipated period of performance, and whether D2 is named in the proposal
- For other inquiries: what you have in mind, the standards body or working group, what you are offering, or event details for a speaking request
- Anything you write in the free text box
If you are here as an individual
- Whether you are a student, a working professional, in government or the military, a transitioning service member or veteran, or a jobseeker
- Your institution, agency, command, or years in the field, depending on which of those you are
- How training would be paid for, if that is a live question for you
Collected automatically when you submit
- Campaign parameters in the link you arrived by (
utm_source,utm_medium,utm_campaign,utm_term,utm_content) - The page that referred you and the page you submitted from
- Your browser language
- How long the form was open before you submitted it, used only to tell people apart from automated scripts
- Your IP address, processed by our hosting provider to limit repeated submissions
3. Why we collect it
| Purpose | Why it needs that information |
|---|---|
| Replying to your inquiry and scoping the work | You asked us to get in touch. |
| Sending your inquiry to the right person | Where you are, and what kind of organization you are, decide who should answer. |
| Reviewing an engagement for conflicts of interest | Our bylaws and conflict of interest policy require every engagement to be reviewed before it starts. |
| Tracking a federal proposal deadline | A missed solicitation cannot be recovered. |
| Holding anything export sensitive for human review | Space work can touch data restricted under ITAR or the EAR. See section 9. |
| Grouping interest so a course can be scheduled | Individual interest arrives scattered; without grouping it, courses never reach a viable size. |
| Noticing that several people from one institution are interested | See below. |
| Sending you occasional updates | Only if you asked for them, and you can stop at any time. |
| Measuring which campaigns bring people here | We are a small charity and outreach money is limited. |
| Blocking automated and abusive submissions | Keeping the form usable. |
When several people name the same institution
If three or more people independently tell us they are at the same university, agency, or command, we note that the institution appears interested and may approach it about working together. We do not tell the institution who mentioned it, we never turn your own inquiry into a pitch, and the count is kept against the institution rather than as a list of names.
Automated handling
Inquiries are sorted and prioritised automatically, so that a proposal with a near deadline is flagged for a faster reply. This affects the order in which a person contacts you and nothing else. A person reads and answers every inquiry.
4. Who else sees it
| Recipient | What for |
|---|---|
| Attio | The CRM where inquiries are stored |
| Attio's sub-processors | Infrastructure, email delivery, and contact enrichment on Attio's behalf, including Full Contact and Clearbit |
| Cloudflare | Website hosting, and the endpoint that receives the form |
| Advertising and analytics measurement, only for visitors who accept. See section 6. |
We do not sell personal information, and we do not share it with anyone else for their own marketing.
Automatic enrichment
Attio automatically adds publicly available context to contact records using identifiers such as an email address or a company domain. This is part of the product and cannot be turned off. Because of that, what you tell us about your employment situation, your institution, or your command is deliberately stored in custom fields that enrichment does not read or write.
5. How long we keep it
| Category | Kept for |
|---|---|
| Name, email, and the content of your inquiry | 24 months from our last contact with you |
| Employment, education, or service details, institution or command | 24 months from our last contact with you |
| Campaign and referrer data | 14 months |
| Consent records, including wording and timestamps | 6 years |
| Update subscription | Until you unsubscribe |
| Anything relating to a federal award | At least 3 years from the date the final expenditure report is submitted, and longer if an audit, litigation, or claim is outstanding |
That last row is a legal requirement, not a preference. Federal award records are governed by 2 C.F.R. ยง 200.334, which sets its own clock and overrides the ordinary schedule above. If you took part in work under a federal award, we cannot delete those records simply on request, and we will tell you plainly if that applies to you.
6. Cookies and advertising
Nothing non essential loads unless you say yes. The site uses Google Ads conversion measurement and Google Analytics. No request is made to Google, and no identifier is set or read, unless you press Accept on the consent banner. Declining is a single press, exactly as easy as accepting, and changes nothing about how the site works.
Both arrive through a single Google tag, so accepting enables both and declining prevents both. Until 30 July 2026 the analytics half was not visible in the page source at all, because it was carried invisibly by the advertising tag. It is now configured explicitly and named above, so anyone can check what this site does by reading it.
Closing the banner without choosing is not treated as consent. If you decline, or never answer, the Google tag is never loaded at all.
| What | Purpose | Set when |
|---|---|---|
d2-ads-consent (local storage) | Remembers your choice so you are not asked every visit | When you press Accept or Decline |
| Google Ads cookies and identifiers | Measuring which campaigns lead to an inquiry | Only after you press Accept |
Google Analytics cookies and identifiers (G-HV8SLZK1LP) | Counting visits and which pages are used, through the same Google tag | Only after you press Accept |
d2-internal-traffic (local storage) | Marks a browser as belonging to D2 staff, so that our own visits are excluded from our statistics rather than inflating them. It records nothing about you and is never set for an ordinary visitor. | Only when a member of D2 staff deliberately opens a marked link |
A conversion is recorded once, when an inquiry is actually submitted. It is not recorded on page views.
To change your mind at any time, use the Cookie choices link in the footer of every page. It forgets your answer, stops any advertising storage immediately, and asks again.
The intake form sets no cookies of its own, and this page loads nothing from anywhere.
7. Your choices
Whatever your state, and whether or not a statute requires it of us, you can ask us to:
- tell you what personal information we hold about you, and give you a copy
- correct anything inaccurate
- delete it, subject to the federal award records exception in section 5
- stop sending you updates
- stop using it for advertising measurement
Write to [email protected]. We aim to answer within 30 days. Every update email also carries an unsubscribe link, which reaches the same records, and we honour opt outs promptly as required by the CAN-SPAM Act.
We will not discriminate against you, or treat your inquiry differently, because you exercised any of these choices.
8. State privacy laws
Most state comprehensive privacy statutes apply to businesses operated for profit, and most carry revenue or volume thresholds that a small charity does not meet. Some, including Colorado, Oregon, and Delaware, do reach nonprofit organizations.
Rather than argue about which of them applies to us, we offer the choices in section 7 to everyone who asks. If you believe a specific statute gives you a right we have not honoured, write to us and say which one, and we will address it.
9. Security, and what must not be sent here
Do not send controlled or sensitive technical information through this form. Neither this website nor our CRM is a FedRAMP authorized or CMMC assessed environment. That means no Controlled Unclassified Information, no export controlled technical data under ITAR or the EAR, and nothing else you would not put in ordinary email.
The form asks whether an engagement involves export controlled data so that a person reviews it before anyone replies. It does not ask about your citizenship or national origin, and we do not want that information. If your answer is anything other than no, the inquiry is held for human review and you will hear from a person rather than an automated reply.
Data is sent over HTTPS, the CRM credential is held as an encrypted secret and never reaches your browser, and free text is length limited and stripped of control characters before storage.
10. Children
This site and our programmes are intended for adults and for students at post secondary level. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information to us, write to us and we will delete it.
11. Changes
This notice carries a version number and a date. When it changes materially we update both, and where the change affects something you consented to, we ask again rather than assuming.