1. Data 3C Collects
You may provide us information when you register for the Services, access or use Service content or features, sign up to receive emails or other communications, use community features such as discussion forums, participate in promotions, or directly contact us with questions or feedback. 3C may also collect Data as described below:
a. Personal Data
- Entered by you during registration or account set-up – To access and use some Services, an account is required. With that account, we collect username, password, and email address as well as other personal data needed to set up and optimize that Service. Other Personal Data may include, among other things, name, address, telephone number, age, gender, language, grade level, birth date, payment, billing (including credit card), and shipping information.
- Entered by you during interaction with a Service – Some Services collect personal or performance data via surveys, forms, tests, and other tasks where users complete activities during the course of learning, practicing, and/or demonstrating knowledge or skills targeted by that Service. We store your survey/form/application data and provide analysis tools to you and applicable third parties (such as parents, educators, or other qualified entities) for use with respect to this data, as appropriate for the given Service. You may also provide information, comments, and correspondence in interactive online forums and other collaboration features of the Services. When users (including children) interact with a Service, their actions and choices made during the course of completing a training, assessment, or other online activity may be automatically collected. This information may be collected using proprietary software scoring algorithms and code.
- Entered by an authorized third party – We may collect your Personal Data from a third party (e.g., educator, researcher, agency) if you give permission to those third parties to share your information with us. Third parties are able to login to a separate administrative account and enter data on behalf of other users. If any such third parties exist for a given Service, these individuals and/or entities are listed on that Service.
b. Non-Personal Data
- Device Data — Device data includes your Internet Protocol (IP) address, operating system version, device type, system and performance information, and browser type. Your IP address is a number that lets computers attached to the Internet know where to send you data — such as the web pages you view. If you are on a mobile device, we also collect the universally unique identifier (UUID) for that device. We use this information to deliver our Services to you upon request, to tailor Services to the interests of our users, and to measure traffic on our Services.
- Usage Data – We use third party tracking services (Google Analytics) that employ cookies and page tags to collect data about visitors to our websites. This data includes usage and user statistics (such as webpages you visit, what you click on, when actions were taken, language preferences, etc.).
- Referral information – If you arrive at a Service from an external source (such as a link on another website or in an email), we record information about the source that referred you to us.
Cookies are text files sent by Web servers to Web browsers and are stored on the user’s computer or mobile device. If the browser is loading a page and the server requests the data stored in the cookie, the data contained within the cookie is sent back to the server. Cookies contain data about the user’s activities on a website and can be used by Web servers to identify and track users as they navigate different pages on that website and can identify users returning to that website.
Cookies may be either “persistent” or “session” cookies. 3C uses persistent cookies to enable our Services to recognize you when you visit or return to a Service. This Data includes the browser or operating system that you use, your IP address, and the date and time you have viewed certain pages on Services, by ways of example. Persistent cookies will remain stored on your computer until you delete them or until they expire automatically at their expiration date. Session cookies are temporary cookies that typically expire at the end of the web browsing session on a website. 3C uses session cookies to keep track of you while you navigate a Service. A session cookie expires at the end of the user session, i.e., when the Web browser is closed.
Cookies contain Data that we have previously stored from prior interactions with a Service and may allow us to link to other Data we have about you (such as previous purchases and subscriptions). Services use Data we obtain from cookies for the following purposes:
- To recognize the user’s computer when the user visits the website;
- To track some user actions only during the current website session;
- To improve the Services’ usability;
- To analyze the use of the Services;*
- To assist 3C with administering the Services; and
- To share Data for Services with applicable third parties.
b. Third-party Cookies
When users visit Services, third-party cookies (such as Google advertising cookies) may be sent to their computers by 3C’s service providers. Third party advertisers may use data obtained from these cookies:
- To track users browsing across multiple websites;
- To build profiles of users’ Web surfing; and/or
- To target advertisements that may be of particular interest to users.
c. Managing Your Cookie Settings
Most browsers allow you to control cookies through their settings preferences. However, if you limit the ability of websites to set cookies, you may limit your overall user experience, since it will no longer be personalized to you. It may also stop you from saving customized settings like login information.
3. How 3C Uses Your Data
- To deliver Services you request or purchase;
- To process your order and, if necessary, contact you regarding the status of your order;
- To fulfill the terms of a promotion or discount;
- To allow you access to restricted areas of Services;
- To provide technical assistance and support for use of the Services, as needed;
- To provide information on the use of Services to authorized third parties who oversee or administer use of a given Service by users (such as agency-level administrators, supervisors of providers, continuing education providers)—if any such third parties exist for a given Service, these individuals and/or entities are listed on that Service. This data may be used to inform parents, guardians, educators, and other qualified entities about the user’s performance and progress in the Service;
- To request your feedback about your experience to ensure the Services are relevant to your needs;
- To improve usability, accessibility, and effectiveness of our Services;
- To help us create and update content on Services to be most relevant to you;
- To alert you to special offers, updated information, and other news from 3C, related third parties, or to forward promotional materials; and
- For other business purposes that help optimize your experience as you interact with Services.
4. Google Analytics Advertising Features 3C Has Implemented
3C may use certain Google Analytics Advertising Features, which contain third party cookies. Google Analytics is a web analytics tool that helps website owners understand how visitors engage with their website. 3C follows the Google Analytics policy requirements found at https://support.google.com/analytics/answer/2700409?hl=en, which are incorporated herein by reference. The specific Google Analytics Advertising Features that 3C uses include only the following: Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting, and Integrated Services that require google analytics to collect data via advertising cookies and identifiers. 3C does not use the Google remarketing features. You can opt out of the foregoing Google Analytics Advertising Features by following the instructions at this link: https://tools.google.com/dlpage/gaoptout/.
5. Release of Data to Third Parties
Personal Data collected as a function of the Services will not be released to third parties except to further the purpose for which you provided the Data and in the following instances:
- To fulfill a Service to you including answering questions, completing an order, or providing technical assistance;
- To an authorized third party as identified on the Service as having permission to access, view, enter, and/or use your Personal Data (such as a supervisor, employer, administrator, parent, or other qualified individual or entity);
- To unaffiliated service providers, agents, or independent contractors who help us maintain our Sites and provide other administrative services to us (including, but not limited to, order processing and fulfillment, providing customer service, maintaining and analyzing data, sending customer communications on 3C’s behalf). We seek to ensure that these unaffiliated third parties will not use the Personal Data for any other purpose than to provide the administrative services for which they are responsible;
- To complete your purchase if you choose to make a purchase of or through the Services. We will collect from you your credit card number, billing address, and other Data related to such purchase, and we use such collected Data to fulfill your purchase. We may also provide such Data to unaffiliated third parties as necessary to complete your purchase (for example, to process your credit card);
- To comply with the law or in the good faith belief that such action is necessary to conform to the requirements of law or comply with legal process served on us, protect and defend our rights or property, including the rights and property of 3C and Services, or act in urgent circumstances to protect the personal safety of our end users;
- To third parties as part of any corporate reorganization process including, but not limited to, mergers, acquisitions, and sales of all or substantially all of our assets;
- To protect against potential fraud, we may verify with third parties the Data collected from Services. In the course of such verification, we may receive Personal Data about you from such services. In particular, if you use a credit card or debit card to purchase services with us, we may use card authorization and fraud screening services to verify that your card Data and address matches the Data that you supplied to us, and that the card has not been reported as lost or stolen; and
- As otherwise specified or permitted under applicable law.
With regard to the principle of Accountability for Onward Transfer, for example, we remain liable if our agent processes such personal information in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the damage.
6. Third Party Websites and Advertisers
3C may also permit advertisers, third party ad networks, or other advertising companies to place advertisements on Services. Please be advised that such companies may gather Data about your visit to Services (through cookies, web beacons, and other technologies) to enable such advertising companies to market products or services to you, to monitor which ads have been served to your browser and which Web pages you were viewing when such ads were delivered. Follow this link to learn more: http://optout.networkadvertising.org/?c=1#!/
PLEASE NOTE THAT THIS POLICY DOES NOT COVER THE COLLECTION AND USE OF DATA BY SUCH ADVERTISING COMPANIES.
7. Forums, Chat Rooms, and Other Public Posting Areas
Please note that any Data you include in a message you post to any forum, discussion boards, chat rooms, or other public posting area is available to others. If you don’t want people to know your email address, for example, don’t include it in any message you post publicly. PLEASE BE EXTREMELY CAREFUL WHEN DISCLOSING ANY DATA IN CHAT ROOMS, FORUMS, AND OTHER PUBLIC POSTING AREAS. WE ARE NOT RESPONSIBLE FOR THE USE BY OTHERS OF THE DATA THAT YOU DISCLOSE IN PUBLIC POSTING AREAS.
8. Opt Out of Communications
We communicate with users on a regular basis via email. For example, we will use your email address to contact you to confirm a request you have made of 3C, to send you notice of upcoming payments that are due, to send you information about changes to our Services, to send notices and other disclosures as required by law, and to send you a periodic 3C newsletter or other communications. 3C provides you the opportunity to opt out if you do not want to receive communications from us regarding new Services offered by 3C or if you do not want us to share your Personal Data with third parties for non-Service related purposes. For emails, you may opt out by clicking on the “unsubscribe” link within the text of an email. We will process your request to unsubscribe as soon as possible, but please be aware that in some circumstances you may receive a few more messages until the unsubscribe request is processed. If you have elected to receive notices to your mobile device via text message, you may opt out by replying “STOP” to such mobile messages. You may receive a confirmatory text message in response to your “STOP” request and you hereby consent to receipt of such confirmation. As noted above, to opt out of the Google Analytics advertising features outlined above, follow the instructions at this link: https://tools.google.com/dlpage/gaoptout.
9. Data Retention
We keep your Data for as long as your relationship with Services continues and as required by law. We retain your Data as necessary to continue to provide Services including fulfilling orders, accessing applications, etc. This includes Data you or others provided to us and Data obtained from your use of Services. There may be some instances where we retain Non-Personal Data in a depersonalized or aggregated form.
10. Rights to Access and Control Your Personal Data
We provide you with several options for managing Your Data, including:
- Delete Data: You can ask us to erase or delete all or some of Your Data and we will work hard to honor all requests in a timely manner. In some instances we may not be able to delete your Personal Data in order to comply with applicable laws (for example, it is necessary to keep the financial records of a transaction with you). You can request that 3C delete Your Data by emailing us at email@example.com or calling 1-919-677-0102.
- Change or Correct Data: We offer settings to control and manage Your Data through your personal login account. You can edit some of Your Data through functions available once logged into your personal account. You can also ask us to change, update, or fix your data in certain cases, particularly if it’s inaccurate.
- Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of Your Data.
- Right to Access and/or Take Your Data: You have the right to see Your Data and take Your Data and we will work with you to be sure we can provide the most complete set of Your Data and a secure way to transfer Your Data.
Your Data may continue to be accessed by others until they refresh their cache. We will not delete any comments or posts you have made on any public posting areas.
11. Your California Privacy Rights
California Civil Code Section 1798.83 permits our visitors who are California residents to request certain information regarding 3C’s disclosure of personal data to third parties for their direct marketing purposes. To make such a request, please contact us at firstname.lastname@example.org or 1-919-677-0102.
12. Children’s Privacy
Some of our Services are intended for and are used by children. “Children” are individuals under the age of 13 (or under a higher age if mandated by the laws of the jurisdiction in which they reside). 3C is committed to protecting the privacy of children who use our Services. 3C complies with the Children’s Online Privacy Protection Act (COPPA), which imposes certain requirements on operators of websites or online services directed to children under 13 and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from children under 13. 3C practices are compliant with the guidelines provided by the Federal Trade Commission to date. Specifically:
- 3C Institute will never knowingly request personally identifiable information from anyone under the age of 13 without parental or educator consent.
- 3C Institute does not share personally identifiable information from anyone under the age of 18 without prior parental or educator consent.
- Children are not allowed to register directly with any 3C Service. All registrations must be made by a parent or guardian. 3C never contacts children directly without the prior consent of a parent, guardian, or other qualified entity.
- We only share Data with parents, guardians, educators, or other authorized third parties. We only disclose personal information if permitted and/or required by law.
- Parental controls – At any time, parents can refuse to permit us to collect further personal information from their children in association with a particular account and can request that we delete from our records the personal information we have collected in connection with the account.
- Permissions needed for educators to allow students to use student accounts on Services, include:
- Teachers must work with their administrator to determine if they already have proper permission to allow their students to use Services.
- Schools must obtain parental consent if they set up student accounts on behalf of their students and allow students under the age of 13 to access student accounts in the classroom to use features. 3C obtains parental consent directly from a child’s parent if the parent (and not the teacher) sets up their child’s account, or if a student creates his or her own account on the Services.
- In some cases, teachers may obtain parental consent in what is commonly referred to as “school consent” under COPPA, where teachers have certified that they have directly received parent consent for their child to use Services for education purposes or may choose to act as the agent of the parent and consent on the student’s behalf.
13. EU user Consent
In compliance with the Privacy Shield Principles, 3C commits to resolve complaints about our collection or use of your personal information. European Union individuals with inquiries or complaints regarding our Privacy Shield policy should first contact 3C at:
Mailing Address: 3C Institute, 4364 S. Alston Ave, Suite 300, Durham, NC, 27713, Attn: Privacy Office
3C has further committed to refer unresolved Privacy Shield complaints to JAMS, an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not resolved your complaint, please contact or visit JAMS for more information or to file a complaint. The services of JAMS are provided at no cost to you. Contact JAMS online at https://www.jamsadr.com/file-an-eu-us-privacy-shield-claim.
An individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by any of the other Privacy Shield mechanisms. Please visit Privacy Shield principles, Annex I, for additional information: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
The Federal Trade Commission has jurisdiction over 3C’s compliance with the Privacy Shield.
14. EU Data Subjects
3C respects the rights of EEA residents to access, correct, and request erasure or restriction of their personal information if GDPR is applicable. If you are a resident of the EEA, you generally have a right to know whether or not 3C maintains Your Data. If Your Data is incorrect or incomplete, you have the right to ask 3C to update it. You have the right to object to 3C’s processing of Your Data. You may also ask 3C to delete or restrict Your Data. To exercise these rights, please contact 3C via email at email@example.com. Please understand that 3C may need to verify your identify before processing your request.
15. How We Protect Your Personal Data
Credit card data (“Purchaser Data”) is transmitted using Secure Socket Layer (“SSL”) encryption or Transport Layer Security (“TLS”). Purchaser Data is a high priority and we use our own protective measures, as well as the capabilities of our software and hardware vendors.
We provide reasonable security controls to protect electronic Data that we receive from you against foreseeable hazards, but please note that no data transmission over the Internet can be guaranteed to be 100% secure. In addition, use of email to transmit Data is insecure and violates 3C policy. Therefore, we cannot ensure or warrant the security of any Data you transmit to us and you understand that any Data you transfer to 3C is done at your own risk.
We realize there can be incidents of misuse or unauthorized program incursions, as almost every website, service, and user encounters. In those instances, our goals are to move quickly to isolate the problem, ensure or restore proper functionality, and minimize any inconvenience to our users. As appropriate and necessary, 3C will notify the relevant authorities and affected individuals of these incidents of misuse or unauthorized program incursions of the Service.
In the event that all or part of our assets are sold or acquired by another party, or in the event of a merger, you grant us the right to transfer the Data collected via Services.
18. Contacting 3C
If you believe you have not received an appropriate response from us regarding your question or complaint, and if you are an EEA user, you may contact the applicable supervisory authority below based on your residence:
- EU Data Protection Authorities (DPAs) (http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080)
- Swiss Federal Data Protection and Information Commissioner (FDPIC) (https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/task.html)
Last Updated: January 10, 2019