2. What information do we collect, and how is it used and shared?
|Category of Personal Information Collected||Source||Purpose for Collection||Categories of Recipients|
|Contact information: such as name and email address||From you (or on your behalf, such as via an intermediary platform) when you register for or use the Site or any Services||To provide, manage, support, improve and personalize the Site and Services (and, as applicable any related transactions), and to communicate with and respond to you about the Site or Services, including to validate your identity or to meet legal obligations||Our agents and successors; to the extent relevant, select service providers (who perform certain services and functions on our behalf and who are bound by confidentiality obligations); and, as applicable, an institutional client (e.g., school or library) under which you are registered|
|Collaboration information (as applicable): such as information you enter into any collaborative environment or communication tool available on or through the Site or Services (as applicable)||From you, as applicable, when you input information into any such environment or tool||To collaborate and communicate, as contemplated by such environment or tool (as applicable)||Users who are authorized to view or use such environment or tool (or the applicable portion thereof) or to whom such information is communicated or designated; our agents and successors; and, to the extent relevant, select technical and other service providers (who perform certain services and functions on our behalf and who are bound by confidentiality obligations)|
|Payment information (as applicable): such as name, card issuer and card type, credit or debit card number, expiration date, CVV code, and billing address (as applicable)||From you or your payment card issuers, as applicable||Authorizing of credit card and other financial transactions with respect to your subscription or other payment obligations, as applicable, related to the Site or Services||Our service providers who process payments for us—they are prohibited from using personal information for any other purposes and are contractually required to comply with all applicable laws and requirements, which includes the Payment Card Industry Data Security standards|
|Legal process-related information: such as details of your identity, or suspected or alleged criminal, dangerous, impermissible, unlawful or other relevant behavior or records||From crime and fraud prevention agencies, you, witnesses or law enforcement agencies||To protect users, the public and our business against risks and crime; to comply with legal requirements (e.g., FERPA)||Law enforcement and other governmental authorities in accordance with applicable law (including, as applicable, as required to satisfy parental access requirements under FERPA), our technical and other service providers, and our professional advisors|
We will only use personal information to the extent it is reasonably necessary to deliver, manage, support, improve or personalize the Services or the Site. In some jurisdictions, individuals may have the right to withdraw consent from certain uses. If you reside in such jurisdictions, you may have additional rights which are detailed in sections 8 through 10. In all cases, any service providers will be contractually limited in the way they may use personal information maintained by us, including requirements that such information be maintained in a confidential and secure manner.
In Connection with Business Transfers: In the event that a division, a product or all of Zoobean is bought, sold or otherwise transferred, or is in the process of a potential transaction, personal information will likely be shared for evaluation purposes and included among the transferred business assets, subject to client contractual requirements and applicable law.
To Comply with Laws: We may also disclose specific personal information when such disclosure appears necessary to comply with applicable law, a subpoena in the course of managing a dispute, governmental inquiry or other litigation process. We may also disclose information to our accountants, auditors, agents, lawyers and other advisors in connection with the enforcement or protection of our legal rights or to protect the interests or safety of our users or others, in accordance with or as authorized by law.
3. What are cookies and how do we use them and other technologies?
A cookie is a small piece of information that a website, online application, or email may save to your browser or your computer’s hard drive for use in subsequent visits to the website or online application. The “help” portion of the toolbar on most browsers will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive new cookies or how to disable cookies altogether. We do not control and do not guarantee the effectiveness of browser-based tools for managing cookies.
We do not currently participate in interest-based or behavioral online advertising, and information automatically collected from the Site is not used by us for that purpose.
We may use Google Analytics to evaluate use of the Site for our internal purposes such as evaluating usages of the Site. To learn how Google Analytics collects and processes data, please visit: “How Google uses data when you use our partners’ sites or apps” located at www.google.com/policies/privacy/partners.
4. How do we protect personal information?
Where applicable, we use industry-standard technology in connection with the Services and the Site to help protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction.
5. How long do we retain personal information?
Personal information that we collect, access or process will be retained only as long as reasonably necessary for the fulfilment of the purposes for which it was collected, unless otherwise provided for under services contracts with clients or as required or authorized by law. Personal information that is no longer required to fulfil the identified purposes will be destroyed, erased or de-identified.
6. What are your choices concerning your personal information?
Our clients (e.g., schools and libraries) are responsible for notification of purpose and for obtaining appropriate consent, to the extent required by law, when they collect personal information that is transferred to us.
If we are instructed by our clients to transmit communications on their behalf, clients remain responsible for ensuring that recipients have consented to receiving such communications and that the information contained in the communications are accurate and complete.
We do not sell, rent, or share the personal information of our users with third parties for such third parties’ own marketing purposes.
We may, subject to applicable laws, use personal information from our users to contact them about the Site and Services, including to provide them with information on additional products from us that may be of interest to them. Our users may exercise choices regarding these communications as follows:
- Mail marketing, Telephone marketing, Surveys and Quality control communications (as applicable). You may decide that you prefer that we not use your personal information to promote new and/or additional products and/or services which may be of interest to you and refuse that we contact you by mail or telephone for marketing purposes or by email or telephone for quality control purposes. If this is the case, you may advise us by contacting customer service or contacting us using the information detailed in the Contacting us section below. For clarity, we will not use any students’ personal information that we receive from or in connection with a school (collectively, “Student Personal Data”) for marketing-related communications. For more information about Student Personal Data, see section 8 below.
- Emails/Commercial Electronic Communications. You can always limit the communications that we send to you. To opt-out of commercial emails, simply click the link labeled “unsubscribe” or “opt-out” at the bottom of any commercial electronic communication we send you. For clarity, students are automatically opted out of commercial electronic communications that do not specifically relate to the provision or support of the Services in which such students participate. Please note that even if you opt-out of promotional communications, we may still need to contact you with important information about your account.
8. What is our policy on kids’ and students’ privacy?
If we learn that a child under the age of 13 has submitted personal information online without parental consent, we will take all reasonable measures to delete such information from our databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personal information we have collected from children under age 13 without parental consent, please contact us using the information detailed in the Contacting Us section below.
We take our role as stewards of Student Personal Data very seriously. We collect and use Student Personal Data only as necessary to provide the applicable school-related Services. WE DO NOT (a) sell or monetize Student Personal Data; (b) display advertising to students on the school-related Services; or (c) authorize behavioral tracking by third parties on the school-related Services for the purpose of targeted advertising or to show ads on such Services.
9. Access, objection, deletion and correction
In certain jurisdictions, you may have the right to obtain confirmation as to whether your personal information is being processed, information about the purposes of that processing, and information about the recipients to whom your personal data have been or will be disclosed. You may also have the right to receive a copy of the personal data you have provided and/or request its deletion.
If you have questions about your rights, please feel free to contact us using the contact information detailed in the Contacting Us section below.
10. Your California Privacy Rights
If you are a California resident, California law provides you with the following rights with respect to your personal information:
- The right to know what personal information we have collected, used, disclosed and sold about you. To submit a request to know, you may contact us using the contact information detailed in the Contacting Us section below (with “REQUEST FOR INFORMATION” in the subject line). You also may designate an authorized agent to make a request for access on your behalf.
- The right to request that we delete any personal information we have collected about you. To submit a request for deletion, you may contact us using the contact information detailed in the Contacting Us section below (with “REQUEST FOR PERSONAL INFORMATION DELETION” in the subject line). You also may designate an authorized agent to make a request for deletion on your behalf.
When you exercise these rights and submit a request to us, we may verify your identity. We also may use a third party verification provider to verify your identity. Your exercise of these rights will have no adverse effect on the price and quality of our goods or services.
11. Transfer of personal information to other countries
In some cases, personal information that we process, including information from our users located in various countries, including in Canada, the EU and Switzerland or relative to queries or visitors to the Site may be transferred to the United States or other countries that may not have data privacy laws that provide the same protection as the countries where you reside. You understand that your personal information may therefore be transferred, processed and stored outside of your country of residence, and therefore may be available to government authorities under lawful orders and laws applicable in such foreign jurisdictions.
12. Right to lodge complaints
We are transparent about the ways in which we collect and use personal information, and welcome your questions and concerns. If you have any concern or complaint about the way we handle your personal information, please contact us as described below. To the extent you believe we have not addressed your concerns or otherwise choose to do so, you have the right to lodge a complaint with a supervisory authority in the country where you reside and/or in the United States. For information on how you can file a privacy complaint with the Federal Trade Commission, please visit: https://www.ftccomplaintassistant.gov/
14. Contacting us
3100 Clarendon Blvd #200
Arlington, VA 22201