This Privacy Policy describes how ithat.org (the “Site”) collects, uses, and discloses your personal information when you visit or make a purchase from https://www.ithat.org.
By visiting our site or making purchases, you agree to the terms in this policy. Please review them carefully.
Information We Collect
We only collect information about you if we have a reason to do so–for example, to provide our Services, to communicate with you, or to make our Services better.
We collect information in two ways: if you provide information directly to us and if we passively collect information from you.
Information You Provide Directly to Us
We ask for and collect the following personal information from you when you use our site or make purchases:
- Name
- Email address
- Phone number
- Address
- Payment information
- Comments, feedback, and other information you provide to us through surveys and online forms
Information We Collect Passively
We use tracking tools like browser cookies and web beacons to collect information passively and automatically as you navigate through our site.
- Browser Cookies. We use cookies to make interactions with our site easy and meaningful. Cookies are small text files that web servers place on your device. These are used to store login details, shopping cart information, and other information you want to be saved for your convenience.
- Web Beacons. We use web beacons alone or in conjunction with cookies to compile information about your usage of our site and interaction with emails from us. Web beacons are clear electronic images that can recognize certain types of information on your computer, such as cookies, when you viewed a particular site or page tied to the web beacon, and a description of a site tied to the web beacon. For example, we may place web beacons in our emails to track your reaction and engagement with our communications.
- Analytics Information. We use analytics services like Google Analytics to collect and analyze information about your use of our site. These services help us understand how our site is working and how we can improve your online experience. These services use cookies and other technologies to collect information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site. We only use the information we get from Google Analytics and other similar services to improve our site and Services.
- Embedded Forms. Our site may from time to time contain embedded forms hosted by third party service providers. These forms may include contact forms, signup forms for downloads, surveys, email signup forms, etc. If you choose to fill out one of these forms, the information you provide will be sent directly to the third party provider hosting the form. The privacy policies governing these forms are separate from our own. Please read their privacy policies to understand how they treat the information you provide through embedded forms.
- Third Party Tracking Tools. We participate in behavior-based advertising. This means that a third party uses technology (e.g., a cookie) to collect information about your use of our site so that they can provide advertising about products and services tailored to your interests on our site and elsewhere online. You can opt out of receiving online behavioral ads by visiting http://www.aboutads.info/choices.
How We Use Information
We only use your personal information as permitted by law. We collect and use your personal information for the following purposes:
- To operate, maintain, enhance and provide features of the Services, to provide services and information you request, to respond to comments and questions, and otherwise to provide support.
- To understand and analyze how you use our Services and develop new products, services, features, and functionality.
- To communicate with you about your account or transactions, prize notifications, and policy updates.
- To tailor content we display to you and offers we may present to you, both on and off our Services.
- For marketing and promotional purposes. For example, we may use your information to display and send ads for our Services or to send emails about new features or products.
- To find and prevent fraud.
How We Share Information
We do not rent, sell, or share any personal information about you with other people (save with your consent or as necessary to complete any transaction or provide any service you have requested or authorized) or non-affiliated companies except under the following circumstances:
- With Vendors, Consultants and Other Service Providers. We may share your information with third party vendors, consultants, and other service providers who are working on our behalf and require access to your information to carry out their work for us. The sharing will be limited to what is necessary for them to perform their functions. They are required by contract to maintain confidentiality and security of Personal Information they process on our behalf.
- To Comply with Laws. We may disclose your information to comply with laws, legal requirements, court orders, subpoenas and other government requests. For example, it may be necessary by law to disclose your information to law enforcement agencies.
- Legal Claims. We may disclose your information to respond to legal claims or to exercise our legal rights or defend against legal claims.
- Business Transfers. Information about our users, including personal information, may be disclosed and transferred as part of any merger, acquisition, debt financing, sale of company assets, or transition of service to another provider. This also applies in the unlikely event of an insolvency, bankruptcy, or receivership in which personal information would be transferred as one of our business assets.
- With Your Consent. Any other sharing of personal information will only occur with your additional explicit consent to the disclosure.
Retention of Personal Information
We retain information we collect from you where we have an ongoing legitimate need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate need to process your personal information, we will either delete or anonymize your personal information or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
Information Security
We are concerned about ensuring the security of your personal information. We exercise great care in providing secure transmission of your information from your device to our servers. Personal information we collect is stored in secure operating environments that are not available to the public. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you. Please understand, however, that while we try our best to safeguard your personal information once we receive it, no transmission of data over the Internet or any other public network can be guaranteed to be 100% secure.
Analytics
We collect information about your use of our website through the use of pixels, cookies, and similar technologies that allow us to collect information about your visit to or use of our website. We use this information to improve our website experience for our visitors and to serve you content that is relevant and interesting to you.
Cookies
Cookies are small text files that may be placed on your device when you visit a website or click on a URL. Cookies allow a website operator to recognize a user’s device and browser entering the website.
We use both session cookies and persistent cookies. Session cookies expire and no longer have any effect when you log out of your account or close your browser. Persistent cookies remain on your device until you erase them or they otherwise expire.
We use cookies for the following purposes:
- Authentication: We use cookies to identify you when you visit our website and as you navigate our website.
- Status: We use cookies [in our website and email messages] to help us determine if you are logged onto our website and to maintain information you supply to us across pages within a visit to our site.
- Personalization: We use cookies to store information about your preferences and to personalize your visit to our website.
- Security: We use cookies as an element of the security measures used to protect accounts by, among other methods, verifying that you are already logged-in to our website and detecting bots.
- Advertising: We use cookies to display ads that are relevant and interesting to you.
- Analytics: We use cookies to analyze how visitors use the website and to monitor website performance. This allows us to provide a high-quality experience by customizing our website and quickly identifying and fixing any issues that arise.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Some browsers have a feature commonly referred to as “Do Not Track,” which allows you to indicate to websites and online services that you do not wish to have your online activities tracked. Our Service does not currently respond to browser “Do Not Track” signals. To find out more about cookies and how to manage them, visit AboutCookies.org.
Social Media Widgets
Our website includes social media features such as Facebook and Twitter widgets that may collect your IP address, the pages you are visiting on our website, and may set a cookie to enable the widgets to function properly. Social media widgets are hosted either by the social media platform themselves or through our website. Your interactions with those features are governed by the privacy policies of the organizations providing them.
External Websites
Our website contains links to other websites. Our privacy policy applies only to our Services, and not to other companies’ or organizations’ websites to which we link. When you click on such links you can leave our Site. This policy does not apply to the practices of companies or organizations that we do not own or control, or to individuals not employed or managed by us. We encourage you to be aware when you leave our Site and to read the privacy policies of each website that you visit.
Visitors from Outside the United States
Our website is hosted in the United States and intended for visitors located within the United States. If you choose to use our website from other regions of the world with laws governing data collection and use may differ from U.S. law, then please note that you are transferring your personal information outside of those jurisdictions to the United States for storage and processing. The United States may not have the same data protection laws as the country from which you are accessing our website. By providing your personal information to us, you consent to that transfer and processing in the United States.
Children
Our Services are not designed for or directed at children under the age of 16. We do not intentionally collect or maintain information from those we actually know are under 16 years old. If we obtain actual knowledge that we have collected any personal information from a child under 16 years old, that information will be immediately deleted from our database. If you believe we may have collected any such personal information, please contact us.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time. Any such changes will be posted on our site so that you are always aware of what information we collect, use, and disclose. Substantial changes will go into effect 30 days after being posted.
Your Rights
If you are located in certain parts of the world, including the European Economic Area, you may have certain rights under applicable data protection laws. These can include the right to:
- Request access to and rectification or erasure of your personal data
- Request restriction of processing concerning your personal data
- Object to processing of your personal data
- Withdraw consent at any time where we are relying on consent to process your personal data
- Complain to a supervisory authority
To exercise these rights, please contact us as set forth under “Contact Us” below.
These rights are subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege). We will respond to most requests within 30 days.
If you are located in certain parts of the world, including the European Economic Area, United Kingdom and Switzerland, you may have the right to obtain a copy of your personal information in a structured, commonly used and machine-readable format. You may also have the right in some circumstances to require us to transmit your personal information directly to another controller.
To exercise these rights, please contact us as set forth under “Contact Us” below. These rights are subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime) and our interests (e.g. the maintenance of legal privilege). We will respond to requests within 30 days.
GDPR Rights for EU and Other Designated Residents
If you reside in the European Union or another jurisdiction that provides specific rights to data subjects, you have the following legal rights regarding your personal information:
- Access. You may have the right to request copies of your personal information.
- Correction. You may have the right to request correction of any inaccurate or incomplete personal information.
- Erasure. You may have the right to request the deletion or removal of personal information in some circumstances, such as where the personal information is no longer necessary for the purposes for which it was collected.
- Restrict. You may have the right to request that we restrict further processing in certain circumstances, such as while investigating whether your other rights have been breached.
- Withdraw consent. If we rely on your consent to process your personal information, you have the right to withdraw that consent.
- Data portability. In some cases, you may have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another entity.
- Objection. You may have the right to object to the use or processing of your personal information in some circumstances.
- Lodge complaints. You may have the right to lodge a complaint with a supervisory authority.
To exercise these rights, please contact us as indicated under “Contact Us” below. We will process such requests in accordance with applicable laws. In some cases, we may not be able to remove your personal information, such as when retention is required by law or is necessary to fulfill our contractual obligations. We will retain and use your information as necessary to comply with our business requirements and legal obligations.
United States Residents
If you reside in the United States, you have the following rights related to your personal information:
- Access. You may have the right to request copies of your personal information.
- Correction. You may have the right to request correction of any inaccurate or incomplete personal information.
- Erasure. You may have the right to request the deletion or removal of personal information in some circumstances.
- Objection. You may have the right to object to the use or processing of your personal information in some circumstances.
- Restriction of processing. You may have the right to request that we restrict further processing of your personal information.
- Withdraw consent. If we rely on your consent to process your personal information, you have the right to withdraw that consent.
- Data portability. You may have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another entity in some situations.
- Lodge complaints. You have the right to lodge a complaint with the applicable supervisory authority.
To exercise these rights, please contact us as indicated under “Contact Us” below. We will process such requests in accordance with applicable laws. In some cases, we may not be able to honor your request, such as when it would conflict with our regulatory obligations or affect legal rights. We will retain and use your information as necessary to comply with our business requirements and legal obligations.
California Privacy Rights
If you are a California resident, you have the following rights with respect to your personal information:
- Access and portability. You may have the right to request access to or copies of your personal information. You may also have the right to receive a copy of your personal information in a structured, commonly used and machine-readable format and to transmit that information to another service provider in certain situations.
- Deletion. You may have the right to request that we delete personal information we have about you, with some exceptions.
- Disclosure of information collected. You may have the right to request information about how we have collected, used, disclosed and sold your personal information over the past 12 months.
- Sale opt-out. You have the right to opt out of the sale of your personal information. We do not sell your personal information.
- Non-discrimination. You have the right to not receive discriminatory treatment from us for exercising any of the above rights.
To exercise these California rights, please contact us as indicated under “Contact Us” below. We will process such requests in accordance with applicable laws. In some cases, we may not be able to remove or restrict use of your information if retaining the information is necessary for our legitimate interests or contractual obligations. We will retain and use your information as necessary to comply with our legal obligations and resolve disputes.
Data Transfers
If you reside outside the United States, your personal information will be transferred to and processed in the United States, where laws regarding how personal information is treated may differ from laws where you reside. If you reside in the European Economic Area (EEA) and your personal information is transferred outside of the EEA, we will take appropriate measures to ensure that your personal information is treated in accordance with this policy and applicable data protection laws. Such measures may include entering into EU Standard Contractual Clauses with entities we transfer personal information to.
Data Retention
We retain personal information as necessary to fulfill our business purposes, comply with our legal and regulatory obligations, resolve disputes with any parties, and otherwise as permitted by applicable law. We will retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, usually for the duration of any contractual relationship and for any applicable statute of limitations or as otherwise required by law.
Information Security
We have implemented administrative, technical, and physical safeguards to protect your personal information. This includes:
- Secure operating environments – Our environments are routinely assessed to identify and remediate any vulnerabilities.
- Encryption – We encrypt data in transit and at rest using industry standard encryption technologies.
- Access controls – We restrict access to your personal information only to those who need it to perform their job duties.
- Incident response – We have security incident response, disaster recovery, and business continuity programs to respond to events impacting the confidentiality and integrity of your information.
While we work hard to protect your personal information, no security program is 100% secure and we cannot guarantee that your information will remain secure. Any transmission of information is at your own risk. If we learn of a security breach, we will notify you and the relevant authorities if required by applicable law.
International Data Transfers
Some recipient third parties may be located outside of your home country; by using our Service, you consent to the transfer of such information. If you are located within the European Union, we comply with applicable data protection law when transferring your personal information outside of the EU. In particular, we may transfer your personal information to countries that the European Commission has issued an adequacy decision for, use standard contractual clauses approved by the European Commission, or rely on the derogations in Articles 49 of the General Data Protection Regulation, such as if the transfer is necessary to perform our contract with you. You may contact us as provided below to obtain a copy of the safeguards used to protect your personal information and privacy rights for these transfers.
Third Parties and Links
Our website may contain links to other websites not operated or controlled by us, including social media services. Please be aware that we are not responsible for the privacy practices of those websites. We encourage you to be aware that when you go to another website, you should read their privacy policy as it will apply when you visit those sites.
This policy does not cover any third party application that integrates with our Services through webhooks or any other form of integration.
Our Services may enable you to connect and share your actions or content with third party services like Facebook or Twitter. If you authorize such linking it is your responsibility to terminate that link. We cannot do that for you. Please review each third party’s terms of service when deciding whether to establish such linking.
Surveys
From time-to-time our site requests information from users via surveys. Participation in these surveys is completely voluntary and you may choose whether to participate and therefore disclose this information.
Information requested may include contact information, such as name and address, and demographic information, such as age, gender, preferences, etc. Survey information will be used for purposes of monitoring or improving the use and satisfaction of this site and improving our services.
Users’ personally identifiable information is not shared with third parties unless we give prior notice and choice. Though we may use a third party service provider to conduct these surveys, they may not use users’ personally identifiable information for any secondary purposes.
Third Party Advertising
We use third-party advertising companies to serve ads when you visit our website. These companies may use information about your visits to our Site and other websites that are contained in web cookies and other tracking technologies in order to provide advertisements about goods and services of interest to you.
Opting Out of Communications
You may opt out of receiving certain communications from us by following the unsubscribe instructions in an email communication, updating your account information, or contacting us at the contact information below with your request.
We will try to comply with your request as soon as reasonably possible. Please note that if you opt out of receiving marketing-related emails from us, we may still send you important administrative and legal notifications, which are necessary for you to continue using our Services.
Do Not Track Signals
Some browsers transmit “do-not-track” signals to websites. Because of differences in how web browsers integrate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time as needed, to reflect changes in our business practices. When we post modifications, we will revise the “Last Updated” date at the top of this page. The updated version will be effective immediately upon posting, unless indicated otherwise. Your continued use of our Services constitutes your consent to this Privacy Policy and any updates. We encourage you to periodically review this page for the latest information on our privacy practices.