Personally Identifiable Information
Certain information that may be collected could be used to identify the user if the user provides it, such as name, date of birth, Social Security number, phone number, email address, physical address, bank account information, credit card information, or any combination of information that could be used to identify the user (collectively, the "PII").
CIRIS Respects Your Privacy
CIRIS respects the privacy of every individual who accesses its website. CIRIS does not sell, rent, give away, or loan a user’s PII to any third parties (other than agents, contractors, or service providers of CIRIS) unless it has the user’s (or the user’s parent/guardian's) consent or is required by subpoena, court order, or legal process to do so. CIRIS maintains appropriate security measures to protect against the loss, misuse, and alteration of the PII under the CIRIS’s control.
Information CIRIS Collects
Through the website, CIRIS may collect the following types of information:
Information the user provides
To communicate effectively with visitors to CIRIS’s website, CIRIS may ask visitors for information that can include PII. Whenever a visitor uses CIRIS’s website to request information, make a gift or donation, register for an event, or sign up for a service such as an event or email notifications, information, including PII, may be requested. This information is used to obtain payment and/or to fulfill the user’s request for information or other services.
Information gathered automatically
Unless the user takes steps to browse the internet anonymously, CIRIS has the ability to track web browsing patterns of website visitors to better understand how the site is being used. The information CIRIS collects is based on the visitor’s Internet Protocol ("IP") address and is not linked to any specific email address in any of the reports or other material compiled by CIRIS. The IP address is a series of numbers that identifies the location of each computer or network, and because it is machine-specific, it is not, in and of itself, PII. The information CIRIS gathers may include the browser type, the date and time of the visit, average time spent on the website, pages viewed and any inquiries that may have been made. CIRIS does not associate any IP address and web usage data with any other information held by CIRIS that can specifically identify the user unless CIRIS is required to do so by law.
How CIRIS Uses Information
CIRIS’s primary purpose in collecting information is to provide services and information to the user. CIRIS may use information that is provided by the user to fulfill requests for products, programs, and services, and to respond to inquiries about the CIRIS’s offerings.
Website Improvements or Changes
CIRIS may use PII and information gathered automatically to improve the experience on its website, to inform the visitor of changes to the website, or to provide the user with other news and information about services CIRIS believes would be of interest.
Disclosure of PII
CIRIS may disclose PII to respond to legal requirements and enforce CIRIS’s rules and policies. Such information will be disclosed in accordance with applicable laws and regulations. CIRIS may also share PII with:
- Agents, contractors, and/or service providers for CIRIS who assist with its operations (e.g., the service provider that handles the fulfillment of credit card purchases made via the CIRIS website);
- Law enforcement or other governmental officials, in response to a verified request relating to an investigation or alleged illegal activity;
- Third parties that provide a valid subpoena or court order; or
- Third parties as requested or authorized by the user (or the user’s parent/guardian).
Children's Online Privacy Protection Act
CIRIS complies with the Children's Online Privacy Protection Act of 1998 ("COPPA"). COPPA requires that website operators never knowingly request PII from anyone under the age of 13 without requesting verifiable parental consent. In accordance with COPPA, CIRIS does not knowingly collect any PII from children under the age of 13. In the event that Maret determines that a user of this site is under the age of 13, CIRIS will not maintain or use her or his PII.
Accessing and Updating PII
When the Maret community (e.g., parents/guardians) uses the CIRIS website, CIRIS makes good faith efforts to provide community users with access to their PII to either correct this data if it is inaccurate or to delete such data at their request, unless it is required to be retained by law or for legitimate business purposes. CIRIS asks individual users to identify themselves and the information requested to be accessed, corrected, or removed before processing such requests, and it may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, or would be extremely impractical, or for which access is not otherwise required. In any case where CIRIS provides information access and correction, CIRIS performs this service free of charge, except if doing so would require a disproportionate effort. Because of the way CIRIS maintains certain services, after a user deletes their information, residual copies may take a period of time before they are deleted from the CIRIS’s active servers and may remain in the backup systems. If a user wishes to access or update their information, they should contact email@example.com.
Changes to CIRIS’s Policy
Images on the CIRIS Website and Social Media Platforms
In addition to protecting the privacy of information a user provides to CIRIS through activity on the website as detailed above, CIRIS is also committed to protecting the privacy of people who appear in images posted by CIRIS online.
CIRIS respects the privacy of every constituent who accesses our website and social media properties, including but not exclusive to the following URLs:
CIRIS posts images of constituents on the CIRIS website or on its social media sites (images of current students and alumni are posted most frequently). CIRIS identifies students by first name only, if at all, in captions associated with posted images. CIRIS does not post, or permit constituents to post, images that might be deemed inappropriate or embarrassing.
CIRIS will honor all requests by users who wish to have images of themselves removed from the website and/or social media sites. To make such a request, please contact firstname.lastname@example.org