Effective Date: 12/01/2024
Purpose
This Privacy Notice for Christian Academy of Louisville, Inc. (doing business as Christian Academy) (“we,” “us,” or “our”) explains how we collect, use, store, and share your personal information when you interact with our services (“Services”). These include:
- Visiting our website at https://caschools.us, or any site that links to this Privacy Notice;
- Engaging with us through sales, marketing, or events.
If you have questions or concerns, please contact us at privacy@caschools.us.
Summary of Key Points
This summary highlights important details from our Privacy Notice:
- Personal Information: We collect data you provide or that is automatically collected.
- Sensitive Data: Processed only with your consent or as permitted by law.
- Third-Party Data: Limited data from public sources, including social media.
- Data Usage: Used to provide services, enhance security, and comply with laws.
- Sharing: Shared with trusted third parties or as required by law.
- Security: Protected by safeguards, though no system is fully secure.
- Your Rights: Includes access, correction, deletion, and opting out.
Policy
What Information Do We Collect?
We collect personal information you voluntarily share with us, such as when you register on our Services, request information, participate in activities, or directly contact us.
This information may include your name, phone number, email address, usernames, passwords, contact preferences, and payment details, which are securely processed through services like FACTS, MyPaymentsPlus, OneCause, and Stripe.
When necessary, and with your consent or as permitted by law, we may also collect sensitive information such as health data, financial data, government-issued identifiers, data revealing race, ethnicity, religion, and/or philosophical beliefs.
Additionally, we automatically collect data such as your device details, IP address, browser type, operating system, location (precise or approximate, depending on device settings), and usage logs that record how you interact with our Services.
We may also gather limited information from other sources, including public databases, marketing partners, and social media platforms. This data can include mailing addresses, job titles, email addresses, phone numbers, social media profiles, and URLs.
How Do We Process Your Information?
We process your personal information for the following purposes:
- Account Management: To facilitate account creation, authentication, and maintenance.
- Service Delivery: To provide and enhance our Services.
- User Support: To respond to inquiries and resolve issues.
- Communication: To send administrative updates, such as policy changes.
- Feedback: To request feedback on our Services.
- Marketing: To send promotional content aligned with your preferences.
- Targeted Advertising: To develop and display personalized content.
- Security: To monitor and protect against fraud or unauthorized access.
- Analytics: To identify usage trends and improve functionality.
- Compliance: To fulfill legal and regulatory obligations.
What Legal Bases Do We Rely On to Process Your Information?
For Individuals in the EU or UK
We process your personal information under several legal bases: with your consent, when necessary to fulfill a contract or take steps before entering a contract (contractual necessity), or to comply with legal obligations. Additionally, we may process your data to pursue our legitimate interests, provided they do not override your rights, or in situations where processing is necessary to protect someone’s vital interests, such as in emergencies.
For Individuals in Canada
We rely on express or implied consent to process your personal information. In certain circumstances, such as preventing fraud or complying with legal orders, we may process your data without consent under legal exceptions permitted by Canadian privacy laws.
When and With Whom Do We Share Your Personal Information?
Third-Party Service Providers
We may share your information with trusted third-party vendors who help us improve our Services. These may include payment processors, cloud storage providers, analytics platforms, and advertising networks. Examples of payment processors include, but are not limited to, FACTS, MyPaymentsPlus, OneCause, and Stripe.
Mandatory Specific Situations
We may share your data when required by law, during legal proceedings, or to protect the rights, property, and safety of our users or others. Additionally, in the event of a business transaction such as a merger or sale, your information may be shared as part of the agreement.
Google Maps Integration
If you use Google Maps features on our Services, certain location data may be shared with Google under their Privacy Policy.
What Is Our Stance on Third-Party Websites?
Our Services may include links to third-party websites, services, or applications. We do not control these third parties and are not responsible for their privacy practices. Any data shared with third-party websites is governed by their privacy policies.
Recommendations:
- Review the privacy policies of any third-party websites you visit.
- Contact the third party directly with questions about their practices.
Do We Use Cookies and Other Tracking Technologies?
Yes, we use cookies and similar tracking technologies, including:
- Essential Cookies: Required for basic functionality of our Services.
- Analytics Cookies: Help us understand how users interact with our Services.
- Advertising Cookies: Deliver personalized content and advertisements.
We also work with third-party providers who may use tracking technologies for analytics and advertising purposes.
Managing Cookies:
You can manage your cookie preferences through your browser settings. For interest-based advertising, opt-out options are available at YourAdChoices and Google Analytics Opt-Out.
How Do We Handle Your Social Logins?
If you log in to our Services using a social media account (e.g., Facebook or X), we collect limited profile information, such as your name, email address, and profile picture, as permitted by the social media platform. This data is used solely for account creation, authentication, or other purposes outlined in this Privacy Notice.
Important Notes:
- We do not control how social media platforms use your information.
- Review the privacy policies of the social media platforms you use for further details.
Is Your Information Transferred Internationally?
Your personal information may be transferred, stored, and processed in countries other than your own, including the United States.
For Residents of the EEA, UK, and Switzerland
These countries may not have the same data protection laws as your jurisdiction. However, we take steps to ensure your information is protected, such as using the European Commission’s Standard Contractual Clauses to safeguard data transfers.
Data Safeguards
We implement measures to protect your information during international transfers. Additional details about these safeguards are available upon request.
How Long Do We Keep Your Information?
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.
Retention Guidelines
- When data is no longer needed, we delete or anonymize it.
- If deletion is not feasible (e.g., data stored in backup archives), we securely store and isolate the information until it can be deleted.
How Do We Keep Your Information Safe?
We implement appropriate technical and organizational measures to protect your personal information. These include:
- Encryption and secure data storage.
- Regular monitoring for unauthorized access and vulnerabilities.
Limitations:
While we strive to protect your data, no method of transmission or storage is 100% secure. Use our Services at your own risk, and we recommend accessing them from secure environments.
What Are Your Privacy Rights?
Depending on your location, you may have the following rights:
- Access: Request a copy of the data we process about you.
- Correction: Request corrections to inaccurate or incomplete information.
- Deletion: Request the deletion of your personal data.
- Restriction: Request limits on how we process your information.
- Portability: Request a copy of your data in a portable format.
- Objection: Object to data processing in certain circumstances.
Exercising Your Rights
To exercise your rights, contact us at privacy@caschools.us.
We will respond in accordance with applicable laws.
Controls for Do-Not-Track Features
Some web browsers and mobile operating systems include a “Do-Not-Track” (DNT) feature.
Our Approach:
- Currently, we do not respond to DNT signals because there is no standard for recognizing or implementing them.
- If an industry standard for online tracking is adopted in the future, we will update this Privacy Notice to reflect those changes.
Do United States Residents Have Specific Privacy Rights?
If you reside in certain U.S. states, such as California or Virginia, you may have additional privacy rights, including:
- Right to Know: Request details about the personal data we collect, use, and share.
- Right to Access: Obtain a copy of your personal data.
- Right to Delete: Request deletion of your personal data, subject to exceptions.
- Right to Opt-Out: Choose not to have your data sold or used for targeted advertising.
Exercising Your Rights
To exercise these rights, contact us at privacy@caschools.us. Authorized agents may act on your behalf with proper documentation. If a request is denied, you may appeal the decision.
Do Other Regions Have Specific Privacy Rights?
Residents in certain regions, such as Australia, New Zealand, and South Africa, may have additional rights under local privacy laws.
Regional Privacy Rights
- Access and Correction: Request access to or correction of your personal data.
- Complaint Resolution: File complaints with the appropriate regulatory authority.
Regional Details
- Australia and New Zealand: Privacy rights under the Privacy Act 1988 (Australia) and Privacy Act 2020 (New Zealand).
- South Africa: Privacy rights under the Protection of Personal Information Act (POPIA).
Do We Make Updates to This Notice?
Yes, we may update this Privacy Notice as needed to stay compliant with relevant laws or reflect changes in our practices.
Notification of Changes
- Updates will include a “Last Updated” date at the top of the notice.
- Material changes may be communicated via prominent notices or direct notifications.
We encourage you to review this Privacy Notice periodically to stay informed about how we protect your information.
How Can You Contact Us About This Notice?
If you have questions or comments about this Privacy Notice, you can contact us:
- By Email: privacy@caschools.us
- By Mail:
Christian Academy of Louisville, Inc.
700 S. English Station Road
Louisville, KY 40245, USA