Privacy Policy

This privacy notice discloses the privacy practices for this website, www.cobscookinstitute.org, and our internal web application, periwinkle.cobscookinstitute.org. This privacy notice applies solely to information collected by this website and embedded app. It will notify you of the following:

What personally identifiable information is collected from you through the website, how it is used and with whom it may be shared.
What choices are available to you regarding the use of your data.
The security procedures in place to protect the misuse of your information.
How you can correct any inaccuracies in the information.

Information Collection, Use, and Sharing
We are the sole owners of the information collected on this site. We only have access to/collect information that you voluntarily give us via email or other direct contact from you. We will not sell or rent this information to anyone.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We will use your information to respond to you, regarding the reason you contacted us. We will not share your information with any third party outside of our organization, other than as necessary to fulfill your request, e.g. to collect form information, charge your credit card, or send marketing emails.

Unless you ask us not to, we may contact you via email in the future to tell you about news, new programs or classes, or changes to this privacy policy.

Your Access to and Control Over Information
You may opt out of any future contacts from us at any time. You can do the following at any time by contacting us via the email address or phone number given on our website:

See what data we have about you, if any.
Change/correct any data we have about you.
Have us delete any data we have about you.
Express any concern you have about our use of your data.

Security
When you submit any information via our website, your information is protected both online and offline. We believe cybersecurity is critically important, and our IT department takes a proactive approach following industry standard security practices including defense in depth, zero trust, redundancy, transparency and awareness. In the event that a cybersecurity incident does occur, we have incident response plans in place, which includes investigation and contacting anyone affected by information leaks.

Wherever we collect any information from you (such as credit card data, personal information, or contact information), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for "https" at the beginning of the address of the webpage.

While we use encryption to protect information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The web services we use to store personally identifiable information, and the endpoints we use to access those services, are protected by strong encryption and dual-factor authentication.

While we attempt to not print out any information unless absolutely necessary, your personal information may be printed in some specific circumstances, like health forms that need to travel with participants. These printouts are physically protected from unauthorized access, and stored securely when not in use.

Sharing and Partner Services
We partner with other parties to provide specific services and collect information. When you sign up for these services or provide information to them, we will share and be provided personal information that is necessary for the third party to provide these services. These parties are not allowed to use personally identifiable information except for the purpose of providing these services. We follow industry standard processes to vet these 3rd party services for security practices, and all information is stored and processed securely. Our software service providers include Bubble.io, Google, IFTTT, Intuit, Jotform, Kindful, MailChimp, Postmark, QGiv, Sendgrid, Slack, Spreadshirt, Square, Squarespace, Stripe, Zapier, and Zendesk.

Donations
We request information from you on our donation forms. To donate to Cobscook Institute, you must provide contact information (like email, name and billing address) and financial information (like credit card number, expiration date). This information is used for billing purposes and to fulfill donation gifts. We’ll contact you to send you a receipt and acknowledgement, and if there are any issues.

Event registrations and other forms
We request information from you on our registration forms, including to sign up for a class, apply for a program, or apply for a job. To apply or register online for these services, you must provide contact information (like name, email and address) and in some cases financial information (like credit card number, expiration date), and in some cases personal information (date of birth, health history). This information is used for billing purposes and to fulfill registrations and applications, and for safety purposes for some programs. We’ll use this information to contact you about your registrations or applications.

Marketing
When you enter your email address for any of these functions, we’ll save it for the future to contact you about news and upcoming events. When you enter your mailing address, we’ll save it for the future to send you our biannual newsletter. You can always unsubscribe yourself permanently from these lists, and you can see what lists you are subscribed to and their purpose and frequency. You can also ask us to unsubscribe you.

Cookies
We use "cookies" on this site. Cookies are an important part of the modern internet used by almost every website, and is a piece of data stored on a site visitor's hard drive to help us improve your access to our site and identify repeat visitors to our site. For instance, when we use a cookie to identify you, you would not have to authenticate more than once, thereby saving time while on our site. Usage of a cookie is in no way linked to any personally identifiable information on our site.

We believe end-user privacy is important, and make every attempt to limit cookie use on this site to productive uses that benefit the user, and limit cross-site tracking and cookies that are only used for marketing purposes.

Some of our business partners use cookies on our site (for example, services and extensions like support chat, social media, forms, online donations). However, we have no access to or control over these cookies.

Links
This website contains links to other sites. Please be aware that while links to partner services listed in this notice have been vetted by us for security practices, we are not responsible for the content or privacy practices of other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.

Surveys
From time-to-time our site requests information via surveys. Participation in these surveys is completely voluntary and you may choose whether or not to participate and therefore disclose this information. Information requested may include contact information (such as name and shipping address), and demographic information (such as zip code, age level). Contact information may be used for follow-ups. Survey information will be used for purposes of monitoring or improving the use and satisfaction of this site.

If you feel that we are not abiding by this privacy policy, you should contact us immediately via telephone at 207-733-2233 or via email at https://cobscookinstitute.org/contact.

Changelog

11/13/2023

[Added]

New partner services: Postmark, Intuit.

7/30/2024

[Added]

Mobile phone number information use