Privacy Policy

This Privacy Policy applies to purposeproject.org (and the associated mobile application), which is owned and operated by Riverdale Country School. This Privacy Policy describes how Riverdale (“we” “Riverdale” or “us”) collects, uses, shares and secures the personal information you provide in relation to the Sites only and does not represent all privacy practices conducted by us in our other businesses. It describes your choices regarding use, access and correction of your personal information. The use of information collected through the Sites shall be limited to the purposes of: (i) providing a service to you and other Users of the Sites (“Users”); and/or (ii) the purpose for which you signed up to receive communications from us. If you do not want your personal information to be used as set forth in this Privacy Policy, please do not use these Sites.
‍

1. INFORMATION WE COLLECT AND HOW WE USE IT

‍PERSONAL INFORMATION: The type of information we collect from you depends on how you use our Sites. Generally, when using our Sites, we may collect personal information in two ways: (i) you provide it to us, or (ii) it is collected automatically. You may provide personal information to us, such as your first and last name, contact information, email address, Username, and contents of your communication. You may also provide payment information to our third party payment processors. Information that could be used to identify or contact you is considered “Personal Information” under this Privacy Policy.

We may use your information, including your Personal Information, for the following purposes:
‍

• To better understand how Users access and use our Sites, both on an aggregated and individual User basis, on individual Sites and across them in order to improve our Sites and respond to User desires and preferences, and for other research and analytical purposes;
  ‍
• To provide our services to you, which may include communicating with you about your use of our Sites and services, responding to your inquiries, troubleshooting problems, working with our third-party providers to process your orders and for other customer service purposes;
  ‍
• To tailor the content and information that we may send or display to you, provide personalized help and instructions, and to otherwise personalize your experiences while using the Sites;
  ‍
• For marketing, and promotional purposes, including, for example, to send you news and newsletters, promotions, or to otherwise contact you about projects, opportunities or information we think may interest you provided you have opted into receiving such communications from us; to administer surveys and questionnaires; and
  ‍
• To protect our own rights and interests, such as to resolve any disputes, enforce our Terms of Use, and to respond to legal requests.
  ‍
• In the interests of educational research around Riverdale values and teachings such as human-centered approaches and design thinking. Riverdale has affiliations with many educational establishments including but not limited to Harvard and Stanford University for this purpose.
  ‍
• To allow you to access and register for our services more easily (e.g in the setting up of personal profile accounts through third-party businesses you are already signed up to, such as Facebook or Google).
  ‍

We only collect the minimum amount of Personal Information about you that we consider necessary for achieving the aforementioned purposes.If you send us personal correspondence, such as emails or letters, or if other Users or third parties send us correspondence about your activities or postings on the Site, we may collect such information into a file specific to you.

In general, Riverdale will gather some technical information automatically. This information includes your Internet Protocol (“IP”) address (often associated with the portal through which you enter the Internet, like your Internet service provider (“ISP”), your company or your university), browser type, referring/exit pages, the files viewed on our Site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data. Riverdale gathers this information using third-party services such as Google Analytics and Hubspot for the purpose of monitoring website performance and determining customer service and Site needs. Please visit the privacy policies of these third parties to learn about their privacy practices and your opt-out choices. For more information on Google’s privacy practices please visit www.google.com/policies/privacy/partners/.

‍NON-IDENTIFYING INFORMATION: Certain information that does not identify you (“Non-Identifying Information”) would only be considered a part of your Personal Information if it were combined with other identifiers (for example, combining your zip code with your street address) in a way that enables you to be identified. But the same pieces of information are considered Non-Identifying Information when they are taken alone or combined only with other Non-Identifying Information (for example, your country and gender). We may combine your Personal Information with Non-Identifying Information and aggregate it with information collected from other Users of the Sites to attempt to provide you with a better experience, to improve the quality and value of the Sites, and to analyze and understand how the Sites are used. We may also use the combined information without aggregating it to serve you specifically, for instance to deliver a product or service to you according to your preferences or restrictions, or to send you User surveys or requests for feedback. We may collect any Personal Information you provide through such surveys or calls for feedback.

‍SOCIAL MEDIA INFORMATION

‍Where you have interacted with Riverdale sites, content or even employees, through channels such as social media channels we may collect this information using our automated marketing tool, Hubspot. This means that where you have provided certain information (such as email address) to us before and/or have opted in to receiving communications from Riverdale, we may use your interactions with us on social media, combined with information we already have about you to establish your preferences and provide more targeted content. Hubspot may retain details of your publicly available social media handle such as your @address. Please see our Riverdale Newsletters and Communications with You section for further detail around Hubspot and our marketing practices.

‍COOKIES AND SIMILAR TRACKING TECHNOLOGIES: When you visit the Sites, we and our partners may use cookies or similar technologies to analyze trends, administer the Sites, gather demographic information about our User base as a whole, track Users’ movements around the Sites, including in the case of cookies such as Hotjar, activity on individual pages in almost real-time. (A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you browse our Sites. Cookies contain information that is transferred to your computer's hard drive.) Our Sites use cookies to distinguish you from other Users of our Sites. This helps us to provide you with a positive experience when you browse our Sites and also allows us to improve our Sites and services.We use the following categories of cookies:
‍

• Strictly necessary cookies: These are cookies that are required for the operation of our Sites. They include, for example, cookies that enable you to log into secure areas of our Sites.
  ‍
• Analytical/performance cookies: They allow us to recognize and count the number of visitors and to see how visitors move around our Sites when they are using them. This helps us to improve the way our Sites work, for example, by ensuring that Users are finding what they are looking for easily.
  ‍
• Functionality cookies: These are used to recognize you when you return to our Sites. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  ‍
• Targeting cookies: These cookies record your visit to our Sites, the pages you have visited and the links you have followed. We will use this information to make our Site more relevant to your interests, but also to ensure that we are aligning our Site in the best way with our target visitors. Our third party partner may use cookies or similar technologies in order to provide you advertising based upon your browsing activities and interests. If you wish to opt out of interest-based advertising click here (or if located in the European Union click here). Please note you will continue to receive generic ads.
  ‍

Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. If you choose to disable cookies, it may limit your use of certain features or functions on our Sites or services. If you wish to restrict or block the cookies which are set by any website, including these Sites, you should do this through each individual browser setting and on each device you use to access the Internet. You can allow cookies from specific websites by making them “trusted websites” in your Internet browser. For more information on how to do this, and how to change your browser settings, you may visit: www.allaboutcookies.org.

‍LOG DATA: When you visit the Sites, whether through an account or as a non-registered User browsing, we automatically track certain information that your browser sends whenever you visit our Sites. We use this information to do internal research on our User’s demographics, interests, and behavior to better understand and protect you and our community. This information may include the URL that you just came from, which URL you go to next, access times and dates, your computer browser information, your IP address, and other statistics (“Log Data”). We use Log Data to monitor and analyze the use of the services on the Sites and for the Sites’ technical administration, to increase our Sites’ functionality and User-friendliness, and to better tailor the Sites to our Users’ needs. For example, some of the information is collected so that when you visit the Sites again, we will recognize you and provide you with information appropriate to your interests. We also use the information to verify that the visitors to our Sites met the criteria to process their requests.

‍DO-NOT-TRACK: Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies); you also may opt-out of Internet-based advertising by following the instructions above in this Cookies section.

‍REGARDING CHILDREN AND MINORS: We do not knowingly collect Personal Information from Users under the age of 13 (“Child” or “Children”). If Riverdale learns that a Child’s Personal Information has been collected, we will delete the account. If parents or guardians believe that we have unintentionally collected their Child’s Personal Information, they should contact us to request the deletion of the information at one of the below emails.For the Purpose Project: privacy@purposeproject.org
‍

2. DISCLOSURE OF YOUR INFORMATION

‍OTHER CORPORATE ENTITIES: We may share your information, including your Personal Information, Non-Identifying Information and Log Data, with our affiliates, subsidiaries, and branch offices in the United States and internationally, and with third parties who provide services on our behalf to help with our business activities such as providing email distribution services, customer service, or technical support. These companies are authorized to use your Personal Information only as necessary to provide these services to us. To the extent that these entities have access to your information, they will treat it at least as protectively as they treat information they obtain from their other Users. These entities follow privacy practices no less protective of our Users than our practices described in this Privacy Policy, to the extent allowed by applicable law. We do not share or sell your email address or contact information or any third parties’ email addresses with any third parties outside of the terms stated in this section of our Privacy Policy (“Disclosure of Your Information”).

We may share some or all of your Personal Information with another business entity should we plan to reorganize, spin out, merge with, acquire, or be acquired by that business entity. Should such an event occur, we will require that the new or combined entity follow this Privacy Policy with respect to your Personal Information. If your Personal Information will be used contrary to this Privacy Policy, you will receive prior notice as provided herein.

LEGAL REQUESTS: Riverdale cooperates with law enforcement inquiries, as well as other third-parties to enforce laws and intellectual property rights. Therefore, in response to a verified request by law enforcement, an applicable regulator, or other government officials relating to a criminal investigation or alleged illegal activity, we can disclose your name, city, state, and email address. Without limiting the above, in an effort to respect your privacy, we will not otherwise disclose your Personal Information to law enforcement or other government officials without a subpoena, court order or substantially similar legal procedure, except when we believe in good faith that the disclosure of information is necessary to prevent imminent physical harm or financial loss; report suspected illegal activity; or in response to a regulator’s request for information regarding compliance with applicable law.


3. STORAGE AND TRANSFER OF YOUR INFORMATION

Your information is stored on the servers of our service providers. Please note that information we collect from you may be stored and processed in the United States or any other country in which we or our service providers maintain facilities. We or our service providers may transfer information that we collect about you, including Personal Information across borders and from your country or jurisdiction to other countries or jurisdictions around the world. We encourage you to review terms of service agreements and privacy policies before providing information to them.


4. SECURITY OF YOUR INFORMATION

We use reasonable physical, procedural, technical and administrative security measures to protect your Personal Information against loss or theft as well as unauthorized access and disclosure to protect your privacy. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.


5. YOUR CALIFORNIA PRIVACY RIGHTS

Since 2005, California Civil Code Section 1798.83 permits our Users who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. For inquiries regarding our disclosure policy, please contact us at: privacy@purposeproject.org

California Consumer Privacy Act of 2018
‍Categories of Personal Information Collected
‍
‍In the first chart below, we identify each category of personal information that we have collected about our users in the last 12 months, using the categories enumerated in the CCPA. In the second chart below, we identify the category of personal information we collect about our job applicants. If we have collected that category of personal information in the last 12 months, an “X” appears in the corresponding row in the second column of the chart. For each category of personal information we have collected, we also identify (i) the source(s) from which the information was collected; (ii) the purpose(s) for which it was collected; (iii) the categories of third parties, if any, with which it has been shared and (iv) the categories of third parties, if any, with which it has been sold (as defined under the CCPA). Please note that in the chart below, when we list the categories of third parties with whom we share Personal Information, this does not include Service Providers, as defined under the California Consumer Privacy Act of 2018.

‍Certain Riverdale sites provide blank text fields or other similar mechanisms by which users can enter whatever text they would like. As a result, while Riverdale does not require users to provide any information beyond what is disclosed below in order to use our services, users may voluntarily share additional personal information. For challenges on OpenRiverdale, the specific topic of the challenge may lead to users choosing to enter more sensitive information into these blank text fields but Riverdale does not require any users to provide such information.

We may provide certain user information to law enforcement or school officials if we are required to under law or to prevent harm to users or others.
‍

Riverdale may also draw inferences based on personal information above which it may use to understand the usage of our services to improve and maintain those services. We may provide those inferences to third parties in an anonymous and aggregate form to improve and maintain our services, and to market or advertise our services.

‍Applicant Personal Information Chart
‍

*This does not include when:
‍

• You direct us to disclose your personal information or use us to interact with a third party and the third party does not sell the personal information;
  ‍
• We use or share an identifier solely to alert a third party that you have opted out of the sale of your personal information;
  ‍
• Your personal information is transferred as an asset as part of a transaction in which the third party assumes control of all or part of our business, in which case the third party would have to tell you in writing if it materially changes the way in which the information is used or shared; and
  ‍
• We use or share your personal information pursuant to a written contract with a service provider that is necessary to perform a business purpose. In this case, the service provider performs is on our behalf, and our written contract prohibits it from keeping, using or disclosing your personal information for any purpose other than for the specific purpose identified in the contract.
  ‍

If you are a California resident and we know you are under 16 years of age, we will not sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate to any other business or third party for monetary or other valuable consideration of your personal information.

Rights of California Residents

Right to Know: If you are a California resident, you may submit, free of charge, but no more than twice in a 12-month period, a verifiable request for the following information:
‍

• The specific pieces of personal information we have about you;
  ‍
• The categories of personal information we collected, sold or disclosed for a business purpose about you within the last 12 months;
  ‍
• The categories of sources from which the personal information was collected;
  ‍
• The purposes for which the information was collected or sold; and
  ‍
• The categories of third parties to whom the information was sold, disclosed for a business purpose, or otherwise shared.
  ‍

If possible, we will provide this information to you in a readily usable format that allows transmission to another entity.To submit a request, please contact us by email at privacy@purposeproject.org. Within 10 days of receipt, we will let you know we received your request. We will provide a substantive response within 45 days, unless we need more time, in which case we will notify you. If we need additional information to verify your identity, we will contact you to request that information. If we are not able to verify your identity, we will deny your request, but if applicable, we will refer you to the applicable sections of this Privacy Policy that address our data collection and use practices. If we deny your request, even if only in part, we will explain the reason in our response.

‍Right to Delete: If you are a California resident, you may submit a verifiable request for us to delete any personal information we have collected about you. To submit a request, please contact us by email at privacy@purposeproject.org. Within 10 days of receipt, we will confirm receipt of your request. We will provide a substantive response within 45 days, unless we need more time, in which case we will notify you. If we need additional information to verify your identity, we will contact you to request that information. If we are not able to verify your identity, we will deny your request to delete, but we will treat it like a request to opt-out (discussed below). If we deny your request, even if only in part, we will explain the reason in our response.

Right to Opt-Out: At any time, you may tell us not to sell, rent, release, disclose, disseminate, make available, transfer, or otherwise communicate to another business or third party for monetary or other valuable consideration of your personal information. You may make this request by clicking Do Not Sell My Info or by emailing privacy@purposeproject.org.

‍Right to be Free from Discrimination: We may not discriminate against you because you have chosen to exercise your rights, including, for example, by denying you access to our online services or charging you different rates or prices for the same online services, unless that difference is reasonably related to the value provided by your data.

‍Exercising Your Rights: To submit a verifiable request or to otherwise contact us for more information about how to exercise your rights, please follow the instructions above. To exercise your opt-out right, please click the link above.If you would like to designate an authorized agent to make a request on your behalf, please be sure the agent is able to (i) demonstrate you have provided written permission for the agent to submit the request on your behalf, and (ii) provide proof of his or her own identity. If the agent does not satisfy these requirements, we will deny the request.

‍Notice of Financial Incentives
Contact Us
‍If you have any questions or concerns about our privacy policies or practices, please contact us at privacy@purposeproject.org.


6. YOUR PERSONAL INFORMATION RIGHTS

Riverdale acknowledges that you have the right to access, to delete, and to limit the sharing of your Personal Information.You may delete and amend your account preferences for all of our sites stated above which will limit the Personal Information you provide to us. You may contact us at any time at privacy@purposeproject.org.

We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements. In certain circumstances we may be required by law to retain your Personal Information, or may need to retain your Personal Information in order to continue providing a service.Pursuant to California’s Digital Online Eraser Law (California Senate Bill 568), Users under the age of 18 (“Minors”), and pursuant to GDPR, all EU Users, have the right to remove, or request the removal of, content or information they have posted publicly on the Site.

We strongly recommend that all Users avoid posting personal or sensitive information at any time.Please note that removal of this content or information from public view does not guarantee complete or comprehensive removal. After your removal request has been honored, we may retain copies of the content or information you have previously posted on our servers. We are not required to remove your posted content or information if it has been rendered anonymous or if we are required by law to retain it. Additionally, we do not have control over third parties (e.g., other Users) who may have copied or reposted this information.Upon request Riverdale will provide you with information about whether we hold any of your Personal Information. You may access, correct, or request deletion of your Personal Information by contacting us at privacy@thepurposeproject.org. We will respond to your request within a reasonable timeframe in accordance with applicable law.

In addition to your right to opt out, delete, amend your information at any time as stated in this policy, in the event Riverdale desires to use your Personal Information for a purpose materially different than the purposes set forth in this Privacy Policy, it will contact you via the email address listed on your account and you shall have the opportunity to opt out of such use of your information. Riverdale may not use your information for such materially different purposes without the opportunity to opt out and without adequate notice of changes to its privacy practices.

Please note that if Riverdale has provided your email address to third party services such as Facebook (or you have registered for our services using such third parties) and if you wish to have your personal data removed from such third party service, you may have to contact them directly as they may seek your authority to do so.


7. CHANGES TO THIS PRIVACY POLICY

Please note that this Privacy Policy may change from time to time. We will not retroactively reduce your rights under this Privacy Policy without your explicit consent, and we expect most such changes will be minor. For future changes, we will notify you of any material changes in the way we collect, use, or share your Personal Information by sending you an email at the last email address that you provided us, or by prominently posting notice of the changes on the Site(s) covered by this Privacy Policy, or providing other appropriate notices required under applicable law. We will also post the new Privacy Policy to the Sites, which you are advised to consult regularly for any changes. Each version of this Privacy Policy will be identified at the bottom of the page by its effective date.


8. CONTACT US

If you have any additional questions or concerns about this Privacy Policy, please feel free to contact us at privacy@purposeproject.org.

The Purpose Project

‍Riverdale Country School (“Riverdale”) own and operate the Site located at www.purposeproject.org and the associated mobile application (the “App”), which are collectively referred to as the “Purpose Project.”Account Creation: If you login to the Purpose Project using Google OAuth, the following information from Google, if it has been made publicly available by you on Google, will be stored on our servers – ID, first, last names and email address(“Purpose Project Login Information”).

Deleting your Account: If you wish to delete your Purpose Project account, you may do so by contacting us at privacy@purposeproject.org and providing us with your Username.

Other Corporate Entities: We may share our data, including your Personal Information, Non-Identifying Information and Log Data, with Riverdale, and with Riverdale’s affiliates’ companies. To the extent that these entities have access to your information, they will treat it at least as protectively as they treat information they obtain from their Users. To the extent allowed by applicable law, these entities follow privacy practices that are no less protective of Users than the practices described in this Privacy Policy.

‍