I. Introduction

At the Buck Institute for Education doing business as PBLWorks (hereinafter, “PBLWorks”, “us”, “we”, or “our”), we understand that privacy is important, and we are strongly committed to protecting the privacy of visitors to our websites located at: PBLWorks.org and/or my.PBLWorks.org (hereinafter collectively referred to in the singular as “the Site”).

The following information is designed to help you better understand what information we gather from our Site, information collected when you create an account on our online platform services, how we handle the information once we gather it, whether we disclose it to anyone, and the choices you have regarding our use of, and your ability to correct the information.

When you visit our Site or create an account to access PBLWorks you will have access to certain services, including, but not limited to, the creation of educational projects or plans using PBLWorks supplied modules or content, access to online educational sessions, the option to participate in online interactions, share educational projects or educational plans with a community of users, and in some instances, obtain educational credit (hereinafter, collectively, the “Services”). Please read this policy carefully. You agree to be bound by this Privacy Policy by opting in to join our mailing list, using this Site, or by creating an account though which we will provide Services.

This policy applies where PBLWorks is acting as a data controller with respect to the Personal Information (defined below) of visitors to our Site and users of our Services; in other words, where we determine the purposes and means of the processing of that Personal Information.

II. Changes and Updates to this Privacy Policy

We will make changes to this Privacy Policy from time to time. Any changes will take effect immediately for new users and upon the expiration of thirty days after notification for current users. Any use of the Site or Services after the 30-day notice period constitutes your acceptance of any changes.

In the event that we make changes to: (i) the types of information collected; (ii) how we use that information; or (iii) who your information is shared with, we will notify you with a notification banner and you will be given a chance to opt-out or request that we delete your information at that time.

III. Your User Account

In order for PBLWorks to full its agreement to you when you access PBLWorks and utilize the Services, you will need to create an account, known as a “User Account.” For additional detail regarding your User Accounts, please see our Terms of Use.

Your school or district administrator MAY have access to all or some of your account information including, but not limited to, all of your projects and reports and other User Generated Content, as defined in this Privacy Policy and the corresponding Terms of Use. In addition, your school or district administrator may be able to: (i) change your password; (ii) suspend or terminate access to your account; (iii) view your account; and/or (iv) access your projects and any other information associated with your account.

IV. Types of Personal Data Collected

We collect different types of data (collectively, all types of data defined herein are referred to as “Personal Data”) and this Section sets forth: (a) the general categories of Personal Data that we may process; (b) in the case of Personal Data that we did not obtain directly from you, the source and specific categories of that data; (c) the purposes for which we may process Personal Data; and (d) the legal bases of the processing.

A. Personal Information.

The first type of Personal Data that we may collect from you is called “Personal Information.” Personal Information allows us to directly identify you. When you create a User Account, place an order for products on our Site, correspond directly with us, interact with other users, post or share information on the Site, and/or when you otherwise use the Services, we may store and process some of the below listed Personal Information, which we collect directly from you:

a. Types of Information Collected:

• Your first and last name
• A working email address
• Address
• Zip code
• Phone number
• Password
• User ID
• State of employment
• Name of school district
• School district location (city and state)
• Grade level
• Academic subject area
• Geographic location
• demographic information provided by you at your option (such as language preference, gender, and age, and, if applicable, content preferences and personalization information, including, but not limited to a profile picture.
• Information you provide to us when you use the Site, or Services in connection with third-party Sites or platforms or when you link your profile on a third-party Site or platform with your account
• On occasion, we may ask for additional information to enable us to provide you with access to and use of certain information, materials and services, all which may be provided at your option.

PBLWorks allows you to freely change, update or request that we delete your Personal Information. Please see Section XI for more information.

We may process the above outlined Personal Information obtained directly from you or in some cases your employer (if your employer has purchased access to PBLWorks on your behalf) for the purposes of operating our Site and providing our Services. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract or to service that contract.

A. Notification Data.

The second type of Personal Data that we may collect from you is called “Notification Data.” When you subscribe to or “opt-in” to be added to our mailing lists, we may process certain information, including, your first and last name, and a working email address that you provide to us for the purpose of subscribing to our email notifications and/or newsletters called Notification Data. The Notification Data may be processed for the purposes of sending you the relevant notifications and/or newsletters. The legal basis for this processing is consent.

B. Usage Data.

The third type of Personal Data that we may collect from you is called “Usage Data.” As is true of most websites, we may collect certain usage information called Usage Data and automatically store it. Some types of information that may be automatically stored is location information either provided by a computer or mobile device interacting with the Site or associated with your Internet Protocol (“IP”) address (or other related unique device identifier assigned to that device), your device’s browser, browser type, operating system, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data, the amount of time spent on particular pages, geographic location and the date and time of activity on our Site, and other similar information. This information may be stored via the functionality of your computer, mobile phone or other device and, if so, PBLWorks may store and have access to such information. We do not link this automatically collected data to other information we collect about you.

We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis. (or) The source of the Usage Data is our analytics tracking system. This Usage Data may be processed for the purposes of analyzing the use of the Site and our Services. The legal basis for this processing is our legitimate interests, namely, monitoring and improving our Site and Services.

V. How Do We Use Your Personal Data

PBLWorks uses your Personal Data, Notification Data, and Usage Data that you supply directly to us as outlined above to provide you with the Services. We may use your Personal Data to:

• (i) assign you an internal account number and create your account;
• (ii) enable user to user communications, respond to technical support and customer service issues;
• (iii) allow delivery and billing for our products and services, and to communicate with you concerning your account (including verifying authorization of credit card usage before any purchase of content or services);
• (iv) improve our products and services by providing personalized content recommendations, language and location customization, and/or personalized help and instructions;
• (v) ask you if you would like to participate in surveys about products, services, news and events;
• (vi) provide you with news, free newsletters, updates, promotions, and special offers;
• (vii) better understand how our Services are used, including Web traffic patterns and what types of content are most popular with users of our Services in order to improve existing services;
• (viii) provide anonymous reporting for internal and external partners;
• (ix) in connection with the creation of electronic or digital badges or credentials;
• (x) help to manage improper behavior by individuals using the Site and to verify accounts and activity, to monitor suspicious or fraudulent activity.

VI. Sharing Your Personal Data with Other Companies

PBLWorks will not sell or share your Personal Data to third parties unless it is required to comport with the functionality of the Site or the Services, except in limited circumstances including:

• (i) When you elect to share your Personal Data with another company.
• (ii) When you direct us to share your Personal Data with third-party websites or platforms.
• (iii) PBLWorks may share your Personal Data with its trusted vendors and partners who work with PBLWorks. These partners are provided with your personal information to help PBLWorks communicate with you about offers from us and from our marketing partners. Our trusted vendors and partners are contractually required to keep this personal information secure and to only use it for the purposes for which it is provided. For example, financial transactions relating to the Site and our Services are handled by our payment services providers, Amazon Web Services, Nexternal, Badgr, FormAssembly, Salesforce, CVENT, and Constant Contact. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
• (iv) We may disclose any Personal Data that we collect to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, and/or obtaining professional advice.
• (v) In addition, as our business changes, we may buy or sell various assets. In the event all or a portion of the assets owned or controlled by PBLWorks or any subsidiary or affiliated entities are sold, assigned, transferred or acquired by another company, Personal Data from and/or about the users our Site and Services may be among the transferred assets.

VII. Sharing Personal Information with Universities or other Academic Institutions

In the event that schools, universities, or other academic institutions that have partnered with PBLWorks elect to provide academic course credit through the Site, PBLWorks will share your Personal Information and Notification Data with those third parties.

VIII. Other Uses of Information Collected

We may also provide access to any Personal Data in our possession in order to cooperate with official investigations or legal proceedings, including, for example, in response to subpoenas, search warrants, court orders, or other legal process. PBLWorks may also disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to protect and defend the rights or property of PBLWorks, or our affiliated companies, their employees and agents; enforce our Terms of Use; protect against fraud or other illegal activity or for risk management purposes; permit us to pursue available remedies or limit the damages that we may sustain; act in urgent circumstances to protect the personal safety of users of PBLWorks Services or the public at large.

IX. Third Party Web Sites and Share Functionality

The Site may contain links to third party websites that are not owned or controlled by PBLWorks. PBLWorks has no control over, and assumes no responsibility for any share functionality or the content, privacy policies, or practices of any third party website or application, unless specifically outlined in this Privacy Policy. By using this Site and/or its Services, you expressly relieve PBLWorks from any and all liability arising from your use of any share functionality or third party Site accessed from the Site or your sharing of any of your Personal Information.

X. Data Security

PBLWorks safeguards the security of the data you send us with commercially reasonable physical, electronic, and managerial security measures. We urge you to take every precaution to protect your Personal Information when you are on the Internet. For example, to make purchases from the Site you must use an SSL-enabled browser. PBLWorks uses industry-standard Secure Sockets Layer (SSL) encryption on web pages used to complete a purchase. This protects the confidentiality of your personal and credit card information while it is transmitted over the Internet.

The information the Site collects may be stored locally on your device and may, subject to applicable law, be transmitted to our servers, which may be outside the country where you are located. We may use third-party products and services to secure or store your information.

If any of your Personal Information or account information changes or if you have reason to believe that your User Account is no longer secure, you must update it by using the appropriate update mechanism on the Site, if available. Otherwise, contact PBLWorks using the contact information in Section XV below.

XI. Exercise Your Rights

Your principal rights under data protection law are:

• (i) the right to access—you have the right to request information on Personal Data or Personal Information collected, used, disclosed or processed by PBLWorks.
• (ii) the right to request rectification—you have the right to have any inaccurate Personal Information about you rectified and, taking into account the purposes of the processing, and to have any incomplete Personal Information about you completed.
• (iii) the right to request erasure—in some circumstances you have the right to the erasure of your Personal Information without undue delay. Some exceptions include exercising the right of freedom of expression and information and compliance with a legal obligations.
• (iv) the right to restrict processing or object to our processing of your data or Personal Information.
• (v) the right to data portability.
• (vi) the right to complain to a supervisory authority—see Section XV regarding information about how to contact PBLWorks.
• (vii) the right to withdraw consent in whole or in part, to the collection, use, disclosure or processing of your personal data for purposes of dispatch of advertising material, direct selling or for the fulfillment of marketing surveys or commercial communication (e-mail).

Please be aware that if you do not allow us to collect Personal Data from you, we may not be able to deliver the Services to you, and some of the Services may not be able to take into account your preferences required to utilize the Services.

XII. Use by Minors and Children Under 13 Prohibited

The Site and the Services are directed to adults. They are not directed to minors or children under the age of 13. We comply with the Children's Online Privacy Protection Act and do not permit registration by and will not knowingly collect personally identifiable information from anyone under 13. This requirement will be posted wherever we collect data within the Site, such as during the registration process.

XIII. Compliance with FERPA

PBLWorks complies with the Family Educational Rights and Privacy Act of 1974 (FERPA), which is a federal law that protects the privacy of student education records. We do not knowingly collect, process, or store any personally identifiable information about any student under the age of 18. In the event that any personally identifiable information about any student is uploaded or input into the site or is used in connection with the Services. We will immediately remove any such information and to the extent possible, delete it from our servers. We reserve the right to create a hard copy of any such information, as may be necessary.

XIV. Retaining and deleting Personal Data

We retain your Personal Information, Usage Data, or Notification Data for as long as your account is active and a reasonable period thereafter in case you decide to re-activate the Services. We may retain your Personal Data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

In most cases, we will retain your account information and Personal Information for a period of three years of non-activity. After such time, we will either delete your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.

If your account is deactivated or disabled, some of your information and the content you have provided will remain in order to allow other users to make full use of the Services. If the Services are made available to you through your employer or school, or school district, we retain your information as long as required by the administrator of your account.

If you have elected to receive marketing emails from us, we retain your Notification Data about your marketing preferences for a reasonable period of time from the date you last expressed interest in our Services, such as when you last opened an email from us or ceased using your account. We retain Usage Data for a reasonable period of time from the date such information was created.

XV. Contact Us

Please direct any inquiries or complaints as outlined in this Privacy Policy to our Privacy Director using the below information.

Buck Institute for Education
Attn: Privacy Policy
3 Hamilton Landing
Suite 220
Novato, CA 94949

Email:
notices@pblworks.org