This policy applies to the information we collect:
- On this Site.
- In e-mail, text and other electronic messages between you and this Site.
- Through mobile and desktop applications you download from this Site, which provide dedicated non-browser-based interaction between you and this Site.
- When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this policy.
It does not apply to information collected by:
- us offline or through any other means, including on any other website operated by REX or any third party (including our affiliates and subsidiaries); or
- any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or on the Site.
SUMMARY PRIVACY NOTICE
- REX complies with local law when it collects and processes personal information.
- REX usually does not collect or process sensitive personal information, unless it is required by law.
- If REX is going to collect or process sensitive personal information for purposes not required by law, we will ask your specific personal consent.
- For the collection and processing of personal information and sensitive personal information of children, consent is obtained from at least one parent, a legal guardian, or, if permitted by local law, the school in which the child is enrolled.
- You have certain rights regarding the personal information and sensitive personal information that REX collects and processes. REX respects these rights:
- To know what information is collected and processed, and why
- To access your data
- To ask for correction if the information we are processing is incomplete, incorrect or out-of-date
- To ask us to delete information, such as information that is no longer relevant
- To have a copy of the data to take to another service provider
- To know what third parties we share data with.
- You also have the right to know the impact of these requests.
- REX has the policy of granting these requests when possible. However:
- If certain data is deleted, or if consent to process data is denied or revoked, the data subject may no longer be able to participate in REX programs or buy REX products, because the ability to process that data is necessary to provide the programs, services, and products.
- If the requested correction is factual, and REX does not agree that the correction is appropriate, REX may not be able to make the requested correction. However, REX may be able to add a notation that the correction was requested.
- REX may not be able to delete certain information. For example, if REX is required to retain information by law, REX cannot honor a request to delete that information.
- REX has a dispute resolution process, which may be updated from time to time. Our Data Protection Officer can be reached at firstname.lastname@example.org. If the Data Protection Officer is not able to resolve your concerns, you can discuss those concerns with the regulators in your jurisdiction. The Data Protection Officer can help you find the contact information for that regulator.
- REX does or may from time to time transfer personal information across international borders. REX’s main office is in the United States of America. Therefore, if you are in a country other than the United States, your information may be sent to the U.S., whose data protection laws may be less protective than the data protection laws in your country.
- It is REX’s policy to protect personal information collected and processed by REX in compliance with applicable laws. Because REX may operate in a number of different countries, some privacy protections may apply based on the country in which the data was collected or processed. REX strives to ensure that all personal information is protected and used only as necessary to accomplish the purposes for which the data is collected and to ensure that data subjects are provided the ability to control the use of their data to the greatest extent possible.
- Personal data of individuals in the European Economic Area that is collected or processed for or by REX will be processed in compliance with the European Union’s General Data Protection Regulation (“GDPR”). REX will also comply with other applicable data protection laws with regard to the processing of personal data and on the free movement of such data.
- Personal data of individuals in Brazil that is collected or processed for or by REX will be processed in compliance with Brazil’s General Data Protection Law (“GDPL”). REX will also comply with other applicable data protection laws with regard to the processing of personal data and on the free movement of such data.
Personal data of individuals in Australia that is collected or processed for or by REX will be processed in compliance with Australia’s Federal Privacy Act. REX will also comply with other applicable data protection laws with regard to the processing of personal data and on the free movement of such data.
- REX has designated a Data Protection Officer, who can be reached at email@example.com.
- The purposes and legal basis for the processing are described in this Policy.
- Personal information will be transferred to the United States for further processing.
- For individuals subject to European Union, Australian, and Brazilian law, the consent of at least one parent or legal guardian of individuals under 18 will be obtained before collecting and processing personal data. Parental consent is not required to collect and use data:
- To contact the parent or legal guardian
- To use the data a single time, if the data is not stored
- To use the data for the protection of the child/adolescent
- As otherwise required or permitted by law.
- You have the right to ask us to:
- Confirm that we are processing your data;
- Access your data;
- Correct incomplete, inaccurate or out-of-date data;
- Anonymize, block or delete unnecessary/excessive or non-compliant data;
- Take a copy of the data to another service provider;
- Delete the data;
- Know the third parties we share the data with;
- Explain the possibility of denying consent, and what happens if you deny consent;
- Revoke consent.
We encourage you to understand your rights regarding your data. Parents and legal guardians exercise these rights on behalf of their children.
- If you deny consent, revoke consent, or we delete data, you or your child may no longer be able to participate in REX programs, activities, opportunities, or order REX products.
- In some cases, we may not be able to grant a request. For example, we may not be able to delete (erase) data if we are required to maintain that data under law. However, we might be able to add a notation that erasure or rectification was requested.
- If there is a concern about privacy or security of data, please contact the Data Protection Officer at firstname.lastname@example.org. If the Data Protection Officer is not able to resolve your concern, a dispute resolution process is available upon request. If the Data Protection Officer is not able to resolve your concerns, you can discuss those concerns with the regulators in your jurisdiction. The Data Protection Officer can help you find the contact information for that regulator.
- How Do We Collect Personal Information? Many areas of the Site can be used without collection of personally identifiable information. There are some areas that require an account to access or use the area. We collect personally identifiable information that you provide when you:
- Register on the Site
- Create an Account
- Make purchases
- Subscribe to a newsletter
- Respond to a survey
- Fill out a form
- Submit or post content
- Engage in other activities, services or features that We make available on the Site that request your information
- If you sign up to use a special feature of the Site, you may be asked to expressly consent to special terms, for example, by affirmatively checking a box or clicking a button marked, “I agree.” This separate agreement will supplement or amend this Policy, but only with respect to the matters governed by such separate agreement.
- What Information is Collected?
- The information that is collected may include:
- Contact information, such as:
- Mailing address
- Phone number
- Email address
- School District
- Date of birth, or grade you are in school
- Student ID number
- IEP status/testing accommodations
- NCES code
- Other information that you provide to Us
- we are required to by law, or when necessary for the purposes of the processing or with your consent. Sensitive personal information is personal information regarding:
- Racial or ethnic origin
- Religious belief
- Political opinion
- Trade union or religious, philosophical or political organization membership
- Information about health or sex life
- Information about genetic or biometric data
- How Do We Use This Information?
We use personally identifiable information only if:
- The subject of the data (or the subject’s legal representative, such as a parent or, in some cases, the school) has consented to the use;
- The use is necessary to perform an agreement that the subject of the data is a party to, or that the subject of the data has requested prior to entering into an agreement;
- To comply with a legal obligation;
- To protect vital interests of an individual;
- To carry out a task in the public interest that is an obligation of REX;
- The use is necessary for purposes of the legitimate interests of REX, and those interests are not overridden by the interests or fundamental rights and freedoms of the subject of the data.
- Examples of ways that we use personally identifiable information include:
- To improve customer service
- To improve user experience
- To improve our Site
- To process payments
- To run a promotion, contest, survey or other Site feature
- To send periodic emails: You can unsubscribe from receiving future emails at any time; unsubscribe instructions are included at the bottom of each email.
- For the purposes specified at the time of collection.
- As otherwise permitted or required by law.
- How Do We Share Your Personal Information?
- We do not sell, trade, or rent Your personal identification information to others.
- You may contact info@Rex.academy to tell Us you do not want your information to be sold to third parties.
- However, we may still give your information to third parties that provide services to us.
- We may share information about visitors to the Site:
- With our business partners, trusted affiliates and advertisers to help provide services that are described above and on the Site.
- With third party service providers that help us operate our business and the Site or administer activities on our behalf, such as sending out newsletters or surveys. Newsletters and surveys are only sent if You have agreed to receive them.
- With companies that provide services to us, such as website hosting services or credit card processing services.
- With companies that are disclosed to You at the time You provide the Information.
- REX complies with the Family Educational Rights and Privacy Act (FERPA), which prohibits the release of education records without student permission, and other applicable online privacy laws.
- Sensitive personal information is only used as permitted by law in the country in question.
- Some of these purposes are:
- With the specific consent of the subject of the data (or the subject’s legal representative, such as a parent), for the specific purpose;
- To comply with a legal or regulatory obligation;
- If permitted by law, for research purposes;
- For the prosecution or defense of legal claims or other legal proceedings, as permitted by law;
- If necessary to protect the vital interests of a natural person;
- When processing is necessary for reasons of substantial public interest.
- Is the Site Private?
Some of the Site is not private and can be viewed by others. You may be permitted to post content for viewing on the Site. We have no control over, and disclaim responsibility or liability for, how other users may respond to, use or misuse the content that you post for public viewing on this Site, or for any actions taken by other users related to content that You post on the Site. Please consider carefully the information that You choose to post for public viewing on the site.
- How Can You Access or Correct Your Information
- You have the right to access your personal information stored with us to ensure that it is accurate, complete and current.
- Upon request, we will grant you reasonable access, except where the burden or expense of providing access would be disproportionate to the risks to your privacy or where the rights of other persons would be violated.
- We will take reasonable steps to correct, amend or delete information that you can independently demonstrate is inaccurate or incomplete. You can correct or amend your information by sending an email to us at email@example.com. You may use the same email address or phone number to ask us to delete information about you. However, we may not agree to delete information, if (a) we still need to information for legitimate purposes; or (b) we are required to retain the data for regulatory or legal purposes.
- You may withdraw your consent to the collection, use and transfer your personal information. However, please note that, by withdrawing your consent, it may be impossible for us to continue to provide you with certain services.
- You can log in to Your Account and correct or update information in Your User Profile.
- You can send an email to firstname.lastname@example.org requesting that information be corrected
- What Information is Automatically Collected
- We may collect certain information automatically, including:
- The IP address of the computer You are using;
- The date and time You are connecting to the Site;
- Website analytic data;
- Technical information about Your computer, such as the operating system, the browser and the Internet service providers You are using, and other similar information.
- Web browser cookies
- Our Site uses “cookies” to enhance User experience.
- Cookies are small text files that are placed on Your hard drive. Cookies help identify a User’s computer and may allow some tracking of information. For example, cookies can remember a User between visits, and can keep information in a shopping cart.
- A persistent cookie is set to store your User Name and Password, so you do not have to enter it more than once. Persistent cookies also enable the ability for the Site to track and target the interests of a user in order to enhance the experience of the user on the Site.
- We do not currently collect, and it is not our policy to permit third parties to collect “targeted” cookies (persistent identifiers tracking users across different sites and services) for purposes of advertising.
- Google Analytics Notice
- California Do Not Track Notice
- Many internet browsers have “Do Not Track” features which, when turned on, send a signal (the “DNT signal”) to the websites a user visits that indicates the use does not want to be tracked. Because there is not yet a common understanding of how to interpret DNT signals, and there is no common definition of “tracking”, We do not currently respond to DNT signals on the Site. We do not engage in targeted behavioral advertising.
- Your California “Shine the Light” Privacy Rights
- Upon your request, submitted to email@example.com, We will advise you of any categories of personal information that We disclose to third parties, and (to the extent We know) whether those third parties use that information for their direct marketing purposes. If We provide Your personal information to a third party, We do not allow that third party to use that information for marketing their services, unless You have consented to that use.
- How Do We Protect Your Information?
- We use reasonable data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of Your personal information, username, password, transaction information and data stored on our Site. However, it is impossible to guarantee security of any website, or of data transmitted over the Internet. While We seek to protect information, We cannot guarantee the security of any personal information You provide through the Site. It is important that You are careful when You provide private information online, that You use a secure connection, and that You protect your username and password.
- Third Party Websites
- This Site may provide hyperlinks, which are highlighted words or pictures within a document, that, when clicked, take you to another place within the document, to another document altogether, or may take you to a third-party website not controlled by REX.
- Any third-party websites may collect, use, and disclose information in a manner different than the Site. REX is not responsible for the collection, use, or disclosure of information collected through these websites and expressly disclaims any and all liability related to such collection, use, or disclosure.
- Chat Rooms, Journals and WebLogs, Message Boards, Classifieds, and Public Forums are areas that are only available to eligible and registered users.
- Whenever you voluntarily post public information to journals, weblogs, message boards, classifieds, or any other public forum, then that information can be accessed by the public and can in turn be used by those people to send you unsolicited communications.
- You should use discretion in providing information in these areas. REX is not responsible for the review, collection, use, or disclosure of information collected through such public forums and expressly disclaims any and all liability related to such collection, use, or disclosure.
- Third Party Websites
Any information REX collects from its donors is used by REX for internal purposes only, such as program implementation, tax reporting, legal compliance, or budgeting, and is shared with board members, staff and third parties for these purposes only. Otherwise, user information shall be kept strictly confidential by REX, its board members, staff and volunteers, unless permission is obtained from individuals or organizations to release such information. REX is committed to respecting the privacy of its users.
- Protecting Children’s Privacy
- As a service provider to educational institutions, REX is committed to protecting the privacy of children, including any children under the age of 13.
- We adhere to the Children’s Online Privacy Protection Act, (COPPA), and do not knowingly register or otherwise collect personally identifiable information from any child under the age of 13 without the prior verifiable consent of the child’s parent or guardian.
- Any student information collected by REX on or through the Site is collected solely for the benefit of such students and their school systems. Schools that we contract with obtain consent from the parent or guardian of the child, authorizing REX to collect and use the child’s personally identifiable information for purposes of the REX program.
- Parents/guardians may receive, upon written request, a description of the types of personal information collected on the Site; an opportunity to review their child’s personal information and/or have the information deleted; and may revoke permission for further use or online collection of a child’s personal information.
- Subject to any legal and/or regulatory record keeping requirements, REX retains personal information collected from a child for only as long as is necessary to fulfill the purpose for which it was collected and deletes such personal information using reasonable measures to protect against its unauthorized access or use.
- REX uses the following method to confirm parental permission for children to use the Site: Program Participants agree to obtain verifiable consent from the parents/guardians of all students to the collection and use of personal information provided through and on REX websites or related applications and software and use of school internet resources.
- REX will use the same method to confirm parental permission as required by other laws, including the California Consumer Privacy Act.
REX retains personally identifiable information only as long as it is needed for permissible business purposes, as required by law, and in accordance with record retention policies. Upon expiration of the retention period, personally identifiable information is disposed of in a secure manner.
- Access from Outside the United States; Acceptance of Policy
- If you are located outside of the United States, please note that any personal information collected through this Site may be transferred to the United States and other countries that might not provide an equivalent level of protection as the data protection laws in your home country.
- Your use of this Site or submission of any personal information constitute your express consent to the collection, use, disclosure, processing and storage of your personal information outside of your home country.
- Contact Us