The Nantucket Project Privacy Policy
The Nantucket Project Academy (“TNP”) takes your privacy very seriously. Please read this Privacy Policy (“Policy”) carefully as it contains important information on how and why we collect, store, use, and share information that relates to you and may identify you as an individual (“Personal Information”). This Policy also explains your rights in relation to your Personal Information and how to contact us or supervisory authorities in the event you have a complaint.
By using the Services, you accept the privacy practices contained in this Policy. If you do not agree to this Policy, do not use the website, associated Services, or submit Personal Information to us in any manner.
1. WHO WE ARE AND WHAT WE DO
The Nantucket Project Academy is a 501(c)3 based in Nantucket, MA. We provide software and services, including the TNP website located at www.nantucketproject.com and associated mobile applications (collectively, “Services”). We also partner with third parties who help further our mission and support our events (“Partners”).
2. THE PERSONAL INFORMATION WE COLLECT AND USE
(a) Source(s) of Personal Data Collected by Us
We collect information about you (i) When you provide it to us or our Service Providers (defined below), (ii) with automated technologies, and (iii) from third parties.
(i) Information You Provide to Us
We collect Personal Information that you provide to us and our Service Providers. Voluntary submissions can occur when you purchase subscription services, use the Services, make content submissions, make suggestions, or participate in online interactive activities.
(ii) Information We Collect Automatically
Some information, such as IP address and/or browser and device characteristics, is automatically collected when you visit our website and Services. This Personal Information is required to provide Services to you. If you do not provide the Personal Information we ask for, it may delay or prevent us from providing Services to you.
(iii) Information Collected from Third Parties and Other Sources
We may use analytics service providers to analyze how you interact and engage with the Services. Third parties may help us provide you with customer support or payment processing. We also obtain Personal Information from other sources, such as our Partners, and may collect from authorized resellers of our products. We obtain such information only in relation to the Services and products we provide.
(b) How We Use Your Personal Information
TNP does not sell your personal data to third parties. Any Personal Information that you supply to us remains your personal property. However, by submitting that information to us or our Services and accepting the terms of this Privacy Policy, you grant us the right to use your Personal Information for the following purposes:
- To deliver the Services you have purchased or requested
- To help us better understand visitors use of the website
- To respond to specific requests from visitors
- For business purposes such as improving products, services, marketing, and user experience
- To protect the security or integrity of the website
- To create and manage user accounts
- To send marketing and promotional communications
- To send administrative information
- To enable user-to-user communications
- To enforce terms and conditions and policies
(c) Who We Share Your Personal Information With
For the purposes of delivering the Services to you we share information with:
- Service providers, such as web hosting services, software and service providers, payment service providers, warehouses, and delivery companies (“Service Providers”)
- Other third parties we use to help us provide the Services and run our business, including but not limited to marketing agencies, analytics providers, and e-mail service providers (“Other Third Parties”)
- Third parties provided and or approved by you
- We reserve the right to disclose Personal Information to respond to information requests from government authorities, to address national security situations, to protect your rights, to fulfill business obligations, or when otherwise required by law, in our sole discretion.
(d) Reasons We Collect and Use Your Personal Information
We collect and use your Personal Information to further the following legitimate interests: to send e-mails, fulfill orders, deliver Services and products, complete customer transactions, improve website performance and provide customer service.
(e) Whether Information Has to Be Provided by You and Why
The provision of name, e-mail, address, phone number, credit card information and/or other billing information is required from you to enable us to process and complete your order for the Services. We do not require you to provide any personal data in order to browse on the website. We will inform you when we collect it whether you are required to provide the information to us.
(f) How Long Your Personal Information Will Be Kept
We will keep your Personal Information while you have an account with us or while we or our partners are providing products and Services to you. Thereafter, we will keep your Personal Information for as long as is necessary:
- To respond to any questions, complaints or claims made by you or on your behalf
- To show that we treated you fairly
- To keep records required by law
We will not retain your Personal Information for longer than necessary for the purposes set out in this Policy. Different retention periods apply for different types of Personal Information. When it is no longer necessary to retain your Personal Information, we will delete or anonymize it.
(g) Summary of Information We Collect and Who We Share It With
| Categories of Personal Information | Specific Types of Personal Information Collected | Source(s) of Personal Data | Categories of Third Parties With Whom We Share this Personal Data for a Business Purpose: |
|---|---|---|---|
| Voluntary Contact Submission. | We collect voluntary submissions when you submit information or content to us, subscribe to one of our mailing lists, make suggestions, participate in online activities, or register for events or contests.
| You |
|
| Customer Account Information. | To use certain features of the Services, you must create an account and provide a username, password, and e-mail address. We may store your user account preferences and settings including:
| You |
|
| Content You Submit. | We collect certain content you submit to the Services including but not limited to text, links, images, gifs, and videos and general input (e.g., feedback you provide us about our Services or other information you voluntarily submit). You may contribute posts on your timeline and comments on other people’s timelines (including saved drafts). We collect and display this information. During film screenings and live discussions, you may participate inaudio and/or audiovisual interactions with other users and submit written comments. We do not collect these. | You |
|
| Actions You Take. | We collect information about the actions you take when using the Services. Collected actions may include text, links, images, numeric data, gifs, and videos. This may include:
| You |
|
| Transactional Information. | Payments are processed by third-party payment processors (e.g., Stripe), so please refer to the applicable processor’s terms and privacy policy for more information about how payment information is processed and stored. | Third Party |
|
| Other Information. You may choose to provide other information directly to us. | We may collect information when you fill out a form, participate in sponsored activities or promotions, apply for a job, request customer support, or otherwise communicate with us. | You |
|
| General Browsing | In addition to information that you choose to submit, we and/or our service providers may automatically collect and/or store certain information when you visit or interact with the Site(s) or use Services (“Usage Information”).
| Automatic |
|
| Cookies and Similar Technologies. | We may use various methods and technologies to store or collect Usage Information (“Tracking Technologies”). Tracking Technologies may set, change, alter or modify settings or configurations on your Device.
| Automatic |
|
| Your Device and Location |
| Automatic |
|
3. CHILDREN’S PRIVACY
Consistent with the Children’s Children’s Online Privacy Protection Act, The Nantucket Project is committed to protecting children’s children’s privacy on the Internet. By browsing and or utilizing The Nantucket Project Services you certify that you are age 16 or above and agree to be bound by the Site’s Terms of Use.
The Services are not designed to attract anyone under the age of 16 and are not intended for use by any children. We do not knowingly collect any Personal Information from visitors or users of our site who are under the age of 16.
If you have reason to believe that a child under the age of 16 has provided Personal Information to us, please contact us using the information listed in the section entitled “Contact Us”, and we will endeavor to delete that information from our databases. Children under the age 16 are not allowed to create an account or otherwise use the Services.
4. CHANGE IN CONTROL OR SALE
We can share your personal data as part of a sale, merger or change in control, or in preparation for any of these events. Any other entity which buys us, or part of our business, will have the right to continue to use your data, but only in the manner set out in this Privacy Policy unless you agree otherwise.
5. INTERNATIONAL DATA TRANSFERS
We are based in the United States and we process and store information on servers located in the United States. We may store information on servers and equipment in other countries depending on a variety of factors, including the locations of our users and service providers. By accessing or using the Services or otherwise providing information to us, you consent to the processing, transfer and storage of information in and to the U.S. and other countries, where you may not have the same rights as you do under local law.
6. DO NOT TRACK REQUESTS
We take action in response to Do Not Track (“DNT”) signals.
Many web browsers give you the option to send a DNT signal to the websites you visit, indicating that you do not wish to be tracked. There is no accepted standard for how a website should respond to this signal, and we disable cookies in response to this signal. Please note that if you remove or chose not to accept our cookies, some features of our services may no longer function and you will need to reenter your information and reselect your preferences each time you visit our Services.
7. LINKS TO OTHER SITES
Our website may contain links to websites operated by others. You may see advertising or other content on this website or our Services that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors, or other third parties. Any products or services reached through a third-party link are subject to its own separate privacy policies. We are not responsible for or liable for any content on or actions taken by such third-party websites.
8. KEEPING YOUR PERSONAL INFORMATION SECURE
We undertake reasonable efforts to ensure that Personal Information is protected while you are utilizing our Services. All information collected from you is stored in a technically and physically secure environment. Furthermore, Service Providers, Partners, employees, contractors, and vendors who have access to your personally identifiable information in connection with providing Services for us are required to keep the information confidential. Our team is dedicated to ensuring the security and privacy of all user information.
We utilize SSL web encryption, data, and password encryption to protect sensitive information online, and we do everything we can to protect user information offline. However, no data transmission over the Internet, mobile networks, wireless transmission, or electronic storage of information can be guaranteed 100% secure. As a result, we cannot guarantee or warrant the security of any information you transmit to or from our Site, and you provide us with your information at your own risk.
9. YOUR CHOICES
If you want to unsubscribe from receiving e-mails from us, you may do so at any time. Each e-mail includes instructions for unsubscribing from these e-mail communications.
10. YOUR RIGHTS UNDER THE CALIFORNIA PRIVACY ACT (“CCPA”)
If you are a California resident, you may review, change, or terminate your account at any time.
| Disclosure of Personal Information We Collect About You | You have the right to know:
Please note that we are not required to:
Provide the Personal Information to you more than twice in a 12-month period. |
| Personal Information Sold or Used for a Business Purpose | In connection with any Personal Information we may sell or disclose to a third party for a business purpose, you have the right to know: The categories of Personal Information about you that we sold and the categories of third parties to whom the Personal Information was sold; andThe categories of Personal Information that we disclosed about you for a business purpose. You have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to opt-out of the sale (or disclosure) of your Personal Information. If you exercise your right to opt-out of the sale (or disclosure) of your Personal Information, we will refrain from selling your Personal Information, unless you subsequently provide express authorization for the sale of your Personal Information. To opt-out of the sale or disclosure of your Personal Information, please contact us via the “Contact Us” section of this Policy |
| Right to Deletion | Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
Please note that we may not delete your Personal Information if it is necessary to:
Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information. |
| Protection Against Discrimination | You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things:
Please note that we may charge a different price or rate or provide a different level or quality of goods or the Services to you, if that difference is reasonably related to the value provided to our business by your Personal Information. |
You may make a written request to us utilizing the information in the “Contact Us” section of this Policy to request this information. We may require you to confirm your identity and your residency in order to obtain the information, and you are only entitled to make this request twice a year.
11. YOUR RIGHTS UNDER THE GENERAL DAYE PROTECTION REGULATION (“GDPR”)
If you are a citizen of the European Union, or United Kingdom you may review, change, or terminate your account at any time and have the following rights:
| Right to Access | The right to be provided with a copy of your Personal Information (the right of access) |
| Right to Rectification | The right to require us to correct any mistakes in your Personal Information |
| Right to be Forgotten | The right to require us to delete your Personal Information—in certain situations |
| Right to Restriction of Processing | The right to require us to restrict processing of your Personal Information—in certain circumstances, e.g. if you contest the accuracy of the data |
| Right to Data Portability | The right to receive the Personal Information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations |
| Right to Object | The right to object:
|
| Right Not to be Subject to Automated Individual Decision-Making | The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you |
| Right to lodge a Complaint with a Supervisory Authority | The right to lodge a complaint in the European Economic Area state where you work, normally live, or where any alleged infringement of data protection laws occurred. The supervisory authorities may be accessed through the European Commission here. |
You may make a written request to us regarding the above rights utilizing the information in the “Contact Us” section of this Policy.
12. YOUR NEVADA PRIVACY RIGHTS – PRIVACY NOTICE FOR NEVADA RESIDENTS
If you are a Nevada resident, you have the right to request certain information from us regarding the collection and sale of your Personal Information (as defined in Nevada Revised Statutes 603A.320) during your visit to our websites or when you otherwise interact with us online. If you have sought or acquired, by purchase or lease, any goods or Services for personal, family, or household purposes from us, you may ask us to disclose whether we have sold (for monetary consideration) certain information about you (including your first and last name, physical address, e-mail address, telephone number, social security number, an identifier that allows you to be contacted either physically or online, or other contact information that allows us to identify you personally).
As a Nevada resident, you may also request to opt out of us sharing such information about you. To make this inquiry, please submit a request in writing utilizing the information in the “Contact Us” section of this Policy with “Nevada Privacy Rights” in the subject line. You must include your full name, e-mail address, and attest that you are a Nevada resident by providing a Nevada postal address in your request. Please state whether you are requesting information and/or opting out. (you must complete a separate request for each service.)
We will process your request within 60 days, or we will let you know if we need additional time. We may require additional information to verify your identity before we can respond.
13. TERMS OF SERVICE
Please read the Terms of Service Policy carefully to understand other terms and conditions that govern your use of this Website and Services. This Privacy Policy is incorporated in the Terms of Service Policy.
14. REVISIONS AND UPDATES
This privacy notice was published on September 10, 2020 and last updated on June 19, 2023. The Privacy Policy may be revised from time to time, in which case the Privacy Policy you view will be the most current version and the date of the latest such revision will be identified at the beginning of this Privacy Policy. We will inform you of any substantial changes via updates to this page and via e-mail.
15. HOW TO CONTACT US
(a) General Questions and Technical Support
If you need technical support or want to report a bug involving the Services, please contact us at admin@nantucketproject.com.
(b) Please direct all communications concerning this Policy to our Privacy Team: The Nantucket Project PO Box 568, Nantucket, MA 02554 at admin@nantucketproject.com.
- In all communications with us, please include the e-mail address used for a subscription, the website address or the specific program to which you provided Personal Information and a detailed explanation of your request.
- If you would like to delete or amend your Personal Information and are contacting us by e-mail, please put “Deletion Request” or “Amendment Request”, as applicable, in the subject line of the correspondence. We will do our best to respond to all reasonable requests in a timely manner.
(c) Your rights under the GDPR, CCPA, and Other Applicable Laws.
- Request to Export Data: If you wish to request that we export your data from our database so you can port it to another vendor, please send an e-mail to admin@nantucketproject.com or contact the Privacy Team with the subject line “Export My Data”, and explain in the body of the e-mail that you are asking for a data export.
- Request to Forget: If you wish to request that we “Forget you” from our database, please send an e-mail to admin@nantucketproject.com or contact the Privacy Team with the subject line “Forget Me”, and explain in the body of the e-mail that you are asking to have all of your data deleted.
We have a standard data export format that we will provide and are not able to create custom exports. To protect user privacy, you must send such a request from the account information we have on file or the request will not be honored.