Privacy Policy

Internet Safety Labs Privacy Policy

Version 6.0

Last Updated November 20, 2023

 

This Privacy Policy applies to your (“you,” “your,” or “User”) online interaction with Internet Safety Labs (“we,” “us,” “our,” or “ISL”). This policy covers all the interactions (“Services”) where you provide your information to ISL, including:

  • Applying for and agreeing to panel participation (e.g., access to the panel workspace, etc.; the “Panels”); and/or
  • Requesting contact (e.g. “ContactUs” form) from ISL; and/or
  • Using App Microscope (e.g. searching for apps to view Safety Labels); and/or
  • Making an online donation (“Donations”) to ISL.

This Privacy Policy describes the personal information we collect from those who engage in any of the ISL online Services. It also describes how we use that information, and, in some instances, how we share that information in order to provide you with the Services. There is also a section with information about our opt-in to safe and respectful analytics.

OVERVIEW

We only collect personal information if you:

  • Sign up for panels by signing and submitting a panel application form; or
  • Complete a Contact Us form; or
  • Submit a Donation form

 

Note that no personal information is collected when using App Microscope.

 

The information you provide is used strictly in performing these functions.  We do not sell your personal information. In order to provide the Communications and Panel Participation services, we employ third party technology and service providers (see list below), which may have access to some of your personal information, but strictly as needed to provide the Communications or Panel Participation Services.

If you do not use any of the Services, then we do not collect any Personal Information from you at all as you visit the ISL web site. The nature of the technology used in providing online services is such that our software will see the Internet Protocol (IP) address of the device you use to access or use the ISL website, but we do not use your IP address in any way other than in responding to the device used when receiving a request to use or access the website.  The IP address is retained in automated logs of website activity but is not stored or used again for any other purpose.

COOKIES

ISL minimizes the use of cookies and uses them only for processing payments and for presenting our donation request banner.

 

Cookie Name

Purpose

Company

Approximate Duration

__paypal_storage__

This cookie is used by PayPal to store account details

PayPal

Persistent

m

Tracks the user’s session for Stripe

Stripe

13 Months

__stripe_mid

Fraud prevention and detection

Stripe

1 Year

__stripe_sid

Fraud prevention and detection

Stripe

1 Day

__cflb

Cloudflare Captcha

Cloudflare

1 Day

ts

Fraud prevention and detection

PayPal

13 Months

ts_c

Fraud prevention and detection

PayPal

13 Months

l7_az

Allows for PayPal login functionality

PayPal

1 Day

tsrce

Connects with payment function

PayPal

1 Day

hideDonationRequest

Notes if donation request box should be hidden

Internet Safety Labs

3 Weeks

 

 

PERSONAL INFORMATION COLLECTION AND USE

We practice data minimization and collect only what we need in order to provide you with the Services, as applicable.

Personal Information

“Personal Information” means information about a living individual who can be identified from that information (or from those and other information either in our possession or likely to come into our possession).

When you sign up for Panels, we ask you to provide us with certain Personal Information that can be used to contact or identify you.  This Personal Information may include, but is not limited to:

  • First name and last name
  • Email address
  • Phone number
  • Street Address, City, State, Province, Country, ZIP/Postal Code
  • Company/organization name
  • Job Title
  • Stakeholder category
  • Experience/Qualifications
  • LinkedIn Profile

We use this collected Personal Information to contact you regarding your application and participation, or contact you regarding the activities of ISL.

When you submit the Contact Us form, we ask you to provide certain Personal Information that can be used to contact or identify you as a company/organization contact. This Personal Information may include, but is not limited to:

  • First name and last name
  • Email address
  • Reason for request

We use this collected Personal Information to contact you with information on our Auditing Services.

When you submit a Donation form, we ask you to provide us with your

  • Email address
  • Donation amount
  • Payment Method

We use this to send a confirmation of your donation.

When you submit an Interest form, we ask you to provide us with your

  • First and last name
  • Organization name
  • Organization website
  • Email address
  • Interest category (A Product Safety audit for your product, A Product Safety audit for products your organization uses or may use, or something else.)

We use this to evaluate your interests and communicate with you.

We will not provide your Personal Information to third parties for any purpose other than to provide you with the Services.  You may opt out of receiving any Communications from us by following the unsubscribe link or instructions provided in any email we send, or by contacting us.

USE OF PERSONAL INFORMATION

ISL uses the collected Personal Information for various purposes:

  • To provide and maintain the services for Panel Participants.
  • To detect, prevent, and address technical issues.
  • To respond to web-initiated queries.
  • To process online donations.

HOW DO WE STORE YOUR PERSONAL INFORMATION?

ISL takes reasonable technical and procedural steps to maintain the security and integrity of your personal information.

RETENTION OF PERSONAL INFORMATION

ISL will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy.  We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. After such time, we will remove your Personal Information.

TRANSFER OF PERSONAL INFORMATION

Your Personal Information may be transferred to, and maintained on, servers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside of the United States of America and choose to provide information to us, please note that we transfer the data, including Personal Information, to the United States and process it there.  The Services are conducted in the United States.

Your acceptance of and agreement to this Privacy Policy (as part of your acceptance of and agreement to the Terms by your access and use of the Services), followed by your submission of Personal Information represents your agreement to such transfers.

ISL will take all the steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your Personal Information.

Third-Party Service Providers 

  • Gravity Forms
  • hCaptcha
  • Mail Chimp
  • Paypal
  • Stripe
  • Vimeo
  • WordPress
  • WP Engine
  • Yoast
  • Zapier

DISCLOSURE OF PERSONAL INFORMATION

Service Providers

We employ service providers to facilitate our provision of the Services, to provide Services on our behalf, perform Service-related services, or assist us in analyzing how the Services are used.

These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Business Transaction

If ISL is involved in a merger, acquisition, or asset sale, your Personal Information may be transferred to the acquiror.  We will provide at least ninety (90) days notice to you before such an activity takes place, so that you may request your Personal Information be removed, terminate your membership, unsubscribe to Communications, etc.  in order to prevent your Personal Information from being transferred and becoming subject to a different privacy policy.

Disclosure for Legal Compliance

Under certain circumstances, ISL may be required to disclose your Personal Information in order to comply with an applicable law or a valid order by a court or a government agency with applicable authority and jurisdiction.

ISL may disclose your Personal Information in the good faith belief that such disclosure is necessary to:

  • Protect and defend the rights or property of ISL.
  • Prevent or investigate possible wrongdoing in connection with Panels/Auditing Services.
  • Protect the personal safety of members or the public.
  • Protect against legal liability.

SECURITY OF PERSONAL INFORMATION

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure.  While we strive to use commercially reasonable means to protect your Personal Information, we cannot guarantee its absolute security.

FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA (“EEA”)

Legal Basis for Processing Personal Data Under the General Data Protection Regulation (“GDPR”)

If you are from the EEA, ISL’s legal basis for collecting and using your Personal Information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect it.

ISL may collect and process your Personal Information because:

  • We need to perform a contract with you (e.g., your Panel Participation Agreement).
  • We are providing the Communications to you at your request.
  • We are processing an online Donation initiated by you.
  • We are responding to a Contact Us request initiated by you.
  • You have given us permission to do so.
  • The processing is in our legitimate interests and it is not overridden by your rights.
  • To comply with the law.

Your Data Protection Rights Under the GDPR

If you are a resident of the EEA, you have certain data protection rights under the GDPR.  ISL aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information.

If you wish to be informed about what Personal Information we hold about you, and if you want it to be removed from our systems, please contact us at DataRights@InternetSafetyLabs.org.

In certain circumstances, you have the following data protection rights:

  • The right to access, update or delete the Personal Information we have about you. Whenever made possible, you can access, update, or request deletion of your Personal Information directly within your Account settings section on the ISL website.  If you are unable to perform these actions yourself, please contact us to assist you.
  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
  • The right to object. You have the right to object to our processing of your Personal Information.
  • The right of restriction. You have the right to request that we restrict the processing of your Personal Information.
  • The right to data portability. You have the right to be provided with a copy of the Personal Information we have about you in a structured, machine-readable and commonly used format.
  • The right to withdraw consent. You also have the right to withdraw your consent at any time where ISL relied on your consent to process your Personal Information.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Information.  For more information, please contact your local data protection authority in the European Economic Area (EEA).

YOUR CALIFORNIA PRIVACY RIGHTS

Residents of California may request a list of third parties to which certain Personal Information obtained by ISL was disclosed by ISL during the preceding year for those third parties’ direct marketing purposes (please note that it is ISL’s policy to never provide your Personal Information to third parties for their direct marketing purposes).  If you are a California resident and want such a list, please contact us at DataRights@InternetSafetyLabs.org. For all requests, you must put the statement “Your California Privacy Rights” in the body of your request, as well as your name, street address, city, state, and ZIP Code.  In your request, you need to attest to the fact that you are a California resident and provide a current California address for our response.  Please note that we will not accept requests via telephone, email, or by facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

OTHER PRIVACY RIGHTS

Depending on the jurisdiction in which you live, you may be entitled to other or additional privacy rights regarding the collection of your personal information by ISL in providing the Services.  Please contact us at DataRights@InternetSafetyLabs.org regarding requests or inquiries related to such rights.

LINKS TO OTHER WEBSITES AND SERVICES

The Services may contain or provide links to other websites, products, or services that are not operated by us. If you click or use such a third-party link, product, or service, you will be directed to that third party’s website, product, or service.  We strongly advise you to review the privacy policy of every third-party website, product, or service you visit or use.  ISL is not responsible for any of your Personal Information that you permit to be accessed by such a third-party website, product, or service.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third party websites or services.

CHILDREN’S PRIVACY

Persons under eighteen (18) years old (“Children” or “Child”) are not permitted to access or use the Services.

We do not knowingly collect Personal Information from Children.  If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us.  If we become aware that we have collected Personal Information from a Child without verification of parental consent, we will take steps to remove that information from our servers.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on the ISL website, prior to the change becoming effective and will update the “Last Updated” date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes.  Changes to this Privacy Policy are effective when they are posted on this page.  Your continued (or new) access and use of the Services, shall be your acceptance and agreement with this Privacy Policy.

CONTACT US

If you have any questions about this Privacy Policy, please contact us:

By email:  DataRights@InternetSafetyLabs.org

By mail:  Internet Safety Labs
3146B Sports Arena Blvd #1004
San Diego, CA 92110

 

REVISION HISTORY

  • November 7, 2023: Clarified use of cookies; added cookie to track display of donation banner.