Last modified: November 15, 2020

INTRODUCTION

This Privacy Policy applies to all information gathered either online or offline by Children’s Cancer Association, Inc., an Oregon non-profit corporation (“CCA”, “We”, “Our” or “Us”), including through the following websites (jointly and severally referred to herein as “the Site”): JoyRxMusic.org.

This Privacy Policy describes the types of information we may collect from you or that you may provide when you visit the Site or when you provide information to Us offline, as well as our practices for collecting, using, maintaining, protecting and disclosing that information.

This Privacy Notice applies to information we collect:

• On this Site;
• In e-mail, text and other electronic messages between you and Us, whether via the Site or via another electronic method of communication to Us; and
• Through any other direct method of communication between you and Us.

This Privacy Policy does not apply to information collected by a third party, not under CCA’s direction and control (including affiliates and subsidiaries via their own websites), and including through any applications or content (including games) that may link to or be accessible from or on the Site.

Please read this Privacy Policy carefully to understand Our practices regarding your information and how we will treat it. If you do not agree with Our practices, your choice is not to use our site and not to provide us with information about you. By accessing or using this Site, you agree to this Privacy Policy. This Privacy Policy may change your continued use of this Site after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates. We will provide notice on the Site if there are material updates to this policy.

PRIVACY POLICY SUMMARY

The Site is an innovative digital platform with two main purposes. The main purpose of the Site is to provide music as medicine and entertainment to seriously ill children and young adults, as applicable. Users may register and create an account (“Registered Users”), to access the portions of this Site viewable only by Registered Users.

The second purpose of the Site is as a fundraising platform for CCA to continue to provide music medicine to children and young adults with cancer and other serious illnesses Any user of the Site can see the fundraising and informational materials on the Site.

• We do not sell or share your or your child’s personal information to anyone without your permission except as disclosed in this Privacy Policy.
• We do not collect, store, or share any healthcare related information.
• We will only send you materials that you have indicated that you want to receive according to your preferences, and will honor your opt-out requests.
• We use cookies on the Site to operate and optimize the Site. If you reject cookies you may still use the Site, but your ability to use some areas of the Site could be limited.
• We have procedures to protect your personal information, but no procedures are entirely secure.
• We reserve the right to disclose your personal information in certain circumstances described in this Privacy Policy, such as to satisfy a legal requirement or protect our interest in the Site or our services.

CONTACT US

If you have questions or complaints regarding our Privacy Notice or practices, please contact us at: Info@JoyRxMusic.org; or by mail or phone at:

Children’s Cancer Association
Attention JoyRx Music
1200 NW Naito Parkway, Suite 140
Portland, OR 97209
Phone: 503-244-3141

Kids Privacy Assured by PRIVO: COPPA Safe Harbor Certification

Children’s Cancer Association (CCA) is a member of the PRIVO Kids Privacy Assured COPPA Safe Harbor Certification Program (“the Program”). The Program certification applies to the digital properties listed on the validation page that is viewable by clicking on the PRIVO Seal. PRIVO is an independent, third-party organization committed to safeguarding children’s personal information collected online. The PRIVO COPPA certification Seal posted on this page indicates Children’s Cancer Association (CCA) has established COPPA compliant privacy practices and has agreed to submit to PRIVO’s oversight and consumer dispute resolution process. If you have questions or concerns about our privacy practices, please contact us at 503.244.3141 or privacy@joyrx.org. If you have further concerns after you have contacted us, you can contact PRIVO directly at privacy@privo.com.

INTERNATIONAL USERS

Our digital operations on the Site are conducted, in whole or in part, in the United States. Our physical operation is conducted wholly within the United States. Regardless of where you live, by using the Site, you consent to have cookies and any personal information that you provide to us, transferred, processed and stored in the United States and to allow CCA to collect your personal information in accordance with this Privacy Policy.

CHILDREN UNDER THE AGE OF 13

General Content

We do not knowingly collect General User Personal Information (as defined below) from children under 13. If you are under 13, do not use or provide any information on the General Content of the Site. If We discover that personal information was collected through the General Content of the Site from a child under 13 without verification of parental consent, We will delete that information. If you believe We might have any information from or about a child under 13, please contact Us pursuant to the Contact Information provided above.

Registered Users or Potential Registered Users

Potential Registered Users are prompted to fill out a profile in order to become a Registered User of the www.JoyRxMusic.org website. We require verifiable consent from a parent or guardian before a profile goes “live” on the www.JoyRxMusic.org website for any child under the age of 13. Whenever a child under 13 years of age attempts to register an account to become a Registered User, CCA will automatically send an email to the child’s parent/guardian so that the child’s parent/guardian can indicate his/her consent (or lack of consent) to the child’s registration and membership on the Site as a Registered User. If your child completed a Registered User account application, but We have not received your parental consent, We will delete the Registered User Personal Information received as well as any parental contact information submitted to the Site. A child’s participation or access to an activity is not conditioned on him/her providing more Registered User Personal Information (as defined below) than is reasonably necessary for that activity or the services provided by CCA.

INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT

Information We Collect About General Users and Offline

We collect several types of information from General Users of the Site, as well as offline, including information:

• by which you may be personally identified, such as your name, phone number, e-mail address, age, credit card number (processed by a third party vendor and not stored on our system), photo, digital recording and music created by you (“General User Personal Information”);
• that is about you but individually does not identify you such as, favorite song; and/or
• about your internet connection, the equipment you use to access our Site and usage details.

We collect this information:

• Directly from you when you provide it to Us from: (a) forms you fill-out on the Site, such as the “Donate” form, and the “Feedback” form; and (b) records and copies of your correspondence (including email address) if you contact Us directly or offline.
• Automatically as you navigate through the Site. Information collected automatically may include usage details, IP addresses and information collected through cookies, web pixels and other tracking technologies.

If you are under the age of 13, do not provide General User Personal Information to CCA.

Information We Collect About Registered Users or Potential Registered Users on the JoyRxMusic.org Website

To become a registered user

For Under 13

• Your first name and last name, username, password, your birth date, your parent/guardian’s email address, your treatment facility, profile photo (or the user may select an avatar), preferred language, Favorite Music Genre, and Favorite Musical Instrument. Account access will be provided only after parental consent has been obtained.

For Users 13 and Over

• Your first name and last name, username, password, your birth date, your email address, your treatment facility, your treatment facility, profile photo (or the user may select an avatar), preferred language, Favorite Music Genre, and Favorite Musical Instrument.

The information listed above shall be referred to herein as “Registered User Personal Information.”

In addition to the Registered User Personal Information, a Registered User may indicate his or her favorite songs or instruments they play, create playlists, and indicate the types of music, lessons, and games that they like. Once a JoyRx Music account is created, it may be updated from time to time with status updates, new musical choices, photos, and other changes.

We collect this information directly from you, only if you choose to provide it.

INFORMATION WE COLLECT ABOUT GUEST USERS ON THE JOYRXMUSIC.ORG WEBSITE

We collect several types of information from Guest Users of the Site, including information:

• by which you may be personally identified, such as your name, phone number, e-mail address, age, photo, hospital you work or volunteer with or
• about your internet connection, the equipment you use to access our Site and usage details.

We collect this information:

• Directly from you when you provide it to us from: (a) forms you fill-out on the Site, such as the “Contact Us” form or
• Automatically as you navigate through the Site. Information collected automatically may include usage details, IP addresses and information collected through cookies, web pixels and other tracking technologies.

If you are under the age of 13, do not provide Personal Information to CCA.

REGISTRATION TO RECEIVE Registered User CONTENT ON JOYRXMUSIC.ORG WEBSITE

The following registration process applies to receive the Restricted Content, depending on the age of the potential Registered User.

Users Under 13

Potential Registered Users are prompted to fill out a profile in order to become a Registered User of the site. Whenever a child under 13 years of age attempts to register an account to become a Registered User, CCA will automatically send an email to the child’s parent/guardian so that the child’s parent/guardian can indicate his/her consent (or lack of consent) to the child’s registration and membership on the Site as a Registered User. Guardians/parents may at any time review any Registered User Personal Information collected about their child in accordance with the Registered Users and Registered Users Parent or Guardian requirements below.

If you are under the age of 13, you’ll need your parent or guardian to consent to your registration on the www.JoyRxMusic.org website. In attempting to register as a Registered User of the site an automatic email is then generated requesting consent from the parent/guardian for the child’s registration and use of the site.

Users 13 and Over

Young adults between the ages of 13 and 17 should ask their parent or guardian to review this Privacy Policy.

TRACKING TECHNOLOGIES

As is true of most websites, we gather certain technical information automatically and store it in log files. This information may include Internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exist pages, operating system, date/time stamp, and/or clickstream data (i.e., your navigation path on the Site).We do not link this automatically collected data to other personally identifiable information we collect about you.

We and our analytics provider, Google Analytics, use technologies such as cookies, pixels, tags, and scripts, to analyze trends, administer the Site, track users movements around the Site, and to gather demographic information about our user base as a whole. We may receive reports based on the use of these technologies by these companies on an individual and aggregated basis.

We use cookies to store information about your preferences and user settings and recognize you when you return to our Site. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our Site, but your ability to use some features or areas of our Site may be limited. We use pixels to estimate our audience size and usage patterns and collect related Site statistics, including for example, to count users who have visited Site pages or opened an e-mail from the Site, record the popularity of certain Site content, and verify system and server integrity.

When a user chooses to “Create a Profile” or “Contact Us”, we use reCAPTCHA to prevent the use of bots and reduce spam.  This API collects hardware and software information, such as device and application data, to send to Google for analysis.  The information collected by the API will be used for improving reCAPTCHA and for general security purposes. It will not be used for personalized advertising by Google.

HOW WE USE YOUR INFORMATION

For all General Users (which includes Registered Users, Guest Users and offline), We use information that We collect about you or that you provide to Us, including any personal information:

• To present the Site and its contents to you.
• To provide you with information, products or services that you request from Us.
• To fulfill any other purpose for which you provide it.
• To carry out Our obligations and enforce Our rights arising from any contracts entered into between you and Us.
• To notify you about changes to the Site or any products or services We offer or provide though it, such as updates about special featured artists, new songs, free downloads and applications. We may notify Registered Users by email.
• To allow you to participate in interactive features on the Site.
• To process your entries, if any, to run sweepstakes, contests, programs and surveys.
• In any other way we may describe when you provide the information.
• For other purposes required by law.
• For any other purpose with your consent.

DISCLOSURE OF YOUR INFORMATION

We may disclose aggregated information about our General Users, Registered Users and offline contacts, and other information that does not identify any individual, without restriction. We do not link aggregate user data with personally identifiable information. We use a third-party tracking service called Google Analytics that uses cookies to track non-personally identifiable information about visitors to the Site in the aggregate to help Us track usage on the Site.

Disclosure of Personal Information.

We may disclose Personal Information that We collect or you provide as described in this Privacy Policy:

• To our subsidiaries and affiliates.
• To contractors, service providers and other third parties We use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which We disclose it to them.
• To a non-profit successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or transfer of some or all of the CCA’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by CCA about the Site General Users and offline providers of information is among the assets transferred.
• To fulfill the purpose for which you provide it. For example, if a Registered User applies for free giveaways, the information provided will be used to send the free product to the correct address.
• For any other purpose disclosed by Us when you provide the information.
• With your consent.

We may also disclose your personal information:

• To comply with any court order, law or legal process, including to respond to any government or regulatory request.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the CCA, the children we serve, our donors, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection.

LINKS TO OTHER WEBSITES

The Site contains links to other websites, including, but not limited to, the following. We are not responsible for the privacy practices of 3^rd party sites. We encourage you to be aware when you leave the Site and to read the privacy statements of each and every website that collects personally identifiable information.

Name of Third Party Partner	What info is shared with or collected by this partner	Partner’s purpose	Link to Partner’s privacy policy
Google Analytics	Website Traffic Info	Analytics	https://policies.google.com/technologies/partner-sites

If you have any inquiries regarding our partner’s privacy practices or how they use your child’s personal information, please contact Us directly at Info@JoyRxMusic.org.

DO NOT TRACK SIGNALS

Some web browsers have settings that include “do not track signals.” The Site is not currently engineered to respond to “Do Not Track” signals from those browsers.

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

We strive to provide you with choices regarding the personal information you provide to Us. We have created mechanisms to provide you with the following control over your information:

• Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Site may then be inaccessible or not function properly.
• Disclosure of Your Information to Third Party Sponsors. We do not share General User Personal Information or Registered User Personal Information with any of our third party sponsors. However, third party sponsors may have cookies and web pixels on the Site that track your persistent identifiers. You can disable cookies on your browser as stated above, or you can learn about the privacy practices of our various third party sponsors on their websites.
• Donation Campaigns from the CCA. If you do not wish to have your e-mail address/contact information used by CCA to promote our donation campaigns, you can opt-out by sending us an e-mail stating your request to Info@JoyRxMusic.org. If We have sent you a donation promotional e-mail, to be removed from the list press the “Click To Unsubscribe” link at the bottom of the email, or you may send us an e-mail at: Info@JoyRxMusic.org, asking to be omitted from future e-mail distributions. If providing donations offline, you may also provide us with a written request that your information not be used by Us for future fundraising campaigns.

ACCESSING AND CORRECTING YOUR INFORMATION

Registered Users and a Registered User’s Parent or Guardian – www.JoyRxMusic.org

A Registered User can review and change his/her personal information by logging into www.JoyRxMusic.org and visiting his/her JoyRx Music account profile page. You may also send Us an e-mail at: Info@JoyRxMusic.org to request access to, correct or delete any personal information that you or your child has provided to Us. You may also message Us by logging into your account and using the contact us functionality. We cannot delete your personal information except by also deleting the affiliated user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. We will respond to your request within a reasonable timeframe.

When setting up the account of a child under 13, the child’s parent/guardian is notified that they can review any Registered User Personal Information collected from their child, have this information deleted, and/or request that there be no further collection or use of their child’s information by email. For young adults aged 13 through 17, guardians/parents can contact CCA at Info@JoyRxMusic.org, to receive access to view, edit and close a JoyRx Music account.

DATA RETENTION

We will retain Registered User Personal Information for as long as the Registered User’s account is active. We will retain and use your information as necessary to comply with Our legal obligations, resolve disputes, and enforce our agreements.

DIGITAL DATA SECURITY

The security of Registered User Personal Information and General Personal Information is important to us. We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. When you enter Registered User Personal Information on our registration or other forms, we encrypt that information using secure socket layer technology (SSL).

The safety and security of your information also depends on you. Where We have given you (or where you have chosen) a password for access to certain parts of the Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. The information you share in public areas may be viewed by any user of the Site.

Unfortunately, the transmission of information via the internet is not completely secure. Although We do our best to protect your personal information, We cannot guarantee the security of your personal information transmitted to the Site. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Site.

CHANGES IN THIS PRIVACY STATEMENT

If we decide to change our Privacy Policy regarding the collection or use of General User and/or Registered User Personal Information, we will post those changes to this Privacy Policy, and other places We deem appropriate so that you are aware of what information We collect, how We use it, and under what circumstances, if any, We disclose it. We reserve the right to modify this Privacy Policy at any time, so please review it frequently. If We make material changes to how We use Registered User Personal Information collected from children under age 13, We will notify parents or guardians by email in order to obtain verifiable parental consent for the new uses of the child’s Registered User Personal Information. For all other material changes to this policy, we will notify you by means of a notice on the Site.