Privacy Policy

Privacy Policy

CorStone Privacy Commitment


We’re dedicated to working in your best interests and to conforming with the latest U.S. and European privacy standards, including the General Data Protection Regulation | GDPR. We want to be transparent in how and when we collect and use your data and to help you better understand how to control that data.

In plain language, we collect some data about visitors and newsletter subscribers through forms and cookies (small tracking codes) on our site. We use this information to keep in touch with you (if you fill out a contact form or newsletter subscription request, for instance) and to improve the content we provide (by identifying what articles get the most attention and to fix site usability issues, for example).

We don’t sell, rent, or otherwise share your personal data with anyone outside of CorStone except as necessary to provide a requested service (such as providing a downloadable asset) or to fulfill legal obligations in the interest of the safety of CorStone, the users of our website, or the public.

Some of the tools on our site also collect information and use their own cookies in order to provide you with features and services, and you should review those companies’ privacy policies. These include our social sharing buttons (AddThis), our commenting feature (Disqus), and our newsletter/email subscription service (MailChimp). We also use Google Analytics to track overall activity on our site.

If you ever have any questions, suggestions or concerns about your data privacy, including requests to have your data removed, please send an email to SteveL@corstone.org. You can also send letters to:

CorStone
8 Market Place
Suite 300
Baltimore, Maryland 21202

Read below for additional details about our policies and procedures.

Further Details


This privacy policy (“Policy”) describes the practices of CorStone with respect to the gathering and use of personal information submitted to CorStone through the CorStone website (the “CorStone Site”). All capitalized terms not defined here, shall be given the same meaning as defined in CorStone General Terms and Conditions (“Terms”).

This Policy also does not apply to the practices of unrelated third-party service providers or companies accessed through links provided for your convenience from the Sites.
What information we collect

CorStone, or a service provider operating on CorStone’s behalf, collects certain Nonpublic Personal Information (“NPI”) which is submitted by you when you register as a User on the Sites.

In addition, when you visit the Sites, we may collect technical and navigational information, such as computer browser type, Internet protocol address, pages visited, and average time spent on our Sites. This information is gathered through the use of cookies. A cookie is a small data text file that a website server writes to your hard-drive when you visit the Sites. A cookie assigns a unique identification to your computer and may be used for security purposes, to facilitate transactions, to personalize the Sites, or to gather information about the visit.

When We Disclose Your NPI


CorStone does not disclose NPI to any third party, except for the purposes of providing the Services to you, or as otherwise disclosed in this Policy. Specifically, we may share the NPI that we collect with the following entities:

To service providers with whom we subcontract, including those who host and maintain the Sites, fulfillment companies who distribute our materials or handle billing for certain services.

To government agencies and law enforcement officials, when we are required to do so to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims, or when CorStone in its sole discretion, believes it is required or appropriate in order to comply with the law.

We also reserve the right to disclose NPI in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of CorStone’s Terms and Conditions or other agreements, or as otherwise required or permitted by law. If CorStone merges with another organization, your NPI will be acquired by that organization.

Disclosures That You Control


If you submit NPI, or other personal information not specifically listed here, to any of our Community Forums or other areas of the Sites that can be accessed by Users or others (such as in questions, comments, postings, listserves, email threads or other such places), then your submissions will be public, and CorStone’s privacy obligations will no longer apply. If you submit NPI directly to one of our service providers, then such submissions are governed by the received service provider’s terms and privacy policy, and not CorStone’s. Please check the Terms for more information on this subject under the section called “Your Submissions and Activities.”

You should be aware that your User Name may be displayed throughout the Sites and therefore may be available to the public. All of your activities on the Sites may ultimately be traceable to your User Name. Other people can see your submissions and your postings to publicly-accessible sections of the Sites. Therefore, if you associate your given name with your User Name, people who know you will be able to identify your activities and comments on the Sites. CorStone is not responsible or liable for the consequences of this disclosure by you.

How We Use Your NPI Within CorStone


CorStone uses NPI collected from Users in order to administer the Services requested by you, to make the Sites more useful, to respond to your queries, and to inform Users of new products and services offered on the Sites. We also may use your IP address to help diagnose problems with our servers and administer the Sites.

Your Internet Protocol address and information regarding the web pages on the Sites that you visit, or that linked to the Sites, may also be used to gather broad demographic information, interests, and behavior so that we may better understand our Users. This information may be used, for example, to alert you to software compatibility issues, or it may be analyzed to improve the Sites’ design and functionality. CorStone may share aggregated demographic, product usage, or traffic pattern information for marketing purposes with other organizations, but these statistics will include no NPI. Except as noted above, your NPI will not be shared with other organizations for marketing purposes without your consent.

Security


Although the Sites have security measures in place to protect against unauthorized access to and the loss, misuse and alteration of information under our control, we cannot guarantee that such security measures will be sufficient, will not be breached, and that your NPI, Private Information, or other information may not be disclosed or otherwise accessed in an unauthorized manner. Certain information, including NPI and Private Information, may be transmitted by you and to you by unsecured electronic mail. Although it may be illegal to intercept or disclose these messages, these transmissions are not secured.

How to Review + Update Your Information


CorStone provides methods of updating your information and contact preferences. You may update your information and contact preferences online, or write, e-mail, or telephone us with changes to your information and contact preferences.

CorStone
8 Market Place
Suite 300
Baltimore, Maryland 21202
Email | SteveL@corstone.org

Opt-out Policy


You may at any time request not to be contacted by CorStone. “Opt out” requests should be sent to the address indicated on the materials sent by CorStone or by replying to the email in which such material was sent, or by telephone to CorStone. Please note that CorStone may ask you to follow up your request in writing, for our records.

Linked Websites


The Sites provide hypertext links to and framed content from other websites that may be governed by privacy policies that are different from those provided herein. If you leave the Sites, or if you are presented with a framed web page that is branded with the marks of a third party, this Privacy Policy will not apply. You should read the privacy policies of websites reached through the use of links or reached through the interactions with framed content on the Sites. CorStone is not responsible for the collection, use, or disclosure of information collected through those websites, and CorStone expressly disclaims any and all liability related to such collection, use, or disclosure.

Applicable Laws


These Sites are published in the United States and is subject to laws of the United States. If you are located in a country outside the United States and voluntarily submit personal information to us, you thereby consent to the general use of such information as provided in this privacy policy and to the transfer of that information to, and/or storage of that information in, the United States.

Revisions to this Policy


As the Sites grow and new features are added, or legal requirements change, this Privacy Policy may be amended by posting the amended Privacy Policy on the Sites. The amended Privacy Policy, which will apply to all NPI held by CorStone, will automatically be effective 30 days after it is initially posted on the Sites.

Effective Date of Privacy Policy: June 1, 2018.