Effective starting: September 20, 2021
The following policy applies to the One Step® website (onestep-app.com) and mobile apps for iOS and Android together with our services (hereinafter referred to as “Site” or “Services”) operated by Educational IDEAS, Inc., (hereinafter referred to as “EI” or “We”). Your privacy is important to us and so is being transparent about how we collect, use, and share information about you.
This policy also explains the choices you have about how we use the information about you. Your choices include how you can object to certain uses of information about you and how you can access and update certain information about you. This Privacy Policy governs our collection and use of Your Personal Data on this Site. Personal Data includes information that can identify you as a specific individual, such as your name or e-mail address. If you do not agree with this policy, do not access or use our Services.
INFORMATION WE COLLECT
Educational IDEAS, Inc. collects information about users, including teachers and students, in order to create and maintain user accounts and provide access to our online materials. We do not collect, maintain, use, or share student personal information beyond that needed for authorized educational/school purposes, or as authorized by the parent/student.
Information collected during the account set-up process: During the registration process for any of our subscription types, we ask the account holder (teacher/school/district staff) to provide us with the following personally identifiable information:
- name;
- e-mail address;
- school or district affiliation (when applicable).
The following data are needed to create teacher and student accounts:
- first name;
- last name;
- password;
- e-mail.
E-mail and password: We use subscribers’ e-mail and passwords to authenticate log-ins and allow access to the paid content. The e-mail is also used to authenticate users when they request technical support.
We do not collect or use information as follows: Other than in the places and for the purposes explicitly specified in this policy, we do not knowingly collect Personally Identifiable Information directly from students of any age, including users under the age of 13. If we learn that we have inadvertently collected any Personally Identifiable Information about students, we will take steps to promptly delete it. If you believe we have inadvertently collected personally identifiable information about your student, please contact us at feedback@ballard-tighe.com. We do not sell student data to third parties under any circumstances, and our programs do not allow behavioral targeting of advertisements.
Parental consent: We require that teachers or schools get parental consent before using Service with children who are under the age when they can grant consent on their own. This age may vary based on where you live. For example, in the US that age is younger than 13. You should check your local laws to determine the relevant age in your country. Parents or guardians can withdraw consent for the further collection of their child’s information at any time. You may get consent as part of a school-wide technology consent process the district/school may already have in place.
COOKIES
Cookies are small text files that we transfer to your web browser that allow us to identify your web browser and store information about your account. These cookies may record that you visited our Sites. The purpose of the cookies is to keep track of your visit and activities.
If you decline cookies, you may not be able to see or use the interactive features of our Sites and some services on the Sites, such as tracking work you have completed during the session, may not function the way they should.
PERSONAL INFORMATION
How we use the information we collect depends in part on which Services you use, how you use them, and any preferences you have communicated to us.
By providing your Personal Information, you agree that, where it is permitted by local law, we may use your Personal Information:
- to create a new account for our Services;
- to communicate with you by e-mail;
- to respond to your requests.
Messages received from users: We may retain identifying information including name, e-mail address and institutional affiliation from users when they send us messages through our system to request technical support in order to communicate about and resolve the technical issue.
FERPA
We understand the obligation educational agencies, districts, and school systems have to comply with the Family Educational Rights and Privacy Act (FERPA). We support schools in their compliance efforts and facilitate their alignment with FERPA.
Under the terms of our contracts with schools, we agree to act as a “School Official” as defined by FERPA, meaning that we:
- Perform an institutional service or function for which the school or district would otherwise use its own employees;
- Have been determined to meet the criteria set forth in the school’s or district’s annual notification of FERPA rights for being a School Official with a legitimate educational interest in the education records;
- Are under the direct control of the school or district with regard to the use and maintenance of education records; and
- Use education records only for authorized purposes and will not redisclose Personally Identifiable Information from education records to other parties (unless we have specific authorization from the school or district to do so and it is otherwise permitted by FERPA).
HOW WE SHARE YOUR PERSONAL INFORMATION
We will not share any personally identifiable information for marketing or advertising purposes.
We reserve the right to disclose personally identifiable information if we are required to do so by law, or if we believe that disclosure is necessary to protect our rights, protect your safety or others’ safety, investigate fraud, and/or comply with a judicial proceeding, court order, subpoena, or legal process.
We also reserve the right to transfer your Personally Identifiable Information in case of a corporate restructuring (such as a merger or acquisition), as long as the receiving entity adopts this privacy policy regarding your information.
DATA SECURITY
We have implemented reasonable safeguards designed to prevent loss, misuse and unauthorized access, but cannot guarantee that your personal data will never be disclosed in a manner inconsistent with this Privacy Policy (for example, as a result of unauthorized acts by third parties that violate applicable law or relevant web policies). When you access the Site, you will be asked to enter your password to help protect your personal data. These passwords help the Site verify your identity before granting access or making corrections to any of your personal data. You should never disclose your password to anyone.
Governance policies and access controls are in place to ensure that the information of each district, school, or other subscriber is separated, and all subscribers can only access their own data.
HOW WE STORE YOUR INFORMATION
We store your information in a secure data center located in the United States. Information you provide will be safeguarded according to our company’s strict standards of security and confidentiality. We use Secure Sockets Layer (SSL or HTTPS) encrypting technology to establish connections and ensure that all data passed between the server and the browser remains encrypted.
While we strive to maintain best industry-standard privacy and security practices, it should be noted that no industry system is fail-proof. We have established a Disaster Recovery Plan for use in an actual data breach, loss, or disaster. This includes notifying the affected subscriber(s), and as appropriate, coordinating with the subscriber to support notification of affected individuals, students, and families when there is a substantial risk of harm from the breach or a legal duty to provide notification. Given that our system only collects names and email addresses but no demographic information and never asks for or stores payment information, the likelihood of incurring substantial risk of harm is extremely low.
HOW WE HANDLE DATA FROM INTERNATIONAL VISITORS
If you are using the site outside the United States, you consent to having your information and data transferred to the United States. If you are in any jurisdiction with laws or regulations governing internet use, including collection, use, and disclosure of personal data, different from those of the United States, you may only use this website(s) or app(s) in a manner that is lawful in your jurisdiction. If your use of this site may be unlawful in your jurisdiction, please do not use it.
DATA RETENTION AND DELETION
We keep your personal data only as long as necessary to provide you with the Service for educational purposes. We keep some of your personal data for as long as you are a user of the Service, or until the school or educational institution makes a request to remove the data.
If you request, we will delete or anonymize your personal data so that it no longer identifies you, unless we are legally allowed or required to maintain certain personal data, including situations such as the following:
-
If there is an unresolved issue relating to your account, such as an outstanding credit on your account or an unresolved claim or dispute we will retain the necessary personal data until the issue is resolved;
-
Where we need to retain the personal data for our legal, tax, audit, and accounting obligations, we will retain the necessary personal data for the period required by applicable law; and/or,
-
Where necessary for our legitimate business interests such as fraud prevention or to maintain the security of our users.
DISCLAIMER
The Site may have links to external websites. These include links to websites operated by government agencies, nonprofit organizations, and private businesses. When you link to another site, you are no longer on our Site and this Privacy Policy will not apply. When you link to another website, you are subject to the privacy policy of that new site.
CHANGES TO THIS PRIVACY POLICY
We may make changes to this privacy policy from time to time. If there are any substantial changes, you will be prompted to review and accept the revised privacy policy next time you log in.
If you do not agree to the revised policy, please refrain from using this website and/or leave this website.
CONTACT US
Questions regarding this Privacy Policy should be directed by e-mail or by mail at:
Educational Ideas, Inc.
Re: One Step Privacy Policy
471 Atlas Street
Brea, Ca 92821
(800) 321-4332/ (714) 990-4332
feedback@ballard-tighe.com