Introduction

In connection with using the mybamanorth.com on-line registration services and bamanorthnyi.com website (the “Services”), Alabama North District Nazarene Youth International (“ALNDNYI”, “our”, “we”, “us” or applicable derivation) collects Personal Information from users of our Services ("You"/"Your"). We respect Your rights with respect to our collection of Your Personal Information and it will only be collected, used and disclosed as provided for in this policy or as otherwise specifically consented to by You. The policy will apply to and protect Personal Information (as defined below) collected by ALNDNYI.

Scope

This policy applies to Personal Information about users of our Services that is collected, used or disclosed to ALNDNYI in connection with the Services.

Definitions

To better understand this policy, ALNDNYI has set out some basic definitions to use when reading and interpreting it.

Collection: the act of gathering, acquiring, recording, or obtaining Personal Information from any source, including third parties, by any means.

Consent: voluntary agreement to the collection, use and disclosure of Personal Information for defined purposes. Consent can be either express or implied and can be provided directly by the individual or by an authorized representative. Express consent can be given orally, electronically or in writing, but is always unequivocal and does not require any inference on the part of ALNDNYI. Implied consent is consent that can reasonably be inferred from the circumstances or from an individual’s action or inaction.

Disclosure: making Personal Information available to a third party.

Personal Information: information about an identifiable individual that is recorded in any form, but does not include aggregated information that cannot be associated with a specific customer. For a customer, such information does not include that which is aggregated in such a manner that it cannot be connected to him/her and/or information, which is publicly listed in a written or online directory or typically made available through directory assistance.

Use: the treatment, handling and management of Personal Information by and within ALNDNYI.

Partners: organizations with which ALNDNYI has affiliations the event(s) including but not limited to the Alabama North District Church of the Nazarene and its officials, employees, agents and representatives; Alabama North District Children’s Ministries and its officials, employees, agents and representatives; Trevecca Nazarene University and its officials, employees, agents and representatives; Rolling Hills Conference Center and its officials, employees, agents and representatives; and the various member churches of the Alabama North District and their officials, employees, agents and representatives. Personal Information will be closely regulated and only provided on a need to know basis as deemed by ALNDNYI.

Collection of Personal Information

As indicated above, we only collect Personal Information that You consciously provide as we provide the Services. We may also collect Personal Information if You contact us, through e-mail, telephone conversations or the completion of forms, for support and other inquiries.

Accountability

ALNDNYI is responsible for Personal Information under its control and has designated its Privacy Officer as accountable for the company’s compliance with the following principles.

1. ALNDNYI is responsible for Personal Information in its possession or custody, including information that has been transferred by ALNDNYI to a third party for processing. ALNDNYI shall use contractual or other means to provide a comparable level of protection while the information is being processed by such a third party.

2. ALNDNYI shall implement policies and practices to give effect to:

(a) Implementing procedures to protect Personal Information;

(b) Establishing procedures to receive and respond to complaints and inquiries;

(d) Developing information to explain the organization’s policies and procedures.

Purposes and Collection

Where appropriate, ALNDNYI will identify the purposes for which Personal Information is collected at or before the time the information is collected.

1. ALNDNYI collects Personal Information only for the following purposes:

(a) To provide the Services to our event or organization partners (“Partners”) or users, including to enroll You at Your selected events(s) or organization(s). In providing the Services, Your Personal Information will be disclosed to the events(s) or organization(s) only after you have chosen to create a mybamanorth account;

(b) To establish and maintain responsible commercial relations with Partners and users (which will include, but not be limited to: billing, communication and account verification);

(d) To administer and manage its business operations.

2. Persons collecting Personal Information directly, other than through the Services, will be able to explain to individuals the purposes for which the information is being collected, or will, upon request, refer the individual to a designated person at ALNDNYI who will explain the purposes.

3. Unless required by law, ALNDNYI shall not use or disclose Personal Information for any purpose other than those described above without first identifying and documenting the new purpose and obtaining the consent from You, where such consent may not reasonably be implied.

Consent

The knowledge and consent of the individual are required for the collection, use, or disclosure of Personal Information, except in certain circumstances as described below:

1. In certain circumstances, Personal Information can be collected, used, or disclosed without the knowledge and consent of the individual. For example, legal, medical or security reasons may make it impossible or impractical to seek consent. When information is being collected for the detection and prevention of fraud or for law enforcement, seeking the consent of the individual might defeat the purpose of collecting the information. Seeking consent may be impossible or inappropriate where there is an emergency threatening the individual’s life, health or security, or where the individual is a minor, seriously ill, or mentally incapacitated. In other instances, information may be publicly available.

2. In obtaining consent, ALNDNYI will use reasonable efforts to ensure that You are advised of the identified purposes for which Personal Information collected will be used or disclosed.

3. The form of consent sought by ALNDNYI, in respect of information sought to be collected in association with the Services but outside of the completion of the applicable online registration form, may vary depending upon the circumstances and type of information disclosed. In determining the appropriate form of consent, ALNDNYI shall take into account the sensitivity of the Personal Information and the reasonable expectations of its customers and employees.

4. Your use of the Services in the completion of online registration form(s) will be considered implied consent to collect, use and disclose the associated Personal Information for all identified purposes.

5. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. ALNDNYI will inform the individual of the implications of such withdrawal. In order to withdraw consent, You must provide notice to ALNDNYI in writing.

Use and Retention of Personal Information

Any Personal Information collected by us will be used solely for the purposes of carrying on our internal business affairs and providing Services to You and our partners, and other services as You or our partners may request and authorize from time to time. Personal Information will be retained only as long as necessary for the fulfillment of those purposes.

1. Generally, all Personal Information collected by ALNDNYI is to provide You or our partners with the Services (i.e., enroll You or Your children at the selected event(s) and organization(s)) and will be provided to the applicable event(s) and organization(s) for such purposes as well as for such reasonably ancillary use in connection with the operation of such event(s) and organization(s). We may also disclose Your Personal Information to:

(a) any other third party, upon receiving Your consent or as required by law.

2. Only ALNDNYI’s agents or our partners with a need to know, or whose duties reasonably so require are granted access to Your Personal Information.

3. Personal Information that is no longer required to fulfill the identified purposes will be destroyed, erased or made anonymous according to the guidelines and procedures established by ALNDNYI. It is ALNDNYI’s practice to retain Your account registration information after You have registered for an unspecified amount of time for comparative purposes.

4. In the event that we disclose Your Personal Information to the third parties described above or to a data storage company, as appropriate, ALNDNYI commits to contractually bind such entities to abide by the fundamental terms of this policy and applicable laws, including with respect to their capability to use, disclose and retain such Personal Information.

5. Except as provided for in this policy, we will not sell, rent, lease, commercially exploit or otherwise disclose Your Personal Information or data to third parties unless: (i) required by law or to cooperate with any bona fide legal investigation; (ii) required to protect the legal interests of ALNDNYI or our partners, including for collection purposes, as applicable; or (iii) You provide consent to such disclosure.

Accuracy

At Your request and notification, ALNDNYI will update Personal Information as necessary to fulfill the identified purposes. You always have the right to request that we delete, destroy, return, amend or update Your Personal Information in our possession as You may direct, subject to reasonable notice.

Security

Personal Information will be protected by security safeguards appropriate to the sensitivity of the information.

1. Any Personal Information in our possession is stored electronically, either on our server (which may be hosted offsite) or on other electronic storage media that may be retained as part of Your files or otherwise.

2. We have security measures in place to protect against the loss, misuse, access to or alteration of Your Personal Information and data under our control.

3. We operate computer networks that are protected by industry standard firewalls and password protection. Appropriate physical and managerial security is also in place, including but not limited to the execution by our employees of a confidentiality/non-disclosure agreement as a standard practice.

4. ALNDNYI will protect Personal Information it discloses to third parties through contractual agreements stipulating the confidentiality of the information and the purposes for which it is to be used.

5. While we cannot guarantee that loss, misuse or alteration to Your data will not occur, we will use our resources and expertise to attempt to prevent such occurrences.

6. We commit to providing a minimum of an annual review and training with respect to this policy among our staff with potential access to Your Personal Information.

Openness and Access

ALNDNYI will make readily available to You information about its policies and practices relating to the management of Personal Information. ALNDNYI will make this Privacy Policy available to You prior to providing the Services. On request a copy of this Privacy Policy will be provided by mail.

You may access or inquire about Your Personal Information in our possession at any time during commonly held business hours. The Personal Information requested will be provided within a reasonable time, and at a minimal or no cost to You.

Upon Your request, ALNDNYI will be as specific as possible in providing an account of third parties to which it has disclosed Your Personal Information. When it is not possible to provide a list of the organizations to which it has actually disclosed information about an individual, ALNDNYI will provide a list of organizations to which it may have disclosed.

NOTE: In certain situations, ALNDNYI may not be able to provide access to all of the Personal Information it holds about You. Exceptions may include information that is prohibitively costly to provide, information that contains references to other individuals, information that cannot be disclosed for legal, security or commercial proprietary reasons, or information that is subject to solicitor-client or litigation privilege. ALNDNYI will provide the reasons for denying access upon request.

Challenging Compliance

In the event of any dispute, complaint or problem with respect to this policy and related ALNDNYI practices, a definitive procedure for resolution has been established as outlined below. ALNDNYI is committed to resolving any such issues promptly, justly, objectively and, where possible, confidentially.

A written outline of the issue should be forwarded directly to the Privacy Officer of ALNDNYI, who in turn will investigate, examine and evaluate all the facts. On the information gathered and other related details, a formal written decision will be completed and will be forwarded to You within 30 days of the Privacy Officer’s receipt of Your complaint. During investigation of the issue, it may be necessary for further Personal Information to be shared with the Privacy Officer or other appropriate parties internal or external to ALNDNYI. In all cases, ALNDNYI will remain responsible for the protection of all such Personal Information.

Children’s Privacy Protection

Children under 13 years of age are not permitted to use our Services without the supervision and permission of a parent or legal guardian. We do not knowingly collect any information solely from children under 13 years of age. If You are under 13 years of age, You are not permitted to submit Personal Information to us without the supervision and permission of your parent or legal guardian.

Notification of changes

We may update this privacy policy from time to time, so please review it periodically. However, regardless of our right to update this policy as indicated, we will never use Personal Information that You have provided to us in a new way without providing You an opportunity to give us Your consent.

For further information concerning this privacy policy or its application or for access to Your or Your Customers’ Personal Information, please write to us, in English only, via e-mail at [email protected]. The Privacy Officer at ALNDNYI is Jeremy Hagood.

Approval

This Privacy Policy was approved for use by the ALNDNYI executive council on January 5, 2010.