Privacy

THE IMPACT GROUP, INC.
WEBSITE PRIVACY POLICY

Last Revised 10.12.22

THE IMPACT GROUP, INC. (“Impact” or “We”) respect your privacy and are committed to protecting it through our compliance with this policy.

This policy describes the types of information we collect from you or that you provide when you visit the website www.theimpactgroup.com (our “Website”) as well as our practices for collecting, storing, using, maintaining, protecting, and disclosing your information while using the Website or our software products (“Products”). When you use the Website to contact us or use our Products, you are bound by this policy. Do not use our Website or Products if you do not agree with the terms of this policy.

Information Collected

When you use the Website, your user information may be collected, stored, and used in a variety of manners. As detailed below, the type of user information collected may vary based on how it was gathered, but may include, among other things, your name, email address, telephone number, and other information that you voluntarily submit (e.g., when contacting us via the Website), information automatically collected about your usage of the website (e.g., the content that you choose to view), and information about you that our third party partners may share with us if such third party partners have previously received your consent to do so.

Voluntary Submission

We may collect user information that is voluntarily provided by you or with your permission. For example, we collect certain nonpublic personal information (NPI) about you from information that you provide on the contact form on our Website (such as your name, email address and telephone number) as well as information you provide when using our Products. Some of this information is submitted directly by you, while at other times it may be collected automatically or shared with us by a third party partner. We only collect NPI that is necessary for you to utilize a requested service or Product. You can manage and change your preferences as outlined below. If you choose not to provide the information we request, you can still visit the Website, but you may be unable to access certain options or to use our Products. When you provide information to us in any other manner, you agree to provide only true, accurate, current and complete information.

Cookies

A cookie is a small data file that is written to your computer's hard drive by your web browser. A cookie file can contain and/or automatically collect information, such as a user identification code or IP address that a website will use to track the pages and number of times you have visited. The data read from these cookies may be linked to personally identifying (PII) and non-personally identifying (non-PII) information.

We use cookies solely to track login status and active sessions. Our partners may use tracking cookies on their sites, and you are encouraged to view such third parties’ privacy policies to learn about their use of cookies and similar technologies.

Log Files

The Website's web servers log information about a user's IP address, browser type and the current URL the user is requesting. This information is always provided by a user's browser and automatically logged by most websites. These log files are stored in a secure location and used in our internal analysis of traffic patterns within our Website.

Use of Your Information

To Provide Interactive Communications from the Website

To enhance your experience, we provide you with the ability to contact us via our Website with any questions you may have. If you choose to contact us, you will be asked to provide your name, email address and telephone number. Once we have that information, it is stored on our servers. We use the information to respond to you as requested and, from time to time, we may provide e-mails highlighting new features on the website to those users who have expressly provided us with their permission to send such communications as part of their user profile.

To Enable the Use of Our Products

When you use our Products, we collect information that you knowingly and voluntarily provide) (such as name, address, contact information, birth date, and identification number). We use this information to provide information to you and to aid in the completion of transactions requested by you.

Sharing of Information

We restrict access to NPI about you to those employees who need to know that information to provide requested or responsive information to you. You may be requested to voluntarily provide certain user information during your use of the Website or our Products. If you choose to do so, that user information may be shared with us as well as vendors providing hosting and other services for us. When utilizing our Website or Products, you consent to our sharing NPI with our third party partners strictly to the extent necessary to provide you the services or Products you have requested.

We also use third party administrative support providers, such as e-mail service providers and hosting services on the Website. We require these outside firms and agents to protect the confidentiality of your information and not to use it for any purpose.

We do not and shall not sell, rent or share your information with third parties for promotional or advertising purposes.

Impact maintains policies, procedures and plans to protect any NPI it may receive from you, such policies, procedures and plans meeting or exceeding the regulatory requirements of the Graham-Leach-Bliley Act of 1999, as amended,16 CFR Part 314, including, without limitation, the encryption of NPI in transit.

Retention

We retain your NPI only for so long as needed to provide you or our third party partners our services or to comply with our legal and accounting obligations, resolve disputes, and enforce our agreements.

In the Event of Sale or Bankruptcy

The ownership of the Website may change at some point in the future. Should that occur, we want this site to be able to maintain a relationship with you. In the event of a sale, merger, public offering, bankruptcy or other change in control of our company, your information may be shared with the person or business that owns or controls this site.

As Required By Law

We may disclose your personal information if required to do so by law such as to comply with a subpoena or in the good faith belief that such action is necessary to conform to the edicts of the law, protect your safety or the safety of others, investigate fraud or comply with a judicial proceeding, court order or legal process served on us or to protect and defend the rights or our property.

Security

We care about the protection of your user information and use industry standard safeguards to do so. That said, no data transmission on the Internet is guaranteed to be 100% secure.

Your information is stored on our servers located in the United States. We use industry standard physical, electronic, and organizational safeguards to protect your user information against loss or theft as well as unauthorized access and disclosure to protect your privacy. We treat data as an asset that must be protected against loss and unauthorized access. We employ many different security techniques to protect such data from unauthorized access by users inside and outside of our company. However, "perfect security" does not exist on the Internet. If you are concerned that your privacy may have been breached, please contact us as provided below.

California Privacy Rights

Under the California Consumer Privacy Act (CCPA), California consumers have a right to knowledge, access, and deletion of information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with them or their household. California consumers also have a right to opt out of the sale of this information by a business and a right not to be discriminated against for exercising one of their California privacy rights. Impact does not sell this information in relation to California consumers and does not discriminate in response to privacy rights requests.

We provide notice of our privacy practices in this Privacy Policy. The Privacy Policy includes what personal information is collected, the source of the information, and the purposes of use, as well as whether we disclose that personal information and if so, the categories of third parties to whom it is disclosed.

California consumers can exercise their privacy rights by contacting us at info@theimpactgroup.com. We will ask you for information which we consider necessary to verify your identity for security and to prevent fraud. This information may include name, contact information, and information related to your relationship with us, but the specific information requested may differ depending on the circumstances of your request for your security and to protect privacy rights. If we delete your personal information, we will both render certain personal information about you permanently unrecoverable and also de-identify certain personal information.

Under the CCPA, a California consumer may use an authorized agent to make a CCPA privacy request on the consumer's behalf. To make a request on behalf of an Impact Site user, the authorized agent must first provide a copy of a valid power of attorney issued pursuant to California Probate Code sections 4000 to 4465. The authorized agent must email this document to info@theimpactgroup.com and include a phone number where the agent may be reached during regular business hours.

Cross-border Transfers – General Data Protection Regulation

This Privacy Statement and its enumerated policies are intended to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”) and provide appropriate protection and care with respect to the treatment of your user information in accordance with the GDPR.

Your user information may be transferred to other countries in connection with your use of the Website. If you access or use the Website outside of the United States, your user information will be transferred to our servers in the United States.

Our legal ground for processing: As outlined in this Privacy Statement, We will not process your user information without a lawful basis to do so, as such bases are defined in Article 6 of the GDPR. In general, we will process your user information on the legal bases of consent, contract (if you have entered into an agreement with us and such processing is a necessary part thereof), or legal obligation (as noted above). We may also process certain user information on the basis of the following legitimate interests, provided that such interests are not overridden by your privacy rights and interests: delivering and continuing to develop and improve the Website, learning from your behavior on the Website (e.g., analyzing traffic) to better serve you and other Website users, helping us modify or enhance the Website and its content, receiving insight as to what users do (and don't) like about our Website or aspects thereof, and providing a stable, consistent, and secure user experience in connection with the Website. Where it is not an obligation to provide the personal data we have explained the possible consequences if you choose not to. We will use standard contractual clauses as a safeguard for transferring your user information to third parties.

Your Rights:

Right to access: You have the right to request information about the personal data we hold on you at any time. You can contact us and we will provide you with your personal data.
Right to portability: Whenever we process your personal data by automated means based on your consent or based on an agreement you have the right to get a copy of your data in a structured, commonly used and machine-readable format transferred to you or to another party. This only includes the personal data you have submitted to us.
Right to rectification: You have the right to request rectification of your personal data if it is incorrect, including the right to have incomplete personal data completed. If you have an account you can edit your personal data under your account and membership pages.
Right to erasure: You have the right to erase any personal data processed by us at any time except for the following situations:

Your right to object to processing based on legitimate interest: You have the right to object to processing of your personal data that you believe is not based on our legitimate interest. We will suspend processing of the personal data unless we can demonstrate a legitimate ground for the process which overrides your interest and rights or due to legal claims.
Right to restriction: You have the right to request that we restrict the processing of your personal data under the following circumstances:

How can you exercise your rights? We have dedicated personnel who handle your requests in relation to your rights stated above. You can reach them at: info@theimpactgroup.com.
Right to complain to a Supervisory Authority: In addition to contacting us, if you believe we are processing your personal data in an incorrect way you have the right to complain to a Supervisory Authority.

How to Contact Us

If you have any questions regarding this Privacy Statement or how to remove or modify your user information or related consents, please feel free to contact us by e-mail at info@theimpactgroup.com, or the mailing address below.

Our mailing address is: PO Box 650114, Potomac Falls, VA 20165.

How Will I Know if the Privacy Statement Is Changed?

If we make any material changes, we will notify you by means of a notice on our Website prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

This Privacy Statement only covers our Website, our Products, and our collection and use of your information. Any links from our Website or Products to other websites, such as to any of our partners or providers are not covered by this Privacy Statement, unless explicitly stated to apply. This Privacy Statement does not apply to the activities of any third parties who may collect your user information while accessing or using such third party's services in connection with your use of our Website or Products. We encourage you to read and review the privacy statements of each third party service that you may choose to use in connection with the Website.

Note on Translated Version(s): For your convenience, we may make translated versions of this Privacy Statement available on the Website. In the event that the terms of any such translated version conflict with the terms of the English version, the terms of the English version of this Privacy Statement will control in all instances.