SECURITY AND PRIVACY POLICY

• Voluntary Personal Data: We collect names, physical mailing addresses, email addresses, and telephone numbers voluntarily submitted through membership applications, event registrations, and contact forms.
• Transactional and Financial Data: To process event registrations, donations, or merchandise orders, we collect credit/debit card numbers and billing details.
• User-Generated Content: We may collect product or event reviews, customer surveys, and interactions on our official social media channels.
• Automated Web Analytics: We automatically collect non-identifying data, including browser types, IP addresses, demographic insights, and website performance metrics via cookies to optimize user experience.

Permitted Uses of Information

GAC utilizes collected data strictly for administrative, operational, and promotional activities necessary to support our chapter, including:

• Order and Registration Fulfillment: Processing financial transactions, managing banquet or event registrations, and delivering requested products or services.
• Organizational Operations: Maintaining internal membership databases, verifying eligibility, and analyzing web traffic to improve platform performance.
• Member Outreach and Engagement: Distributing chapter updates, newsletters, promotional materials, and market research inquiries.
• Public Feedback: Publishing user-submitted reviews on our platform at our sole discretion, subject to our Terms of Use.
• Security and Compliance: Monitoring for digital threat indicators, investigating fraudulent activity, and conducting necessary export or legal compliance screenings.

Data Sharing and Third-Party Disclosures

GAC enforces strict limitations on how your data is shared with external entities:

• Third-Party Service Providers: We share relevant data with trusted affiliates and independent contractors (e.g., payment gateways, email distributors, and web hosts) solely to execute operational tasks. These partners are contractually prohibited from using your data for independent marketing purposes.
• No Commercial Sale of Data: GAC does not sell, rent, lease, or trade personal data or distribution lists to third parties for commercial profit.
• Legal and Regulatory Mandates: We will disclose personal information when required by law, court orders, subpoenas, warrants, or regulatory enforcement bodies.
• Safety and Rights Protection: Information may be shared to mitigate physical harm, address fraud, or enforce our legal terms and agreements.

Data Security and Breach Notification

We employ industry-standard physical, electronic, and managerial security protocols to protect data from unauthorized access, alteration, or destruction:

• Financial Security: All online financial transactions are encrypted and processed through PCI-DSS compliant payment gateways. GAC does not store raw credit card data on its local servers.
• Inherent Risk: While we implement robust security measures, no data transmission over the internet can be guaranteed as entirely secure. Users provide information at their own risk.
• Statutory Breach Notification: In the event of a verified data breach involving sensitive personal information, GAC will notify affected individuals and relevant authorities in strict compliance with the Missouri Data Breach Notification Law (RSMo § 407.1500).

Mobile Messaging Terms (SMS/MMS)

By enrolling in the GAC "Contact Us Program" or opting into mobile updates, you agree to the following terms:

• Program Execution: Provided phone numbers are used exclusively to transmit requested chapter updates, event alerts, and operational alerts.
• Privacy Isolation: Mobile numbers and consent obtained for SMS purposes will not be shared, sold, or leased to third parties or affiliates for marketing purposes.
• Opt-Out and Assistance: You may opt out of mobile communications at any time by replying "STOP" to any message. For assistance, reply "HELP".
• Data Accuracy : Participants must provide valid, accurate mobile contact details and are prohibited from registering utilizing false identities or unauthorized numbers.

Anti-Spam Compliance

GAC maintains a zero-tolerance policy for unsolicited bulk electronic communications:

• Unauthorized Branding: Utilizing the GAC name, logos, or web URLs in unauthorized or bulk marketing campaigns is strictly prohibited.
• Compliance Standards: Our digital marketing practices comply with the CAN-SPAM Act, Telephone Consumer Protection Act (TCPA), and other applicable regional data laws (CASL, GDPR).
• Consent and Opt-Out: Digital marketing is issued exclusively on a consensual basis. Opt-out and unsubscribe requests are processed within ten (10) business days.
• Enforcement: GAC reserves the right to block offending IP addresses or terminate website access for users found distributing unauthorized spam mimicking our organization.

Policy Governance and Contact Information

• Policy Modifications: GAC reserves the right to update this Policy at any time. Continued use of our website or services following the posting of changes constitutes formal acceptance of the revised terms.
• Abuse Reporting: Please forward any unsolicited spam or phishing attempts mimicking our chapter to [email protected].
• Inquiries: For questions regarding this Policy, or to request access to or deletion of your personal data, please contact us via our website form or by mail at: Gateway Area Chapter – SCI
  Attn: Customer Service
  4816 Bankfield Ct
  St. Louis, MO 63128
  Email: [email protected]