This Privacy Policy describes The Blue Trunk Foundation’s policies on the collection, use, and dissemination of information about Users in connection with the use of Blue Trunk’s websites, https://www.bluetrunk.org/ and http://www.bluetrunk.ngo/, and mobile applications (“Site”). When using the Site, Users consent to Blue Trunk’s collection, use, and dissemination of information about the User as described in this Privacy Policy.

​

Table of Contents

Section 1: Information Blue Trunk Collects and How Blue Trunk Uses It

Section 2: How Blue Trunk Collects Information

Section 3: Third Parties—Who, What, and Why?

Section 4: Blue Trunk Users’ Data Protection Rights—How Users Can Access and Control Collected Information

Section 5: How Blue Trunk Protects Users’ Information

Section 6: Data Retention and Account Termination

Section 7: How Blue Trunk Responds to Compelled Disclosure

Section 8: Children

Section 9: Updates to Blue Trunk’s Privacy Policy

Section 10: California Residents—Privacy Rights Under the CCPA

Section 11: Contacting Blue Trunk

 

Section 1: Information Blue Trunk Collects and How Blue Trunk Uses It

Blue Trunk may collect and store information about a User in connection with the User’s use of the Site, including any information the User transmitted to or through the Site. Blue Trunk uses that information to provide the Site’s functionality, fulfill User requests, improve the Site’s quality, engage in research and analysis relating to the Site, track usage of the Site, operate the Site and to contact the User regarding changes, updates, or any other reason associated with the Site or the User’s use of the Site.

A. User Account Information. If a User creates a Blue Trunk account, Blue Trunk may store and use the information provided during that process, including:

a. Personal Identification Information, such as the User’s full name, email address, zip code, and physical address;

b. Sensitive Personal Information, including accessibility preferences pertaining to transportation, entrances, doors, elevators, sensory environment, restrooms, food, lodging, and other services. Blue Trunk will process the User’s sensitive personal information only for the specific purpose of tailoring the Site to the User’s needs. Users provide Blue Trunk with explicit consent for such processing at the time of registration, by agreeing the Blue Trunk’s Terms and Conditions.

c. Other Information, including the User’s username, password, gender, and birthdate. Blue Trunk stores and compiles this data and may retain it from Users who have terminated their accounts for legal compliance purposes or to maintain ongoing confidentiality, integrity, availability and resilience of the Site.

B. Business User Account Information. Business Users’ contributions and information provided to the Site are intended for public consumption and are therefore viewable by the public, including the Business User’s photos, comments, and business listing information. If a Business User creates a Blue Trunk account, Blue Trunk may store and use the information provided during that process, including:

a. Contact Information, such as the registering party’s name and email address, the business name, phone number, email address and physical address.

b. Business Accessibility information, pertaining to parking and transportation, physical environment, entrance stair and ramp specifics, multilevel buildings specifics, elevators, revolving doors, doors, sensory environment, restrooms, food allergies, lodging, and services provided.

C. Activity. Blue Trunk may store information about the User’s use of the Site, such as the User’s search activity, pages viewed, the date and time of the User’s visit, businesses viewed, or transactions (such as donations) made. Blue Trunk may also store information that the User’s computer provides in connection with the use of the Site, such as browser type, type of computer or mobile device, browser language, IP address, Wi-Fi information such as SSID, mobile carrier, phone number, unique device identifier, location (including geolocation, beacon based location, and GPS location), and requested and referring URLs and mobile applications. Blue Trunk may also receive and store the User’s location whenever the Blue Trunk mobile application is running, including when it is running in the background, if the User enables Blue Trunk’s mobile app to access such information based on mobile phone settings. The User may be able to limit or disallow Blue Trunk’s use of certain location data through the User’s mobile device or browser settings.

D. Different Devices. The User may access the Site through various devices and different platforms. The information Blue Trunk collects and stores through those various devices may be cross-referenced and combined.

​

Section 2: How Blue Trunk Collects Information

In addition to the information the User provides to Blue Trunk, Blue Trunk collects information in the following ways:

A. Cookies. Blue Trunk and the third-parties with whom Blue Trunk partners, may use “cookies.” Cookies are small pieces of data stored for an extended period of time on a computer, mobile phone, or other device. Blue Trunk may collect information in connection with the User’s use of the Site automatically through cookies or other similar technology such as web beacons, tags, scripts, local shared objects such as HTML5 and Flash, and advertising identifiers. These cookies transmit Information such as the User’s browser type, search preferences, IP address, data relating to advertisements that have been displayed to the User or that the User has clicked on, and the date and time of the User’s use of the Site. Blue Trunk uses cookies to make the Site easier to use and to protect both the User and Blue Trunk.

a. How to Manage Cookies: The User can remove or block cookies through the User’s browser settings, but in some cases that may impact the User’s ability to use the Site.

b. For further information: visit allaboutcookies.org.

B. Local Storage. Blue Trunk uses JavaScript to place data on the User’s computer through the User’s web browser. This data is kept in Localstorage (on the User’s computer) and collects the currently logged in User’s name and User ID. Localstorage works on a same-origin policy, which ensures that the information that Blue Trunk stores on the User’s computer cannot be accessed or interfered with by another site. Blue Trunk additionally stores an XSRF token and a JWT token in Localstorage for User Validation and protection.

 

Section 3: Third Parties—Who, What, and Why?

Blue Trunk works with a number of third-parties, including Amazon Web Services (AWS), Heroku, PayPal, and other advertisers and businesses, for a variety of purposes.

A. AWS and Heroku. Blue Trunk uses AWS and Heroku to securely store the information provided by Business Users in the registration survey. After a Business User registers, the User’s survey information will save to these third-party processors.

B. Google Analytics. Blue Trunk uses Google Analytics to store information about the User’s use of the Site. Google Analytics uses cookies to collect information about the User that Blue Trunk uses to improve the Site, such as how often the User visits the Site, what pages the User visits on the Site, and what other websites the User visited prior to coming to the Site. Google Analytics collects only the IP address assigned to the User on the date the User visits the site. Google Analytics does not collect the User’s name or any other identifying information. Google’s ability to use and share information collected by Google Analytics about the User’s visits to the Site is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. The User can prevent Google Analytics from recognizing the User on return visits to the Site by disabling cookies on the User’s browser.

C. PayPal. Blue Trunk uses PayPal as a processor for donations. Such transactions are subject to the PayPal Privacy Statement: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

D. Advertisers and Businesses. Blue Trunk may allow third parties to use cookies through the Site to collect the same type of information for the same purposes as we do. In doing so, Blue Trunk abides by the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising. Third parties may be able to associate the information they collect from the Site with other information they have about the User from other sources. Blue Trunk does not necessarily have access to or control over the Cookies advertisers use, but Users may be able to opt out of some of the advertiser’s practices by visiting Network Advertising Initiative, Omniture and Digital Advertising Alliance. Please note that opting out of the advertiser’s practices does not prevent the advertisements from appearing to the User.

 

Section 4: Blue Trunk Users’ Data Protection Rights—How the User Can Access and Control Collected Information

Every User is entitled to the Following:

A. The Right to Notice. Blue Trunk shall inform the User of the purposes for which it collects and uses Personal Information and the types of third-parties to which Blue Trunk discloses or may disclose that Information. Blue Trunk shall provide the User with the choice and means for limiting the use and disclosure of the User’s Personal Information. Notice will be provided in clear and conspicuous language when the User is first asked to provide Personal Information to Blue Trunk, in Blue Trunk’s Terms and Conditions, or as soon as practicable thereafter. In any event, the User will receive notice before Blue Trunk uses or discloses the Information for a purpose other than that for which it was originally collected.

B. The Right to Access. The User has the right to request copies of the User’s personal data from Blue Trunk. Blue Trunk may charge the User a small fee for this service. For access requests please contact: info@bluetrunk.org. Access will not be allowed where the burden or expense of providing access would be disproportionate to the risks to the User’s privacy or where personal rights other than the User’s own would be violated. Access will only be granted a maximum of two times during any twelve-month period.

C. The Right to Rectification. The User has the right to request that Blue Trunk correct any information the User believes is inaccurate. The User also has the right to request that Blue Trunk complete any information about the User that the User believes in incomplete.

D. The Right to Erasure. The User has the right to request that Blue Trunk erase the User’s personal data, under certain conditions.

E. The Right to Choose. Blue Trunk will offer the User the opportunity to choose (opt out) whether Personal Information is to be disclosed to a third-party or to be used for a purpose other than that for which it was originally collected or has subsequently been authorized. Blue Trunk will ensure that any third party to which Personal Information may be disclosed is subject to law providing the same level of privacy protection or agrees in writing to provide an adequate level of privacy protection.

​

Section 5: How Blue Trunk Protects Users’ Information

Blue Trunk protects User Information in the following ways:

A. Data Security. Blue Trunk takes reasonable steps to protect the Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction. Blue Trunk has in place appropriate physical, electronic and managerial procedures to safeguard and secure the Information. Blue Trunk cannot guarantee the security of Information on or transmitted via the Internet.

B.Data Integrity. Blue Trunk only processes Personal Information in a way that is compatible with and relevant to the purpose for which it was collected or has been authorized. To the extent necessary for those purposes, Blue Trunk shall take reasonable steps to ensure that Personal Information is accurate, complete, current and reliable for its intended use.

C. Enforcement. Blue Trunk uses a self-assessment approach to assure compliance with this Policy and at least annually verifies that the Policy is accurate, comprehensive, prominently displayed, completely implemented, and accessible to remain in conformity with the GDPR.

 

Section 6: Data Retention and Account Termination

User accounts may be closed by going into the User’s account settings. Upon closure of a User account, Blue Trunk will remove certain public posts from view and/or dissociate them from the User’s account profile, but Blue Trunk may retain information about the User for the purposes authorized under this Privacy Policy unless prohibited by law. For example, Blue Trunk may retain information to prevent, investigate, or identify possible wrongdoing in connection with the Site or to comply with legal obligations. Please note that Business Users cannot remove their businesses from the Blue Trunk Site, or any associated comments or Content by closing their accounts.

 

Section 7: How Blue Trunk Responds to Compelled Disclosure

Blue Trunk will give out Personal Information to comply with applicable law or a court order, to prevent harm or injury, or to prevent fraud or other illegal activity. Blue Trunk may be required to share Information with government entities from a foreign country. The User cannot opt out of this provision or otherwise force Blue Trunk to hold information confidential in such a way as to cause Blue Trunk to violate any law.

 

Section 8: Children

Blue Trunk is intended for general audiences and is not directed to children under the age of 13. Blue Trunk does not knowingly collect personal information from children under the age of 13. If a User becomes aware that a child has provided Blue Trunk with personal information without parental consent, please contact Blue Trunk at info@bluetrunk.org. If Blue Trunk Becomes aware that a child under the age of 13 has provided Blue Trunk with personal information without parental consent, Blue Trunk will take steps to remove such information and terminate the Child’s account.

 

Section 9: Updates to Blue Trunk’s Privacy Policy

Blue Trunk may update its privacy policy at any time. The most current version of the Privacy Policy will govern Blue Trunk’s collection, use, and dissemination of information about Users and will be located at https://bluetrunk.org/privacy-policy. If Blue Trunk makes material changes to this Privacy Policy, it will notify Users by posting notice on the Site prior to or on the effective date of the changes. By continuing access or use the Site after those changes become effective, the User acknowledges the revised Privacy Policy.

 

Section 10: California Residents—Privacy Rights Under the CCPA

In accordance with the California Consumer Privacy Act (CCPA), Blue Trunk does not disclose a User’s personal information to third parties for the purpose of directly marketing their goods or services to the User unless the User first agrees to such disclosure.

 

Section 11: Contacting Blue Trunk

If you have any questions concerning Blue Trunk’s Privacy Policy, please contact us.

Online: https://bluetrunk.org/contact/

Email: info@bluetrunk.org

Phone (Call or Text): (434) 218-2296