PRIVACY STATEMENT: Last Revised January 26, 2020
At OurStoriesAreUs®, your privacy is a top priority. OurStoriesAreUs is committed to being a good steward of your Personal Information, handling it in a responsible manner, and securing it with administrative, technical, and physical safeguards.
At OurStoriesAreUs, we empower journeys of personal discovery to enrich lives. As a result, we collect, process and store your Personal Information in your private space as you use our websites, mobile applications, and services (collectively the “Services”). Personal Information is information that can identify you, such as your name, email or street address, or it may be information that could reasonably be linked back to you. This Privacy Statement describes our practices for collecting, storing and processing your Personal Information and the controls we provide you to manage it within our Services.
- Account Creation and Your Engagement with OurStoriesAreUs Services
The Personal Information required to create an account with OurStoriesAreUs is limited to your name, an email address, and a password. Billing information is not required for account creation. When you purchase a story bundle or subscription your credit card information is not stored in our system.
By creating an account you are telling us that you understand OurStoriesAreUs will collect, process, and share your Personal Information as described in this Privacy Statement and in any other documents referenced in this Privacy Statement.
Access to OurStoriesAreUs records to help you build a family tree requires additional personal information such as familial information; family member names, birth dates, relationships. These are optional but necessary to take advantage of all features such as the creation of multi-generational family trees.
- What Information Does OurStoriesAreUs Collect From You?
The table below describes in more detail the information we collect from you. In this Privacy Statement, we refer to data that relates to you as “Personal Information.”
|Account Information||· Your name
· An email address
· A password that you provide us when you create an account
· A mobile phone number that you may voluntarily provide to assist you when you contact OurStoriesAreUs.
· Certain other OurStoriesAreUs related brands may support third-party sign-in services such as Facebook.
|Profile Information||· We collect the information that you provide when you voluntarily create a user profile. This information may be seen ONLY by other users to whom you give permission, such as other family members.
· Additional personal details that you provide in your profile (for example, a profile image, your name, age, location, etc.), will be visible ONLY by other users to whom you give permission..
|User Provided Content||· Information you provide about yourself when you voluntarily contribute to the Services, upload content or participate in community discussions, which may include information about yourself or other living persons. For example, you might contribute details (stories, images) about you or other users, active (subscribers) or passive (family members you invite).
· Information about deceased persons is not Personal Information under this Privacy Statement.
|Additional User Information||Information that you provide to us when you answer questions offered through the Services, surveys or questionnaires.|
|Your Communications||Your communications with other Users through our communications features, as well as information you provide in communications with OurStoriesAreUs Member Services and support teams for our other Services, including audio and visual information (such as recordings of calls with OurStoriesAreUs Member Services or information voluntarily shared when doing consumer insights research).|
|Contests and Promotions||Personal Information when you voluntarily participate in contests and special promotions we run or sponsor.|
|Other Protected Classifications and Sensitive Data||We may collect information related to certain protected classifications such as gender or marital status.|
- What Information Does OurStoriesAreUs Collect Through Your Use of the Services?
|Computer and Mobile Device Information||Information about how you access our Services, including the website you visited before and after OurStoriesAreUs’s site.
The Internet protocol (“IP”) address of your computer, mobile device, or the proxy server that you use to access the Internet, in addition to other technical information, such as:
· Your computer operating system.
· Your web browser.
· Your mobile device identifier provided by your mobile device operating system and your mobile operating system.
· The name of your internet service provider or mobile carrier.
OurStoriesAreUs may collect geolocation information from your device with your permission, e.g. if you set your mobile device camera to capture geoloaction information on photos you upload to OurStoriesAreUs.
|Information from Cookies and similar technologies|
|Information shared through social media features||If you interact with social media through the Services, for example “Like,” “Tweet,” “Pin,” or “Follow Us” links to sites such as Facebook, Twitter, Pinterest, Instagram, and YouTube, OurStoriesAreUs will collect these interactions and whatever account information these services make available to us.
Your interactions with these features are governed by the privacy statement of the applicable third-party company.
5. How does OurStoriesAreUs use your Personal Information?
|Information category||Use Description|
|Personal Information (generally)||We use your Personal Information to provide, personalize, improve, update and expand our Services. This includes:
· Authenticating your access to the Services and improving OurStoriesAreUs information security;
· Processing your payments for subscriptions
· Building new and improving existing Services;
· Helping you create, and providing insights about, your family trees based on data in OurStoriesAreUs’s databases;
· Issuing surveys and questionnaires to collect Additional User Information for use in the Services, as well as facilitating product development and research initiatives;
· Conducting scientific, statistical, and historical research; and
|Communications||We use your Personal Information to communicate with you about the Services, such as when we:
· Respond to your inquiries to Member Services;
· Alert you to potential relatives through our family history services
· Alert you to records pertaining to people in your family tree or to whom you may be related;
· Inform you of changes to Services or new Services;
· Ask you to participate in OurStoriesAreUs media productions or testimonials; and,
· Provide you with information or request action in response to technical, security, and other operational issues.
|Market new products and offers from us or our business partners.||We may use your Personal Information to inform you of new products and offers from us or our business partners. This includes advertising personalized to you based on your interests. We do not share your Information with third-party marketers, insurance companies or employers.|
6. What Information Do We Share, when Do We Share It and Who are the Recipients?
OurStoriesAreUs does not share your individual Personal Information with third-parties except as described in this Privacy Statement or with your additional consent. We do not voluntarily share your information with law enforcement.
NOTE: OurStoriesAreUs does not sell your Personal Information.
OurStoriesAreUs may share the following categories of Personal Information about you or your use of the Services with the types of entities set forth in this section for business purposes (as defined by applicable law), or as required by applicable law:
The circumstances described below explain when sharing might occur:
|People with whom your Information may be shared / Circumstances in which sharing might occur||Description|
|Other Users or others you may choose to share with||As part of your use of the Services, you have the option to add or share information with select Users of the Service or through sharing features with select individual Users and non-Users.
If you share details of your family history outside the Services, you do so at your own risk.
|Service Providers||We work with other companies when providing and marketing the Services. As a result, these companies will have some of your information in their systems. These companies are subject to contractual obligations governing data security and confidentiality consistent with applicable laws.
These companies include our:
· Payment processors;
· Cloud services infrastructure providers;
· Vendors that assist us in marketing, (including advertising), consumer research analytics, fraud prevention, and security;
· Communications infrastructure providers; and,
· Some Member Services functions.
|Law Enforcement||OurStoriesAreUs does not voluntarily cooperate with law enforcement. To provide our Users with the greatest protection under the law, we require all government agencies seeking access to OurStoriesAreUs customers’ data to follow valid legal process and do not allow law enforcement to use OurStoriesAreUs’s services to investigate crimes or to identify human remains.
If we are compelled to disclose your Personal Information to law enforcement, we will do our best to provide you with advance notice, unless we are prohibited under the law from doing so.
|Other Legal or Regulatory Process||We may share your Personal Information if we believe it is reasonably necessary to:
· Comply with valid legal process (e.g., subpoenas, warrants);
· Enforce or apply the OurStoriesAreUs Terms and Conditions;
· Protect the security or integrity of the Services; or
· Protect the rights, property, or safety, of OurStoriesAreUs, our employees or users.
|If OurStoriesAreUs is Acquired||If OurStoriesAreUs or its businesses are acquired or transferred (including in connection with bankruptcy or similar proceedings), we will share your Personal Information with the acquiring or receiving entity. The promises in this Privacy Statement will continue to apply to your Personal Information that is transferred to the new entity.|
|A note about aggregated data||OurStoriesAreUs may disclose user information in an aggregated form as part of the Services or our marketing, or in scientific publications published by us or our research partners.|
7. Your Choices and Access to Your Personal Information
Subject to certain exceptions, you have a right to request access to your Personal Information and to be provided with a copy of certain information including the categories of your personal information we collect and disclose; the categories of sources of such information; and the business purpose for collection in a portable form, as well as to seek to update, delete or correct this information by using the tools described below or by contacting OurStoriesAreUs. Details and options for accessing this information are listed below.
|OurStoriesAreUs||You can access and update the Personal Information (such as your email address, username, profile information, etc.) that you provide to OurStoriesAreUs at any time in the following sections of the privacy settings: People Manager / Individual|
8. What are our retention practices?
OurStoriesAreUs Services are fundamentally premised on the notion that the personal voyage of self-discovery is not a one-time event and continues over lengthy periods of time—possibly lifetimes. Our retention practices reflect this ongoing value by retaining user accounts on our system until our Users inform us of their desire to delete their data or close their accounts.
|Information Category||Retention Period|
|Account and Profile||OurStoriesAreUs will retain the Personal Information you provide while creating your account and your profile until such time as you ask us to delete it.|
|Family Tree||Due to the multi-generational significance of family trees, OurStoriesAreUs will retain your family tree data as needed to provide you and subsequent generations with continuous access, updated features, and the ability to enhance your family tree.|
9. How can I delete my Personal Information?
You can delete your Personal Information from OurStoriesAreUs in a number of ways.
|Information Category||How to delete|
|Personal Information||You can delete your Personal Information from OurStoriesAreUs by logging into your account and going to the People Manager module, access your information and delete the information so desired.
To the extent you have shared information through the Services (for example, by making your family trees accessible to other family members or with other users, OurStoriesAreUs will not be able to remove any copies of information that other Users may have retained and your name and birth date may be preserved so as to maintain the integrity of the family tree, accessible by other family members and future generations.
If you have shared content with others either directly or by making your family tree details available to other Users, some of your Personal Information may have been copied to other Users’ family trees, which can only be removed by contacting the other User and asking them to delete it.
|General||Please note that there may be some latency in deleting your Personal Information from our backup systems after it has been deleted from our production, development, analytics, and research systems. OurStoriesAreUs may also retain certain information as reasonably necessary to comply with our legal obligations (including law enforcement requests), resolve disputes, maintain security, prevent fraud and abuse, as well as to comply with tax, payment industry, securities, and clinical regulatory compliance requirements.|
OurStoriesAreUs maintains a comprehensive information security program designed to protect our customers’ Personal Information using administrative, physical, and technical safeguards.
The specific security measures used are based on the sensitivity of the Personal Information collected. We have measures in place to protect against inappropriate access, loss, misuse, or alteration of Personal Information under our control.
The OurStoriesAreUs Security Team regularly reviews our security and privacy practices and enhances them as necessary to help ensure the integrity of our systems and your Personal Information.
We use secure server software to encrypt Personal Information and we only partner with security companies that meet and commit to our security standards. While we cannot guarantee that loss, misuse or alteration of data will not occur, we use reasonable efforts to prevent this.
It is also important for you to guard against unauthorized access to your Personal Information by maintaining strong passwords and protecting against the unauthorized use of your own computer or device.
11. Changes to this Statement
We may modify this Privacy Statement at any time, but we will provide prominent advance notice of any material changes to this Statement, such as posting a notice through the Services, on our websites, or sending you an email, to provide you the opportunity to review the changes and choose whether to continue using the Services.
We will also notify you of non-material changes to this Statement as of their effective date by posting a notice through the Services, on our websites, or sending you an email. Your continued use of our Services after notice of non-material changes means that you consent to the updated Privacy Statement.
If you object to any changes, you may delete your account as described in Section 9.
Official correspondence must be sent via postal mail to:
|For Users located in the United States|
Attn: Privacy Office
Chicago, IL 60631