CPM Educational Program (“CPM”) respects your privacy and we are committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or may be provided about you when you use our services and our practices for collecting, using, maintaining, protecting and disclosing that information. As you are using our services, we want to be clear about how we are using information and the ways in which you can protect your privacy.
We implement a variety of security measures and provide training to responsible individuals to maintain the safety of your personal information when you enter, submit, or access your personal information and to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted via the Internet to our Website. CPM servers are physically located within the continental United States.
Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information regarding your visit to the Website such as: your IP address; the domain from which you accessed the Website; the date, time and duration of your visit; and the pages you visited.
We use this information to understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.
The information we collect automatically is statistical and does not include personal information. We do not perform any behavioral tracking.
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information except that we may disclose your personally identifiable information under the following limited circumstances:
- To trusted third parties, described below, who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential and use such information only for the purpose of providing the contracted-for services;
- To comply with any law, court order or legal process, including responding to any government or regulatory request;
- To enforce our site policies, or protect our or other's rights, property, or safety; and
- To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of CPM’s assets.
For the avoidance of doubt, CPM will not provide to any third party any personally identifiable information in a Pupil Record (defined below) to engage in targeted marketing.
- Professional Development/Workshop Online Scheduling Software Services
- Accounting and Administrative Software
- Printer and Publishing Companies
This policy does not apply to information collected by CPM offline or through any other means, including on any other website operated by any third party or information collected by any third party.
Control of Pupil Records. Student (or pupil) records obtained by CPM from a “local education agency” (as defined in Cal. Education Code section 49073.1, and referred to as “agency” in this section regarding AB 1584) are, and will continue to be, property of and under the control of the agency. Such “Pupil Records” include any information directly related to a pupil that is maintained by the agency or acquired directly from the pupil through the use of instructional software or applications assigned to the pupil by a teacher or other agency employees. Pupil Records do not include de-identified information (i.e., information that cannot be used to identify an individual student) collected or used by CPM: (1) to improve educational products for adaptive learning purposes and for customized pupil learning; (2) to demonstrate the effectiveness of CPM’s products in the marketing of those products; or (3) to develop and improve CPM’s educational websites, services, or applications.
Control and Transfer of Pupil-Generated Pupil Records. Pupils currently cannot generate any Pupil Records through the use of CPM’s Licensed Content or Website, therefore there are no pupil-generated Pupil Records that may be retained, controlled, or transferred by pupils.
Ability to Correct or Access Pupil Records. Because the agency enters and maintains the accuracy of the student roster, the agency is responsible for providing the means by which parents, legal guardians, and eligible pupils may review and correct erroneous information contained in a Pupil Record. To review, correct, update, or delete any personally identifiable information contained in a Pupil Record provided by the agency, a parent, legal guardian, or eligible pupil should contact the agency directly.
How CPM Ensures Security and Confidentiality of Pupil Records. Please see the “How We Protect Your Information” section above.
Notice of Unauthorized Access or Disclosure of Pupil Records. Please see the “Unauthorized Access or Disclosure” section below.
CPM’s Use of Pupil Records. Please see the “How We Use Your Information” section above.
Use or Disclosure of Pupil Records for Targeted Marketing. Please see the “How We Use Your Information” and “Disclosure of Your Information” sections above.
Retention of Pupil Records. CPM certifies that Pupil Records shall not be retained or available to CPM upon completion of the terms of the applicable license agreement or Purchase Agreement with the agency. Such certification will be enforced through the following procedure: within one (1) week following the expiration of the class covered by the applicable license agreement or Purchase Agreement, all data related to that class, including but not limited to personally identifiable information of a pupil, shall be deleted from CPM’s servers using industry best practices.
Family Educational Rights and Privacy Act Compliance (“FERPA”). A pupil’s agency will work with CPM to ensure compliance with FERPA by the following procedure: prior to the transmission of any Pupil Records, the parties will execute a license agreement or Purchase Agreement in accordance with FERPA unless the agency demonstrates that the information to be provided to CPM has been designated by the agency as “directory information” under FERPA.
CPM will securely maintain personally identifiable information, other than Pupil Records, for only as long as required to satisfy applicable federal and state record retention requirements. Upon the expiration of such period of time requiring retention, the data will be securely de-identified or destroyed.
In the event of an unauthorized disclosure of a user’s personally identifiable information or Pupil Records (collectively, “Records”), CPM shall report such disclosure to the affected user(s) (or parent or guardian, if applicable) within twenty-four (24) hours of learning the security, confidentiality, or integrity of such Records was, or is reasonably believed to have been, compromised. If applicable, CPM and the school or school district shall work together to provide notice to the affected individuals.
At any time, you may review your personally identifiable information maintained by us, require us to correct or delete the personal information and/or refuse to permit us from further collecting or using your information. Please submit an e-mail to the address below in the “Contacting Us” section. To protect your privacy and security, we may require you to take certain steps or provide additional information to verify your identity before we provide any information or make any corrections.
This section hereby notifies parents of: (1) the types of information we may collect from and about children; (2) how we use the information we collect; (3) our practices for disclosing that information; (4) our practices for notifying and obtaining parental consent when we collect personal information from children, including how parents may revoke consent; and (5) all operators that collect or maintain children’s information through this Website.
Information We Collect From Children. Children can access many parts of the Website and its content and use many of its features without providing us with personal information. However, some Licensed Content and features are available only to registered users (which may include children) which requires us to collect certain information, including personal information, from them. In addition, we use certain technologies, such as cookies (described above), to automatically collect information from users (including children) when they visit or use the Website. We only collect as much information about a child as is reasonably necessary for the child to access the Licensed Content, and we do not condition a child’s participation on the disclosure of more personal information than is reasonably necessary.
Information We Collect Directly. If a school or school district contracts with CPM to make CPM’s Licensed Content available to its students, the school or school district will provide CPM with certain Pupil Records (defined above). CPM creates usernames and passwords for the pupils and provides this information to the school or school district for distribution.
How We Use Your Child’s Information. We may use the personal information we collect from your child to register the child for the Licensed Content for his/her grade level or class.
Our Practices for Disclosing Children’s Information. Please see the “Disclosure of Your Information” section above.
Accessing and Correcting Your Child’s Personal Information. Please see the “Ability to Correct or Access Pupil Records” and “Accessing and Correcting Your Information” sections above.
Operators that Collect or Maintain Information from Children. CPM does not use any third party providers who collect or maintain any information from children.
If you are accessing this Website from outside of the United States, your personally identifiable information may be transferred to, and be maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. If you are located outside the United States and chose to provide your personally identifiable information to CPM, you are aware and hereby agree that CPM may transfer your personally identifiable information to the United States and process it there.
This policy was last modified on May 25, 2018.