Privacy

Montessori in Redlands Inc (“MIR,” "we," "us") maintains a database of alumni, friends, supporters, current parents, the current Board of Trustees, current faculty and staff, previous Board of Trustees, and previous faculty and staff in order to stay in touch with our community and keep you updated about news, events, career initiatives, and fundraising activities.

Some of our database (but not all) choose to join our online community by registering on this website and creating an online profile. In both instances (individuals with offline database records and individuals with online profiles), we collect and store personal information (or “data”) about you. We are committed to protecting and respecting your privacy and this Policy sets out what information we collect about you, where and how we use (“process”) it.

We may change this Policy from time to time. If we make any significant changes we will advertise this on the website or contact you directly with the information. Please check this page occasionally to make sure you are happy with any changes.

If you have any questions about this Policy or concerning your personal information, please contact info@mir.org or call the office at 909-793-6989.

California Consumer Privacy Act of 2018 (CCPA)

MIR does not sell personal information. MIR complies with CCPA, which imposes rules on certain businesses inside and outside California that process personal information of California consumers and households.

General Data Protection Regulation (GDPR)

While MIR does not serve customers outside of the State of California, MIR complies with the General Data Protection Regulation (GDPR), which imposes rules on organizations inside and outside the European Union (EU) that process personal information. For the purposes of the GDPR and the CCPA, the Data Controller is MIR.

Student Privacy

MIR is committed to protecting the privacy of our students and their families. We do not post the full names of students on the public pages of our website. Images of students are used on the public pages of the site; however, students are never identified by full names in images. Within the password-protected pages of the site, when activated, the use of students' full names is allowed and students can also be identified by full name in images.

What type of personal information we collect

The information we have about you depends on where we collect it, but may include:

• First name
• Last name
• Email
• Address
• Photographs
• Gender
• Date of birth
• Family relationships
• Years at MIR
• Higher education and work details
• Participation in our events, emails, surveys, and other activities
• Donations made to MIR
• Geo-location data (your geographical location based on your IP address)
• Log-ins and activity on the website
• A record of payments made via the website (but we do not store your credit/ debit card details as these are processed securely externally by a third-party payment provider) which could include event tickets or online donations
• Consent options and communication preferences
• Content (such as announcements, stories, photos, documents, comments, and events) that you post on this website or provide to us by other means
• Messages that you send to other community members via the direct messaging system when logged in to this website

Where we collect information from

• We collect personal information when you:
• Enroll or re-enroll at MIR
• Visit this website
• create or update your online profile
• Post content to this website or other websites and social media sites managed by MIR
• Take part in an event
• Attend a meeting with us and provide us with information
• Contact us in any way including online, email, phone, SMS, social media, or post
• Open an email sent from this website
• Send a message via the direct messaging system on this website
• Leave MIR and we transfer some basic details about you from the main MIR database to our alumni database

How we use your information

We will use your personal information in a number of ways, always with a legal basis for processing your data. These may include:

• Providing you with the information or updates that you have asked for.
• Sending you communications (with your consent if required) that may be of interest, including invitations to events, newsletters, and fundraising campaigns.
• Delivering our obligations under any contract between us.
• Seeking your views on the services or activities we carry out so that we can make improvements.
• Updating our database records and ensuring we know how you prefer to be contacted
• Analyzing your engagement with our website and other content to help us improve our services for you.
• Running our extracurricular activities
• Running our events

Our legal basis for processing your information

The use of your information for the purposes set out above is lawful because one or more of the following applies:

• You have given us your consent for the information to be used
• it is necessary for us to hold and use your information to carry out our obligations under a contract entered into with you
• It is necessary for our legitimate interests to hold and use your information and we are not impacting your privacy by doing so

Updating your consent preferences

If you have an online profile on this website you can update your consent options by logging in and clicking on “My Settings” in your profile. Scroll down to find your ‘Consent options’ where you will see a list of consents and the options “opt-in,” “opt-out,” and “unspecified”.

Via ‘My Settings’ you can also choose to hide your profile from Google, limit access to your profile so that it’s only viewable to your connections, and adjust some of the automatic notifications that you receive from this website.  Please note that your name (but not full profile) may appear in various places around the community website, such as a ‘Recent Joiners’ box and in ‘Search’ results irrespective of the privacy settings you have selected. 

If we are using consent as our legal basis for processing your data, we must have an explicit “opt-in” from you for this specific type of processing.

If we are using legitimate interests as our legal basis for processing your data, we will process your data responsibly in a way that you would reasonably expect, and you can opt out at any stage.

If you click ‘unsubscribe’ at the bottom of one of our emails sent, you will be automatically opted out of these types of email communications in the future.

If you want to contact us about your consent preferences please contact the office by email (info@mir.org) or telephone (909-793-6989).

How we keep your information safe

We understand the importance of keeping your personal information secure, and we take appropriate steps to safeguard it.

Your data is stored on a dedicated, secure cloud server hosted by Amazon Web Services (AWS) in the EU and managed by our website provider, ToucanTech.  Industry-standard firewalls, anti-virus, encryption, and backup methods are in place, as well as strict data handling protocols.

We always ensure only authorized persons have access to your information, which means only our approved employees and contractors, and that everyone who has access is appropriately trained in data management.  

If you have an online profile for this website, you are responsible for keeping your login details (email and password) confidential and we ask that you do not share your password with anyone.

No data transmission over the internet can be guaranteed to be completely secure. So, while we strive to safeguard your information, we cannot guarantee the security of any information you provide online and you do this at your own risk.
 
Who has access to your information?

• Third parties who provide services for us; for example, student information database services, collecting or processing data, event registration and ticketing, payment services, attendance management, electronic sign-in and sign-out, surveys, and sending mailings. We select our third-party service providers with care. We provide these third parties with the information that is necessary to provide the service, and we will have an agreement in place that requires them to operate with the same care over data protection as we do.
• Web hosting, email hosting, analytics, and search engine providers that enable us to run our community database and improve our website and its use. 

Other than this, we will not share your information with other organizations without your consent.

Keeping your information up to date

Please let us know if your contact details change by emailing info@mir.org. We will update our various systems as required.

Cookies

A cookie is a small text file stored by your browser that allows the website to “remember” your preferences (such as calendar settings and site bookmarks) on the site from visit to visit, or to maintain your “logged in” status when visiting protected areas. Usage of a cookie is in no way linked to any personally identifiable information while on our site. Web browsers have settings allowing you to reject cookies, selectively accept cookies, or delete cookies previously accepted. Please be aware that rejecting or deleting cookies from our website may make certain functions unavailable to you.

The law states that we can store cookies on your machine if they are essential to the operation of the website, but that for all others we need your permission to do so.

The list below explains the cookies we use and why:

Opting out of cookies

If you do not wish to receive cookies from us or any other website, you should be able to turn cookies off on your web browser. Please follow your browser provider’s instructions to do so. Unfortunately, we cannot accept liability for any malfunctioning of your computer or its installed web browser as a result of any attempt to turn off cookies.

To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org. 

Use of aggregated data 

Where data can be aggregated and anonymized, our website provider (ToucanTech) might use this for research purposes without restriction. For example, they may monitor traffic patterns, site usage, response rates, and data trends to help make improvements to the website software. They are entitled to do this because the resulting data will not personally identify you and will therefore no longer constitute personal data for the purposes of data protection laws.
 
How long we keep your information for

We will hold your personal information for as long as it is necessary for the relevant activity. 

If you ask us to stop contacting you, we will keep a record of your contact details and limited information needed to ensure we comply with your request. If you ask us to remove your personal data from our database we will delete all the information we hold out apart from your name and the dates that your family attended MIR and archive your record in our database.

Your rights

You have the right to request details of how we use your personal information by making a subject access request. Such requests have to be made in writing by contacting MIR, 1890 Orange Ave, Redlands, CA 92373.

You also have the following rights:

• to request rectification of information that is inaccurate or out of date;
• to the erasure of your information (the “right to be forgotten”);
• to restrict the way in which we are dealing with and using your information;
• to request that your information be provided to you in a format that is secure and suitable for re-use (the “right to portability”);
• in relation to automated decision-making and profiling.

All of these rights are subject to certain safeguards and limits or exemptions. To exercise any of these rights, you should contact the office at the above address. 

----------------------------------------

This Policy was last updated in September 2022.