Scope

This policy applies to information handled through this website and its CMS features. Available features vary by site, configuration, and access level. A reference to a form, account tool, vote, bid, message, subscription, directory, or other feature applies only when that feature is offered on this site and you use or interact with it. It does not mean that every listed feature is active on every website using this policy.

Some pages may link to outside websites, forms, services, media, or documents. Those outside resources are controlled by their own providers and may have different privacy practices.

Information We May Collect

The information collected depends on the features available on this site and the features you choose to use. It may include:

• Contact and account information, such as your name, email address, user ID, account type, access level, verification or recovery status, notification settings, and preferences.
• Membership and work-related information, when maintained by the site, such as department, work location, seniority or service dates, job code or assignment, account/employment status, roster information, and union-office or directory details.
• Information you submit through available features, such as messages, attachments, form or claim responses, event registrations, bid preferences, poll or vote responses, comments, notes, field tips, corrections, subscription choices, photos, or other uploaded material.
• Information about other people that you provide, such as a witness, participant, manager, or other person identified in a claim, message, or form. Please provide only information relevant to the request.
• Published or shared site content, when available, such as rosters, job assignments, officer information, member photos, retiree or memorial information, approved notes, tips, corrections, and other material intended for an authorized member or public audience.
• Search and interaction information, when those features are enabled, such as search text, selected results, helpful/not-helpful feedback, and limited page-activity records.
• Security and technical information, such as IP address, request time, browser or device details, login and session activity, failed requests, and system or audit events.
• Communication and delivery records needed to send requested email, notices, confirmations, account verification, password reset links, subscriptions, or administrative replies.

How We Use Information

• To provide website access, manage sessions, show the correct resources, and protect member-only areas.
• To verify email addresses, process login attempts, handle password resets, and keep account recovery working.
• To operate the features you use, which may include rosters, directories, messaging, claims or forms, events, bids, polls, subscriptions, member-submitted content, and related union or administrative workflows.
• To publish or share approved information with the audience intended for a feature, such as administrators, designated responder groups, authenticated members, event participants, or the public.
• To send notices, confirmations, replies, subscription messages, or other communications connected to website features you use.
• To prepare internal administrative and operational reporting, support account access, understand basic site usage, and review security or audit activity.
• To review errors, investigate suspicious activity, reduce spam, and keep the CMS stable and secure.
• To comply with administrative, legal, or security responsibilities when they apply.

Login, Password Reset, and Email Verification

When account and authentication features are available, their pages may process account identifiers, email addresses, submitted tokens, request timing, IP address, and security-check results. Password reset and email verification links are time limited and intended for the person who requested them. Passwords are stored using one-way password hashes rather than as readable passwords.

Cookies and Browser Storage

The website uses first-party cookies and browser storage for functions such as login state, session-expiration notices, CSRF protection, request validation, display or document-view preferences, interface state, and basic security. If search-result feedback is enabled, first-party cookies may also remember whether feedback was submitted and temporarily associate a result click with the related search. These technologies support site functionality, prevent duplicate feedback, and protect the website.

If messaging is available, your browser may save an unsent message subject or reply as a draft in local browser storage so it can be restored later on that device. The draft is not submitted to the website until you send the form. It is removed when the form is submitted, or it may remain in that browser until you clear the draft or the browser's site data.

Embedded Media

On sites or pages where YouTube videos are embedded, the website uses YouTube's privacy-enhanced player. When an embedded player loads or you interact with it, your browser connects to YouTube and Google, which may receive technical information such as your IP address, browser or device details, the page URL, and interactions with the player. Privacy-enhanced mode limits personalization but does not prevent all communication with Google. YouTube states that ads shown in its privacy-enhanced player are non-personalized. Any cookies or similar technologies used by the player are controlled by Google under its Privacy Policy.

Sharing and Disclosure

• We do not sell or rent personal information.
• Authorized administrators may access information when needed to operate the website, support users, or investigate a security issue.
• Information may be shared with the people and groups intended for an available feature, such as message participants, designated responders, event administrators, or other authorized members.
• Information submitted for publication or intentionally maintained as public content may be displayed publicly. The page or feature should indicate when information is intended for a public audience.
• Hosting, email delivery, mailing-list, storage, backup, document/media, and other service providers may process information as needed to provide their services to the website.
• When you open an embedded item, external form, mailing-list page, or other linked service, that provider may receive information directly from your browser or from information you submit to it.
• Information may be disclosed if required by law, legal process, safety needs, or to protect the website and its users.

Retention and Security

We keep information for as long as reasonably needed to operate the website, administer the relevant feature, maintain appropriate union or administrative records, resolve issues, enforce security, or meet legal obligations. Retention varies by record type and may differ for account and roster data, active sessions, messages and attachments, claims or forms, bids or votes, published content, notification history, and security or audit logs.

Copies may remain in routine backups, archives, recipient mailboxes, or authorized email delivery and troubleshooting systems after the active website record is changed or removed. How long those copies remain depends on the applicable administrative, backup, security, mailbox, or provider-retention process and may be outside the website's direct control.

We use reasonable safeguards such as access controls, session checks, CSRF protection, token expiration, and security logging. No website can guarantee perfect security, so account recovery links and passwords should be kept private.

Your Choices and Privacy Requests

• When Account Settings are available, you can use them to update supported account email and notification preferences.
• You can ask the site administrator to help you access, review, correct, or delete applicable information. Depending on the record and applicable law, some information may need to be retained or may not be available for deletion.
• Depending on applicable law, you may also have rights to receive a portable copy of certain information or to opt out of a sale, targeted advertising, or qualifying profiling. This website does not sell personal information or use it for third-party targeted advertising.
• To protect account and member records, we may ask for information reasonably needed to verify your identity and authority to make a request.
• If applicable law gives you a right to appeal a privacy-request decision, reply to the decision or contact the site administrator and clearly identify the request as a privacy appeal. Further complaint instructions will be provided when required.
• You can clear cookies and browser storage, but some stored data is required for login, form protection, preferences, session notices, or draft restoration.

External Links and Services

The Resources page and other available features may include links or redirects to outside websites, mailing lists, forms, documents, or services. Once you leave this website or submit information directly to an outside service, that provider's privacy and security practices apply.

Policy Updates and Contact

We may update this policy as available website features, CMS security, providers, or administrative practices change. Questions and privacy requests can be sent to the site administrator at webadmin@ibew1920.org.