Collection, Use and Security of Personal Information

National Stroke Association has created this Privacy Policy to explain why we collect particular information and how we will protect your personal privacy within our websites. The following discloses our information gathering and dissemination practices for the websites located at the URLs www.stroke.org and www.strokesmart.org (Sites).

In order to fully understand your rights we encourage you to read this Privacy Policy as well as our Terms of Use. National Stroke Association reserves the right at any time and without notice to change this Privacy Policy simply by posting such changes on our Sites. Any such change will be effective immediately upon posting. Because National Stroke Association wants to demonstrate our commitment to your privacy, this Privacy Policy notifies you of:

• What personally identifiable information of yours is collected through the Sites
• Who collects such information
• How such information is used
• With whom your information may be shared
• What choices you have regarding collection, use and distribution of your information
• What kind of security procedures are in place to protect the loss, misuse or alteration of information under our control
• How you can correct any inaccuracies in your information

This Privacy Policy applies to activities of National Stroke Association and additionally to persons visiting National Stroke Association websites, signing up for National Stroke Association publications and mailings, or entering into transactions with National Stroke Association, and covers the collection, use, storage and disclosure of information and data as described in this Privacy Policy. The Privacy Policy does not apply to information that National Stroke Association collects on contractors, vendors or other entities with which National Stroke Association does business, although National Stroke Association will contractually require them to comply with relevant provisions of the Privacy Policy.

Collection of Personal Information

1.  National Stroke Association will collect Personal Information (see below for definition of “Personal Information”) on an individual only if the individual provides the information to National Stroke Association either directly or through a third party. National Stroke Association also may collect information about a person who has been referred to the websites to send them emails regarding National Stroke Association‘s efforts or a person to whom National Stroke Association has been asked to send emails regarding National Stroke Association’s fundraising, programs or efforts. If a person donates to National Stroke Association, National Stroke Association may collect sensitive Personal Information such as the donor’s credit card number, card type, expiration date and keep a record of the financial transaction.

National Stroke Association may collect Demographic Information it obtains from individuals and third parties for fundraising purposes, to inform development of programs, products and services and to notify persons of National Stroke Association programs, events, educational opportunities and upcoming meetings.

National Stroke Association utilizes Google Analytics features based on Display Advertising (e.g., Remarketing, Google Display Network Impression Reporting, the DoubleClick Campaign Manager integration, or Google Analytics Demographics and Interest Reporting).

Visitors can opt-out of Google Analytics for Display Advertising and customize Google Display Network ads using the Ads Settings.

National Stroke Association will not facilitate the merging of personally-identifiable information with non-personally identifiable information previously collected from Display Advertising features that is based on the DoubleClick cookie unless you have robust notice of, and the user's prior affirmative (i.e., opt-in) consent to, that merger.

If you wish to hide all of your browsing behavior you can use Google Analytics opt-out browser add-on.

National Stroke Association may collect Aggregate and Transactional Information and add to its database every time a person visits National Stroke Association websites. Also, National Stroke Association collects Aggregate Information for research purposes.

2.  Types of information: "Personal Information" is "Demographic Information" and/or "Medical Information" which identifies a specific individual with a minimal degree of effort. Demographic Information includes name, address, city, phone, email, and other similar information. Medical Information includes diseases, treatments, lifestyle behaviors, family history, genotype, phenotype and other similar information. Transactional Information is data collected on an individual based on the individuals' interactions with National Stroke Association, which may include sensitive information such as credit card information and Medical Information. Aggregate Information is information presented in summary or statistical form, which does not contain data that would permit the identification of a specific individual without extraordinary effort.

Use of Personal Information

1. When an individual provides Personal Information to National Stroke Association, National Stroke Association may use the Personal Information for its fundraising, programs, products and services.
2. National Stroke Association uses Transactional Information for research purposes for the development or implementation of its fundraising, programs, products and services. The presumption is that, since Transactional Information is highly proprietary, it will not be disclosed to third parties.
3. National Stroke Association will disclose all information as required by law.
4. National Stroke Association will make every effort to discontinue the use of an individual's Personal Information as soon as practicable if requested by that individual. National Stroke Association may need to retain Information in its archives and records to comply with law, resolve disputes, analyze problems, assist with any investigations, enforce National Stroke Association’s User Agreement and other policies, and take other actions otherwise permitted or required by law.
5. If a user elects to use National Stroke Association’s referral service for informing a friend about our Sites, we ask them for the friend's name and e-mail address. National Stroke Association will automatically send the friend a one-time e-mail inviting them to visit the Sites.
6. If a user wishes to subscribe to National Stroke Association’s push email technology, e-newsletters or other digital sign-up activities (e.g, pledge), we ask for contact information such as name and email address.
7. National Stroke Association’s websites contains links to other websites. Please note that when you click on one of these links, you are entering another websites for which National Stroke Association has no responsibility. We encourage you to read the privacy statements on all such Sites as their policies may be different than ours.

Use of Donor Information

All requests to remain anonymous shall be honored. National Stroke Association does not sell or share donor information, including name, address, email, phone, or other information with external parties. Donors who supply National Stroke Association with their postal addresses, phone, or email addresses may be contacted periodically for solicitation purposes and/or with information regarding upcoming events. Donors that are not interested in being contacted on a periodic basis via phone, email or postal mail can opt out of these communications by emailing info@stroke.org.

Donor first and last names may appear on our website. If donors do not want this recognition, donors can request their names be withheld by emailing info@stroke.org, and the donations will appear as “Anonymous.”

Specific Requirements

Administrative

1. National Stroke Association will take reasonable and appropriate measures to keep Personal Information (see above for definition of “Personal Information”)confidential and in a secure environment, including taking appropriate action in the event of unauthorized disclosure.
2. Access to Personal Information will be restricted to only those personnel with a legitimate business purpose.
3. National Stroke Association owns all Personal Information provided to it by individuals and collected in accordance with this Policy. When an individual provides Medical Information to National Stroke Association, National Stroke Association will ensure that the individual acknowledges their assignment of the right to use the data to National Stroke Association.

Third Party Disclosure

1. Permission is required before National Stroke Association discloses Personal Information to a third party.  No permission is necessary for Aggregate Information, since Aggregate Information does not identify a specific individual.
2. For disclosure of Demographic Information (e.g., rentals or exchanges of donor lists), National Stroke Association as a minimum will use the "Opt Out" approach. An "opt-out" is obtained when National Stroke Association through some correspondence gives an individual the opportunity to decline or "opt-out" of disclosures to third parties. If the individual does not opt out, permission is deemed granted.  Depending upon the nature of an activity or project, a higher standard than "opt-out" may be used, such as "opt-in" whereby an individual must affirmatively give consent before information is disclosed.
3. For disclosure of Medical Information, Informed Consent is required before National Stroke Association discloses Medical Information to a third party. Informed Consent occurs when an individual has sufficient facts about the disclosure, comprehends those facts, and voluntarily consents to the disclosure. Where a third party such as the employer or healthcare provider of an individual requires the individual to participate in an National Stroke Association program which collects Medical Information, National Stroke Association will require the employer or healthcare provider to procure Informed Consent before National Stroke Association will release Medical Information to that employer or healthcare provider.
4. From time to time, there is a benefit in allowing a third party to use collected Personal Information on individuals. However, unless an individual gives permission, National Stroke Association will not disclose Personal Information collected by National Stroke Association to any third party. National Stroke Association sometimes engages third parties to provide certain operational services to National Stroke Association or on its behalf. National Stroke Association may disclose Personal Information to those third parties on a “need to know” basis under a written contract.
5. National Stroke Association uses and allows third parties to use Aggregate Information for research purposes for the development or implementation of its fundraising, programs, products and services.

Information Security

National Stroke Association uses an outside credit card processing company to bill users for goods and services or to process donations. These companies do not retain, share, store or use personally identifiable information for any secondary purposes. National Stroke Association partners with other parties to provide specific services such as secured Sites for financial transactions. As an option, users may register and create a personal account profile to provide more personalized information. Users are responsible for maintaining the confidentiality of the user ID and password, and are fully responsible for all activities that occur under their account. National Stroke Association has no liability or responsibility for such use. National Stroke Association users are given the opportunity to “opt-out” of having their personal information used by third parties at the point where we ask for the information for purposes not directly related to our Sites. For example, our informational email messages have an “opt-out” mechanism so users who register can change their minds and be removed from receiving future informational messages.

If you decide at a later time that you want to opt out of any of National Stroke Association services, you can also contact Customer Service at 1-(800) 787-6537 (STROKES) or email Webmaster@stroke.org. Please reference “Opt Out” in the subject line and describe which services you would like to opt out of in the body of the email. To update or change your information and preferences, visit our user login page and log on to your account.

Cookies

National Stroke Association’s websites may use cookies to enhance your experience while using the Sites. Cookies are pieces of information that some websites transfer to the computer that is browsing that websites and are used for record-keeping purposes at many websites. Use of cookies makes use of the Internet easier by performing certain functions such as saving your passwords; your personal preferences regarding your use of the particular websites and to make sure you don't see the same ad repeatedly. Many consider the use of cookies to be an industry standard.

Your browser is probably set to accept cookies. However, if you would prefer not to receive cookies, you can alter the configuration of your browser to refuse cookies. If you choose to have your browser refuse cookies, it is possible that some areas of our Sites will not function properly when you view them.

If you have any questions about this Privacy Policy, the practices of these Sites, or your dealings with the Sites, you can contact:

National Stroke Association
9707 E. Easter Lane, Suite B
Centennial, CO 80112
Email to: Webmaster@stroke.org
Call: 1-800-STROKES (787-6537)