Effective November 1, 2021
Super Duper, Inc. ("Super Duper") is strongly committed to protecting your privacy. This Privacy Policy was developed to give you a full understanding of terms and conditions relating to the handling of certain personal identifying information (“PII”) which may be collected by Super Duper.
This Privacy Policy applies to PII collected on websites, applications, or other web-based environments (including mobile applications) provided and hosted by Super Duper providing access to the Super Duper Digital Library ("SDDL") for your school, school district, hospital, or other organization ("Organization").
This Privacy Policy pertains only to PII that Super Duper collects from you or that is provided to us by the Organization. PII is information that identifies a particular individual, such as a person's first and last name, e-mail address, and phone number.
This Privacy Policy applies only to the Super Duper practices regarding PII collected that is processed and hosted by Super Duper and NOT to sites hosted by the Organization or another third party. The Organization has control over who can register for use of various features of SDDL and who can access the PII posted or maintained by SDDL. The Organization can also add information directly into SDDL. The Organization may have its own policies addressing collection, use, and sharing of PII. For information about whether this Privacy Policy applies to you and about the Organization's own policy, please contact the Organization.
Information we collect when hosting SDDL
You may visit certain aspects of SDDL without registering. Registration, however, will give you access to certain features as well as the ability to personalize certain features. An individual who seeks access to SDDL, or who seeks to correct, amend, or delete inaccurate data, should direct any query to the Organization. If the Organization requests Super Duper to remove the data, we will respond to the request within 30 days.
Before a child under 13 may access features that require registration, the Organization must first obtain any necessary parental consent. After all necessary consent is received by the Organization, the Organization is responsible for providing parent access to the child's information so the parent may, at any time, review, request modifications to, or request deletion of the child's PII. A parent also has the right to refuse further collection of the child's information, subject to the Organization's policies and procedures in this regard. If you have questions regarding registration, please contact the Organization.
Super Duper collects and subsequently processes PII in two ways:
- Self-Registration. If you choose to become a registered user, on behalf of the Organization, we will ask for PII from you through the SDDL onboarding process. After we collect this information from you, it may be verified by the Organization. Children under 13 years of age are not allowed to register themselves with SDDL. Since we are collecting PII from students for the use and benefit of the Organization, all information collected by Super Duper is verified for compliance with applicable laws (e.g. COPPA, FERPA, New York Education Law) by the Organization directly and not by Super Duper. If you feel your child under 13 years of age is registered on SDDL without your permission, please contact the Organization directly.
- Pre-Registration. You may be pre-registered by the Organization in one of two ways. Either way, the Organization may not share PII for children under 13 years of age with Super Duper without first receiving the necessary parental consent as described above. The two means of pre-registration are:
- Your Organization may share registration information with Super Duper, either manually or via an authorized third-party system feed. Super Duper would conduct an import of this registration information.
- An Organization-designated individual may input registration information for you.
Regardless of the way you are registered, various types of information are collected during registration. Some information is required, such as First and Last Name, Email Address, User Name, and Password. These fields are labeled to indicate that they are required. Other information is optional such as Title, Address, City, State, ZIP Code, and Phone. Your Organization may elect to provide certain optional information on your behalf in order to use certain features and functions of SDDL.
After registration, the lead administrator for the Organization (“Site Administrator”) may decide to assign to you a role(s) or group(s). Based upon your designated role(s) or group(s), you may have access to additional information or services. If you have questions concerning your role(s) or group(s), please contact the Organization.
Information collected for self-registration or pre-registration may also be used to:
- provide Organization-related notifications and other information,
- provide you with important information about SDDL, such as updates or notices,
- improve our product and services,
- improve customer service,
- create a profile for you, and/or
- in aggregate, guide our marketing efforts.
No PII will be shared with third parties except to the extent expressly described in this Privacy Policy and otherwise in accordance with applicable law.
Additional information that you provide to us
Additional information may be provided to us in other situations, for example, in connection with a customer support request. The goal of collecting this additional information is to serve you more effectively and efficiently.
You or the Organization may provide us with login credentials for certain software applications and web services in order to facilitate single sign-on access to these applications and services. These login credentials may include the username, password, and any other required information which you selected or were supplied in order to access certain applications and web services.
As noted below, we may also ask you to provide us with voluntary survey information to help us improve our products and services.
Information from the Organization
The Organization can control which individuals can be registered to use certain SDDL features and which individuals or groups are granted privileges to access, view, or use PII collected, exchanged, or maintained on SDDL. The Site Administrator can also access your PII and grant rights of access to others, as it deems appropriate. The Organization may also provide Super Duper with the registration information and login credentials described above, as well as with other information about you which it deems appropriate. Please contact the Organization regarding its policies and/or practices in this regard.
Information collected through technology
As noted below, we may also collect cookies, device information, and web beacons in the course of your use of our technology.
Privacy of children; Privacy of students
Super Duper is dedicated to the privacy of children under 13 years of age. We do not process or collect from children more PII than is needed to access services. The Organization is responsible for obtaining all parental consent necessary for collection of PII from children under 13. Super Duper presumes that such consent has been obtained by the Organization by virtue of the Organization having retained Super Duper to provide SDDL and related services.
Super Duper will not share any PII about children with any third parties other than as specified in this Privacy Policy.
As a parent or legal guardian for children under 13, you may review your child's PII. After your child's parental consent is submitted, an individual at the Organization will supply you with your child's credentials so that you may access and review the types of PII collected from your child. If you would like to refuse to allow any further collection or use of your child's information, please contact the Organization or Super Duper. If the request is made to Super Duper, we will look to the Organization to validate the request and respond accordingly.
Super Duper is dedicated to maintaining the privacy of all students, whether under 13 or older, in accordance with applicable laws. In this regard, we will maintain any and all PII in education records that come into the possession of Super Duper in accordance with the requirements of the Family Educational Rights and Privacy Act ("FERPA"), the Student Online Personal Protection Act (“SOPPA”), Protection of Pupil Rights Amendment (PPRA), and will not disclose such information to third parties except with the consent of a parent, the Organization, or an eligible student (as applicable), unless otherwise permitted under the associated regulations.
How we use information collected
User account
Super Duper does not associate information that we collect through log files or third parties with your user account. The information is provided voluntarily by you or the Organization during registration. A user account is stored information that gives you access to certain features as well as the ability to personalize certain features. Your user account can only be accessed and used by you (including, where applicable, your parent or guardian), the Site Administrator, and restricted personnel of Super Duper and its contractors.
Cookies and web beacons; "do not track" signals
A cookie is a piece of data stored on your computer tied to information about you. The only PII a cookie can contain is information you supply. Super Duper uses session or dynamic cookies, e-tags, and scripts to let us know when a user is signed in. Once you close your browser, the cookie simply terminates. We may use web beacons (single-pixel gifs) to count visitors.
When you are signed in and depending on your assigned role(s), additional services become available through our menu system. Again, depending on your assigned role(s), cookies may offer the following benefits after Sign-In:
- A personalized salutation greeting
- Content tailored to your role(s)
- Use of services that require Sign-In
- Session time-out, a security feature
Note that Super Duper and/or your Organization may engage with third parties to enable certain functionality or usage analytics, and such third parties may use cookies, e-tags, beacons, and scripts. For example, Google Analytics may be used to track visitor activity on SDDL. The use of third-party cookies is not covered by this Privacy Policy because Super Duper does not have access to or control of these cookies.
As true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We do not link this automatically collected data to other information we collect about you.
Device information
We may collect and store device-specific information (such as unique device identifiers) in order to facilitate the delivery of push notifications to mobile devices. In this regard, we may associate your device identifier with your Super Duper account. This device information may also be collected and stored by certain of our trusted contractors or service providers, subject to the applicable terms of this Privacy Policy related to the sharing of information with such trusted third parties.
Communications from the site
Service announcements
From time to time, it may be necessary for Super Duper to send out a service-related announcement. For instance, if our service is temporarily suspended for maintenance, we might send you a notification email. Users cannot opt-out of these communications, though they can delete their account. These communications are not promotional in nature.
Data retention
When you or the Site Administrator deletes your account, the information contained in your user account is no longer available except to the extent it is backed-up as described below. We do not retain your data on behalf of the Organization except as necessary to provide the service requested, comply with our legal obligations, resolve disputes, and enforce our agreements, all in compliance with applicable laws. We also back up information in accordance with industry standard practices and as directed by the Organization.
Customer service
As necessary, Super Duper may communicate with you through email, phone, or online to provide requested services and in regards to account-related issues on behalf of the Organization.
Sharing of Information
When required by law
Though we make every effort to preserve your privacy, we may need to disclose PII when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order, or legal process served on SDDL.
Administrative privileges
Users who have been assigned administrative privileges by the Organization have access to all registered user information strictly and solely on their implementation of SDDL. Contact the Organization for more information regarding who has been assigned these privileges and how this assigning process works.
Business transitions
In the event that Super Duper goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets, your PII could be part of the assets transferred. You will be notified by a prominent notice prior to a change of ownership or control of your PII. For more information, see the Privacy Policy Statement Changes section in this document.
Service providers
From time to time, Super Duper may retain trusted businesses and contractors to provide certain services that support our provision and hosting of SDDL or otherwise support the operation of the associated online services. We may also contract with trusted third parties to provide complimentary products or services which may be integrated with, linked to (either via a website link or otherwise), or accessible from (such as through single sign-on functionality) SDDL.
Businesses and contractors who have access to PII are required to protect this information in a manner that is consistent with this Privacy Policy, for example, by not using the information for any purpose other than to carry out the services they are performing for us or to facilitate access to an integrated service offering.
We will not disclose your PII to any third party to the extent prohibited by law.
Compliance with laws
Super Duper complies with the requirements of COPPA, CIPA, FERPA, PPRA, and SOPIPA to the extent that these laws apply to the information collected and maintained by Super Duper. Accordingly, notwithstanding anything to the contrary in this Privacy Policy, we will not collect, use or disclose PII covered by COPPA, CIPA, FERPA, PPRA, or SOPIPA except in compliance with the respective requirements of each of these statutes and their associated regulations. We will also comply with all other applicable laws that govern the information which it maintains.
If you have any inquiries regarding our partner's privacy practices or how they use your child's PII, please contact us directly at 1-800-277-8737 or by emailing to privacy@superduperinc.com.
Terms that apply to all PII collected
Modification to PII
There are three ways PII can be modified:
- If your PII changes, or if you no longer want a user account on SDDL, you or your Site Administrator may update or delete your PII in your account.
- Site Administrators can modify PII. These Administrators have access only to their Organization’s user information. For children under 13 years of age, the Organization is responsible for first validating receipt of verifiable parental consent.
- If you have any other requests related to the modifications or deletion of your PII, please contact the Site Administrator or Super Duper. If the request is made to Super Duper, we will look to the Organization to validate the request and respond accordingly.
Data deletion
If services are terminated, by either party, for any reason, Super Duper agrees to permanently delete all data and provide written verification confirming permanent deletion. Otherwise, all account information is deleted automatically from the system 60 days after the SDDL expiration date has lapsed.
Upon deletion, neither Super Duper nor Organization will be able to restore deleted data.
Surveys and feedback forms
From time to time, Super Duper may request information from you through surveys or feedback forms. Participation is voluntary. Information collected is used for the purposes of improving our product and services and understanding our audience.
No PII collected in this manner will be used or disclosed except in compliance with this Privacy Policy.
Security
Super Duper takes security seriously and employs reasonable security measures and procedures designed to protect your information from unauthorized access and improper use. Only employees, trusted contractors supporting the operation of SDDL, and other third-party partners and contractors as generally described in this Privacy Policy have access to PII. These individuals and entities shall be bound to protect the information appropriately.
Super Duper servers that store PII are maintained in a physical environment that utilizes industry-standard security measures. PII is stored in password-controlled servers with limited access. When you enter sensitive information (such as login credentials), we encrypt the transmission of that information using secure socket layer (SSL) technology.
Be aware though that, despite our diligent efforts and implementation of reasonable security measures, no security measures are perfect or impenetrable and no data transmissions over the Internet can be guaranteed to be 100% secure. If you have any questions about the security of SDDL, please email us at security@superduperinc.com.
In addition, as noted above, the Organization has the ability to control the collection, use, and dissemination of PII maintained or processed through SDDL. Contact the Organization for information regarding their security provisions.
Privacy Policy Statement Changes
If we change this Privacy Policy, we will post the revised Privacy Policy, with an updated effective date, to SDDL by way of a link to: www.superduperlibrary.com/library/privacy.aspx.
We encourage you to periodically review this Privacy Policy by visiting SDDL and clicking on the Privacy Policy link to stay informed about how we are collecting, using, and sharing PII.
Except as otherwise required by law, all changes to this Privacy Policy will be effective when the updated Privacy Policy is posted to the URL above and each user is bound by such changes when he or she uses SDDL after such changes have been posted.
Usage implies consent
By using SDDL, you consent to this Privacy Policy. If you do not agree to this Privacy Policy, please do not use SDDL. Similarly, with respect to PII which you provide voluntarily and we collect on behalf of the Organization (such as name, address, and phone number in order to create an account), please do not submit such information if you do not want Super Duper to collect and maintain it.
Additional limitations
Despite our best efforts, no security measures are perfect or impenetrable. In this regard, we are not responsible for events or conditions beyond our reasonable control to the extent that they relate to or impact the obligations assumed, or commitments made, hereunder. However, in the event of any data breach or other violation of this Privacy Policy caused by factors outside of our reasonable control, we will comply with all applicable laws in this regard, including those requiring notification in the event of certain defined data breaches.
International users
As Super Duper is a U.S.-based company, your PII will likely be collected and maintained in the United States. If you are visiting from the European Union or other regions with laws governing data collection and use that may be different from U.S. law, then by using SDDL, you consent to your PII being collected, used, and transferred as set forth in this Privacy Policy.
Contact information
Super Duper takes privacy issues very seriously. If you have any questions, suggestions or concerns regarding this Privacy Policy, please contact us at:
Super Duper, Inc.
ATTN: Privacy Officer
5201 Pelham Road
Greenville SC 29615
Phone: 1-800-277-8737
Email: privacy@superduperinc.com
URL: www.superduperlibrary.com/library/privacy.aspx
Last modified November 1, 2021