Privacy Policy

Chill’s Privacy and Cookies Policy

Updated June 1, 2024

This notice describes Chill’s Privacy and Cookies Policy (“Privacy Policy”). By visiting chill.org, you consent to the practices described in this Privacy Policy. Chill may modify this Privacy Policy at any time. Your continued use of Chill’s services and chill.org constitutes your acceptance of this Privacy Policy and any updates.

For the purposes of European data protection law, the data controller of chill.org is the Chill Foundation. The data controller is responsible for determining why your data is collected and how it is processed.

In this Policy, we cover:

Notice at Collection
Information We Collect
How We collect Information
How We Use Your Information
Who We Share Information With
Google Analytics
Protection of Children’s Privacy
Your Rights and Choices
Important Information for U.S. Residents of California
Information for International Users
How Secure is My Personal Information?
Data Retention
Questions/Contact Us

1. Notice at Collection

Personal Information We Collect	How We Use Your Personal Information
Contact Information	• To fulfill the services you request from us
	• To better understand how users access and use our site, both on an aggregated and individualized basis
	• To respond to user preferences
	• For research and analytical purposes
	• To advertise and market our services
Account Information	• To fulfill the services you request from us
	• To better understand how users access and use site, both on an aggregated and individualized basis
	• To respond to user preferences
	• For research and analytical purposes
	• To advertise and market our services
Demographic Information	• To better understand how users access and use site, both on an aggregated and individualized basis
	• For research and analytical purposes
	• To advertise and market our services
Payment Information	• To fulfill the services you request from us
	• To better understand how users access and use site, both on an aggregated and individualized basis
	• For research and analytical purposes
Commercial or Transactions Information	• To fulfill the services you request from us
	• To better understand how users access and use site, both on an aggregated and individualized basis
	• For research and analytical purposes
	• To advertise and market our services
Precise Location Information	• To fulfill the services you request from us
	• To better understand how users access and use site, both on an aggregated and individualized basis
	• For research and analytical purposes
Social Media Information	• To better understand how users access and use site, both on an aggregated and individualized basis
	• For research and analytical purposes
	• To advertise and market our services
Internet Activity Information	• To fulfill the services you request from us
	• To better understand how users access and use site, both on an aggregated and individualized basis
	• To evaluate our site and our offerings to you as a visitor
	• To respond to user preferences
	• For research and analytical purposes
	• To advertise and market services
Information About Your Customer Experience	• To better understand how users access and use site, both on an aggregated and individualized basis
	• For research and analytical purposes
	• To advertise and market our services
Inferences	• To understand more about you and your preferences so that we can improve and customize our products and services
	• For research and analytical purposes
	• To advertise and market our services

We may disclose certain categories of personal information to third parties (as defined by applicable law) for the business purposes described above. For example, we may disclose any of the above categories of information to comply with the law, respond to legal process, cooperate with law
enforcement, or to exercise or defend legal claims. This may include our outside attorneys.

For information on our retention practices, please see the “Data Retention” section below.

2. Personal Information We Collect

We collect information you give us, permit us to access or when you enter into a contract or sales transaction with us. Such information generally falls into the following categories:

Contact information, including identifiers such as your name, e-mail, physical address and telephone number.
Account information, such as your username and password, birthdate, donation history and preferences when using our services.
Demographic information, such as your gender and your date of birth.
Payment information, such as your credit card number, expiration date, card verification number, and billing address if you make a donation.
Commercial or transactions information, including records of services used, and your engagement with our site and services.
Precise location information, including GPS information, activity and performance information.
Social media information, including any profile information and contact lists (collected in limited circumstances).
Internet activity information, such as your IP address, browser type and language, operating system, cookie information (described below), web beacons (described below), pages visited on our site, referring and exit pages, and the dates and times of the visits.
Information about your customer experience, including your responses to survey questions, reviews and other feedback you provide, and general information that customers provide about customers’ experiences. Our methods for collecting information about your experience may also collect information about your browser or device, but generally do not include identifying information such as your name and email address, unless you choose to provide it.
Inferences about you and your interests and personal preferences (such as the sports and activities that may interest you).

3. How We Collect Personal Information

We collect and obtain personal information:

From you. We collect personal information that you provide to us when you sign up for an account, contact us, make a donation, make a payment, enter a sweepstakes or contest, or apply for a job or volunteer opportunity with us.
From your device, including through:
- Cookies. We automatically collect information using “cookies.” Cookies are small data files stored on your hard drive by a web site. Among other things, cookies help us improve our site and your experience. Using cookies helps us see which areas and features are popular and helps us count visits to our site. In certain jurisdictions, you may be asked to consent to any cookies that are not deemed “necessary” to the
  operation of our website. In that case, when you click “Accept” on our consent request, you agree to the placement of cookies on your browser by us, our analytics and service providers, and marketing partners. If you do not click “Accept,” then we will remember your opt-out preference. You may change your preferences or withdraw your consent at any time. Many web browsers are set to accept cookies by default. Wherever you are located, you can usually choose to set your browser to remove cookies and to reject cookies from our site. If you set your browser not to accept cookies or if you reject a cookie, it may affect certain features or services of our site.
Web Beacons. We collect information using web beacons. Web beacons, or “gifs,” are electronic images that are used on our site or in our e-mails. We use web beacons to deliver cookies, count visits, understand usage and campaign effectiveness and to tell if an email has been opened and acted upon. If you do not wish for us to track emails we send you, some e-mail services allow you to adjust your display to turn off HTML or images which may disable tracking, or you may unsubscribe from our marketing e-mails by clicking “unsubscribe” in any marketing email.
From other third parties. A number of our suppliers also set cookies, web beacons, pixels, tags, and scripts on your browser or device on our behalf when you visit our site in order to deliver the services they are providing, analyze trends and site performance, administer the site, track
users’ movements and behavior around the site, measure advertising effectiveness, and prevent fraud. This means that when you visit our site you receive cookies from third party websites or domains.

In the U.S., you can opt out of third-party tracking on our website or others for online behavioral advertising by visiting the Digital Advertising Alliance’s (DAA’s) Consumer Choice page at http://www.aboutads.info/choices/ or the Network Advertising Initiative’s page at http://www.networkadvertising.org/choices/. In Europe, you can make choices about whether to allow tracking when you first visit our site and are asked to accept cookies and other trackers.

4. How We Use Your Personal Information

Except as set forth below in this section, we will keep all personal information collected from you, including personal information collected on chill.org, confidential. We will use the collected personal information for the following purposes:

To fulfill the services you request from us. For this purpose, we typically collect contact information, account information, payment information, commercial or transactions information, location information, and internet activity information.
To better understand how users access and use our site, both on an aggregated and individualized basis. For this purpose, we typically use all categories of personal information that we collect.
To evaluate our site and our offerings to you as a visitor. For this purpose, we typically use internet activity information.
To respond to user preferences. For this purpose, we typically use account information, contact information, and internet activity information.
For research and analytical purposes. For this purpose, we typically use all categories of information that we collect.
To send you marketing notices including promotions of our services. For this purpose, we typically use contact information, demographic information, and location information.

We use sensitive personal information only for the purposes permitted under California law or regulations.

The laws in some jurisdictions require companies to tell you about the legal ground they rely on to use or disclose your information. To the extent those laws apply, our legal grounds are as follows:

To honor our contractual commitments to you: Much of our processing of personal information is to meet our contractual obligations to our users, or to take steps at users’ requests in anticipation of entering into a contract with them. For example, we process your personal information to provide the website, products and services to you.
Legitimate interests: In many cases, we process personal information on the ground that it furthers our legitimate interests in commercial activities in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes providing security for our websites, software, applications, and services; operating our business and our services; ensuring safe environments for our staff and visitors; making and receiving payments; complying with legal requirements and defending our legal rights; preventing fraud and knowing the customer to whom we are providing services.
Consent: Where required by law, and in some other cases, we handle personal data on the basis of your consent.
Legal compliance: We need to use and disclose personal information in certain ways to comply with our legal obligations (such as our obligation to keep track of purchases for tax and auditing purposes).

5. Disclosure of Personal Information

We disclose your personal information as described below:

Authorized service providers. We employ other companies to perform functions on our behalf. These other companies help us by sending postal mail and e-mail, analyzing data, analyzing traffic on our websites, providing marketing assistance, providing search results and links (including paid listings and links), processing credit card payments, assessing risk, automating decisions, and preventing fraud. These companies have access to your information only as needed to perform their functions, but they are not permitted to use it for other purposes. We disclose, payment information and commercial information to these service providers. We may also disclose information about donor experience with service providers who help us work to improve your experience. We may provide location information and Internet activity
information to service providers in certain circumstances.
Advertising platforms and social networks. We disclose information to companies that help us with our advertising and marketing efforts, including advertising platforms and social networks. For example, we disclose Internet activity data and email addresses or other contact information to advertising platforms and social networks when we advertise through their platforms.
Chill and Burton. We may disclose your information to our affiliate The Burton Corporation for marketing purposes.
Law enforcement agencies, governmental authorities or regulators. We release account and other personal information when we believe release is appropriate to comply with the law, enforce or apply our conditions of use and other agreements, or protect the rights, property, or safety of chill.org, our users, or others. Typically, government authorities request account information, but we disclose any information required by valid legal process.
Credit reference and fraud prevention agencies. We exchange information with other companies and organizations for fraud protection and credit risk reduction. We disclose account information, including payment information and sometimes Internet activity information to these companies.
Organizations in connection with a business transfer. We will release information if we are acquired by or merged with another company, or if substantially all of our assets are transferred to another company, or as part of a bankruptcy proceeding.

6. Google Analytics

Chill.org uses a tool called Google Analytics for site analysis and also makes use of other Google Analytics features, including remarketing and audiences. For more information about Google Analytics and these features, go to http://www.google.com/policies/privacy/partners (“How Google uses data when you use our partners’ sites or apps”). Website users who don’t want their data collected and disclosed to Google Analytics can install the Google Analytics opt-out browser add-on. To opt out of Google Analytics, go to https://tools.google.com/dlpage/gaoptout.

7. Protection of Children’s Privacy

We do not solicit or knowingly collect any personal information from children under the age of 18, and do not knowingly sell or share the personal information of anyone under the age of 16. This website is intended for users over the age of 18. If you believe that a child under 13 may have provided personal information to us, please contact us at privacy@chill.org.

8. Your Rights and Choices

We collect and process your personal information on the basis that your personal information is required for us to provide the services you request or for the purposes set out in this Policy. In accordance with applicable law, you may have the right to request that we:

Provide you information about how we use your personal information;
Give you access to, and a copy of, your personal information that we store on our system;
Update, correct or delete your information held in our files;
Stop using, and require that third parties stop using, some or all of your personal information for certain purposes, even if you continue to use our site or services; and
Discontinue contacting you.

You also have the right to withdraw any consent you give us. In some cases, if you withdraw your consent or ask us to delete your information, it may impact upon our ability to provide certain services to you.

If you would like to make a request, you can send us an email at privacy@chill.org or contact us by mail at:
The Chill Foundation
266 Queen City Park Road
Burlington, VT 05401.

Additionally, if you are located in the European Union, you have the right to lodge a complaint with your local supervisory data protection authority about our use of your personal information.

We may use the methods described in this Policy to identify you, collect your precise location, or make inferences about you as described above. Where required by applicable law, you have the option to activate these features by consenting to precise location collection via your browser or device settings (location) or by creating an account with us.

9. Important Information for U.S. Residents

If you are resident of certain states in the U.S., you may have additional choices and rights regarding your personal information. Some of these choices and rights vary based on where you live.

10. Important Information for International Users

Our digital operations are conducted, in whole or in part, in the United States, which means that your information is transferred from your region and transferred to, processed and stored in the United States. The information is also transferred from the United States to your region for payment
processing, warehousing and shipping purposes pursuant to our contractual agreements with such regional processors, warehouses and shippers. Regardless of where you live, you understand and agree that when you provide data to us (for example when you make a purchase) your data will be transferred, processed and stored in the United States, and you will allow Chill Foundation to use and collect your personal information in accordance with this Privacy Policy.

Where required, we will use appropriate safeguards for transferring data outside of the EEA. This includes signing Standard Contractual Clauses that govern the transfers of such data, which may be used in conjunction with additional safeguards. For more information about these safeguards, please contact us as set forth below. When another company transfers your data to the U.S., we agree to protect your data as required under the EU General Data Protection Regulation.Chill Foundation

11. How Secure is my Personal Information?

We have implemented administrative, technical, and physical safeguards that are designed to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, consistent with industry practice and applicable laws. Please be aware that despite our best efforts, no data security measures can guarantee 100% security. While we strive to protect information transmitted on or through our site, we cannot and do not guarantee the security of any information you transmit on or through the site and you do so at your own risk. In addition, we have implemented organizational measures, such as defining roles and responsibilities, for all employees that handle personal information.

You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity, except where otherwise required by applicable law.

12. Data Retention

We will keep the information we hold about you for as long as we believe is necessary to provide you with the services you requested, or for the purposes for which it was collected. We will also keep information when necessary to comply with legal obligations, to defend or assert our legal rights, or respond to valid legal requests.

In all cases, in addition to the purposes, we consider the amount, nature and sensitivity of the personal information, as well as the potential risk of harm from unauthorized use or disclosure of your personal information, in determining how long to retain it.

13. Questions/Contact Us

If you have questions about the guidelines described in this Privacy Policy or to submit a complaint, please email us directly at privacy@chill.org.