PRIVACY NOTICE

JUSTICE TECHNOLOGY ASSOCIATION

Last updated: April 3, 2024

This Privacy Notice (the "Notice") describes how Justice Technology Association and its affiliates, its brands, and subsidiaries (collectively, "JTA," "we," "our," or "us") collects, uses, discloses, and otherwise processes the personal information described in this Notice, as well as the rights and choices individuals have regarding such personal information. For information about your privacy choices, please review Section 7. Your Privacy Choices. If you are in the European Economic Area (EEA) or United Kingdom (UK), please review Section 15. Additional Privacy Information for Residents of the European Economic Area (EEA) and United Kingdom (UK).

Your use of our Services (defined below), and any dispute over privacy, is subject to this Notice and our Terms of Service, available at https://justicetechassociation.org/terms-of-use/.

Table of Contents

Scope
Personal Information Collected
Purposes for Collecting and Processing
Disclosures of Personal Information
Aggregate and De-Identified Information
Cookies and Tracking
Your Privacy Choices
Retention
Children's Information
International Transfers of Personal Information
Security
Third-Party Links
Changes to this Privacy Notice
Contact Us
Additional Privacy Information for Residents of the European Economic Area (EEA) and United Kingdom (UK)

1. Scope

Except as otherwise described below, this Notice applies to the personal information JTA collects and processes related to: visitors to our website, justicetechassociation.org, where this Notice is posted (the "Site") and other websites that may display or include a link to this Notice; individuals who use, access, or otherwise interact or engage with the services, features, and/or products made available through our Site; individuals who register for or participate in our events, surveys, research, or promotions; individuals who subscribe to receive news, information, and other communications from us; current, former, and prospective business partners; and individuals who communicate or otherwise interact or engage with us (collectively referred to as the "Services").

Not in Scope. This Notice does not apply to the personal information that we collect and process about JTA employees, contractors, personnel, job applicants, or candidates.

2. Personal Information Collected

As further described below, we collect personal information directly from individuals, from third parties, and automatically through your use of our Services.

Personal Information Collected Directly from You. The personal information we may collect from you depends on how you use our Services or otherwise interact or engage with us, but generally includes:

Membership information. When you apply to become a member of JTA, we may collect your name, email, phone number, address, and information about the business/organization you represent (where applicable), as well as any additional information you so choose to provide.

Account and Profile information. If you are a member of JTA, we may collect information that you make available through your profile, such as your name, affiliated business, photo, login information, Slack communications, and other information that you submit through your membership account.

Contact information. When you contact us or if you sign up for our mailing list, including via email or phone, we may collect certain personal information from you, such as your name, title, phone number, email address, and any other personal information you otherwise submit to us.

Survey responses. When you fill out our surveys, we may collect your survey responses, including information regarding demographics, preferences, and your opinion about our Services. Participation in our surveys is voluntary.

Sweepstakes, contests, and promotions. If you participate in our sweepstakes, contests, or promotions, we may collect your name, age, email address, contact information, and other registration information related to our sweepstake, contests, and promotions.

Professional information. When you engage with us in your personal or professional capacity, we may collect details related to the business you represent, such as name, postal address, and phone number, your email address, and your position with the business.

Communications and interactions. When you email, call, or otherwise communicate with us or members of our team, we may collect and maintain a record of your communications. We also maintain records of communications and information that you may post on our social media channels and information you provide to us related to any customer support requests. We may also collect any information you submit through our online chat bot we make available through the Services.

Transaction information. If you choose to support JTA through donations, we may collect your billing details, such as your name, address, and email address. JTA does not collect payment processing information, such as your credit card number.

Events and registration details. If you register for or attend an event that we host or sponsor, we may collect personal information related to your registration for and participation in such event.

Preferences and other requests. We also may collect information about your preferences, such as communications preferences, preferences related to your use of our Services, and any other preferences or requests you provide when interacting with us.

Personal Information Collected from Third Parties. We may collect personal information about you from third-party sources, such as public databases, joint marketing/promotional partners, social media platforms, or other third parties.

Lead and prospect information. We may receive lead and prospect information, such as names, email addresses and contact information, from third parties about individuals who may be interested in engaging with us.

Social media information. If you post information about us or engage with us on third-party platforms, such as through your social media account, we may collect personal information about you from that third-party platform or account (e.g., your social media username and/or handle). These third-party platforms and services control the information that they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.

Personal Information Collected Automatically. We and our providers automatically collect and derive personal information related to your use of our Services and your interactions with us. Such information may include:

Device and browsing information. We use cookies, log files, pixel tags, and other tracking technologies to automatically collect information when users access or use our Services. We may collect device IP address, general location information, domain name, pageviews, date and time stamps, browser type, device type, device ID, Internet service provider, referring and exiting URLs, operating system, language, clickstream data, and similar device and usage information. For more information, please see Section 6. Cookies and Tracking.

Activities and usage. We also collect activity information related to your use of the Services, such as information about links clicked, searches, features used, items viewed, and time spent within the Services.

Location Information. We may collect or derive general location information about you such as through your IP address.

3. Purposes for Collecting and Processing

Generally, we collect, use, and otherwise process the personal information that we collect for the following purposes:

Services and support. To provide our products and to operate our Services, communicate with you about your use of our products and Services, respond to your inquiries, gather feedback, fulfill your requests, communicate with you, to run our day-to-day operations, and for similar support purposes.

Customization and personalization. To tailor the content that we may send you, including to offer personalized help and instructions, and to otherwise personalize your experience.

Marketing and advertising. For marketing and advertising purposes. For example, to send you information about our products and Services and the products and services of our affiliates, such as newsletters, and other marketing content, as well as any other information that you sign up to receive. We also may use certain personal information that we collect to manage and improve our advertising campaigns (both online and offline) so that we can better reach individuals with relevant content.

Planning and managing events. For event planning and management, including registration, attendance, connecting you with other event attendees, and contacting you about relevant events and Services.

Legal proceedings and obligations. To comply with the law and our legal obligations, to respond to legal process and related legal proceedings, and government or law enforcement requests.

General business and operational support. To consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other transactions such as financings, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.

4. Disclosures of Personal Information

Generally, we disclose the personal information that we collect to provide our Services, respond to and fulfil your transactions or requests, as otherwise directed or consented to by you, and as follows:

Affiliates. We may disclose personal information we collect to our affiliates who will use and disclose this personal information in accordance with the principles of this Notice.

Vendors and service providers. We may disclose the personal information that we collect to our service providers and others who perform functions on our behalf or provide us services. These may include, for example, service providers that host or operate our Site, payment processors, analytics providers, information technology service providers, customer service vendors, consultants, auditors, and legal counsel.

Advertising and analytics platforms, providers, and networks. We may disclose or make available personal information to the platform providers and vendors that we use to provide or make available certain features or portions of the Services, or as necessary to respond to your requests. We may also make certain information (such as browsing information) available to advertising platforms, providers and networks in support of our marketing, advertising, and campaign management.

JTA Members and JTA Investor Allies. We make available certain JTA member information, such as name, email, phone number, and employer/affiliated entity, in our member directory to better connect our members with investors and one another.

Others as permitted or required by applicable law. We may disclose personal information to other parties to the extent permitted or required by applicable law. This may include regulators, government entities, and law enforcement. It may also include certain disclosures that we are required to make.

Security and protection of rights. We may disclose your personal information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service or this Notice, or as evidence in litigation in which we are involved.

With permission. We may disclose personal information in ways not described above. If we do so, we will notify you, and if necessary, obtain your consent.

5. Aggregate and De-Identified Information

To the extent permitted by applicable law, we may receive, use, and disclose aggregate and other non-identifiable information related to our business, products, and Services for quality control, analytics, research, development, marketing, and other purposes.

6. Cookies and Tracking

We and our providers use cookies, pixel tags, and other similar tracking technologies to automatically collect information about browsing activity, device type, and similar information within our Site and Services. This information, which may be considered personal information in some jurisdictions, is used, for example, to analyze and understand how you access, use, and interact with our Site and Services; to identify and resolve bugs and errors in our Site and Services; to assess, secure, protect, optimize, and improve the performance of our Site and Services; and to personalize content on our Site; and for marketing, advertising, measurement and analytics purposes. We may also de-identify and/or aggregate such information to analyze trends, administer our Site and Services, and gather broad demographic information for aggregate uses, and for any other lawful purposes.

Cookies. Cookies are alphanumeric identifiers used for tracking purposes. Some cookies allow us to make it easier for you to navigate our Site and Services, while others are used to enable a faster log-in process, to support the security and performance of the Site and Services, or to allow us to track activity and usage data within and across our Site and Services.

Pixel Tags and Similar Technologies. Pixel tags (sometime called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. We may use these tracking technologies to understand users' activities, to help manage content and compile usage statistics, and in emails to let us know when they have been opened or forwarded so we can track response rates and gauge the effectiveness of our communications.

Local Storage Objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our websites. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Analytics. We use analytics tools, such as Google Analytics, to evaluate usage and traffic on our Site and Services. These analytics providers use cookies, pixels, and other tracking technologies to collect usage data to provide us with reports and metrics that help us analyze, improve, and enhance performance and user experience. You can learn more about how Google uses your information at www.google.com/policies/privacy/partners/ ("How Google uses information from sites or apps that use our services"). You can also download the Google Analytics Opt-out Browser Add-on to prevent your information from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Cross-Device Tracking. We and ad networks we work with may use the information we collect about you within our Site and Services, and on other third-party websites and services, to help us and these third parties identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.) to interact or engage with us or our Site and Services.

Advertising Networks. We work with ad networks, channel partners, mobile ad networks, analytics and measurement services, and others ("ad networks") to personalize content, as well as to manage our advertising on third-party websites, mobile apps, and online services. We may share certain information with ad networks, and we may each use cookies, pixels tags, and other tools to collect usage and browsing information within our Services, as well as on third-party websites, apps, and services. This information may include IP address, location information, cookie and advertising IDs, and other identifiers, as well as browsing information.

Custom Lists and Matching. We may share or make available certain customer list information (such as your name, email address and other contact information) with ad networks, social media platforms, and other providers (i) so that we can better target ads and content to you across third party sites, platforms and services, (ii) in some cases, these parties may help us to enhance our customer lists with additional demographic or other information, so we can better target our advertising and marketing campaigns, (iii) create lookalike audiences to help us identify potential new customers.

Do-Not-Track. Currently, our Services do not recognize web browser "Do-Not-Track" requests. You may, however, disable certain tracking as discussed below (e.g., by disabling cookies).

7. Your Privacy Choices

You have certain choices regarding our processing of your personal information, and we make available several ways for you to manage your preferences and privacy choices, as described below:

Marketing Communications. We may send periodic promotional and operational emails or other similar communications to you. You may change your preferences or unsubscribe by following the instructions provided to you in the communication. If you opt out of receiving promotional emails from us, we may still send you communications about your membership or any other Services you have requested or received from us.

Cookie Settings. You can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The "Help" portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Sites, but some features may not function. If you visit our Site from a different device or from a different browser on the same device, you will need to apply your cookie settings for that browser and/or device as well. You can also review or change your preferences for many cookies on our Site, other than those that are necessary, by adjusting your cookie settings through our cookie preference manager.

Industry Ad Choice Programs. You can also control how participating ad networks use the information that they collect about your visits to our Site and Services and those of third parties, in order to display more relevant targeted advertising to you. You can obtain more information and opt out of receiving targeted ads from participating ad networks at aboutads.info/choices (Digital Advertising Alliance). If you are in Europe, this information is available at www.youronlinechoices.eu (European Interactive Digital Advertising Alliance).

8. Retention

We apply a general rule of keeping personal information only for as long as required to fulfill the purposes for which it was collected. In general, we retain your personal information for a period of time corresponding to a statute of limitation setting out the period during which legal claims may be filed in court. For example, we will retain your personal information during the statute of limitation period, to maintain an accurate record of your dealings with us or raise or defend claims in court. However, in some circumstances we may retain personal information for other periods of time, for instance where we are required to do so in accordance with legal, tax and accounting requirements, or if required to do so by a legal process, legal authority or other governmental entity having authority to make the request, for so long as required.

9. Children's Information

Our Services are not designed for children under thirteen (13). If we discover that a child under 13 has provided us with personal information, we will delete such information from our systems. If you are a parent or guardian and believe we have collected your child's information in violation of applicable law, please contact us as set forth in Section 14. Contact Us.

10. International Transfers of Personal Information

JTA is headquartered in the United States, and has operations, entities, and service providers in the United States and throughout the world. As such, when you interact with us, your personal information may be transferred and processed in the United States and other jurisdictions where we and our affiliates and service providers have operations. Some of these jurisdictions (including the United States) may not provide equivalent levels of data protection as compared to your home jurisdiction. Applicable laws in these jurisdictions might permit foreign governments, courts, law enforcement or regulatory agencies to access the information in these jurisdictions, regardless of the safeguards we have put in place to protect that information. In these cases, we will comply with applicable local law requirements relating to the conditions for disclosure or release of personal information. If you are in the European Economic Area (EEA) or United Kingdom (UK), please review Section 15. Additional Privacy Information for Residents of the European Economic Area (EEA) and United Kingdom (UK).

11. Security

We have implemented safeguards that are intended to protect the personal information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

12. Third-Party Links

Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Notice, but instead is governed by the privacy notices of those third-party websites. We are not responsible for the information practices of such third-party websites.

13. Changes to this Privacy Notice

We may make changes to this Notice from time to time, so please be sure to check back periodically. We will post updates to the Notice on the Site. If we make any material changes to this Notice, we will endeavor to provide you prior notice, such as by emailing or posting prominent notice on our Site.

14. Contact Us

JTA welcomes your questions and comments about your privacy or this Notice. Please contact us by emailing privacy@justicetechassociation.org or writing us at 3600 Duke Street, Suite 1-1160, Durham, NC 27704.

15. Additional Privacy Information for Residents of the European Economic Area (EEA) and United Kingdom (UK)

This section details additional information regarding our processing of personal data (herein, "personal information"), in accordance with the EEA and UK General Data Protection Regulation (the "GDPR").

Controller. The controller of your personal information is Justice Technology Association at 3600 Duke Street, Suite 1-1160, Durham, NC 27704.

Lawful Basis for Collecting Personal Information. We collect and process personal information in reliance on one of the following legal bases:

To Perform a Contract with You or to Take Pre-contractual Steps at Your Request. This includes performance of an agreement with you, such as our Site Terms of Service, or terms and conditions applicable to the Services you use. If you don't provide your personal information, we won't be able to provide you with the Services requested.

To Comply with an EU or UK Legal Obligation to Which JTA is Subject. This includes processing personal information to comply with our legal obligations, such as to retain records of transactions.

For Legitimate Interests. We may process personal information in furtherance of our legitimate interests, or those of a third party, where those interests are not overridden by your rights, freedoms, and interests. Our legitimate interests include improving and personalizing the Services, marketing features or products that may be of interest, and promoting safety and security.

With Your Explicit Consent. We may process personal information about you based on your consent, for example (where required by law) to send you marketing communications, surveys, news, and updates. Where our processing of personal information is based on your consent, you may withdraw consent at any time.

Purposes and Legal Bases for Processing. We use personal information for the purposes set forth below, and for the legal bases described below. For each stated purpose, we have included the categories of recipients to which we may disclose such personal information:

Services and support. To provide our products and to operate our Services, communicate with you about your use of our products and Services, respond to your inquiries, fulfill your requests, and for similar support purposes. (Legal basis: Performance of our contract with you.) (Disclosures to affiliates, vendors and service providers, and members.)

Analytics and improvement. To better understand how users access and use our Services, products, and offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to develop Services, features and new products and offerings, and for internal quality control and training purposes. (Legal basis: Our legitimate interests in improving our products and Services to expand our outreach and membership.). (Disclosures to affiliates, advertising and analytics platforms, providers, and networks, vendors and service providers, and members.)

Member directory. We make available certain JTA member information, such as [name, email, phone number, and employer/affiliated entity], in our member directory to better connect our members with JTA investors and one another. (Legal basis: Legitimate Interests in promoting our core mission by expanding our outreach and membership.)) (Disclosures to JTA members, JTA investors, and members.)

Customization and Personalization. To tailor the content that we may send you, including to offer personalized help and instructions, and to otherwise personalize your experience. (Legal basis: Consent, where required by law (such as where we obtain content via cookies and other trackers). In all other cases, Legitimate Interests in promoting our products and Services in order to expand our outreach and membership.) (Disclosures to affiliates, advertising and analytics platforms, providers, and networks, vendors and service providers, and members.)

Marketing and advertising. To communicate with you for marketing and advertising purposes. For example, to send you information about our products and Services and the products and services of our affiliates, such as newsletters, and other marketing content, as well as any other information that you sign up to receive. We also may use certain personal information that we collect to manage and improve our advertising campaigns (both online and offline) so that we can better reach individuals with relevant content. (Legal basis: Consent, where required by law (such as where we obtain content via cookies and other trackers). In all other cases, Legitimate Interests in promoting our products and Services in order to expand our outreach and membership.) (Disclosures to affiliates, advertising and analytics platforms, providers, and networks, vendors and service providers, and members.)

Planning and managing events. Event organization, registration and attendance, connecting you with other event attendees. (Legal basis: Contract Performance.) (Disclosures to affiliates, vendors and service providers, and members.)

Research and surveys. To administer surveys, such as for market research, customer satisfaction purposes or improving our products and Services, to conduct statistical and data analytics, and for other similar purposes. (Legal basis: Legitimate Interests in improving the relevancy of our Services, products and advertising in order to encourage interactions with us and grow our membership and financial support.) (Disclosures to affiliates advertising and analytics platforms, providers, and networks, vendors and service providers, and members.)

Security and protection of rights. To protect our Services and our business operations; to prevent and detect fraud, unauthorized activities and access, and other misuse, where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, violations of our Terms of Service or other agreements we have with you or this Notice, to defend our rights, including through legal or other dispute resolution processes. (Legal basis: Legitimate Interests in conducting our activities in a lawful manner and protecting our rights and interests as well as those of our stakeholders and society at large.) (Disclosures to affiliates, vendors and service providers, law enforcement, or other parties when we believe it is appropriate to do so to ensure the security and protection of rights, and members.)

Legal obligations. To comply with our legal and compliance obligations and to respond to legal process and related legal proceedings. For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators and law enforcement, including responding to national security or law enforcement disclosure requirements. We may also disclose information, including personal information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions. (Legal basis: Legal obligation, where we need to comply with EEA or UK law; otherwise, our Legitimate Interests in conducting our activities in a lawful manner.) (Disclosures to regulators, government entities, and law enforcement, or other parties to the extent permitted or required by applicable law, and members.)

General operations. If we are or may be merged with another company, or if any of our assets are or may be transferred to another company, we may transfer the information we have collected about you to the other company. We may also share certain personal information as necessary prior to the completion of such a transaction to auditors and other advisors, including attorneys and consultants, as part of due diligence or as necessary to plan for a transaction. (Legal basis: Our legitimate interests in organizing our activities efficiently.) (Disclosures to affiliates, vendors and service providers, transaction counterparties and their service providers, and advisors, and members).

Your Rights in Respect to Your Personal Information. The GDPR gives you certain rights regarding your personal information that we hold, which may be subject to specific conditions, and with some exceptions:

Access. You have the right to obtain information about our processing of your personal information and obtain access to and a copy of your personal information.

Rectification. You have the right to update, complete or correct inaccuracies in your personal information.

Erasure. You have the right to have your personal information deleted.

Portability. You have the right to obtain a machine-readable copy of your personal information or to have us transfer it to another controller of your choice.

Restriction. You have the right to restrict the processing of your personal information, meaning that we will not further process your personal information except to store it.

Withdrawal of Consent. You have the right to withdraw your consent to our processing of your personal information, without affecting the lawfulness of processing up until withdrawal.

Objection. You have the right to object, on grounds relating to your particular situation, to the processing of your personal information where we rely on legitimate interests as the legal basis for processing.

You also have the right to object at any time to the processing of your personal information for direct marketing (including profiling) purposes.

You can exercise your rights using our webform or by contacting us as noted below.

You have the right to submit a complaint with the relevant data protection authority of your habitual residence, your place of work, or the place of the alleged infringement/violation of your rights. This link will redirect you to the European Data Protection Board website with an up-to-date list of all European Economic Area Data Protection Authorities: https://edpb.europa.eu/about-edpb/board/members_en. The UK authority, the ICO, can be reached here: https://ico.org.uk/.

International Data Transfers. By using our Services you understand that your personal information is transferred to countries outside of the EEA and UK, and notably to the United States, which are not deemed by the European Commission or UK government to provide an adequate level of personal information protection. We have implemented measures to protect your personal information, including contractual terms such as the European Commission-approved Standard Contractual Clauses and their UK equivalent. You can obtain a copy of these terms by contacting us as noted below.

How to Contact Us.

You can contact us by emailing privacy@justicetechassociation.org or writing us at 3600 Duke Street, Suite 1-1160, Durham, NC 27704.