SDMAC Privacy Policy
Last updated: July 4, 2023

San Diego Military Advisory Council (“us”, “we”, or “our”) operates the SDMAC.org website (the “Service”). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of Personal Information when you use our Service and the choices you have associated with that information. We will not use or share your information with anyone except as described in this Privacy Policy. Please read this Privacy Policy carefully to understand what SDMAC does. If you do not understand any aspect of the Privacy Policy, please feel free to contact us as described at the end of the Privacy Policy.

We use your Personal Information to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible at www.sdmac.org.

What Information Do We Collect?
The types of personal information we collect depend on the services you request. While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to, your email address, name, title and organization/company, phone number, account number, and credit card information (“Personal Information”).

We also collect information that your browser sends whenever you visit our Service (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (IP) address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

How Do We Collect Your Information?
We collect information from you or about you when you provide the information to us directly during your interactions with us. For example, we may collect your information when you request information or services from us, register for the Service, respond to surveys, or contact us. We may also collect information about you when you interact with us via social media and from a variety of third-party sources or public information, in order to verify and enhance any of the information received or collected, to effect, administer and enforce the services we provide you, and maintain the accuracy of our records. We may combine this information with personal and other information we have collected about you under this Privacy Policy.

Additionally, we use tracking technologies such as cookies and web beacons to help us measure the effectiveness of our Service, how visitors use the Service, and to help keep your transactions secure. Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are stored by your browser when you visit a website. Accepting a cookie does not provide us access to your computer. The type of information we collect using cookies includes pages visited on our sites, and whether you are a new or a returning visitor. We use cookies to collect information in order to improve our services for you.

You may disable the use of cookies on our websites by instructing your browser to refuse all cookies or to indicate when a cookie is being sent. The Help feature on most browsers provides information on how to accept cookies, disable cookies, or notify you when receiving a new cookie. However, if you do not accept cookies, please note that you may not be able to use some features of our Service, and we recommend that you leave them turned on.

The use of third-party cookies is not covered by our Privacy Policy. We do not have access to/or control over these cookies. If you continue to use our website, we will assume you agree to the use of these cookies. You may visit the following links from our third-party providers to opt out of their tracking and learn about their privacy practices:

Google Analytics
This Website uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to help the Website operators analyze how users use our site. Google stores anonymous information generated by the cookie on its servers. To opt out of Google Analytics Tracking, follow this link to get a tool to allow your browser to opt out of Google Analytics tracking: https://tools.google.com/dlpage/gaoptout.

How Do We Use Your Information?
We collect your information for a variety of purposes including:

• Providing the Service (e.g., opening and maintaining your account, processing requests).
• Identifying and communicating with you.
• Responding to your requests/inquiries.
• Servicing your purchase orders.
• Developing, evaluating, and improving our services.
• To track activity on our sites.
• Enhance the customer experience (e.g., to allow you to change web pages without having to re-enter your password and to store your preferences and other information); and
• To improve the operation of the website and the running of our organization.

Communications
We may use your Personal Information to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.

Retention of Data
SDMAC will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

SDMAC will also retain Log Data for internal analysis purposes. Log Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

Anonymous Information
We may also use data that we collect on an aggregate or anonymous basis (such that it does not identify any individual customers) for various business purposes, where permissible under applicable laws and regulations.

With Whom Will Your Information Be Shared?
Service Providers
We may employ third-party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services, and/or to assist us in analyzing how our Service is used.  These third parties have access to your Personal Information only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purpose and to keep your information confidential.

Compliance With Laws
We will disclose your Personal Information where required to do so by law or subpoena or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Service.

Third-Party Analytics
Your anonymous information, collected using cookies and web beacons, is shared with a third-party analytics company to provide us with information about how visitors use our sites. We use this information to help us learn things like what pages are most attractive to our visitors, what products our clients are interested in, and what kinds of offers they like to see.

No Third-Party Marketers
We do not share your personal information with third parties so they can market to you without your consent. Should these marketing practices change, we will seek your consent before sharing your personal information and provide a means for you to opt out of certain information sharing, where applicable. We will also update our privacy policies and notify you of the change.

Special Situations May Require Disclosure of Your Data
We also may make identifiable and anonymous information available to third parties in these limited circumstances: (1) with your express consent, (2) when we have a good faith belief it is required by law, (3) where permitted by applicable law, when we have a good faith belief it is necessary to protect our rights or property, or (4) to any successor in a merger, acquisition or bankruptcy. We will attempt to notify you in any such case, to the extent permitted by law to do so.

If the ownership of all or substantially all of our business changes or we otherwise transfer assets relating to our business or the Service to a third party, such as by merger, acquisition, bankruptcy proceeding, or otherwise, we may transfer or sell your personal information to the new owner. In such a case, unless permitted otherwise by applicable law, your information would remain subject to the promises made in the applicable privacy policy unless you agree differently.

We Take Steps To Protect Your Information
The security of your Personal Information is important to us, and we strive to implement and maintain industry standard physical, technical, and administrative security procedures, safeguards, and practices appropriate to the nature of the information we store, in order to protect the confidentiality and security of your Personal Information from unauthorized access, destruction, use, modification, or disclosure. These may include encryption of data from pages where payments are made, or other sensitive data is transmitted. Keep in mind, however, that no security or encryption method can ensure complete protection from hackers or human error.

However, please be aware that no method of transmission over the Internet, or method of electronic storage is 100% secure, and we are unable to guarantee, ensure, or warrant the security of any Personal Information you transmit to us. There is no guarantee that information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. It is your responsibility to protect the security of your login information.

International Transfer
Your information, including Personal Information, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including Personal Information, to the United States and process it there.

Accordingly, if you are a resident of the European Economic Area (EEA), your Personal Information may be transferred outside of the country where you reside or are located, including to countries that may not or do not provide the same level of protection for your Personal Information. We are committed to protecting the privacy and confidentiality of Personal Information when it is transferred. Where such transfers occur, we take appropriate steps to provide the same level of protection for the processing carried out in any such countries as within the EEA to the extent feasible under applicable law. By using and accessing our Service, users who reside or are located in countries outside of the United States agree and consent to the transfer to and processing of Personal Information on servers located outside of the country where they reside, and that the protection of such information may be different than required under the laws of their residence or location.

Links to Non-SDMAC Websites
We are not responsible for information collection practices of non-SDMAC links you click on from our sites. These third parties may have very different privacy policies and we encourage you to review their practices before providing them with any personally identifiable information.

Social Media Platforms
We may interact with registered users of various social media platforms including, but not limited to, Facebook®, LinkedIn®, Instagram®, YouTube® and Twitter®. Any content you post to such social media platforms, such as pictures, information, opinions, or any personal information that you make available to users on these social platforms, is subject to the terms of use and privacy policies of those respective platforms. We recommend that you review them to better understand your rights and obligations with regard to such content.

Children’s Privacy
In compliance with the Children’s Online Privacy Protection Act, 15 U.S.C., §§ 6501-06 and 16 C.F.R., §§ 312.1-312.12, the Service does not collect information from children under 13 years of age, and we do not intentionally collect information from persons under eighteen (18) years of age. Use of the Service is limited to users that are eighteen (18) years of age and older. By using the Service, you represent that you are eighteen (18) years of age or older. For more information about the Children’s Online Privacy Protection Act (COPPA), visit the FTC website: www.ftc.gov.

California Privacy Rights
California Civil Code Section § 1798.83 permits users of our Service that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. We do not disclose your information to third parties for their direct marketing purposes.

Your Rights Under GDPR
If you are from the European Economic Area (EEA), the SDMAC legal basis for collecting and using the Personal Information described in this Privacy Policy depends on the type of data collected and the specific context in which we collect it. SDMAC may process your Personal Information because: (1) we need to perform a contract with you; (2) you have given us permission to do so; (3) the processing is in our legitimate interests, and it’s not overridden by your rights; and (4) we need to comply with the law.

Under the GDPR, you have the following rights related to SDMAC’s use of your Personal Data.

Right 1
A right to access personal data held by us about you, as well as information about how we are using your data.

Right 2
A right to require us to rectify any inaccurate personal data held by us about you.

Right 3
A right to require us to erase personal data held by us about you, and where the personal data has been made public, for other controllers processing the personal data to also erase links to, or copy or replication of, such personal data.  This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below).

Right 4
A right to restrict our processing of personal data held by us about you.  This right will only apply where (for example): you dispute the accuracy of the personal data held by us; where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but you require the data for the purposes of dealing with legal claims.

Right 5
A right to receive personal data, which you have provided to us, in a structured, commonly used, and machine-readable format.  You also have the right to require us to transfer this personal data to another organization, at your request.

Right 6
A right to object to our processing of personal data held by us about you (including for the purposes of sending marketing materials to you).

Right 7
A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with marketing information about our services or products). If you have consented to receive communications from us, you can contact us at any time to have your details removed from lists used by us or to update your marketing preferences. Please email admin@sdmac.org and quote your email/telephone number/account number in the body of the email, telling us what you would like us to do.  You can also click “unsubscribe” on any of our emails, and we will ensure we don’t send you any communications of this nature in the future.

As a resident of the EEA, you have certain data protection rights. SDMAC aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. If you would like to exercise any of your rights listed above, please contact us. Please note that we may ask you to verify your identity before responding to such requests. Additionally, exercising your rights may affect your ability to use the site, as the operation and functionalities provided on the site may require the use of your Personal Data.

We Update Our Privacy Policy Periodically

This Privacy Policy was last updated on July 4, 2023.

We reserve the right to update or change our Privacy Policy at any time.  If we make any material changes to our Privacy Policy, we will place a prominent notice on our website.  If the change materially affects users, we may also notify you through the email address you have provided us.  We will not reduce your rights under this Privacy Policy without your consent in accordance with applicable law.  We will also keep prior versions of this Privacy Policy in an archive for your review.

You May Ask Us Questions
If you have any questions about this Privacy Policy, please contact us:

• By email: admin@sdmac.org
• By phone: 619-299-3763
• By postal mail:  San Diego Military Advisory Council, 409 Camino del Rio South, Suite 302, San Diego, CA 92108