Privacy Policy | STAR Autism Support

This Privacy Policy describes how STAR Autism Support, LLC (“STAR” or “we” or “our” or “us”) treats certain information collected or provided in connection with an end user’s (“you” or “your” or “user”) use of SAS’ website, https://starautismsupport.com/, and any other website, social media pages, apps, or other digital medium owned or operated by STAR (collectively, the “Site”). This Privacy Policy also applies to any Personal Information (defined below) collected, stored, or used by us, such as information you provide us through the above mediums, by email, mail, or telephonic communications in connection with our Site and any and all products or services provided to you by STAR (“Services”).

The information provided in this Privacy Policy is designed to inform you of what information we collect, why we collect such information, how we use the information we collect, and the choices we offer, including how to access and update information. By accessing or using our Site, you acknowledge and consent to the Terms and Conditions and this Privacy Policy, including our collection, use, and disclosure of your Personal Information, as described below. This Privacy Policy is not a contract and does not create any legal rights.

Please read this Privacy Policy carefully.

Our Collection and Use of Personal Information

“Personal Information” is any information that can be used to identify you. This Privacy Policy does not cover data we, or our authorized third-party vendors or partners, collect that cannot be used to identify an individual or to pseudonymous data.

We get most Personal Information directly from you, through the Site, or from transactions with you in connection with our Services. We might also obtain Personal Information about you from other Site users or other entities with whom we have contact. For example, we (or our vendors) may obtain Personal Information through public records, educators using the Services, AI retrieval methods, and/or transactions you have with our authorized third-party vendors or partners. If you are sharing information with us about any other individual, you must obtain their consent.

The categories of Personal Information we may collect from you include:

Your name.
Contact information, including your phone number, email address, mailing address, employment details, and social media account and profile identifiers.
Payment card number (or other payment method) and related validation information.
Information you provide when interacting with the Site, including purchase history, transaction data, and communications (including email and direct messages ”DM”).
Website analytics information, including when, how often, and for how long you use the Site; information related to your geographic location; the content you submit and view; the name of the domain and host from which you access the Internet; and the IP address of the computer or device you are using.
Information you provide in connection with your utilization of the Site or Services.
Other identifiable information about you, such as date of birth, gender, geographic location, photographic images of you.

We collect Personal Information to help identify you; to perform contractual obligations, including our Services and/or processing and fulfillment of orders; to communicate with you upon your explicit consent and under certain circumstances; to properly administer our Site and to maintain records; to research and analyze the use of our Site and Services so we can improve our Services; to detect and prevent fraud; to exercise and defend legal claims; to comply with legal obligations; and for other purposes and legitimate interests as described in this Privacy Policy.

For some aspects of our Site, you may need to or be able to register an account with us via our Site (“Account”) by providing certain Personal Information. In doing so, or in connection with our Services generally, you may need to represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use the Site. You may also need to provide a valid email address or add shipping and billing information to place orders. All information that you provide to STAR or its vendors, agents, associates, or partners, including your payment card or financial account information, is subject to STAR’s Privacy Policy or the respective third-party privacy notice. You may update, correct, or delete information about you at any time by logging into your Account and updating your profile information or by emailing us at information@starautismsupport.com. If you wish to delete your Account or, under appropriate circumstances, any Personal Information that may have been collected, please email us at information@starautismsupport.com, but note that we may require further confirmational procedures and necessarily retain certain information about you for legitimate business purposes or as required by law.

We may directly or in connection with our vendors also collect and maintain Personal Information about you to create a personal profile containing preferences and other information that you voluntarily provide to us. Examples of the types of information we may collect for this purpose include your first and last name, a valid email address, geographic location or address, employment information, phone number, and social media details. Additionally, we may use your email address to send confirmation of purchases and, if necessary, to contact you to help process a purchase. We may also use your email address and Personal Information for our own marketing purposes and to notify you about special offers, promotions, upcoming events, or matters may be of interest to you.

You can choose not to provide certain information to us, but it may delay or prevent us from providing our Services to you, including your ability to fully access our Site, participate in our Services, receive our newsletters, or similar features.

We may also automatically receive and store certain types of Personal Information whenever you visit the Site, such as information from Google Analytics (see https://policies.google.com/privacy) on when, how often, and for how long you use the Site, information related to your geographic location, and the content you submit and view. We may also use Pendo, an analytics service provided by Pendo.io, Inc., to evaluate and monitor the use of our Site and web-based portal, to gather user feedback, and to improve user experience. If you voluntarily provide your email address when providing optional in-product feedback, we may combine your email address with usage data collected by Pendo. For additional information, please visit Pendo’s Privacy Policy at www.pendo.io/legal/privacy-policy/. We may also use Salesforce to coordinate user data. This tool is embedded in our Site for general use, web management, and analytics purposes, and uses cookies to identify you when you visit and re-visit our website. With this tool we track different data points when you are using our website in order to improve the website content we provide to you as well as to improve our user notices/engagement campaigns and make their content more relevant for you. For more information on Salesforce's privacy policy, you can find their privacy policy here: https://www.salesforce.com/company/privacy/. Some of our vendors also incorporate AI tools, which can augment information collected by the Site.

This information collected through the Site may include the name of the domain and host from which you access the Internet and the IP address of the computer or device you are using. The session replay tools we use (such as Pendo) capture mouse movements, clicks, form inputs, and behavioral data. Certain sensitive data (such as credit card numbers) is not collected or shared via session replay tools used on our Site. We may log and use your IP address to administer the Site, to help diagnose problems with our server, to analyze trends, to track users’ webpage movements, to help identify you and/or verify your use, and to also gather broad demographic information for aggregate use and/or our own marketing purposes. We may use standard tools, such as cookies, scripts, or web beacons, to monitor the Site and Internet usage and to improve or customize the content on the Site. You may be able to control the use of these tools with respect to your own devices by changing your own browser settings.

Our web servers may collect log data, which provides aggregate information about the number of visits to different pages on the Site. We use such aggregate log data to improve access to the Site based on visitors’ web browsers and operating system types to make the Site available to as many users as possible. We do not link the log data collected to Personal Information or student data. Third party providers may also collect aggregate log data independently from us.

We do not currently respond to Do Not Track or Global Privacy Control browser settings because a uniform technological standard has not yet been developed, and we do not have control over other sites’ use or acceptance of Do Not Track browser settings or the Global Privacy Control signal. We reserve the right to update our practices and Privacy Policy as such standards evolve.

Categories of Personal Information Disclosed to Third Parties

We DO NOT sell your Personal Information to any third parties. In the preceding twelve (12) months, we did not sell any categories of Personal Information.

Certain sensitive data (such as credit card numbers) is not collected or shared via session replay tools used on our Site.

We may disclose your Personal Information and other information about you or about your activities on our Site or while using our Services in order to conduct our business and better serve you with the following groups:

Our affiliates.
Our service providers and vendors, such as payment processors, data storage providers, promotional partners, website hosts, analytics and session replay tool providers, legal counsel, and various customer, technology, and operational support.
Third parties approved by you, such as social media sites.
Financial and legal institutions.
Law enforcement agencies, regulatory bodies, courts, or other public authorities, to comply with our legal and regulatory obligations, to respond to requests from governmental authorities, to protect our rights, to defend against legal claims, or as otherwise required by law.

Some third-party providers may independently collect Personal Information when you visit our Site. Our authorized third-party vendors and partners have their own privacy notices which govern the use, handling, and disclosure of your Personal Information.

For example, our Site may have functionality in connection with Authorize.net, providing us with certain aspects of the online e-commerce platform that allows us to offer products and services for purchase. Purchaser data is stored through Authorize.net's data storage, databases, and interfaces. Authorize.net (or its third-party payment processing vendors) stores purchaser data on a secure server behind a firewall. Please note that in such circumstances we do not ourselves directly process or store the debit/credit card data that purchasers submit. If you choose a direct payment gateway to complete your purchase, then Authorize.net stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase payment transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase payment transaction information is deleted. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For additional information, please refer to the Authorize.net Privacy Policy at https://usa.visa.com/legal/privacy-policy.html. We are not responsible for the Authorize.net Privacy Policy, Cookie Policy, or Data Processing Agreement and you assume all related risks when interacting with Authorize.net’s services.

When we use third-party web analytics services on our Site, such as those of Google Analytics (see https://policies.google.com/privacy), Pendo (www.pendo.io/legal/privacy-policy/), and/or Salesforce (https://www.salesforce.com/company/privacy/), the information collected may be used by STAR and/or others in aggregated / anonymized formats to, among other things, evaluate use of the Site and relevant Services, analyze and track data and Site session behaviors, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, prepare or augment user profiles, and better understand your online activity. For more information about interest-based communications, or options for opting out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices.

Retention, Confidentiality, and Security of Personal Information

We retain Personal Information for as long as is reasonably necessary for our business operations and to fulfill the purpose of collection or further processing as described in this Privacy Policy; as we determine is necessary for business records; and to comply with applicable law.

We restrict access to Personal Information to those who need to know in order to provide services to you and to conduct our internal operations. We maintain reasonable physical, electronic, and procedural safeguards to guard your information. However, the Internet and digital information is not absolutely secure and, thus, we cannot promise guaranteed security. In the unlikely event that we believe that the security of your Personal Information in our possession or control may have been compromised, we may seek to notify you. As applicable, we will comply with notification requirements for a security breach and may also notify you using the email address you have provided to us.

In the event of a merger, acquisition, corporate change, or bankruptcy, we may share or transfer your Personal Information as part of a transfer of our assets to the acquiring entity.

Children Under 13

We do not knowingly collect information directly from minors and the Site is intended for adults over the age of eighteen (18). For any information or content you provide to STAR via the Services or in any other manner, you must first have the lawful right to do so, have obtained all third-party consents, and agree to take full responsibility for any use by STAR of the same. You agree not to knowingly collect and/or share with STAR personal information from minors under the age of eighteen (18) years without the consent of their parents or guardians.

If you are a parent or guardian and believe that your child under the age of thirteen (13) has provided Personal Information directly to us without your consent, please notify us at information@starautismsupport.com. If we become aware that information is being or has been submitted by or collected directly from a minor under the age of thirteen (13) without proper authorization, we will work to promptly delete this information.

Your Rights

Under state or international law, you may have certain rights regarding your personal information. Please read below for the rights that apply to residents of certain jurisdictions or contact us at information@starautismsupport.com.

Residents of California

“Shine the Light” law: Effective January 1, 2005, under California Civil Code Section 1798.83, if an individual who is a California resident has provided Personal Information to a business in connection with a business relationship that is primarily for personal, family, or household purposes, and if that business has within the immediately preceding calendar year disclosed such an individual’s Personal Information to a third party and knows or should have known that such third party used the information for its own direct marketing purposes, then that business is obligated to disclose in writing to such individual upon request, what Personal Information was shared and with whom it was shared. We do not disclose such information to third parties for direct marketing purposes.

Residents of Nevada

Relevant consumers may submit a verified request directing STAR to not make any sale of any covered information STAR has or will collect about the consumer by using the following information: information@starautismsupport.com or STAR Autism Support, LLC, 9905 SW Arctic Dr., Beaverton, Oregon 97005; phone: 503.716.8203. You or your agent must provide sufficient confirmable and/or identifying information in order for us to verify and process your request.

Users from Outside the United States

Our Site is hosted in the United States and our Services are governed by United States law. If you are using the Services from outside the United States, please be aware that your Personal Information may be transferred to, stored, and processed in the United States where our servers are located. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. By using the Services, you consent to your Personal Information being transferred to our facilities and/or to the facilities of those third parties with whom we share it as described in this Privacy Policy.

As described in this Privacy Policy, we will only use (process) your Personal Information if you have given us consent to do so, it is necessary to fulfill a contract, or it is necessary for a legal obligation. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy and in accordance with applicable law. We use contractual protections for the transfer of personal information among various jurisdictions (including, for example, the European Commission's standard contractual clauses).

To deliver Services to you, it may also be necessary for us to transfer your Personal Information to the United States.

Under certain circumstances, you may have the following rights:

The right to request access to your Personal Information in our possession.
The right to request rectification (correction of inaccuracies) of your Personal Information in our possession.
The right to erasure (deletion) or of certain restriction of processing of your Personal Information in our possession.
The right to object to the processing of your Personal Information in our possession.
The right to data portability (transfer) of your personal data in our possession.
In the future, if we process any of your Personal Information by automated means, you may have the right to data portability (transfer) of your Personal Information in our possession.

Where you have given us consent to process your Personal Information for a specific purpose, you may withdraw that consent for processing that has not yet occurred.

We will respond to all requests we receive from individuals who intend to exercise their rights to Personal Information according to China Data Protection Law. In the European Union, you may also have the right to file a complaint with a supervisory authority.

For questions, please contact us at information@starautismsupport.com or STAR Autism Support, LLC, 9905 SW Arctic Dr., Beaverton, Oregon 97005; phone: 503.716.8203. You or your agent must provide sufficient confirmable identifying information in order for us to verify your request.

Viewing and Amending Information

If you no longer wish to receive communications from STAR, please contact us at information@starautismsupport.com or STAR Autism Support, LLC, 9905 SW Arctic Dr., Beaverton, Oregon 97005; phone: 503.716.8203. Opt-out requests may not be able to be immediately processed and we may continue to send you other types of transactional email communications.

Users may be able to log into their Accounts to view, amend, or delete Account information, including Personal Information. Please note that while changes or deletions to an Account or Personal Information may be reflected promptly in the active user database, our servers or our associated third parties may retain previously provided information, and may be required to keep certain information or not delete it, or keep information for a certain period of time.

Any changes to, or deletion of, Account information does not affect any other information collected by us, or which we may retain and continue to use or disclose in accordance with this Privacy Policy. If we already provided your Personal Information to a third party before you changed your preferences or updated your account, you may need to change your preferences directly with that third party.

Contact Us

If you have any questions or concerns about our Privacy Policy, or would like to exercise your rights under applicable law, please contact us at information@starautismsupport.com or STAR Autism Support, LLC, 9905 SW Arctic Dr., Beaverton, Oregon 97005; phone: 503.716.8203. You or your agent must provide sufficient confirmable and/or identifying information in order for us to verify and process your request.

We reserve the right to verify the identity of any person making a request to opt-out or to delete or modify Personal Information; provided, however, that we will have no liability of any kind resulting from false or erroneous requests or any change or deletion made by us for any reason.

Changes and Updates to the Privacy Policy

This Privacy Policy applies to all relevant information collected by or provided to us or our authorized third-party vendors or partners as of the Effective Date. When we make any material changes to this Privacy Policy, we will update the Effective Date and may inform you by email to the address associated with your interaction with our Site or our Services. We will treat your continued use of this Site or our Services following such notice as your acknowledgement and acceptance of the changes.

The Effective Date of this Privacy Policy is April 21, 2025.