Your information is secure when using RethinkEd solutions.
This Privacy Notice (“Notice”) describes how the RethinkEd division of Rethink Autism, Inc. (“Rethink”, “we”, “us”, “our”) collects, uses, discloses, secures, and eventually disposes of (collectively “processes”) your personal information. Personal information is any information that does, or could, identify you.
This Notice applies to personal information collected on our websites (rethinked.com, nextgen.govizzle.com), mobile app (RethinkEd), and in the course of any offline contact with you (collectively the “services”). Our websites have public and subscription-only sections. Our mobile app is part of our subscription-only services.
Our services may contain links to external websites. This Notice does not cover these sites.
In this Notice, “you” refers to anyone about whom we collect and use personal information. You will usually be a school employee or contractor (for example, a teacher or administrator), a parent of a K-12 student, a caregiver to a student, or a visitor to our public websites. For parents and legal guardians, “your personal information” includes your student’s personal information.
RethinkEd provides online tools and content that assist schools to support all learners to bridge the academic achievement gap and in the development of their students’ social and emotional skills and behaviors. These schools are, in nearly all cases, the customer for the subscription-only sections of our websites. They exercise significant control over what personal information is collected and how it is used. This Notice does not cover the schools’ processing of your information.
RethinkEd is part of the Rethink group of businesses. This Privacy Notice applies only to RethinkEd.
We will update this Notice from time to time and will communicate material changes to you through an appropriate channel (for example, via a notice in our services). By continuing to use our services after changes are made to this Privacy Notice, you agree to such changes. We encourage you to periodically review this Privacy Notice for the latest information on our privacy practices. The Notice was last updated on June 15, 2022.
We collect the following categories of personal information:
We collect the categories of personal information listed above from the following categories of sources:
When we collect personal information directly from you, you will know, or have the ability to know, the details of that information. It may include:
Our subscription services facilitate the utilization of personal information for the purpose of assisting schools in their efforts to help bridge the academic achievement gap for all learners and to develop students’ social and emotional skills and behaviors. When we collect personal information about you or your child from other users of the subscription-only parts of the services, we do so solely for this purpose. Which users can access the personal information of which other users is determined and configured by school administrators. The personal information collected in this way may include:
Note: Our service does not require all of this information. For example, ethnicity, photograph, and educational classification are collected at the school’s discretion.
We collect personal information from observing your activity on our services in two ways:
As described in this Notice, we process personal information about children, including children under the age of 13. This personal information is collected from schools, parents, and caregivers, and also through a child’s use of the Student Centers. A child can only access the Student Centers with school-provided credentials.
The Student Centers are the only part of our services intended for use by children. When logged in to a Student Center, children may complete assigned lessons in curriculum subjects, assessments, games, quizzes, and other activities and tasks. We will never require or encourage children to reveal personal information beyond that revealed by the activity itself (for example, assessment results, quiz scores or progress in mastering subjects or skills). Access to the Student Centers by children or others is controlled solely by the school.
The Children’s Online Privacy Protection Act (COPPA) requires that parents consent to the collection, use, and disclosure of their child’s information when the child is under 13 years of age. Under COPPA, schools may act as the parents’ agent, consenting on their behalf to personal information processing in the educational context. As the operator of websites providing services to schools, RethinkEd obtains consent through the child’s school. We will only ever use children’s information for the benefit of the student and school, and never for our own commercial purposes.
Section 8 of this Notice describes how you can exercise parental rights, for example to access your child’s information, request its deletion, or opt out of future collection.
This section describes how RethinkEd uses your personal information. Remember that the school (our customer) has a high degree of control over the personal information processed in our subscription-only services. This Privacy Notice does not cover how schools use your data, which will be determined by their own policies and legal obligations.
RethinkEd will never sell your personal information.
When we receive your personal information under contract with our customers, we use the information only as specified or permitted by the contract. In particular, we will never:
RethinkEd may use your personal information for the following purposes:
Who we disclose your personal information to depends on the specific items of information and the purposes we use them for. Your personal information may be disclosed to the following categories of recipients:
We have in the preceding 12 months disclosed the following categories of personal information to service providers:
We will also disclose your personal information in the following exceptional circumstances:
Nondisclosure of Student Information: Any personal information received under contract with our customers will only be disclosed as specified or permitted by the contract. More specifically, we do not disclose identifiable student data to our service providers or other third parties.
We employ technical, physical, and administrative security measures appropriate to the categories of personal information processed in our services. These measures include, for example: encryption at rest and in transit, roles-based access, firewalls, and anti-virus software. For more details of our practices, please consult our Information Security Standards statement.
We protect information about student’s diagnoses, treatments, and outcomes with particular care. Rethink is HITRUST CSF certified. HITRUST CSF is a security and privacy framework that covers, among others, HIPAA and National Institute for Standards and Technology (NIST) standards.
Your personal information is stored on systems in the United States and is not transferred to other jurisdictions.
No matter how carefully we safeguard your information, it is unfortunately not possible to guarantee that it will never be accidentally or illegally breached.
When we receive your personal information under contract with our customers, we will retain it for the duration of the contract and then, according to our customer’s instructions, return it to them, delete it, or transfer it to another service provider.
Section 8 of this Notice below describes your right to request deletion of your data outside of our normal data retention schedule.
US and state laws give you various rights over your personal information and that of your child. These may include the right to:
In most cases relating to our subscription-only services, you should contact your school with any request to exercise privacy rights. This would include, for example, a request to access the information about your child that the school processes in our service. If necessary, however, please contact RethinkEd using the contact information in Section 9 of this Notice, and we will endeavor to facilitate your request.
Rights requests concerning personal information collected or used outside our subscription-only services (for example, on our public websites or in our marketing communications) should be addressed to RethinkEd using the contact information in Section 9 below.
You can opt out of our marketing communications at any time using, for example, the “unsubscribe” in an e-mail message or similar functionality in other communication formats.
Please note that, if you are a user of our subscription-only services, you may continue to receive service communications even after you have opted out of marketing communications. “Service” communications contain important information about the service for which you are a current user.
49 West 27th Street, 8th Floor
New York, NY 10001