Privacy
This is a private website for members of the 100 Quincy Community Garden and is not intended for the general public. Access is restricted to account holders with an invitation.
Information We Collect
- To operate the site effectively, we collect the following information:
- Your Name: We use your name to identify you to other members.
- Your Email Address: We use your email address in order to contact you and to identify you when you log on to the website. Your email address is not visible to other members but is accessible to Admins.
- Technical Information: We log your IP address and some information about your browser type, operating system, and the date and times you access the site for session management and security purposes. This includes logging IP addresses and the email addresses entered during unsuccessful login attempts.
- Optional Information: Your shift activity, Wall Posts, Replies, and any information you include on your member profile are visible to other members.
Cookies
We use essential functional cookies to manage user sessions and keep you logged on, and to ensure secure access. We do not use any tracking, advertising, or third-party cookies.
Data Retention
- To ensure stability, our database is backed up regularly, and those files are stored securely for up to 60 days. The following types of data may be included in those backups:
- Your Personal Information (see: "Information We Collect", above) If you delete your account, your personal data will be removed from the live site immediately; however, it may continue to exist in offline backups before being permanently deleted.
- Log On Fails Logs of failed access attempts are retained for up to 90 days and used solely for security monitoring and abuse prevention. These logs include the IP address and the email address entered during the attempt.
- Invitations We temporarily store email addresses submitted by Admins as invitations in order to limit access to the website to Garden members. Invitations are deleted either when they are used or after 30 days of inactivity.
- Email Addresses We maintain a log of all email messages sent by the website for up to 7 days for system monitoring and troubleshooting. This includes the date and time the message was sent, the address it was sent to, and the subject line. This data is visible to Admins but not to other members.
Third-Party Partners
- We do not share your personal information with anyone except where required by law, and in the following circumstances:
- MailerSend: We use MailerSend, a GDPR compliant transactional email provider, to securely process emails in order to contact you. Privacy Policy Data Processing Addendum and GDPR Agreement
- iPage (formerly iPower): Our web hosting provider maintains industry-standard server logs that include your IP address, the date and time of your visit, pages visited, and other technical details. These logs are used for security, performance monitoring, and compliance purposes and are stored for a maximum of 30 days. Privacy Policy
Security Measures
We employ encrypted connections and secure storage practices to protect your data.
User Rights
You have the right to access, correct, or delete your personal data. Contact an admin for assistance.