Privacy Policy

Privacy Statement

Last Updated May 14, 2019

Iris Media, Inc., an Oregon corporation doing business as Iris (“Iris” or “we”) displays certain educational resources through its website, www.irised.com, (the “Site”). Visitors to the Site, including you, can use the Site to browse these resources and make purchases (the “Services”).

We recognize your need to understand our privacy practices, especially those related to the collection and use of data that identifies you, directly or indirectly, as an individual person (“Personally Identifiable Information”). This Privacy Statement (“Statement”) is meant to inform you of those practices. This Privacy Statement applies only to your interactions with the Site. If you link to other websites from the Site, including other websites operated by Iris, please be sure to carefully review the privacy statement of such other websites.

If you have questions, please contact us using any of the following methods:

TOLL FREE: (1) 877-874-3642
EMAIL ADDRESS: support@trifoia.com
MAILING ADDRESS: IRIS Media Inc.
1203 Willamette St. Suite 100
Eugene, OR 97401

1. WHAT DATA DOES IRIS COLLECT FROM SITE USERS?

1.1 AUTOMATICALLY COLLECTED DATA. Each time you visit the Site, we use cookies to automatically collect the following data from you:

your Internet Protocol (IP) address;
your browser type;
other software and hardware attributes about the device and means you use to access the Site;
the date and time of your visit;
the webpage you leave to come to the Site and the webpage you go to next after leaving the Site;
the location of the device through which you are accessing the Site; and
your movements around the Site (such as the items you click on and the amount of time you spend interacting with a particular piece of content).

We also allow third party social media platforms with links on our Site, such as Facebook and Instagram, to use cookies to automatically collect the above categories of data from you.

1.2 REQUESTED DATA. In certain cases, we will ask to collect additional data from you. In particular:

If you want to purchase a product described on the Site, we will prompt you to provide:

your email address;
the postal address to which you would like us to ship physical products; and
your payment information, including credit card number and billing address.

If you want to submit a message to our customer or technical support team using the Site’s “Contact Us” feature, we will prompt you to provide:

your first and last name;
your email address; and
the message or question you would like to share with us.

2. HOW DOES IRIS USE DATA COLLECTED FROM SITE USERS? We use data collected from you in the following ways:

2.1 TO COMMUNICATE WITH YOU. We will use the email address you provide when purchasing a product or when submitting a customer or technical support message to contact you to confirm your orders and provide customer support. We will also use this email address to send you emails containing product offers and other marketing materials; you can unsubscribe from our mailing list at any time using the “UNSUBSCRIBE” link we include in marketing messages.

2.2 TO PROVIDE SERVICES YOU’VE REQUESTED. If you use the features of the Site to purchase a product, we (subject to our Terms of Use) use the information that you provide to deliver the product to you.

2.3 TO DELIVER CUSTOMIZED CONTENT. We use data collected through cookies to customize your experience with the Site. For example, if you place an item in your shopping cart on the Site but do not complete your purchase, we “remember” you, such that the next time you visit the Site that product is still in your cart.

2.4 TO IMPROVE THE SITE. We will use data collected about your interactions with the Site to look for trends in the popularity of features so that we can improve those features, to detect security incidents and bugs, and to stop fraudulent or illegal activity.

2.5 TO EXERCISE OUR LEGAL RIGHTS. Where legally required or permitted, we will use data collected from you to respond to court orders or otherwise participate in the legal process.

Additionally, Iris may use de-identified or aggregated data collected about you in ways permitted by law but not described above. In general, de-identified information is information that does not directly or indirectly identify you. Aggregate information is information about a group of users, from which individual identities have been removed.

3. DOES IRIS SHARE USERS’ DATA WITH OTHERS? We share data collected from you through the Site with the following third-parties:

3.1 PAYMENT PROCESSORS. We use payment processors to handle any fees you submit to us (such as the fee you must pay in order to purchase a product). When you click to submit payment, the Site will link you to such a processor, and our Site will alert the processor that you want to submit payment to Iris. All payment information, such as credit or debit card details, will be submitted directly to the processor and will not be accessible to us.

3.2 SHIPPING COMPANIES. When you order physical products, we share your name and address with third party shipping companies, such as the United States Postal Service and FedEx, so that these companies can deliver products to you.

3.3 WEB HOST. We use a third party web host to host data and operate the Site. In performing its services, the host may have access to your Personally Identifiable Data. We do not authorize the host to use such data except as necessary to perform web hosting service and fulfill its other business purposes. We do not authorize the host to further collect, sell or use your Personally Identifiable Information.

3.4 EMAIL MANAGERS. In order to send you marketing messages, we will share your name and email address with our third party email distributor.

3.5 SOCIAL MEDIA COMPANIES. We allow third parties with links on our Site, such as Facebook and Instagram, to use cookies on our Site to collect data from the categories listed in Section 1.1 above. Collecting this data allows these third parties to target ads to you (when you are using the third party’s website or application) for goods or services that may be of interest to you.

3.6 DATA ANALYZERS. We share data with data aggregation and analytics software providers to enable us to monitor and improve the Site. For example, these providers help us track mouse movements on the Site (so we can understand which products on the Site are most interesting to users) and understand how many visitors to the Site ultimately purchase a product (so we can continue that make purchasing easier).

3.7 MERGERS & SALES. If we undergo a merger or sale, we will share collected data if and as permitted by law.

Except as described above, Iris does not rent, sell, or share Personally Identifiable Information about you with other people or companies.

4. HOW LONG DOES IRIS KEEP DATA? We will retain your Personally Identifiable Information only for as long as is necessary for the purposes set out in this Privacy Statement. However, even after such Personally Identifiable Information is deleted, we may retain and use data that does not constitute Personally Identifiable Information (including de-identified or aggregated information) for our business purposes, such as creating internal reports that assist our development of new products and providing “traffic statistics” and “response rates” to third parties.

5. INFORMATION FOR USERS WHO ARE CALIFORNIA CONSUMERS. In addition to the other information provided in this Privacy Statement, Iris wishes to provide the information in this Section 5 to users who are California consumers. For purposes of this Section 5, a “California consumer” is a natural person who is in California for other than a temporary purpose (or who is domiciled in California and is outside of California for only a temporary purpose).

5.1 YOUR RIGHTS. If you are a California consumer, you have certain rights with respect to the Personally Identifiable Information we collect and hold about you, which rights you may exercise by contacting us using the information provided above. In particular:

In certain circumstances you have the right to request that we disclose to you:

the categories of sources from which we collect Personally Identifiable Information;
the business or commercial purpose for which your Personally Identifiable Information is collected or sold;
the categories of third parties with whom we share Personally Identifiable Information; and
the specific pieces of personal information we have collected about you.

In certain circumstances, you have the right to have Personally Identifiable Information of yours that is under our control deleted.

We cannot discriminate against you based on the fact that you exercise any of your rights under the California Consumer Privacy Act of 2018. In general, this means we cannot, just because you have exercised your rights, deny you goods or services; charge you a different price or rate for goods or services; provide you a different level or quality of goods or services; or suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

5.2 ACTIVITY IN PREVIOUS 12 MONTHS.

Sales. In the 12 months prior to the Effective Date, we have not sold users’ Personally Identifiable Information.

Collections. In the 12 months prior to the Effective Date, we have collected Personally Identifiable Information from the following categories:

Name (both individual name and account user name);
Email address;
IP address;
Phone number;
Commercial information, including a record of goods users have purchased through the Site and the price of those goods;
Geolocation data; and
Internet or other electronic network activity information, such as browsing or search history and other information about users’ interactions with the Site.

All of the Personally Identifiable Information listed in this Section 5.2 was collected from you (or your device) for the business or commercial purposes identified in Section 2 above. This Personally Identifiable Information was shared with payment processors, shipping companies, data analyzers, email distributors, and our web host (as further described in Section 3 above).

6. INFORMATION FOR USERS WHO ARE IN THE EUROPEAN UNION. In addition to the other information provided in this Privacy Statement, Iris wishes to provide the information in this Section 6 to users accessing the Site in the European Union.

6.1 LEGAL BASIS FOR PROCESSING. If you are in the European Union, law prohibits us from processing your Personally Identifiable Information unless we have a legal basis for doing so. When we process your Personally Identifiable Information, we have one or more of the following legal bases to do so:

Performing a Contract. We have a lawful basis to process your Personally Identifiable Information when such processing is necessary for the performance of a contract to which you are a party. For example, when you ask us to sell you a product listed on the website, you have given us a lawful basis to process your Personally Identifiable Information pursuant to the Terms of Use. You can decline to provide the information we need to complete your request; however, if you decline to provide such information, we may not be able to complete your request, contact you, or otherwise provide you the Services.
Consent. We have a lawful basis to process your Personally Identifiable Information when you provide us with consent to process such information for the purposes specified in this Privacy Statement. For example, you may have given consent to our use of cookies to collect Personally Identifiable Information from you when you first accessed the Site and clicked the button to signify that you “Accept” such use. You may withdraw your consent at any time by contacting us using the contact information above. However, because we need some Personally Identifiable Information to operate the Site and provide you the Services (as described in more detail above), most features of the Site will be unavailable to you if you withdraw consent.

Legitimate Business Purposes. We have a lawful basis to process your Personally Identifiable Information when such processing is necessary for the legitimate interests pursued by us or by a third party, as long as those interests aren’t overridden by your fundamental rights and freedoms or your other interests. For example, we have a legitimate interest in processing your Personally Identifiable Information when such processing is necessary to prevent fraud or to ensure network and information security. Also, in some cases, we and third parties have a legitimate interest in processing your Personally Identifiable Information when such processing is necessary for direct marketing purposes.

6.2 DATA TRANSFERS. If you are in the European Union, please be advised that your Personally Identifiable Information will be transferred to, and may be stored in, the United States. In particular, we utilize Amazon AWS as a web hosting provider. AWS is certified under the US-EU Privacy Shield Framework and uses Model Clauses to comply with European Data Protection laws.

6.3 YOUR RIGHTS. If you are in the European Union, you have certain rights with respect to the Personally Identifiable Information we collect and hold about you. In particular, in certain circumstances you have the following rights with respect to the Personally Identifiable Information we have collected about you:

to ask us to confirm whether we are processing your Personally Identifiable Information;
to access your Personally Identifiable Information;
to have your Personally Identifiable Information corrected or deleted;
to object to, or request the limiting of, our processing of your Personally Identifiable Information;
to receive your Personally Identifiable Information in a structured, commonly used and machine-readable format, and (where technically feasible) to have your Personally Identifiable Information transmitted to another controller; and
to lodge a complaint with the supervisory authority in the European Union.

To exercise these rights, please contact us using the information provided above.

7. WILL THIS PRIVACY STATEMENT BE UPDATED OR MODIFIED? Iris may update or modify this policy at any time by posting the updated policy (including an updated Effective Date) on the Site.