Privacy Notice

The Center for Youth, Family & Community Partnerships ("CYFCP," "we," "us," or "our") at the University of North Carolina at Greensboro is committed to protecting the privacy of individuals who use the Bringing Out the Best (BOB) platform ("Platform"). This Privacy Notice explains what information we collect, how we use it, how we protect it, and your rights regarding your data.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name (first and last name)
• Email address
• Username
• Password (stored in hashed/encrypted form — we never store plain-text passwords)
• Phone number (optional)
• Professional title and post-nominal credentials (optional)
• Company or organization (optional)
• Profile picture (optional)
• Bio (optional)

1.2 Case Record Data

Authorized users enter data related to children and families participating in the Bringing Out the Best program, including Classroom, Triple P, and Half Day case types. This data may include:

• Case identifiers and type
• Referral information and dates
• Family and support network details
• Case status, notes, and progress records
• Facilitator and specialist assignments

Case record data is classified as sensitive and is subject to strict access controls and applicable state and federal confidentiality requirements.

1.3 Automatically Collected Information

When you use the Platform, we automatically collect basic usage and access information for security and system management purposes. This includes information necessary to:

• Maintain security and detect suspicious or unauthorized activity
• Troubleshoot technical issues and ensure system reliability
• Analyze usage patterns to improve the Platform

This information is logged securely and accessed only by platform administrators when necessary.

1.4 Cookies and Session Data

The Platform uses essential cookies to maintain your session and protect your account security. These include:

• Authentication cookies — keep you logged in during your visit and expire when you close your browser or after a period of inactivity.
• Security cookies — protect your account from unauthorized access and malicious activity.

We do not use advertising or third-party tracking cookies.

2. How We Use Your Information

We use the information we collect for the following purposes:

3. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Within the program: Platform administrators and managers can access user information as needed for program administration. Team managers can view information about their team members.
• Program partners: De-identified or aggregate data may be shared with program funders or research partners for evaluation purposes, subject to applicable approvals.
• Legal obligations: We may disclose information when required by law, subpoena, court order, or to protect the rights, safety, or property of the Platform, its users, or the public.

4. Third-Party Services

The Platform uses trusted third-party service providers to support its operations, including:

• Cloud infrastructure providers for secure file storage and database backups
• Email service providers for delivering transactional and notification emails

All third-party services are selected based on their security standards and compliance with applicable privacy regulations. Each service provider operates under its own privacy policy.

5. Data Security

We implement industry-standard security measures to protect your data:

• Password protection: Passwords are encrypted and never stored in readable form.
• Encryption: Data transmitted to and from the Platform is encrypted in transit.
• Access controls: Role-based access ensures users can only access data appropriate to their role.
• Secure storage: Files are stored with encryption and access restricted to authorized personnel.
• Activity logging: System activities are logged for security auditing and compliance purposes.
• Regular backups: Data is backed up regularly to ensure recovery in case of system failure.
• Error handling: Sensitive data is protected in error reporting and logs.

6. Data Retention

We retain data for different periods based on its type and purpose:

7. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may update your account information through your profile page, or request corrections to other data by contacting an administrator.
• Deletion: You may request deletion of your account and personal information, subject to legal and program retention requirements.
• Data portability: You may request your personal data in a portable format where technically feasible.

To exercise any of these rights, please contact a platform administrator.

Note: Case record data is governed by program data governance policies and applicable law. Requests related to this data should be directed to the appropriate agency or program administrator.

8. Children's Privacy

The Platform is not intended for direct use by children under 13. We do not knowingly collect personal information directly from children under 13. Case data involving minors is submitted by authorized adult professionals on behalf of the program and uses coded identifiers in accordance with applicable confidentiality requirements.

9. Administrative Access

Platform administrators have the ability to view the platform as another user for troubleshooting and support purposes. When this occurs:

• A visible banner indicates that impersonation is active.
• All actions during impersonation are logged.
• This feature is restricted to authorized administrators only.

10. Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users as promptly as possible.
• Comply with NC Identity Theft Protection Act notification requirements.
• Take immediate steps to contain and remediate the breach.
• Provide information about steps you can take to protect yourself.

11. Changes to This Notice

We may update this Privacy Notice from time to time. When we make material changes, we will update the "Last Updated" date and notify users via email or a notice on the Platform. We encourage you to review this notice periodically.

12. Contact Information

If you have questions or concerns about this Privacy Notice or our data practices, please contact us at: