Scope of the Policy
Compliance with Privacy Laws
YWM is committed to complying with all applicable U.S. federal and state laws governing student privacy, including but not limited to the Family Educational Rights and Privacy Act (FERPA), the Protection of Pupil Rights Amendment (PPRA), and the Children’s Online Privacy Protection Act (COPPA). Our Clients are responsible for obtaining necessary consent or providing notifications where required by law.
We collect and use personal information only to the extent necessary to provide our services and as permitted by our Clients and applicable laws. The specific information we collect may depend on the services provided to a Client, the relevant agreement, and applicable law. This may include student demographic data, wellness data, and other relevant information. All data collected is done so at the direction and on behalf of our Clients.
Use of Information
We use the collected information to help schools and educators understand wellness trends among their students. Data is analyzed in aggregate or group format, maintaining the anonymity of individual students. Importantly, we do not market, sell, or rent any student’s personal information. We do not engage in advertising and we use students’ information only for the purposes authorized by our Clients and in accordance with applicable law.
Sharing and Disclosure of Information
We share personal information only as instructed by our Clients, or as required by law. For example, we may share aggregate data or group reports with school administrators to inform wellness strategies. We do not disclose personal information to third parties without explicit authorization.
Data Security and Protection
We take the security of student data very seriously. We use a combination of administrative, physical, and technological security measures designed to protect personal information from unauthorized access, use, and disclosure. These measures include data encryption, secure server networks, and regular system monitoring.
Data Breach Response
In the unlikely event of a data breach, we will promptly notify affected Clients, school administrators, and all other impacted parties via email. We will work closely with these parties to investigate and remediate the situation in accordance with applicable law, striving to mitigate potential harm and prevent future breaches.
Confidentiality and Exceptions
We maintain strict norms of confidentiality with respect to all data. Exceptions to these norms may occur only as required by law, such as in cases of mandated reporting, or when explicitly authorized by a Client.