Privacy Policy

Effective October 1, 2018


Super Duper, Inc. ("Super Duper") is strongly committed to protecting your privacy. This Privacy Policy was developed to give you a full understanding of terms and conditions relating to the handling of certain personal identifying information (“PII”) that may be collected by Super Duper.


This Privacy Policy applies to PII collected on websites, applications, or other web-based environments (including mobile applications) provided and hosted by Super Duper providing access to HearBuilder Online ("HearBuilder") for your school, school district, hospital, or other organization ("Organization").


This Privacy Policy pertains only to PII that Super Duper collects from you or that is provided to us by the Organization. PII is information that identifies a particular individual, such as a person's first and last name, e-mail address, and phone number.


This Privacy Policy applies only to the Super Duper practices regarding PII collected that is processed and hosted by Super Duper and NOT to sites hosted by the Organization or another third party. The Organization has control over who can register for use of various features of HearBuilder and who can access the PII posted or maintained by HearBuilder. The Organization can also add content and information directly into HearBuilder. The Organization may have its own policies addressing collection, use, and sharing of PII. For information about whether this Privacy Policy applies to you and about the Organization's own policy, please contact the Organization.

Information we collect when hosting HearBuilder

You may visit certain aspects of HearBuilder without registering. Registration, however, will give you access to certain features as well as the ability to personalize certain features. An individual who seeks access to HearBuilder, or who seeks to correct, amend, or delete inaccurate data, should direct any query to the Organization. If the Organization requests Super Duper to remove the data, we will respond to the request within 30 days. Before a child under 13 may access features that require registration, the Organization must first obtain any necessary parental consent. After all necessary consent is received by the Organization, the Organization is responsible for providing parent access to the child's information so the parent may, at any time, review, request modifications to, or request deletion of the child's PII. A parent also has the right to refuse further collection of the child's information, subject to the Organization's policies and procedures in this regard. If you have questions regarding registration, please contact the Organization.


Super Duper collects and subsequently processes PII in two ways:

  1. Self-Registration. If you choose to become a registered user, on behalf of the Organization, we will ask for PII from you through the HearBuilder onboarding process. After we collect this information from you, it may be verified by the Organization. Children under 13 years of age are not allowed to register themselves with HearBuilder. Since we are collecting PII from students for the use and benefit of the Organization, all information collected by Super Duper is verified for compliance with applicable laws (such as COPPA) by the Organization directly and not by Super Duper. If you feel your child under 13 years of age has registered on HearBuilder without your permission, please contact the Organization directly.
  2. Pre-Registration. You may be pre-registered by the Organization in one of two ways. Either way, the Organization may not share PII for children under 13 years of age with Super Duper without first receiving the necessary parental consent as described above. The two means of pre-registration are:
    • Your Organization may share registration information with Super Duper, either manually or via an authorized third-party system feed. Super Duper would conduct an import of this registration information.
    • An Organization-designated individual may input registration information for you.

Regardless of the way you are registered, various types of information are collected during registration. Some information is required, such as First and Last Name, Email Address, User Name, and Password. These fields are labeled to indicate that they are required. Other information is optional such as Title, Address, City, State, ZIP Code, and Phone. Your Organization may elect to provide certain optional information on your behalf in order to use certain features and functions of HearBuilder.


After registration, the lead administrator for the Organization (“Site Administrator”) may decide to assign to you a role(s) or group(s). Based upon your designated role(s) or group(s), you may have access to additional information or services. If you have questions concerning your role(s) or group(s), please contact the Organization.


Information collected for self-registration or pre-registration may also be used to:

  1. provide Organization-related notifications and other information,
  2. provide you with important information about HearBuilder, such as updates or notices,
  3. improve our product and services,
  4. improve customer service,
  5. create a profile for you, and/or
  6. in aggregate, guide our marketing efforts.

No PII will be shared with third parties except to the extent expressly described in this Privacy Policy and otherwise in accordance with applicable law.

Additional information that you provide to us

Additional information may be provided to us in other situations, for example, in connection with a customer support request. The goal of collecting this additional information is to serve you more effectively and efficiently.


You or the Organization may provide us with your or your child's login credentials for certain software applications and web services in order to facilitate single sign-on access to these applications and services. These login credentials may include the username, password, and any other required information that you selected or were supplied in order to access certain applications and web services.


As noted below, we may also ask you to provide us with voluntary survey information to help us improve our products and services.


Information from the Organization

The Organization can control which individuals can be registered to use certain HearBuilder features and which individuals or groups are granted privileges to access, view, or use PII collected, exchanged, or maintained on HearBuilder. The Site Administrator can also access your PII and grant rights of access to others, as it deems appropriate. The Organization may also provide Super Duper with the registration information and login credentials described above, as well as with other information about you that it deems appropriate. Please contact the Organization regarding its policies and/or practices in this regard.


Information collected through technology

As noted below, we may also collect cookies, device information, and web beacons in the course of your use of our technology.

Privacy of children; Privacy of students

Super Duper is dedicated to the privacy of children under 13 years of age. We do not process or collect from children more PII than is needed to access services. The Organization is responsible for obtaining all parental consent necessary for collection of PII from children under 13. Super Duper presumes that such consent has been obtained by the Organization by virtue of the Organization having retained Super Duper to provide HearBuilder and related services.


Super Duper will not share any PII about children with any third parties other than as specified in this Privacy Policy.


As a parent or legal guardian for children under 13, you may review your child's PII. After your child's parental consent is submitted, an individual at the Organization will supply you with your child's credentials so that you may access and review the types of PII collected from your child. If you would like to refuse to allow any further collection or use of your child's information, please contact the Organization or Super Duper. If the request is made to Super Duper, we will look to the Organization to validate the request and respond accordingly.


Super Duper is dedicated to maintaining the privacy of all students, whether under 13 or older, in accordance with applicable laws. In this regard, we will maintain any and all PII in education records that come into the possession of Super Duper in accordance with the requirements of the Family Educational Rights and Privacy Act ("FERPA"), and will not disclose such information to third parties except with the consent of a parent, the Organization, or an eligible student (as applicable), unless otherwise permitted under FERPA and its associated regulations.

How we use information collected

User account

Super Duper does not associate information that we collect through log files or third parties with your user account. The information is provided voluntarily by you or the Organization during registration. A user account is stored information that gives you access to certain features as well as the ability to personalize certain features. Your user account can only be accessed and used by you (including, where applicable, your parent or guardian), the Site Administrator, and restricted personnel of Super Duper and its contractors.


Cookies and web beacons; "do not track" signals

A cookie is a piece of data stored on your computer tied to information about you. The only PII a cookie can contain is information you supply. Super Duper uses session or dynamic cookies, e-tags, and scripts to let us know when a user is signed in. Once you close your browser, the cookie simply terminates. We may use web beacons (single-pixel gifs) to count visitors.


When you are signed in and depending on your assigned role(s), additional services become available through our menu system. Again, depending on your assigned role(s), cookies may offer the following benefits after Sign-In:

  • A personalized salutation greeting
  • Content tailored to your role(s)
  • Use of services that require Sign-In
  • Session time-out, a security feature

Note that Super Duper and/or your Organization may engage with third parties to enable certain functionality or usage analytics, and such third parties may use cookies, e-tags, beacons, and scripts. For example, Google Analytics may be used to track visitor activity on HearBuilder. The use of third-party cookies is not covered by this Privacy Policy because Super Duper does not have access to or control of these cookies.


As true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We do not link this automatically collected data to other information we collect about you.


Device information

We may collect and store device-specific information (such as unique device identifiers) in order to facilitate the delivery of push notifications to mobile devices. In this regard, we may associate your device identifier with your Super Duper account. This device information may also be collected and stored by certain of our trusted contractors or service providers, subject to the applicable terms of this Privacy Policy related to the sharing of information with such trusted third parties.

Communications from the site

Service announcements

From time to time, it may be necessary for Super Duper to send out a service-related announcement. For instance, if our service is temporarily suspended for maintenance, we might send you a notification email. Users cannot opt-out of these communications, though they can delete their account. These communications are not promotional in nature.


Data retention

When you or the Site Administrator deletes your account, the information contained in your user account is no longer available except to the extent it is backed-up as described below. We do not retain your data on behalf of the Organization except as necessary to provide the service requested, comply with our legal obligations, resolve disputes, and enforce our agreements, all in compliance with applicable laws. We also back up information in accordance with industry standard practices and as directed by the Organization.


Customer service

As necessary, Super Duper may communicate with you through email, phone, or online to provide requested services and in regards to account-related issues on behalf of the Organization.

Sharing of information

When required by law

Though we make every effort to preserve your privacy, we may need to disclose PII when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order, or legal process served on HearBuilder.


Administrative privileges

Users who have been assigned administrative privileges by the Organization have access to all registered user information strictly and solely on their implementation of HearBuilder. Contact the Organization for more information regarding who has been assigned these privileges and how this assigning process works.


Business transitions

In the event that Super Duper goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets, your PII could be part of the assets transferred. You will be notified by a prominent notice prior to a change of ownership or control of your PII. For more information, see the Privacy Policy Statement Changes section in this document.


Service providers

From time to time, Super Duper may retain trusted businesses and contractors to provide certain services that support our provision and hosting of HearBuilder or otherwise support the operation of the associated online services. We may also contract with trusted third parties to provide complimentary products or services that may be integrated with, linked to (either via a website link or otherwise), or accessible from (such as through single sign-on functionality) HearBuilder.


Businesses and contractors who have access to PII are required to protect this information in a manner that is consistent with this Privacy Policy, for example, by not using the information for any purpose other than to carry out the services they are performing for us or to facilitate access to an integrated service offering. We will not disclose your PII to any third party to the extent prohibited by law.


Compliance with laws

Super Duper complies with the requirements of COPPA, CIPA, and FERPA to the extent that these laws apply to the information collected and maintained by Super Duper. Accordingly, notwithstanding anything to the contrary in this Privacy Policy, we will not collect, use or disclose PII covered by COPPA, CIPA, and FERPA except in compliance with the respective requirements of each of these statutes and their associated regulations. We will also comply with all other applicable laws that govern the information that it maintains.


If you have any inquiries regarding our partners' privacy practices or how they use your child's PII, please contact us directly at 1-800-277-8737 or by emailing privacy@superduperinc.com.

Terms that apply to all PII collected

Modifications to PII

There are three ways PII can be modified:

  • If your PII changes, or if you no longer want a user account on HearBuilder, you or your Site Administrator may update or delete your PII in your account.
  • Site Administrators can modify PII. These Administrators have access only to their Organization’s user information. For children under 13 years of age, the Organization is responsible for first validating receipt of verifiable parental consent.
  • If you have any other requests related to the modifications or deletion of your PII, please contact the Site Administrator or Super Duper. If the request is made to Super Duper, we will look to the Organization to validate the request and respond accordingly.

Data deletion

If services are terminated, by either party, for any reason, Super Duper agrees to permanently delete all data and provide written verification confirming permanent deletion. Otherwise, all account information is deleted automatically from the system 60 days after the HearBuilder expiration date has lapsed.


Upon deletion, neither Super Duper nor Organization will be able to restore deleted data.


Surveys and feedback forms

From time to time, Super Duper may request information from you through surveys or feedback forms. Participation is voluntary. Information collected is used for the purposes of improving our product and services and understanding our audience.


No PII collected in this manner will be used or disclosed except in compliance with this Privacy Policy.

Security

Super Duper takes security seriously and employs reasonable security measures and procedures designed to protect your information from unauthorized access and improper use. Only employees, trusted contractors supporting the operation of HearBuilder, and other third-party partners and contractors as generally described in this Privacy Policy have access to PII. These individuals and entities shall be bound to protect the information appropriately.


Super Duper servers that store PII are maintained in a physical environment that utilizes industry-standard security measures. PII is stored in password-controlled servers with limited access. When you enter sensitive information (such as login credentials), we encrypt the transmission of that information using secure socket layer (SSL) technology.


Be aware though that, despite our diligent efforts and implementation of reasonable security measures, no security measures are perfect or impenetrable and no data transmissions over the Internet can be guaranteed to be 100% secure. If you have any questions about the security of HearBuilder, please email us at security@superduperinc.com.


In addition, as noted above, the Organization has the ability to control the collection, use, and dissemination of PII maintained or processed through HearBuilder. Contact the Organization for information regarding their security provisions.

Privacy Policy statement changes

If we change this Privacy Policy, we will post the revised Privacy Policy, with an updated effective date, to HearBuilder by way of a link to: http://www.hearbuilder.com/privacy-policy/.


We encourage you to periodically review this Privacy Policy by visiting HearBuilder and clicking on the Privacy Policy link to stay informed about how we are collecting, using, and sharing PII.


Except as otherwise required by law, all changes to this Privacy Policy will be effective when the updated Privacy Policy is posted to the URL above and each user is bound by such changes when he or she uses HearBuilder after such changes have been posted.

Usage implies consent

By using HearBuilder, you consent to this Privacy Policy. If you do not agree to this Privacy Policy, please do not use HearBuilder. Similarly, with respect to PII that you provide voluntarily and we collect on behalf of the Organization (such as name, address, and phone number in order to create an account), please do not submit such information if you do not want Super Duper to collect and maintain it.

Additional limitations

Despite our best efforts, no security measures are perfect or impenetrable. In this regard, we are not responsible for events or conditions beyond our reasonable control to the extent that they relate to or impact the obligations assumed, or commitments made, hereunder. However, in the event of any data breach or other violation of this Privacy Policy caused by factors outside of our reasonable control, we will comply with all applicable laws in this regard, including those requiring notification in the event of certain defined data breaches.

International users

As Super Duper is a U.S.-based company, your PII will likely be collected and maintained in the United States. If you are visiting from the European Union or other regions with laws governing data collection and use that may be different from U.S. law, then by using HearBuilder, you consent to your PII being collected, used, and transferred as set forth in this Privacy Policy.

Contact information

Super Duper takes privacy issues very seriously. If you have any questions, suggestions or concerns regarding this Privacy Policy, please contact us at:


Super Duper, Inc.
ATTN: Privacy Officer
5201 Pelham Road
Greenville, SC 29615 USA


Phone: 1-800-277-8737
Email: privacy@superduperinc.com
URL: http://www.hearbuilder.com/privacy-policy/