BOOKSOURCE PRIVACY NOTICE

Last Updated May 24, 2021

Protecting your information is important to us. The following guidelines set forth our general privacy practices and principles that apply to information we collect through our website located at https://www.booksource.com, the Booksource Classroom application and any mobile apps offered by GL group, Inc. d/b/a Booksource, on the Apple App Store or Google Play (together, the "Services") The Services are owned or operated by GL group, Inc., or companies related by common ownership or control (together, “we,” “us,” or “our”). We use this privacy notice to clearly disclose to you our privacy practices in a manner that is easy to understand. If there is something you do not understand about our privacy practices, please feel free to contact us at [email protected].

While we provide educational books and other services, we do not intentionally collect personally identifiable information directly from students or other persons under the age of 18, so please do not use the Services if you are under the age of 18. We do not knowingly collect any personal information from children under the age 13 without consent. We may change this notice from time to time so please check back often. If we significantly change our collection, use, or disclosure practices, we will try to send you a notice via email if you have provided us with an email address. Please keep in mind that some of the services mentioned specifically in this notice may not be available on the site at this time.

Our Services are used to provide you information about the services we offer for schools and educators to purchase, receive, and organize classroom books.

What information do we collect from you?

• Information about the device(s) you use to access our website, including MAC address, IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device type, and device identifiers

• Information about your visits to our website, including the full URL clickstream to, through and from these websites (including date and time)

• Information we need and use to facilitate your use of our website (including to provide access to third-party websites and services), such as URL requests, destination IP addresses, or device configuration details

• Webpages you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page

How do we collect information from you?

website before, what you have previously viewed or clicked on, and how you found us. Analytics cookies may collect information about your location. This information is provided anonymously for statistical analysis only. Analytics cookies are usually persistent cookies.

Google Analytics. If you do not want your activity on our website to be tracked by Google Analytics, you may opt out by using this link: http://tools.google.com/dlpage/gaoptout?hl=en

Web Beacons. We also employ a software technology called a clear GIF (Graphics Interchange Format), also known as a pixel tag or Web beacon. A clear GIF is a line of code that we place on our Services or in e-mails which allows us to analyze our advertising and the general usage patterns of visitors to our Services. These help us better manage content on our site by informing us what content or promotions are effective. Unless you consent, we do not collect personally identifiable information from you through the use of web beacons. You may not disable Web beacons.

Log Files. Like most standard website servers, we use log files. Log files track Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks. We utilize this information to analyze trends, administer the site, prevent fraud, track website navigation in the aggregate, and gather broad demographic information for aggregate use.

Social Networking. Our website permits you to use third party social networking platforms such as Facebook, YouTube, Pinterest, Twitter, LinkedIn, and Instagram. These plug-ins allow you to follow us on those services. When you use social networking platforms and plugins, you share your information with them and their privacy notice applies to their disclosure of such information. In addition, they may be able to collect information about you, including your activity or may notify your connections on the social networking platform about your use of our website. Such services may allow your activity to be monitored across multiple websites for purposes of delivering more targeted advertising. Please note that their own privacy polices apply and we encourage you to read them. We may add new social networking plugins and buttons to our website from time to time.

Advertising Services. While Booksource does not serve targeted third-party advertising on our website, when you use social networking plug-ins or other third-party services that interface with our website, those plug-ins or services may engage in targeted advertising. You can control your advertising preferences and opt out of certain advertising by using tools by the Network Advertising Initiative, Web Choices, or Google.

What choices do you have about the collection of information about you?

Social Networking. If you do not want to share your information, you can choose not to use social networking plug-ins.

Marketing Emails. To ensure that you will not receive recurring marketing or other information from us unless you choose to, we will provide you with simple instructions on each marketing email from us for you to let us know that you have chosen to stop receiving such emails from us.

Do Not Track. Do Not Track (DNT) is a privacy preference that users can set in their web browsers. Our website does not track users across multiple websites, so enabling this setting will not affect your experience on the website.

How do we use your information?

Who is collecting your information?

Other websites to which we link may collect personally identifiable information about you when you visit those sites. The information practices of other websites linked to our websites are not covered by this privacy notice.

With whom do we share your information?

How can I control my personal information?

How do we protect your information?

Your California Privacy Rights.

We collect, or may collect, information that identifies you, your household or your device or is reasonably capable of being connected with or linked to you, your household, or your device ("Personal Information"). Personal information does not include public information available from government records, de-identified or aggregated information or information that is protected by certain laws such as HIPAA for health-related information and the Gramm-Leach Bliley Act (GLBA) for certain financial information.

We collect the following categories of Personal Information:

• Identifiers

  • First and last name

  • Job Title

  • Email address

  • Mailing address

  • Phone number

  • School or organization

  • School district

  • Internet Protocol (IP) Address

• Personal Information Listed in the California Customer Records Statute

  • The above identifiers

  • Credit card number or debit card number

• Characteristics of Protected Classifications

  • Not collected

• Commercial Information

  • Information you disclose when you ask us a question about our website or services

  • Payment processing information

• Biometric Information

  • Not collected

• Internet or Other Electronic Network Activity Information

  • Cookies

  • Domain name

  • Browser type

  • Device identifiers including MAC address

  • Device type

  • Browser plug-in types and versions

  • Operating system and platform

  • Time zone setting

  • Usage and viewing data

• Geolocation Data

  • Information that tells us from where you access our website

• Sensory Data

  • Not collected

• Professional or Employment-Related Information

  • Job Title

  • Job Description

  • Place of Employment

• Non-public Education Information

  • Collected only in our roles as a service provider for schools or organizations using the Booksource Classroom application.

• Inferences Drawn from Other Personal Information

  • Not collected

    Categories of Sources of Personal Information

    We collect information from the following categories of sources:

• Directly from you. For example, when you register submit information on our website or share on the Contact Us page of our website.

  • We may share information in all of the above categories if our company is sold or we engage in a merger or other such transaction.

• From Third Parties. For example, when you apply for a job, we may receive personal information when we conduct background checks.

  
  

  How We Share Your Personal Information

  We share information in each of the above categories as follows:

• All categories of information

  • We will share information in all of the above categories if our company is sold or we engage in a merger or other such transaction.

  • We will share information in all of the above categories of information in connection with a law enforcement request that is compliant with the California Electronic Communications Privacy Act.

• Identifiers

  • We share identifiers with service providers who use that information only to provide services to us such as website development and operating, sending postal mail or email, analyzing website use, storing information, and processing data.

• Personal Information Listed in the California Customer Records Statute

  • We share credit card information with service providers who process payments on our behalf.

• Internet or Other Electronic Network Activity Information

  • We share this information with our data analytics providers

How We Use Your Information

See "How Do We Use Your Information" above to learn how we use your information. We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

How We Retain and Store Your Personal Information

We retain your personal information for as long as necessary to fulfill the purpose(s) for which we collected it and to comply with applicable laws. We use reasonable security precautions to protect your information while in storage.

Requests to Know

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.

• The categories of sources for the personal information we collected about you.

• Our business or commercial purpose for collecting or selling that personal information.

• The categories of third parties with whom we share that personal information.

• The specific pieces of personal information we collected about you (also called a data portability request).

• If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:

  • sales, identifying the personal information categories that each category of recipient purchased; and

  • disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Requests to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise performing our contract with you.

2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

3. Debug online services to identify and repair errors that impair existing intended functionality.

4. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).

5. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

6. Comply with a legal obligation.

7. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

   
   

   How To Submit a Request to Know or a Request to Delete

   
   

   If you are an individual consumer who has provided us with personal information, please submit a verifiable consumer request to us by either:

   
   

   • Mailing us at the address below and asking for a Consumer Request Form; or

   • Emailing us at [email protected] and asking for a Consumer Request Form. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. To designate an authorized agent, email us at [email protected] and we will provide you with a form to make a designated agent request.

     
     

     You may only make a verifiable consumer request for access or data portability twice within a 12-month period. To make a request, you must:

     
     

     • Mail or Email us to receive a CCPA Consumer Request Form

       
       

     • Complete the CCPA Consumer Request Form

       
       

     • Provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or that you are an authorized representative.

       
       

       • If you request the categories of information we collect, we require your first and last name, user ID, and your email address.

         
         

       • If you request the specific information or to have your information deleted, we require your first and last name, user ID, email address and information about your two most recent transactions with us.

         
         

     • Describe your request with sufficient detail that allows us to understand, evaluate and respond to it.

       We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

       
       

       We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

       
       

       We will try to respond to your request within forty-five (45) days of when we receive it. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically by electronic mail communication.

       
       

       We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

       
       

       An amendment to the CCPA provides an exemption to the Right to Know and Right to Delete for personal information between a business and a person who is acting as an employee, director, officer, or contractor of a company, partnership, sole proprietorship, nonprofit, or government where the information is used in the context of a business transaction. This exemption is currently set to expire on January 1, 2021. Until that date, we will not respond to requests to know or delete that meet this exemption.

       
       

       How to Submit an Opt-Out Request

       We do not and will not sell your personal information to third parties. If we change that practice in the future, we will update our privacy policy and provide an opt-out link pursuant to the CCPA. We will treat any information that we collected prior such a change as though you opted-out of the sale of your personal information.

       
       

       Non-Discrimination

       We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

     • Deny you goods or services.

     • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

     • Provide you a different level or quality of goods or services.

     • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information's value and contain written terms that describe the program's material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.

Address for California Privacy Requests

Booksource

Attn: Business Development Department 1230 Macklind Avenue.

St. Louis, MO 63110 [email protected]

Please include your name, street address, city, state, and zip code (your street address is optional if you wish to receive a response to your request via email). We will not accept requests via the telephone or by fax. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

Your Nevada Privacy Rights

A note about Booksource Classroom

Who do you contact with questions or concerns about our Privacy Notice?

If you need further assistance, please send an e-mail with your questions or comments to [email protected]

or write us at:

Booksource

Attn: Business Development Department 1230 Macklind Avenue.

St. Louis, MO 63110 [email protected]