Privacy Policy
Effective Date: December 23, 2024
At the Utah League of Cities and Towns, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and protect the information you provide to us when you interact with our website.
Information We Collect
We collect the following information when you subscribe to our email and text communications:
- Name
- Work Email Address
- Work Phone Number
- City/Town or Organization you work with
We also merge this information with other records we have such as:
- Legislative Policy Committee Membership
- Previous League webinars you have attended
- Previous League events you have attended
- Information about your municipality, such as its:
- Municipal class
- Form of government
- County
- Association of Government membership
- Local Administrative Advisor Program Membership
- Location within state legislative districts
- Status in conforming to legislative requirements
Use of Information
The information we collect is used solely for the purpose of sending you email and text communications that are relevant to your role within municipal government. This information is used by Utah League of Cities and Towns staff to efficiently inform individuals about training opportunities, grants, and advocacy needs. Failing to provide this information may result in missing out on important updates and opportunities that could support municipal operations and professional growth. We will not use your personal information for any other purpose without your consent.
Sharing of Information
We take your privacy seriously and do not sell or share your email address or phone number when you subscribe to our email or text list to third parties for marketing purposes.
However, we may sell or disclose public information, such as whether an individual is a local official and the publicly listed contact information of a city or town (e.g., publicly listed phone numbers) in our directory that we compile and sell every four years. The information featured in this directory is generally available to the public and is not considered private.
We also share email addresses and names of attendees to our sponsors and exhibit hall vendors at our Annual Convention and Midyear Conference.
Where Data is Stored
Data we collect is stored across CVENT, Slido, Klaviyo, and OneDrive. Each of these platforms has robust security features, including encryption, access control, and compliance with privacy regulations, to ensure that the personal and sensitive data stored in them remains secure and protected from unauthorized access. Below is a summary of the various measures each entity uses. For complete information, please click on each entity’s privacy policy link.
- Encryption: CVENT encrypts data both in transit and at rest using secure protocols like TLS (Transport Layer Security) for data transfer.
- Access Control: Role-based access control (RBAC) is employed to restrict access to data based on user roles and permissions, ensuring only authorized users can access sensitive information.
- Two-Factor Authentication (2FA): Provides an added layer of security by requiring users to authenticate using two methods.
- Data Backups: Regular backups are conducted to ensure data integrity and availability in case of system failures.
- Compliance: CVENT is compliant with various security and privacy standards, including GDPR and SOC 2 Type II.
- Encryption: Slido uses encryption to protect data during transmission with HTTPS and TLS, and stores data securely in its databases.
- Access Control: User access is governed by role-based permissions, ensuring only authorized individuals can manage or view event data.
- Two-Factor Authentication (2FA): Slido supports 2FA to strengthen user authentication and prevent unauthorized access.
- Data Retention: Slido offers data retention policies, allowing users to manage and delete data after events.
- Compliance: Slido complies with GDPR and other relevant privacy regulations, providing transparency regarding data handling.
Klaviyo Data Processing Agreement
- Encryption: Klaviyo ensures that all data is encrypted both at rest and in transit using TLS/SSL for communication and AES encryption for data storage.
- Access Control: Role-based access management controls who can access and modify data, minimizing the risk of unauthorized actions.
- Two-Factor Authentication (2FA): Klaviyo offers 2FA for added security, requiring users to authenticate with two factors before accessing their accounts.
- Data Backups: Klaviyo regularly backs up data to safeguard against accidental loss or corruption.
- Compliance: Klaviyo is GDPR-compliant and adheres to other security and privacy standards to ensure safe handling of customer data.
- Encryption: OneDrive uses end-to-end encryption for data in transit (via HTTPS) and at rest (using AES-256 encryption) to protect sensitive files.
- Access Control: OneDrive offers granular permissions, allowing administrators to control who can view, edit, or share files and folders.
- Two-Factor Authentication (2FA): It supports 2FA to provide extra security for user accounts.
- Data Redundancy: OneDrive stores data in multiple data centers, providing redundancy to protect against data loss or hardware failures.
- Compliance: OneDrive complies with industry standards such as ISO 27001, SOC 1, SOC 2, and is GDPR-compliant, offering strong protection for personal and business data.
Legislator Contact Information
If you are a legislator and need to update your phone number or email on the Legislator Contact App, you can do so by contacting Cassidy Hansen at chansen@ulct.org.
Cookies
YouTube Ads Cookie
This website utilizes cookies related to YouTube advertisements. When you interact with content featuring embedded YouTube videos, a cookie is placed on your device. This cookie helps YouTube serve relevant ads based on your browsing habits and preferences. The use of this cookie may involve tracking and data collection by YouTube, which is governed by YouTube’s own privacy policy. You can manage your cookie preferences through your browser settings to limit or block cookies if desired.
Google Analytics Cookie
Our website also uses Google Analytics, a service that tracks and analyzes how visitors engage with the site. Google Analytics utilizes cookies to collect information such as the number of visitors, where they come from, and which pages they visit. This data helps us improve the user experience and optimize our content. The information gathered by Google Analytics is anonymized and does not personally identify you. You can opt out of Google Analytics tracking by using browser add-ons or adjusting your cookie settings.
Data Security
We implement reasonable security measures to protect your personal information from unauthorized access, alteration, or disclosure, including dual factor authentication. However, please note that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Your Choices
You have the right to:
- Access the personal information we have about you.
- Update or correct your personal information.
- Unsubscribe from our email and text communications at any time by clicking the “unsubscribe” link in our emails or contacting Cassidy Hansen at chansen@ulct.org. Please note that when you unsubscribe from an email, you will only be unsubscribing from the particular list the email came from. If you wish to remove your email from all of our lists, please use the “Global Unsubscribe” option, which is featured on the list unsubscribe process.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will post the updated policy on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Contact Us
If you have any questions or concerns about this Privacy Policy or our practices, please contact us at:
Utah League of Cities and Towns
info@ulct.org
By using our website, you agree to the terms of this Privacy Policy.
