Last Updated 5/29/07

PRIVACY POLICY

1. Personally Identifiable Information

We do not collect Personally Identifiable Information (i.e. name, age, gender, e-mail address, street address, telephone number) unless you provide it voluntarily. For example, if you register with YRoswell and create a personal account, or purchase any merchandise, we will collect your Personally Identifiable Information. We reserve the right to disclose your Personally Identifiable Information as required by law to comply with a judicial proceeding, court order or legal process.

2. Registration

Users of YRoswell have the option of registering and creating a personal account and becoming a member of the YRoswell community. Membership is free and open to legal U.S. residents who are between the ages of thirteen (13) and twenty-nine (29). In order to register, you must first complete a registration form, which requires you to provide your Personally Identifiable Information. We use this information to respond to your questions, provide updates about the services on our website in which you have expressed interest, and send you information about website maintenance and updates. Users are required to create a user name and password.

You may not (i) select or use a user name of another person with intent to impersonate that person, (ii) use a user name in which another person has rights without authorization from that person, or (iii) use a user name that RPCI, at its sole discretion, deems offensive. Members are not permitted to have more than one account or to share accounts with another person. Any duplicate accounts are subject to cancellation.

You agree to provide (i) true, accurate, current and complete information about yourself as prompted by the registration form, and (ii) maintain and properly update the Registration Data to keep it true, accurate, current and complete. If you provide information that is untrue, inaccurate, not current or incomplete, or Roswell Park cancer Institute (“RPCI”) has reasonable grounds to suspect that you have, we have the right to suspend or terminate your membership and refuse any and all current or future use of the Site and the Services (or any portion thereof). Members must immediately notify RPCI of any known or suspected unauthorized use of a Member's account, or any known or suspected breach of security, including loss, theft, or unauthorized disclosure of Member's password. Each Member is responsible for the confidentiality of their user name and password and all usage or activity on their account, including use of the account by any third party (which is prohibited), whether or not such use is authorized by the Member or the result of the Member authorizing a third party to use the Member's username and password.

RPCI does not retain any liability for the activities that occur on a user’s personal account.

3. Purchases

If you choose to make a purchase through our website, RPCI will collect your credit card information and maintain a record of the transaction. Credit card numbers are only held until the charge is processed. The number is kept confidential and is maintained by our Customer Service Department in case there are any problems with the transaction. All financial transactions are processed through secure site using encrypted SSL sessions. You must be eighteen (18) years of age or older to purchase any merchandise or products from our website.

4. Requests

If you submit an online request for RPCI brochures or submit a question through our “Ask a Mentor”, “Contact Us” or “Ask Mike” query, we may gather some of your Personally Identifiable Information in order to appropriately respond to your request.

5. Message Boards and Public Forums

YRoswell features message boards, chat rooms, journals and other public forums, where users can share information with one another and where users can post questions for experts to answer. Any information (including Personally Identifiable Information) that you disclose in a chat room, message board or “ask the expert” portion of the website is open to the public. Please think carefully before disclosing any Personally Identifiable Information in a public forum. We are not responsible for the Personally Identifiable Information you choose to submit in these forums. Likewise, the information that you submit on YRoswell is not protected by laws, regulations or RPCI’s policies that govern the privacy and security of health information. Accordingly, if you are a patient of RPCI and you submit information on YRoswell, such information will not be treated as confidential or protected health information.

Non-personal information

1. Cookies

A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. We use cookies on this site and we do not link the information we store in cookies to any Personally Identifiable Information you submit while on our site.

We use session ID cookies to make it easier for you to navigate our site. A session ID cookie expires when you close you browser.

If you reject cookies, you may still use our site, but your ability to use some areas of our site, such as contests or surveys, will be limited.

Some of our business partners (e.g., advertisers) use cookies on our site. We have no access to or control over these cookies. See “Third Party Advertisers.”

This privacy statement covers the use of cookies by YRoswell only and does not cover the use of cookies by any advertisers. [See the “Third Party Advertisers” section.]

2. Surveys or Contests

From time-to-time we may provide you the opportunity to participate in contests or surveys on our site. If you participate, we will request certain Personally Identifiable Information from you. Participation in these surveys or contests is completely voluntary and you, therefore, have a choice whether or not to disclose this information. The requested information typically includes contact information (such as name and shipping address), and demographic information (such as address and zip code).

We use this information to notify contest winners and award prizes, to monitor site traffic or personalize the site and to send participants an email newsletter.

We use may use a third party service provider to conduct these surveys or contests; that company will be prohibited from using our users’ Personally Identifiable Information for any other purpose. We will not share the Personally Identifiable Information you provide through a contest or survey with other third parties unless you authorize us to do so.

4. Newsletters

If you wish to subscribe to our newsletter(s), we will use your name and email address to send the newsletter to you. Out of respect for your privacy, we provide you a way to unsubscribe. Please see the “Choice and Opt-out” section.

5. Service-related Announcements

We will post service-related announcements (i.e. if our service is temporarily suspended for maintenance) on the home page of YRoswell when it is necessary to do so.

6. Customer Service

Based upon the Personally Identifiable Information you provide us, we will send you a welcoming email to verify your username and password. We will also communicate with you in response to your inquiries, to provide the services you request, and to manage your account. We will communicate with you by email or telephone, in accordance with your wishes.

7 . E-mail Sent to Roswell Park Cancer Institute

This Privacy Policy does not apply to content, business information, ideas, concepts or inventions that you send to RPCI by e-mail. All information, comments, suggestions, graphics, ideas or other materials that you submit to RPCI will become and remain the exclusive property of RPCI.

8 . Agents

We use an outside shipping company to fulfill orders, and a credit card processing company to bill you for goods and services. These companies do not retain, share, store or use Personally Identifiable Information for any other purposes.

9 . Children

We are committed to protecting the privacy of children. YRoswell is not designed to attract children under the age of thirteen (13). We do not knowingly collect Personally Identifiable Information from any user that is under the age of 13. A parent or guardian is solely responsible for providing supervision to a minor’s (anyone under the age of 18) use of YRoswell.

10 . Choice/Opt-out

We provide you the opportunity to ‘opt-out’ of having your Personally Identifiable Information used for certain purposes, when we ask for this information. For example, if you purchase a product/service but do not wish to receive any additional marketing material from us, you can indicate your preference on our order form.

If you no longer wish to receive our newsletter and promotional communications, you may opt-out of receiving them by following the instructions included in each newsletter or communication .

You will be notified when your Personally Identifiable Information is collected by any third party that is not our agent/service provider, so you can make an informed choice as to whether or not to share your information with that party.

11 . Links to Other Sites

YRoswell contains links to other sites that are not owned or controlled by RPCI. Please be aware that RPCI is not responsible for the privacy practices of such other sites. RPCI does not endorse, approve or sponsor any information available at the linked site or any products that may be sold there, nor is RPCI liable for any damage that might result from your use of such products or information.

We encourage you to be aware when you leave our site and to read the privacy statements of each and every Web site that collects Personally Identifiable Information.

This privacy statement applies only to information collected by YRoswell.

12 . Access to Personally Identifiable Information

If your Personally Identifiable Information changes, or if you no longer desire our service, you may [correct, update, delete or deactivate it] by making the change on our member information page [or by emailing our Customer Support at catherine.donnelly at roswellpark.org or by contacting us by telephone or postal mail at the contact information listed below.

13 . Security

The security of your personal information is important to us. When you enter sensitive information (such as credit card number and/or social security number) on our registration or order forms, we encrypt that information using secure socket layer technology (SSL).

We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. While no method of transmission over the Internet, or method of electronic storage, is absolutely secure, we will strive to use commercially acceptable means to protect your personal information.

If you have any questions about security on our Web site, you can send email to us at catherine.donnelly at roswellpark.org

14 . Changes in this Privacy Statement

If we decide to change our privacy policy, we will post those changes to this privacy statement, the homepage, and other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it.

We reserve the right to modify this privacy statement at any time, so please review it frequently. If we make material changes to this policy, we will notify you here and by means of a notice on our home page.

15 . Contact Us

If you have any questions or suggestions regarding our privacy policy, please contact: Catherine Donnelly, Roswell Park Cancer Institute, Elm and Carlton Streets, Buffalo, NY 14263, catherine.donnelly at roswellpark.org, phone 716-845-1671 or fax 716-845-8362.