ACAPT Privacy Policy

ACAPT's commitment to privacy

Last updated: October 5, 2021

Your privacy is important to us. The ACAPT Privacy Policy has been developed to demonstrate our firm commitment to your privacy and to explain how the American Council of Academic Physical Therapy (ACAPT) collects, uses, shares, and safeguards personal data and non-personal data on acapt.org, members.acacpt.org and through survey data collection. ACAPT recognizes its responsibility to treat with care and protect the information and data it collects, and to respect your data privacy.

Your use of the website and participation in ACAPT programs and services signifies that you understand this privacy policy and that you acknowledge the collection, use, and storage of and your rights as described herein.

Privacy policy revisions

This privacy statement was last revised on October 5, 2021. We may change this privacy statement at any time and for any reason. We encourage you to review this privacy statement each time you visit the web site.

If we make a significant change to our privacy statement, we will post a notice on the homepage at acapt.org for at least two weeks after the change is made.

Who we are

ACAPT is a 501(c)(6) not-for-profit organization with headquarters in Alexandria, Virginia. 

Data collection

ACAPT collects data online, by phone, or by paper that allows ACAPT to identify or contact you (personal data) to carry out its business purposes. We collect this information at various points of service, including, but not limited to, when you register for ACAPT membership, change your membership, reapply, register for an ACAPT event or program, purchase ACAPT products or services, complete a contact form or survey, sign up for a newsletter, volunteer, or otherwise interact with ACAPT.

The types of personal data ACAPT collects includes, but is not limited to, the following:

• General data  -- e.g. names, dates of birth, home and business addresses, email addresses, Internet protocol addresses and mobile, and phone numbers provided by our members or other customers;
• Site usage – ACAPT web servers collect the following analytics:
  • Internet Protocol (IP) address of computer being used
  • web pages requested
  • referring web page
  • browser used
  • date and time
  • ACAPT does not associate this data to individual user identities.
• Products and services viewed, including advertisements for such products and services;
• Professional data – e.g. school information and licensure information;
• Other identification information – e.g. photographs and audio during podcasts, lectures, public performances, etc.
• Financial information – e.g. credit and debit card numbers, credit reports, passwords, and PINs) for events and
• Sensitive personal data (e.g. racial or ethnic origin or gender) for diversity or accessibility purposes, employment purposes, surveys, educational programs and services, membership, and professional aggregation.
• We do NOT collect or store social security numbers.

ACAPT may also receive personal data from third parties for ACAPT's use in marketing and providing products and services.

ACAPT collects information (whether online, by phone, or by paper) that does not directly identify you (non-personal data). The types of non-personal data we collect includes, but is not limited to:

• Computer, operating system, and platform type;
• Internet service provider; and
• Your industry and business (e.g. company size and location, job functions, and seniority levels).

How ACAPT Uses Your Data

The following explains how ACAPT uses your personal data and non-personal data.

Personal data

ACAPT uses personal data to carry out its business purposes, which include but are not limited to, membership transactions, event registrations, directories and messages based on your interests, or to otherwise interact with ACAPT. More specifically, ACAPT uses personal data, sometimes in combination with non-personal data, in a variety of ways, including, but not limited to:

• Carry out obligations arising from or related to membership, or any other contract entered into between you and ACAPT.
• Account set-up and administration.
• Provide service communications such as bill reminders, order confirmations, program registrations, and customer service messages.
• Provide products, information, and services.
• Respond to your emails or online requests for products, services, or information.
• Identify you when you visit our sites.
• Research and development purposes.
• Polls and surveys.
• Provide you with information about events, products, or services.
• Personalize and improve the usability of ACAPT's sites, products, and services.
• Personalize content, advertising, marketing, programs, and services to you.
• Meet internal audit requirements.
• Legal obligations.
• Publish membership directories, membership lists, and registration lists on the sites, in print, and in digital media to allow the colleagues to find you.
• Ensure that content is presented most effectively for you and your computer.

Non-personal data

ACAPT uses non-personal data to improve the usability of the sites and for other business reasons. We or third-party companies also use the non-personal data to target advertisements to you.

Please note that when you select an advertising link or other link that takes you to sites not operated by ACAPT, you may be subject to the privacy policies of these third-party sites.

Data Sharing

We only share your personal data with ACAPT’s leaders of consortia, task forces and committees so they can better serve ACAPT members. 

Your email address will be used only by ACAPT and its entities performing member services or offering products on ACAPT's behalf or as a member benefit. Understand that your email address may be visible through membership directories, membership lists, and registration lists.

Your email address may be visible through membership lists shared only within ACAPT.
ACAPT reserves the right to use or disclose data where we reasonably believe it is needed to (i) respond to information requests by law enforcement or other governmental authorities; (ii) comply with any law, regulation, subpoena or other legal process, or court order; (iii) investigate and help prevent security threats, fraud activity, or inappropriate, unauthorized, or illegal activity involving ACAPT's services or networks; or (iv) enforce or protect ACAPT's rights and property. In such circumstances, data may be disclosed without notice to the individual.

Children

We do not knowingly collect personal data from or market to children under the age of 13.

Security

Your privacy is of the utmost importance to us, but due to legal and security matters that are beyond our control, we cannot guarantee that the data that you may provide to us, including personally identifiable information, is not disclosed to a third party.

ACAPT incorporates reasonable safeguards to protect the security, integrity, completeness, accuracy, and privacy of the data we collect. In our efforts to make the Sites secure, we use the latest industry standards to safeguard the confidentiality of your personally identifiable information, such as firewalls and Secure Socket Layers (SSL) for our websites acapt.org and members.acapt.org.

ACAPT's web hosting provider is Amazon Web Services (AWS), the world’s largest cloud provider, offering the most robust and reliable platform.

• AWS is a secure, durable technology platform with industry-recognized certifications and audits: PCI DSS Level 1, ISO 27001, FISMA Moderate, FedRAMP, HIPAA, and SOC 1 (formerly referred to as SAS 70 and/or SSAE 16), SOC 2 and SOC 3 audit reports.
• The AWS infrastructure puts strong safeguards in place to help protect customer privacy. All data is stored in highly secure AWS data centers.
• AWS storage solutions deliver highly scalable, durable, and reliable cloud storage with robust data protection.

Our members.acapt.org payment systems use a high grade of hosting at Armor, the leader in secure cloud hosting, capable of protecting sensitive data and brand reputations of the world's biggest enterprises. There are two data centers located in Dallas, TX and Phoenix, AZ to provide a very reliable solution.

In addition, here is an outline of member.acapt.org's platform's backup and testing procedures:

• All data is fully backed up nightly to the Amazon S3 datastore.
• There is 24/7 infrastructure monitoring of all sites (meaning that if something fails, we immediately get notified by email, SMS and other alerting systems.)
• We regularly test our disaster recovery procedures to make sure we can recover data quickly in the event of a problem.
• Our database reliability is ensured by SQL server failover clustering solution.

ACAPT also takes precautions to protect information from loss, misuse, and alteration. Only ACAPT employees who need access to your data in order to do their job are allowed access. Pursuant to PCI compliance requirements, ACAPT employs procedures to safeguard any credit card data we collect from you when making an order. Our credit card processing company, AffiniPay, is certified as a Level 1 Service Provider, this being the highest security level available.

Please note, however, that no method of electronic transmission or storage is 100% secure. Therefore, we cannot guarantee its absolute security.

Public Access

The Sites contain discussion forums and other public or member-based forums. Any data that you provide in these forums may become public and/or available to all members, and you must exercise caution when deciding to provide any data, including personal information.

Although we try to protect personally identifiable information, ACAPT cannot guarantee the privacy of any data that you provide on these forums; accordingly, any information you provide is at your own risk. ACAPT is not responsible for maintaining the privacy or secrecy of any passwords or account information that you may have disclosed.

Your Rights Regarding Your Data

To protect your privacy and security, we will take reasonable steps to verify your identity. You can manage your profile and email preferences, including "opting out" of emails, by contacting ACAPT via the information under "How to Contact ACAPT" below and/or managing your member profile. Our processing of your data is based upon your consent, contract performance (e.g. your purchase of products or membership sign-up/renewal), legitimate business interest (e.g. direct marketing of goods and services), or compliance with law.

Other Important Information

Location of Data

ACAPT is headquartered in the United States, in Alexandria, Virginia, and our services are hosted in and managed in the United States. If you are a user located outside the United States, you understand and acknowledge to having your data (which may include information collected through the use of cookies and other technologies, as described above) transferred, processed, and stored in the United States or in any other country in which we engage service providers or to which you direct us to transfer your data.

Your data is processed in the United States, where privacy laws may be less stringent than the laws in your country. By submitting your data to ACAPT, you agree to the transfer, storage, and processing of your data in the United States.

Data Retention

In general, ACAPT retains data for the period necessary to fulfill its business purposes, unless a longer period is required, needed for archival and research purposes, or permitted by law.

Third-Party Sites

The sites may include links to other websites that are not owned or controlled by ACAPT, and ACAPT is not responsible for the contents of any linked site, the conduct of any linked site, or any changes or updates to such sites.

ACAPT may provide links to you only as a convenience, and the inclusion of any link does not imply an endorsement by ACAPT of the website. You should read the privacy policy of the third-party provider to see how your data will be treated on its site.

How to Contact ACAPT

If you have any questions, comments, requests, or concerns related to this Privacy Policy, please contact ACAPT at:

American Council of Academic Physical Therapy (ACAPT)
1020 North Fairfax Street, Suite 401C
Alexandria, VA 22314-1488
1-800-920-8150
acapt@acapt.org