At District Consulting and Research, we have a comprehensive data protection program consistent with applicable privacy standards to ensure we meet our obligations across the United States and in individual states where we operate. Our policies and procedures are built on a strong foundation of accepted privacy principles of transparency, accountability, and individual rights. We seek to continuously improve and enhance our framework and carry on our tradition of upholding high standards in collecting and processing personal data across our business practices and services.

District Consulting and Research LLC, and its affiliates, subsidiaries, trusted business partners or alliances, agents, subcontractors, third-party vendors or newly acquired companies (collectively, “DCR,” "we", "us" and "our") is a privacy-conscious organization and strongly committed to respecting, protecting and processing personal data responsibly in compliance with applicable data protection laws.

Please read the information below to learn about the Personal Data collected about you and how it is used. Please note that there is a separate Terms of Use found in the "Terms & Conditions" (hyperlink located at the bottom of our website). We may revise this Privacy Statement from time to time and will do so by posting additions or modifications to this page. The most current version of the Statement can always be reviewed by clicking on the "Privacy Statement" link located at the bottom of our website.

Types of Personal Data Collected

The type of Personal Data we collect depends on how you use Huron's Services. We may collect the following categories of information about you that are described in more detail below: (A) information you provide to us, (B) sensitive information, (C) information we may automatically collect about you (D) cookies & technologies used to collect information about you, and (E) information we may receive from third parties. All the information listed in (A)-(E) above, are detailed below:

A. Information You Provide to Us

When you visit our publicly available website, we may collect the following categories of information, including Personal Data, from you:

Individual identifiers, such as name, username, contact information such as mailing address, phone number, and email address;

Event registrations and preferences;

Feedback and reviews or request for support;

Log files, information collected by cookies and similar technologies about the pages viewed, links clicked and other actions taken when accessing our website, which may be considered Personal Data under applicable laws (see our Cookie Policy for more information); and

Activities, interactions, preferences, transactional information, and other computer and connection information (such as IP address) relating to the use of our website and our Services.

B. Sensitive Information

With your consent, we may process the following categories of sensitive Personal Data when you use our Services:

Precise Geolocation data;

Racial or ethnic origin information; and

Social Security Number.

C. Information We May Automatically Collect About You

Our Services may automatically collect the following categories of usage and technical Personal Data about you. This information is used by DCR for the operation of the Services, to maintain quality of the Services, and to provide general statistics regarding use of the Services. This information may include:

IP address, which is the number associated with the service through which you access the Internet, like your ISP (internet service provider);

Date and time of your visit or use of our Services;

Domain server from which you are using our Services;

Type of computer, web browsers, search engine used, operating system, or platform use of our Services;

Data identifying the web pages you visited prior to and after visiting our website or use of our Services;

Your movement and activity within the website, which is aggregated with other information; and

Mobile device information, including the type of device you use, operating system version, and the device identifier (or "UDID").

D. Cookies & Technologies Used to Collect Information About You

We and/or certain service providers operating on our behalf may collect information about your activity, or activity on devices associated with you over time, on our sites and applications, and across non-affiliated websites or online applications. We may collect this Personal Data by using certain technologies, such as cookies, web beacons, pixels, third party libraries, and other similar technologies. Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons.

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our website.

Web Beacons. Website pages may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). We also use these technical methods to analyze the traffic patterns, such as the frequency with which our users visit various parts of the Services. These technical methods may involve the transmission of information either directly to us or to a third party authorized by us to collect information on our behalf. Our Services use retargeting pixels from Google, Facebook, and other ad networks. We also use web beacons in HTML emails that we send to determine whether the recipients have opened those emails and/or clicked on links in those emails.

Analytics. Analytics are tools we may use, such as Google Analytics, to help provide us with information about traffic to our website and use of our Services, which Google may share with other Services and websites who use the collected data to contextualize and personalize the ads of its own advertising network. You can view Google&'s Privacy Practices here: Privacy Policy – Privacy & Terms – Google.

Mobile Application Technologies. If you access our website and Services through a mobile device, we may automatically collect information about your device, your phone number, and your physical location.

E. Information We May Receive from Third Parties

We may collect additional Personal Data about you from third-party websites, social media platforms and/or sources providing publicly available information (e.g., from the U.S. postal service) to help us provide Services to you, help prevent fraud, and for marketing and advertising purposes.

This Privacy Statement only applies to information collected by our Services. We are not responsible for the privacy and security practices of those other websites or Social Media Platforms or the information they may collect (which may include IP address). You should contact such third parties directly to determine their respective privacy policies. Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, Social Media Platform, and/or content.

How We Use Personal Data

DCR collects and uses Personal Data for things that may include, but are not limited to, the following:

To provide you with the Services and information you request;

Personalizing information about our Services;

To respond to your inquiries and questions and provide customer service;

For general or targeted marketing and advertising purposes, including sending you promotional material or special offers on our behalf or on behalf of our marketing partners and/or their respective affiliates and subsidiaries and other third parties, provided that you have not already opted-out of receiving such communications;

Personalizing your experience on our website, such as providing recommendations based on your industry or past behavior on the website;

To manage, improve, and foster relationships with third-party service providers, including vendors, suppliers, and parents, affiliates, subsidiaries, and business partners;

Maintain, improve, customize, or administer the Services, perform business analyses, or other internal purposes to improve the quality of our business, the Services, resolve technical problems, or improve security or develop other products and Services;

Providing Services, training and education, tools, products (such as books), and support to our customers, which may also be necessary for the performance of a contract with you;

Conducting business with our suppliers and other entities, including market research activities;

Considering candidates for job vacancies with DCR entities, including all elements of the procedure leading up to making a decision whether to offer, subject to any appropriate background checks, the applicant a position. Some job applicant data processing may also be necessary to comply with legal obligations;

For future recruiting activities related to employment;

To fulfill contracts we have with you;

Comply with our Terms & Conditions;

Analytics for business purposes and business intelligence;

Comply with any applicable laws and regulations and respond to lawful requests; and/or

Other purposes disclosed at the time of collection or otherwise compatible with the above and applicable law; or

For any other purposes disclosed to you at the time we collect your Personal Data and/or pursuant to your consent.

With Whom We Share Personal Data

DCR may share or disclose Personal Data we collect with the following entities and for the following purposes:

Information Shared with our Subsidiaries and Affiliates: We may share your Personal Data with our subsidiaries and affiliates who process Personal Data on behalf of DCR for the purposes of supporting and providing Services to our customers.

Disclosure of Information for Legal and Administrative Reasons: We may disclose your Personal Data without notice (i) when required by law or to comply with a court order, subpoena, search warrant, or other legal process; (ii) to cooperate or undertake an internal or external investigation or audit; (iii) to comply with legal, regulatory, or administrative requirements of governmental authorities (including, without limitation, requests from the governmental agency authorities to view your Personal Data); (iv) to protect and defend the rights, property, or safety of us, our subsidiaries and affiliates, and any of their officers, directors, employees, attorneys, agents, contractors, and partners, and the website Service users; (v) to enforce or apply our Terms & Conditions; and (vi) to verify the identity of the user of our Services.

De-Identified or Aggregated Data: We may share your Personal Data on an aggregated basis for any purpose in which your specific Personal Data is blinded, masked, or otherwise not identifiable.

With your Consent: We may share Personal Data consistent with this Privacy Statement with your implied consent.

District Consulting and Research may disclose Personal Data in special cases when we have a good faith belief that it is necessary: (a) to conform to legal requirements or to respond to lawful requests by public authorities, including to meet national security or law enforcement requirements; (b) to protect and defend our rights or property; (c) to enforce the website Terms and Conditions; or (d) to protect the interests of our users or others.

Links to Other Websites

Our Services may contain links to other websites or Services that are not owned or controlled by us, including links to Social Media Platforms such as Facebook, Instagram, or YouTube, or may redirect you off our website away from our Services.

Retention of Data

We will retain your Personal Data for as long as needed to provide you Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. We will retain and use your Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. In accordance with our routine record keeping, we may delete certain records that contain Personal Data you have submitted to us. We are under no obligation to store such Personal Data indefinitely and disclaim any liability arising out of, or related to, the destruction of such Personal Data.

Geographic Location of Data Storage and Processing

Our Services are targeted to individuals located in the United States. As such, the Services collect Personal Data and process and store that Personal Data in databases located in the United States. If you are visiting the Services from a country outside the United States, you should be aware that you may transfer personally identifiable information about yourself to the United States, and that the data protection laws of the United States may not be as comprehensive as those in your own country. By visiting the Services and submitting any personally identifiable information you consent to the transfer of such personally identifiable information to the United States.

Changes in this Privacy Statement

We reserve the right to change, modify, or amend this Privacy Statement at any time to reflect changes in our products and service offerings, accommodate new technologies, regulatory requirements, or other purposes. If we modify our Privacy Statement, we will update the "Effective Date" and such changes will be effective upon posting. It is your obligation to check our current Privacy Statement for any changes.

Copyright 2023, District Consulting and Research.