This Privacy Policy applies to www.OneWithTheOcean.org and to applications, services and mobile applications on or in which this Privacy Policy is linked or referenced (collectively with the Site, the “Services”).  The Services are owned and/or operated by SMOG INC. (sometimes referred to in this Policy as “we” or “us”).  We hope that this Privacy Policy helps clarify how we collect and process your information.

This Privacy Policy describes:

• The information we collect on or through the Services and how we collect it.
• How we use and process the information we collect.

Please review this Privacy POLICY CAREFULLY BEFORE ACCESSING AND USING THE SERVICES. When you submit information to or through the Services, you consent to the collection and processing of information as described in this Privacy Policy.

IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, THEN PLEASE DO NOT USE THE SERVICES.

1. Changes to This Privacy Policy

The Effective Date of this Privacy Policy is set forth at the top of this webpage. As we add new features, we may need to modify this Privacy Policy.  Whenever possible, we will provide you with advance written notice of our changes.  Your continued use of the Services after the Effective Date constitutes your acceptance of the amended Privacy Policy.  The amended Privacy Policy supersedes all previous versions.  We will not, however, make retroactive changes that reduce your privacy rights unless you affirmatively agree to those changes. 

2. Information We Collect

“Personal Information” means information associated with or used to identify a specific person.  Your Personal Information includes: (1) contact data (such as your e-mail address, mailing address, telephone number, school name and school grade); and (2) Location Data (as defined below) and (3) certain Usage Data, such as the IP address from which you access the Services (as further discussed in Section 3b. below)  
 

“Location Data” is a category of Personal Information collected about the location of a mobile device or computer, including: (1) the location of the mobile device of computer used to access the Services derived from GPS or WiFi use; (2) the IP address of the mobile device, computer, or internet service used to access the Services; or (3) other information made available by a user or others that indicate location, such as geotag information in photographs. You can change your preferences on your mobile device and/or browser to deny us access to your Location Data. Please note that if you disable location tracking, certain features of the Services may not be available to you. 

“General Information” is information about an individual’s online activity that, by itself, cannot be used to identify him or her, such as browser type, operating system and the dates/times of Services access.

Personal Information and General Information may be linked together. Different types of General Information also may be linked together and, once linked, may identify an individual person.

3. How We Collect Information

We collect information that you provide to us and from your use of the Services.  The information that we collect and how we process it depends on how you use and access the Services.  Some information is collected through use of cookies and similar data collection tools (as further discussed in Section 5 below).

a. Information that You Provide to SMOG INC: You may provide us with your Personal Information when you contact us for help or information, create an account to use one of the Services; make a donation to one of our campaigns, post your biographical information on the Sites or otherwise voluntarily supply your Personal Information to us.  We may collect information, some of which may be Personal Information, as otherwise described to you at the point of collection or pursuant to your consent.

b. Information that We Collect When You Use the Services: When you use the Services, we may automatically collect Information about how you interact with the Services, such as (i) IP address; (ii) domain server; (iii) type of device(s) used to access the Services; (iv) web browser(s) used to access the Services; (v) statistics and information associated with the interaction between your browser or device and the Services; and (vi) referring webpage or other source through which you accessed the Services (collectively, “Usage Data”). Depending on applicable law, some Usage Data is Personal Information and some is General Information. 

4. How We Use, Share and Disclose Information

a. How We Use Information

We use the information that we collect or that you provide to us to operate, maintain and enhance the Services, including:

• To present the Services to you and to customize, improve and develop content and functionality that helps us better serve your needs;
• To troubleshoot problems with the Services;
• To facilitate communication between SMOG INC and you;
• To connect you to local events, chapters and volunteers in your area;
• To prevent, detect and investigate prohibited or illegal activities, such as claims of copyright infringement and security breaches;
• To send emails and other communications that display content that we think will interest you, such as news about our campaigns, programs, services, products and promotions;
• To generate statistical information about how users interact with the Services and conduct analyses to support, improve and enhance the Services;
• To carry out our obligations and protect our rights arising from any contracts entered into between you and us;
• To protect the safety, security and legal rights of other users of the Services;
• To send you important administrative information regarding the Services, such as changes to this Privacy Policy or our other policies; and
• To fulfill any other purpose for which you provide information to us or to which you consent. 

b. How We Share and Disclose Information

We may share and disclose information:

• With third party service providers that we retain to perform functions on our behalf, such as web hosting, data analyses and promotion services providers, communication services providers, e-commerce vendors, and technology and data service providers, that have access to Personal Information needed to perform their functions;
• To enforce our agreements with other users or third parties, including in connection with claims of copyright infringement;
• To protect the safety and security of users;
• To comply with a subpoena, regulation, binding order of a data protection agency, legal process, governmental request or other legal or regulatory process; and
• In order to protect or defend SMOG INC’s rights or property, even without a subpoena, warrant or other court order.

5. Credit Card Information

SMOG INC does not process your credit card information. Instead, SMOG INC has entered into an agreement with PayPal Holdings Inc, a third party payment processing service, to collect, store, process and transmit your credit card data when you make a donation to us. PayPal Holdings Inc certifies as adhering to the Payment Card Industry Data Security Standards. SMOG INC may transfer Personal Information to PayPal Holdings Inc for the purpose of facilitating the transaction.

6. Information Protection

SMOG INC has implemented policies, procedures, and safeguards, including secured online connections, designed to protect all information submitted through the Services. We also strive to obligate our agents, contractors and business partners to protect the information that they use or access in connection with providing services to SMOG INC.  While we do work hard to protect your information, we cannot guarantee the privacy or security of information that you transmit over the Internet.  DISCLOSURE OF INFORMATION TO SMOG INC IS AT YOUR OWN RISK.  We urge you to take every precaution to protect your information when you use the Internet or store information on your computer, tablet, or mobile device.

All personally identifiable information (PII) is transmitted to SMOG INC via SSL-secured connections. Insecure connections to systems that receive this information are not allowed. All information is stored in an encrypted format by the vendors which provide SMOG INC with the services we use to process PII, and access to the information is restricted to those personnel and contractors with a business need for such access. All vendors who handle PII on SMOG INC's behalf are certified as adhering to the current Payment Card Industry (PCI) Data Security Standard (DSS). Additionally, SMOG INC's internal data handling policies and procedures are reviewed yearly by SMOG INC Information Technology personnel to ensure compliance with the current PCI DSS.

7. Links to Other Services

This Privacy Policy applies solely to information collected by or through the Services.  As noted in the Terms, the Services may contain plug ins from and links to third-party websites and services, including our social media services such as Facebook and Instagram (collectively, “Linked Services”).  Linked Services are not under the control of SMOG INC and SMOG INC is not responsible for Linked Services.  The inclusion of a plug in or a link does not imply endorsement by SMOG INC of the Linked Services or any association with the operators of the Linked Services.  SMOG INC does not investigate, verify or monitor the Linked Services.  We provide links to Linked Sites for your convenience only.  You access Linked Services at your own risk.  We encourage you to read about the privacy practices of any Linked Service that you access.

8. Play in the Waves

We administer our Play in the Waves through the Services. While we are a nonprofit entity not subject to the Children’s Online Privacy Protection Act (COPPA), we do not direct the Services to children under the age of 13, and we do not knowingly collect, store or use personal information about children under the age of 13.

If we learn that a child under the age of 13 has submitted information about himself/herself to us, we delete it as soon as possible. If you believe that we have collected Personal Information from a child under the age of 13, please contact us at hello@onewiththeocean.org.

9. California Consumer Rights Information

California Civil Code section 1798.83 law permits residents of California to opt-out of disclosure of Personal Information to third parties for their direct marketing purposes. You may choose to opt-out of the sharing of your personal information with third parties for marketing purposes at any time by submitting a request in writing to our contact address below or by e-mailing us at hello@onewiththeocean.org We honor all such opt-out requests and it is our policy not to share personal information with third parties for direct marketing purposes where you have submitted such a request.  Please note that this opt-out does not prohibit disclosure made for non-marketing purposes.

Under California Civil Code Section 1789.3, we are required to provide California residents with the following specific consumer rights information:

1. The Services are owned and/or operated by Surfrider Foundation, P.O. Box 73550, San Clemente, CA 92673.
2. Unless otherwise expressly stated, the Services are provided without charge.
3. To file a complaint regarding any of the Services or to receive further information regarding use of the Services, please send a letter to One With the Ocean, 144 West D. St, Suite 203, Encinitas, CA 92024 or contact us via email at hello@onewiththeocean.org  (with “California Resident Request” as the Subject Line). You also may contact the Complaint Assistance Unit of the Division of Consumer Services of California’s Department of Consumer Affairs in writing at 400 R Street, Suite 1080, Sacramento, California 95814 or by telephone at 916.445.1254 or 800.952.5210.

10. Information Transmission

The Services are based in the United States and provided for access and use only by persons located in the United States and Canada. The Services are hosted in the United States.  If you are visiting the Services from outside the United States and Canada, your information may be transferred to, stored and processed in the United States and Canada. The data privacy and protection and other laws of the United States may not be as comprehensive as those in your country.  By using the Services, you consent to transfer of your information to our facilities as described in this Privacy Policy.

11. How to Contact Us

If you have questions about this Privacy Policy or to request corrections, amendments or deletions to any Personal Information that you have provided through the Services, please contact us at hello@onewiththeocean.org or call us at 858-868-1717. SMOG INC will use reasonable efforts to supply you with requested Personal Information and correct any factual inaccuracy or delete your Personal Information from our databases. To honor your request, we will need the exact information you wish to correct, amend or delete.

Smog Inc,. dba One With the Ocean

144 West D Street

Suite 203

Encinitas, CA 92024