ChildPlus Security & Privacy Statement

ChildPlus Software is committed to protecting the privacy and confidentiality of all the information (all of which is collectively referred to, for purposes of this Privacy Statement, as Personally Identifiable Information (“PII”)) collected by our agencies and transmitted to and maintained by ChildPlus.  ChildPlus’ policies and procedures meet or exceed the physical and electronic security measures required by applicable federal and state regulatory guidelines for the use, storage and/or transmission of PII.  ChildPlus uses state-of-the-art electronic and physical security measures and has established stringent administrative security procedures to protect personal information from unauthorized access, improper use, alteration and unlawful or accidental destruction.  ChildPlus has established privacy and security policies and procedures to ensure that we adhere to all application applicable laws.

Data Security

ChildPlus follows and is committed to the following privacy guidelines:

• ChildPlus will use appropriate controls to ensure that agency data is kept secure, and is only viewed or used by the proper personnel.
• ChildPlus will comply with applicable laws, regulations, and industry standards when protecting user information.
• ChildPlus will hold our employees, vendors, and contractors accountable to meet this same set of privacy guidelines.

At ChildPlus, we see data security as the foundation for protecting PII and we ensure that the data collected by our agencies from families participating in their programs is secure using:

SSL Encryption – ChildPlus uses the Secure Socket Layer protocol (SSL) to encrypt all communication of agency data between our agencies and our data center.  All exchanges of data with our data center are encrypted with 128-bit SSL Encryption to ensure the confidentiality and integrity of data in motion.

Additionally, all portable media, including backup-up media, containing PII are encrypted to protect data at rest.

Firewall – ChildPlus uses firewall technology to protect all servers and databases from unauthorized access.  All critical systems are monitored 24 hours a day, 7 days a week.

State of the Art Data Center – All PII maintained by ChildPlus is stored on servers located within a Rackspace Hosting data center and managed by Rackspace Hosting.  Physical access to our servers is controlled by keycard protocols, biometric scanning protocols and round-the-clock interior and exterior surveillance.

Password and ID Protections – ChildPlus provides their agencies with access controls via login authentication.  Agencies assign unique user names and passwords to authorized personnel and the login process regulates who can gain access and limits the scope of their access.  Agencies control when access is granted or terminated and what data can be accessed by each employee of the agency.

Limitation of Uses – ChildPlus only receives, utilizes and discloses private information submitted to ChildPlus from its agencies and for the limited purposes set forth in its agreements with each agency.

How is Information Shared?

We do NOT sell, trade, or otherwise transfer to outside parties PII of yours, your agency, or the children and families you serve. This does not include trusted third parties who assist us in servicing you, so long as those parties agree to keep this information confidential.

PII & Agency Responsibilities

We recognize the particular importance of protecting privacy where children are involved. We are committed to protecting children’s privacy.

ChildPlus takes great care in protecting the privacy and security of data collected by our agencies. This Privacy Policy describes our practices in connection with information that we collect through the use of this solution developed by ChildPlus.

Authorized Users – Each agency is expected to establish and maintain ChildPlus user access for its employees, in accordance with the agency’s policies and applicable laws.  It is the agency’s responsibility to remove or modify access for employees as their roles or employment change over time.

Data Submission and Revision Obligations – ChildPlus relies solely on the agency to provide accurate and up-to-date data.  Once received by ChildPlus, we will safeguard and ensure that the integrity and security of the data is maintained in accordance with the policies summarized herein.

Agencies control what information is entered into ChildPlus and can choose to omit any information that is not necessary or applicable.  Agencies must determine what is or is not appropriate for inclusion within ChildPlus, and whether additional consent is required from their participant families, in accordance with the purposes for which the agency is utilizing the data.

It is the agency’s responsibility to remove any PII from ChildPlus as may be necessary to comply with requests from their participant families for applicable law.

Retention and Disposal of Personally Identifiable Information – ChildPlus shall retain all private information submitted by agencies in accordance with written agency agreements.  To the extent that data is destroyed, it is destroyed in accordance with applicable industry standards to protect identifiable data from loss, theft, misuse or unauthorized access.

Participant Family Access – ChildPlus is a software provider to our agency providing information technology services.  ChildPlus does not grant participant families direct access to their personal information within ChildPlus.  Should a participant family have questions or need access to their personal information, ChildPlus will ask the family to work with the agency to provide appropriate responses and access.

Collection of Agency Information – ChildPlus collects agency information based on our business relationship with our agencies, including contact information that allows us to communicate with our agencies.  The Company does not collect or utilize any of the participant family information that is used by our agencies.

What information does ChildPlus collect?