EVAM ARTS CORP (“we,” “our,” or “us”) is dedicated to fostering artistic expression and personal development within a vibrant, supportive community. We recognize that respecting your privacy and protecting your personal information is fundamental to maintaining the trust you place in us. This comprehensive Privacy Policy outlines our commitment to transparency by detailing how we collect, use, store, share, and protect the personal information of our students, parents, guardians, mentors, volunteers, donors, and website visitors (collectively, “Users” or “you”). This policy applies to all activities across our organization, including website interactions, online enrollment systems, in-person studio registration, and data collected through our community outreach programs at 425 BRIERLEY DRIVE, APEX, NC 27523.

We encourage you to read this policy carefully to understand our practices regarding your information and how we will treat it. By accessing or using our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our services or provide us with your personal information.

1. Scope and Our Commitment to Data Integrity

1.1 Defining the Scope of the Policy

This Privacy Policy governs the processing of Personal Data collected by EVAM ARTS CORP. “Personal Data” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. This includes identifiers such as name, email address, and IP address, as well as less obvious data points like biometric information derived from photographs (for identification/security) or artistic portfolios that uniquely reflect an individual’s work.

Our commitment extends beyond merely complying with the law; we strive to apply best practices in data protection. While EVAM ARTS CORP is primarily based in the United States, we are mindful of global privacy standards, including the principles of the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), particularly when serving international users or engaging in online activities that may be accessed globally. This broader commitment ensures a high standard of protection for all our community members, regardless of their geographical location.

1.2 Our Core Data Protection Principles

Our data management is guided by the following principles:

1. Lawfulness, Fairness, and Transparency: We process data legally, openly, and in a way that is clear to you.
2. Purpose Limitation: We collect data only for specified, explicit, and legitimate purposes clearly outlined in this policy.
3. Data Minimization: We only collect and retain data strictly necessary for those purposes.
4. Accuracy: We take reasonable steps to ensure data is accurate and up-to-date.
5. Storage Limitation: We retain data only for as long as is necessary for the stated purpose.
6. Integrity and Confidentiality: We protect the data through appropriate technical and organizational security measures.

2. Categories of Information We Collect

We collect different types of information depending on your interaction with EVAM ARTS CORP, whether as an enrolled student, a parent/guardian, a volunteer, a donor, or a website visitor. The categories of information collected, the purpose of collection, and the legal basis are detailed below:

2.1 Enrollment and Contact Data (Identifiable Information)

This category includes the essential information required to register, communicate, and ensure the safety and appropriate placement of our participants.

• User/Student Information: Full legal name, date of birth, age, gender (optional, for demographic purposes), preferred name, and artistic background/skill level.
• Parent/Guardian Contact Information: Full names, mailing address (425 BRIERLEY DRIVE, APEX, NC 27523 is our base address but we collect your residential address), email addresses (info@evamac.site is our contact email but we collect yours), primary and emergency phone numbers.
• Payment Information: Billing address, and a transaction record when payments are made. Note: We do not directly store full credit card numbers; these are processed securely by a PCI DSS compliant third-party payment processor (e.g., Stripe or PayPal).
• Health and Safety Information (Sensitive): Relevant medical conditions, allergies (especially food and material allergies, crucial for studio safety), emergency contact details, and any required medication details. This data is kept strictly confidential and shared only with certified staff on a need-to-know basis (e.g., Mentor Sam O’Connell or a designated first-aider) to ensure the physical well-being of the participant.

2.2 Program and Portfolio Data (Creative Output)

This data is unique to an arts education organization and is collected specifically for instructional, mentorship, and showcase purposes.

• Artistic Output: Photographs or digital files of submitted artwork, portfolios, performance recordings, and written critiques from mentors (like Aisha Khan or Dr. Elias Vance).
• Testimonials and Feedback: Voluntary written or video statements provided by parents (e.g., “Sarah M., Parent of Age 4”) or adult participants regarding their experience with our programs, explicitly intended for promotional use.
• Photography and Media Consent: Specific release forms granting permission for EVAM ARTS CORP to photograph or video-record the participant and their work for promotional, exhibition, or educational purposes (e.g., on our social media or in our annual report).

2.3 Employment, Volunteer, and Donor Data

For individuals who engage with us in a professional or philanthropic capacity.

• Mentor and Staff Data: Resumes, professional qualifications, extended bios (like those for Lena Rodriguez or Samuel O’Connell), employment history, references, and required criminal background check results (handled through a verified third-party service).
• Volunteer Data: Contact information, areas of interest/skill (e.g., Studio Assistant, Event Support), availability, and emergency contact details.
• Donor Data: Donation history, amount, and, for certain levels of giving, publicly shared recognition preferences. Financial data related to donations is handled with the highest level of security and confidentiality.

2.4 Automatically Collected Data (Technical and Usage Data)

When you visit the EVAM ARTS CORP website, certain information is automatically logged by our servers, often through the use of cookies and other tracking technologies.

• Usage Data: Details about how you interact with our website, including pages viewed, time spent on the site, mouse movements, links clicked, and search terms used.
• Device Data: IP address, browser type and version, operating system, device type, and language preferences.
• Location Data: General, non-specific geographical data (city/state) derived from your IP address, used only for regional trend analysis related to our Apex, NC operations.

3. How We Use Your Information (Purpose Limitation)

We use the Personal Data we collect only for the explicit, legitimate purposes detailed below, ensuring that every piece of information serves a function aligned with our organizational mission and commitment to transparency.

3.1 Service Provision and Program Delivery

The primary use of your data is to fulfill our contractual obligations to you and your participant.

• Enrollment and Administration: Processing registration forms, managing class rosters, tracking attendance, and billing for tuition and materials.
• Instruction and Mentorship: Utilizing artistic background and skill level data to ensure placement in the correct program track (e.g., Foundational Skills vs. Youth Mentorship) and to allow mentors to tailor the curriculum and provide personalized feedback.
• Safety and Emergency Response: The critical use of Health and Safety Information and Emergency Contact Details to act swiftly and appropriately in the event of a medical incident or emergency during studio hours at 425 BRIERLEY DRIVE.

3.2 Communication and Engagement

We use your contact information to maintain the vibrant communication essential to our community-driven model.

• Operational Communication: Sending confirmation emails for enrollment, notifications regarding class cancellations, schedule changes, and logistical updates (e.g., Studio Manager Sam O’Connell’s notes on facility maintenance).
• Program Marketing: Sending our e-newsletter, updates on new classes, special workshops, and summer camp registration periods. You always have the option to unsubscribe from non-essential promotional communications.
• Community Showcase: Using approved Artistic Output and Testimonials (with explicit consent) on our website, social media, and in printed materials to demonstrate the quality and impact of our programs, managed by Outreach Coordinator Lena Rodriguez.

3.3 Internal Operations, Improvement, and Security

We utilize collected data to enhance our offerings and ensure operational integrity.

• Program Evaluation and Development: Analyzing demographic and skill-level data (anonymized where possible) to refine the curriculum, ensuring our programs remain effective, current, and relevant (a process often overseen by Dr. Elias Vance).
• Security and Fraud Prevention: Monitoring usage data and conducting background checks for staff/volunteers to ensure the physical and digital safety of our community and prevent unauthorized access to our systems.
• Legal Compliance: Processing staff background check results, maintaining financial records for audit purposes, and complying with any local, state, or federal legal obligations related to non-profit governance in North Carolina.

4. Disclosure and Sharing of Your Information

EVAM ARTS CORP does not sell your Personal Data to any third parties for monetary consideration. We only share information with third parties when absolutely necessary to provide our services, meet legal obligations, or with your explicit consent.

4.1 Service Providers (Processors)

We engage trusted third-party companies and individuals to perform services on our behalf, which may require them to process limited sets of Personal Data. These providers are strictly prohibited from using your Personal Data for any purpose other than to provide the specific services contracted by EVAM ARTS CORP. Examples include:

• Payment Processors: Handling tuition and donation transactions (as noted in Section 2.1).
• Background Check Agencies: For staff, mentors, and volunteers.
• IT and Cloud Hosting Providers: Securely storing our digital enrollment records, educational materials, and website assets.
• Email Marketing and Communication Platforms: Distributing our e-newsletter and critical operational alerts.
• Analytics Providers (e.g., Google Analytics): Processing Usage Data to help us understand website traffic and optimize our online presence (as detailed in Section 8).

4.2 Business Transfers and Corporate Structure Changes

In the event that EVAM ARTS CORP undergoes a merger, acquisition, or sale of assets, your Personal Data may be transferred as a business asset. Should such an event occur, we will provide you with prior notice and ensure that the recipient organization honors this Privacy Policy or provides notice of a new policy.

4.3 Legal Requirements and Law Enforcement

We may disclose your Personal Data if required to do so by law or in the good faith belief that such action is necessary to:

• Comply with a legal obligation (e.g., a court order or subpoena).
• Protect and defend the rights or property of EVAM ARTS CORP, including our intellectual property (such as our unique Expressive Mentorship Model).
• Protect the personal safety of Users or the public in emergency circumstances (e.g., sharing health data with emergency responders).
• Protect against legal liability or potential fraud related to our financial or educational operations.

5. Data Security and Data Retention

5.1 Our Commitment to Data Security (Integrity and Confidentiality)

We have implemented robust technical, organizational, and physical safeguards designed to protect the Personal Data we process from accidental loss, unauthorized access, unauthorized use, alteration, and disclosure. Given the sensitive nature of some of the health and safety information we collect (especially for our younger participants), our measures are stringent:

• Encryption: Data transmitted to and from our website uses Secure Socket Layer (SSL) technology, and sensitive data stored on our servers is subject to encryption protocols.
• Access Control: Access to sensitive Personal Data (e.g., health information) is strictly limited to necessary administrative staff (e.g., Aisha Khan and Sam O’Connell) and mentors on a need-to-know basis, protected by multi-factor authentication (MFA) and strong password policies.
• Physical Security: Physical records containing Personal Data at 425 BRIERLEY DRIVE are stored in locked, secure cabinets with restricted access, monitored under our facility security protocol.
• Regular Audits: We conduct periodic reviews of our security practices and update our systems to address new threats, maintaining a proactive stance against potential vulnerabilities.

5.2 Data Retention Policy (Storage Limitation)

We retain your Personal Data only for as long as is necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Active Enrollment Data: Data used for instructional, billing, and safety purposes is retained for the duration of the participant’s active enrollment and for a period of up to three years after the last date of enrollment to facilitate easy re-enrollment and track longitudinal artistic progress.
• Financial Records: Financial transaction data (excluding full card numbers) is retained for a period required by tax and accounting laws, typically seven years.
• Background Check Data: Confidential background check results for staff and mentors are retained for the duration of their engagement with EVAM ARTS CORP plus one year, in line with legal employment standards.
• Artistic Output/Media: Data collected with specific consent for promotional use (Testimonials, Portfolio Images) may be retained indefinitely or until consent is explicitly withdrawn by the User.
• Technical/Usage Data: Non-identifiable technical data and aggregated analytics are retained indefinitely for organizational improvement purposes.

Upon the expiration of the appropriate retention period, we will securely delete or anonymize your Personal Data, ensuring it can no longer be associated with you.

6. Your Data Protection Rights (GDPR and CCPA Framework)

As a commitment to best practices in data protection, EVAM ARTS CORP upholds the fundamental rights afforded to individuals under modern privacy frameworks, regardless of whether you reside in the EU, California, or elsewhere. These rights empower you to control your personal information.

6.1 Right to Access and Knowledge

You have the right to request confirmation as to whether or not we are processing your Personal Data, and if so, to request access to the data, including confirmation of the categories of personal information we have collected about you, the categories of sources from which the personal information is collected, the specific pieces of personal information we have collected, and the business or commercial purpose for collecting or selling (though we do not sell) that personal information. This right is critical for ensuring our transparency.

6.2 Right to Rectification (Correction)

You have the right to request that EVAM ARTS CORP correct any inaccurate or incomplete Personal Data we hold about you. For instance, if your mailing address has changed from one address in Apex to another, you can request an update. Our commitment to Data Accuracy ensures we comply with these requests promptly.

6.3 Right to Erasure (Deletion)

You have the right to request the deletion of your Personal Data when it is no longer necessary for the purpose for which it was collected, or if you withdraw consent and there is no overriding legal basis for its continued processing. Please note that this right is subject to exceptions, particularly concerning data required for:

• Completing a transaction or providing a requested service (e.g., active enrollment).
• Detecting security incidents or protecting against fraudulent activity.
• Complying with a legal obligation (e.g., financial records retention).

6.4 Right to Restrict Processing (Limitation)

You have the right to request that we restrict the processing of your Personal Data, such as when you contest the accuracy of the data, or when the processing is unlawful but you oppose erasure and request restriction instead.

6.5 Right to Data Portability

You have the right to receive the Personal Data you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller without hindrance from us, where technically feasible and necessary for portability.

6.6 Right to Object

You have the right to object to the processing of your Personal Data where we are relying on a legitimate interest as the legal basis for processing, particularly when the processing relates to direct marketing. If you object to processing for marketing purposes, we will cease that processing immediately.

6.7 Exercising Your Rights

To exercise any of the rights listed above, please submit a verifiable consumer request to us by emailing the Program Director at info@evamac.site. We may require additional information to verify your identity before processing your request, ensuring that the integrity of our data system is maintained and that we only disclose data to the authorized individual or their legal representative. We will respond to all legitimate requests within 30 days.

7. Children’s Privacy (COPPA Compliance)

The protection of our younger participants is a paramount concern for EVAM ARTS CORP, particularly those under the age of 13. We strictly adhere to the requirements of the Children’s Online Privacy Protection Act (COPPA).

7.1 Parental Consent

We do not knowingly collect Personal Data online from children under the age of 13 without obtaining verifiable parental consent. Our online enrollment platform is designed to require that a parent or legal guardian (Age 18+) must provide consent on behalf of the child and input their own contact and payment details. If we learn that we have collected Personal Data from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information from our servers and records, notifying the parent or guardian of our action.

7.2 Nature of Information Collected

For children under 13, we limit the collection of Personal Data to that which is strictly necessary for participation and safety (Name, Age, Emergency Contact, and Health/Allergy Information). Any collection of artistic output or media consent for a child under 13 is explicitly obtained through a separate, specific consent form signed by the parent or guardian, ensuring the guardian is fully aware of the public nature of the data collected (e.g., use in an exhibition catalog or on the website managed by Lena Rodriguez).

7.3 Parental Rights Regarding a Child’s Data

Under COPPA, parents or legal guardians of a child under 13 have the right to:

• Review the Personal Data collected from their child.
• Revoke consent and refuse to permit further collection or use of their child’s Personal Data.
• Request the deletion of their child’s Personal Data.

To exercise these rights regarding your child’s information, please submit your request to our administrative team at info@evamac.site, referencing the child’s full name and date of birth for verification purposes.

8. Cookies and Tracking Technologies

Like most modern websites, EVAM ARTS CORP utilizes “cookies” and similar tracking technologies to enhance your experience, analyze site usage, and support our marketing efforts.

8.1 What are Cookies?

Cookies are small data files placed on your device (computer, phone, or tablet) when you visit our website. They allow the site to recognize your device on subsequent visits, which is used for various functions:

• Session Cookies: Essential for website function (e.g., keeping you logged into an enrollment portal). These are deleted once you close your browser.
• Persistent Cookies: Remain on your device for a set period or until manually deleted, allowing us to remember your preferences (e.g., language settings).
• Third-Party Cookies: Placed by services we use for analytics or advertising (e.g., Google Analytics).

8.2 How We Use Cookies

We use cookies for three primary purposes:

1. Strictly Necessary: To enable core functionality, such as security, network management, and accessibility. These cannot be turned off in our systems.
2. Performance and Analytics: To collect information about how Users interact with our website (e.g., which pages are most popular, time spent on Dr. Vance’s articles). This helps us measure, report, and improve the performance and usability of our site.
3. Targeting and Advertising: To track your browsing habits and activity to deliver tailored promotional content about EVAM ARTS CORP programs and events.

8.3 Your Choices Regarding Cookies

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies or to notify you when a cookie is being placed. If you choose to decline cookies, it may affect the functionality of our website and your ability to access some services, such as our full online enrollment system. You can also utilize browser add-ons or opt-out links provided by specific third-party analytics services to manage tracking preferences.

9. Third-Party Links and External Services

Our website may contain links to other sites that are not operated by us, such as links to our payment processor, or links to external websites hosting exhibitions featuring our mentors (like Aisha Khan’s gallery page). If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. EVAM ARTS CORP has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services. This policy applies only to the data collected and processed by EVAM ARTS CORP at 425 BRIERLEY DRIVE, APEX, NC 27523 and through our own digital platforms.

10. Changes to This Privacy Policy

EVAM ARTS CORP is a dynamic organization committed to continuous improvement, and as such, our programs, services, and the legal landscape are subject to change. We may update this Privacy Policy from time to time to reflect these changes.

We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top of this document. If the changes are material or impact how we use previously collected Personal Data, we may provide a more prominent notice, such as an email to primary contacts or an alert posted on the EVAM ARTS CORP homepage. We encourage you to review this Privacy Policy periodically for any changes to stay informed about how we are protecting the personal information we collect. Your continued use of the service after any modification constitutes your acknowledgment of the changes and your agreement to abide and be bound by the updated Privacy Policy.

11. Contact Us Regarding Your Privacy

Your privacy concerns are important to us. If you have any questions about this Privacy Policy, the data we hold about you, your rights, or if you wish to exercise any of the rights detailed in Section 6, please do not hesitate to contact our dedicated privacy and administrative team.

Primary Contact for Privacy Matters:

Executive Director / Data Protection Contact: Aisha Khan

Address: EVAM ARTS CORP 425 BRIERLEY DRIVE APEX, NC 27523

Email: info@evamac.site

We are committed to resolving any complaints about our collection or use of your Personal Data. If you feel that we have not addressed your concerns in a satisfactory manner, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.