Privacy Policy
What sedi.org collects, who sees it, and the choices you have.
Who we are
sedi.org is the website of the SEDI Consortium, a bipartisan, multistate effort led by the State of Utah on state-endorsed digital identity. The website and its forms are operated by Spruce Systems, Inc. (“SpruceID,” “we,” “us”) on behalf of the SEDI Consortium. That is why SpruceID hosts the site, receives what you send through it, and is responsible for this policy. The State of Utah, which leads the consortium, also has access to everything sent through the site’s forms.
This policy explains what personal information sedi.org collects, why, who sees it, and the choices you have. “Personal information” means information that identifies you or could reasonably be linked to you.
It covers sedi.org and any email you send us about it. It does not cover other websites we link to, such as the Summit registration page on Luma, sedisummit.com, sedi.utah.gov, YouTube, or the Utah Legislature’s website. Those sites have their own privacy policies.
What we collect
We collect only what you choose to send through the site’s three forms (the sign-up on Get involved, the updates sign-up at the bottom of each page, and the contact form), plus the limited technical information any website needs to work.
| Category | What it includes | Where it comes from | Who we share it with |
|---|---|---|---|
| Contact information | Your name and email address. The updates sign-up asks only for your email address. | You, through the forms | The State of Utah and our service providers |
| Professional information (optional) | Your state or territory, and your role (for example, legislator, legislative staff, state agency, organization, or resident) | You, through the forms | The State of Utah and our service providers |
| Your requests and messages | The topics you ask to hear about (a briefing for your state, SEDI 101 sessions and office hours, consortium meetings, occasional updates) and anything you write in the contact form | You, through the forms | The State of Utah and our service providers |
| Submission details | The date and time you sent a form, and which sedi.org page it was on | Recorded automatically when you send a form | The State of Utah and our service providers |
| Technical information | Your IP address and basic browser information, which every website receives | Collected automatically to deliver the site and protect it from abuse | Our hosting provider |
Please don’t send sensitive information through the forms, such as government ID numbers, health information, or financial account numbers. We don’t need it.
Cookies and tracking
How we use it
- To respond to you: to answer your message, arrange a briefing, or follow up on your request.
- To send what you asked for: details of SEDI 101 sessions and consortium meetings, and occasional updates if you chose them. Every update email has a way to unsubscribe.
- To keep the site working and secure: for example, to stop automated spam. The form handler holds your IP address for about a minute to limit how often forms can be sent, and does not store it with your submission.
- To meet legal obligations and to protect the rights and safety of you, the consortium, SpruceID, and others.
We do not sell your personal information, share it for targeted advertising, or use it to build profiles about you. We will not use it for a materially different purpose without telling you first.
SpruceID uses what you send only to run sedi.org for the consortium. It does not use it for SpruceID’s own business, sales, or marketing, and does not add you to any SpruceID list.
How long we keep it
How we protect it
Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we have about you, and give you a copy;
- correct it;
- delete it;
- stop emailing you. You can also use the unsubscribe link in any update.
To make a request, email [email protected] with “sedi.org privacy” in the subject line, or use the contact form on sedi.org. To protect your information, we may ask you to confirm the request from the email address you used on the site. We respond within 45 days and don’t charge a fee. We won’t treat you differently for making a request.
If we deny your request, you can appeal by replying with “Appeal” in the subject line, and we will respond within 60 days. If we deny your appeal, you can contact your state attorney general.
If you live in a state with its own privacy law, such as California, Virginia, or Utah, you may have more rights under that law, and we will honor them. California residents may use an authorized agent with written permission, and may ask whether we share personal information with third parties for their direct marketing. We don’t.
If you are in the European Union, the European Economic Area, or the United Kingdom, you also have rights under the GDPR: to object to or restrict processing, to receive your information in a portable format, to withdraw consent at any time, and to complain to your local data protection authority. We rely on your consent to send the updates you sign up for, and on our legitimate interest in answering the messages you send and keeping the site secure. sedi.org is hosted in the United States, and your information is processed there.
Children
Changes to this policy
Contact
Spruce Systems, Inc. (SpruceID), operator of sedi.org on behalf of the SEDI Consortium
[email protected]
228 Park Avenue S #28788, New York, NY 10003
About
Who the consortium is and how this site stays neutral.