FIRST Privacy Notice
Below you will find a summary of the privacy practices of FIRST. You should read the full Privacy Policy, available below, or just keep scrolling.
The mission of FIRST:
FIRST is a youth serving non-profit organization. Our mission is to provide life-changing robotics programs that give young people the skills, confidence, and resilience to build a better world.
The data of minors:
To follow US and international law, we don’t collect data directly from youth under the age of 13 and we don’t allow them to create accounts on our websites. Youth ages 13-17 may submit data and create an account, but only with parental consent.
The data we collect:
We collect many standard types of personal data, including name, mailing address, email address, phone number, date of birth, and photos and videos of participants. View a complete list of the personal data we collect.
How we use your data:
We collect personal data to manage, evaluate and celebrate our programs, and to provide you with services you request. Learn more about how we use your data.
How we share your data:
We share personal data with FIRST Program Delivery Organizations (groups who help us manage and run FIRST programs and events), FIRST Key Donors and Sponsors, and services providers who help us implement and promote FIRST programs and events. We do not rent or sell personal data, or allow it to be used for commercial purposes.. Learn more about data sharing.
Where to find more information:
Our full Privacy Policy is below. This document has detailed information about everything we’ve covered here. If you have any questions about our Privacy Policy or the practices of any of our websites, contact us via email privacy@firstinspires.org.
FIRST Privacy Policy
See also: Legal Notices
Last Review and Update: May 14, 2024
FIRST takes your privacy seriously. As a nonprofit and a mission-driven youth-serving organization, we are compelled to understand who we are serving, how our programs are performing, and make improvements so that we can achieve our goals of making FIRST accessible to any youth. Thus, we need to collect certain personal data from you to ensure we are meeting our goals and responsibilities as a youth-serving nonprofit organization.
This FIRST Privacy Policy describes how FIRST ("FIRST," "our," "we," "us,") collects and processes personal data that users (“user,” “your,” or “you”) provide to us at any of our web sites where this Policy is posted (the “Sites”). This Privacy Policy also applies to personal data which FIRST obtains by other means, as described below.
Treatment of the Personal Data of Minors
Our storage and processing of youth data meets the requirements set forth by the United States of America’s Children’s Online Privacy Protection Act, 16 CFR Part 312(“COPPA”); the Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g; 34 CFR Part 99 (“FERPA”); the European Union’s General Data Protection Regulation (“GDPR”); the United Kingdom’s General Data Protection Regulation (“UK-GDPR”); and Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”).
It is our policy to gain consent from parents/legal guardians when collecting personal data on anyone under the age of 18. Youth under the age of 13 are not permitted to create accounts or provide personal data on our Sites.
If we learn that we have personal data obtained directly from a child under 13 we will delete that data as soon as possible. If you believe we have collected data on a minor under age 13, notify us per section 18 of this policy and we will delete that data as soon as possible.
1. Agreement to the Policy
By accessing, using, or creating an account on any of our Sites, or by completing a FIRST Consent and Release form, you agree to be bound by all the Sites’ terms and conditions including this Privacy Policy. If you do not agree to any of the Sites’ terms and conditions or this Privacy Policy, please do not access or use any of our Sites. In the event you believe data was collected without your consent please see section 18 for instructions on how to contact us.
2. What personal data does FIRST Collect:
In the instances and for the reasons outlined in section 4 of this document FIRST may collect the following personal data categories:
Name, mailing address, email address, phone number, date of birth, gender, race, ethnicity, employer, your affiliations with FIRST Strategic Alliances, FIRST alumni status, FIRST program history, secondary or emergency contacts, accommodation and accessibility information, credit card or banking information, passport and national identification information, images (photos and video) and your Internet Protocol (“IP”) address. For youth participants, we also collect data on free or reduced lunch eligibility, grade in school, graduation date, school name, and for certain awards, grade point average. We may also collect medical information (if filing a medical incident report). (Note: Not all personal data types listed above are collected from all participants, and FIRST does not collect race or ethnicity data from residents outside the US and Canada.)
3. How does FIRST collect the data:
We collect data when you provide it to us directly or indirectly through a third party and by “cookies” (as described in section 8, below). You may provide certain data to us when you: (a) register for in person or virtual participation in any FIRST program or event; (b) apply for, or be nominated for, awards; (c) subscribe to our newsletter; (d) send e-mail messages; (e) submit forms; (f) transmit information by telephone or letter; (g) order products; (h) submit your credit card or other payment information; (i) access certain forms or live chat features or request information on our Sites; (j) visit other points on the Sites that state that such information is being collected; (k) attend a FIRST event or a FIRST Program Delivery Organization activity; (l) apply for a grant through a third party vendor; (m) register for badging and housing for a FIRST official event or through a third party vendor; (n) complete a FIRST Consent and Release form; (o) complete a survey or evaluation; (p) make a donation to FIRST, or (q) complete forms relating to medical or non-medical incidents.
When you engage in certain activities on any of our Sites, we may ask you to provide data by filling out and submitting an online form. Depending upon the activity, some of the data may be mandatory and some may be voluntary. If you do not provide the mandatory data with respect to a particular activity, you may not be able to engage in that activity.
4. How does FIRST use the data:
By entering personal data into FIRST Sites or providing it to FIRST (directly or indirectly through third parties), you agree to allow FIRST and its authorized Program Delivery Organizations to use the data for the following purposes:
a. To improve our programs: FIRST uses data to evaluate and improve our programs, products, and services and understand whom we are serving, assess program impact, report aggregated/de-identified data, monitor growth, improve the delivery of FIRST programs, improve our product and service-offerings, customize and improve our Sites’ content, layout, and services, diagnose problems with our servers and software, and administer our Sites, often with the assistance of our vendors. FIRST sometimes uses third parties to help implement, manage, and evaluate programs and efforts, and may share personal data with those third parties only for the purposes outlined in this Policy.
b. To improve the quality of our Sites: FIRST may use your personal data, including the information gathered as a result of site navigation and electronic protocols and cookies, to help create and personalize website content, improve website quality, track marketing campaign responsiveness, evaluate page response rates, conduct usability testing, and facilitate your use of our Sites (for example, to facilitate navigation and the login process, enhance security, and preserve order information between sessions).
c. To assist with travel: We may provide assistance with travel arrangements to FIRST events, including to FIRST Championship. Personal data including your name, gender, date of birth and passport number may be required to process visas and manage your travel arrangements to events.
d. To register you for FIRST programs: If you join a FIRST team as a coach or youth, or you want to volunteer at an event, we need to collect personal data in order to help you manage or connect with your team or choose the right event and volunteer role.
e. To manage events: We use personal data to identify your region for program participation, event registration, badging, volunteer management and general event management. FIRST Volunteer Coordinators and Event Managers may use personal data to manage events.
f. To process Program awards: We may use your personal data to process and manage awards associated with the programs and events. Award applications may require personal information such as name and contact information and may be submitted by an individual or on behalf of an individual in the case of nominated awards (e.g., Woodie Flowers Award, Dean’s List Award, Volunteer of the Year Award). The personal data (e.g., names, images, and video) of award finalists and winners may be shared across a wide variety of news and media channels and platforms to celebrate achievement and to promote and honor the mission of FIRST.
g. To communicate with you: We use personal data to communicate with you about FIRST information and related opportunities. For high school-aged students, FIRST may share education and career discovery opportunities, connections to scholarships and employers, links to FIRST surveys, and information about how they can participate in FIRST after graduation as a FIRST alum.
h. To conduct marketing and promotional activities: We take photographs, record audio and video, and use live broadcasts at our events. We use this media as part of a record of our Programs and to publicly promote FIRST. If you participate in a FIRST Program or a FIRST event, you agree to grant FIRST, its Program Delivery Organizations, and FIRST Key Donors and Sponsors permission to use your likeness in the promotion of FIRST programs. We may also contact you related to program recruitment, retention, and other marketing outreach.
i. To process transactions: We use personal data to engage in interactions with you including to communicate with you about your registration status, payment of team registration, processing of sponsorship information, event information and to process orders, mail program related materials and items, and to collect registration fees or donations.
j. To provide support: We use personal data to provide you with support or other services that you have requested. We may use your data to respond directly to your requests for information including registering for newsletters, registering a FIRST team, registering for trainings, professional development or webinars and any other specific requests you make directly of FIRST or our authorized Program Delivery Organizations. We may pass your data along to the appropriate Program Delivery Organization to respond to your request.
k. To solicit donations: We may use your personal data, including name, email, and mailing address to solicit donations to support the FIRST mission.
l. To comply with Youth Protection Program requirements: FIRST contracts with certified background screening agencies to conduct background screening on volunteers and staff. We will share your personal data for the purpose of conducting background screening, and as required to address or investigate Youth Protection concerns.
m. For insurance purposes: In certain cases, FIRST or FIRST Program Delivery Organizations are required to collect and share information including name, address, phone number, guardian/ parent name, date of birth, and details about the nature of the injurious event and care provided if you are injured while participating in one of our Programs. FIRST or FIRST Program Delivery Organizations may be required to share this information with insurance companies responsible for covering FIRST Program events, the organization hosting the event, or the facility in which the event is hosted.
5. How long does FIRST retain data:
FIRST will retain your data for as long as needed to fulfill the purposes and uses described in this Policy. When we no longer need your data, and there is no need to keep it to comply with our legal obligations or protect our legal rights, we will either delete it from our systems or depersonalize it so we can’t identify you.
If you wish to understand how to request your personal data be deleted, please refer to section 12 for more information.
6. With whom does FIRST share data:
FIRST does not rent or sell data to others. We share personal data with FIRST Program Delivery Organizations, vendors, services providers, and other third parties (collectively, “Service Providers”) who are acting on our behalf to help operate our Sites; handle communications; implement, manage, or evaluate FIRST programs and events; promote FIRST and its Programs; or complete transactions you request. FIRST may also share limited personal data, such as images and video, with FIRST Headquarters-level sponsors or FIRST Program Delivery Organization Sponsors who wish to use this data for the non-commercial promotion of FIRST.
Except as otherwise provided in this Privacy Policy, FIRST will keep your personal data private and will not share it with third parties, unless such disclosure is necessary to: (a) comply with the law or legal process served on us; (b) provide you the products, services and/or information that you may have requested; (c) protect our rights or property; (d) enforce our rights; (e) protect the interests of users of the Site or any other person; (f) operate or conduct maintenance and repair of our equipment; (g) detect, prevent and/or otherwise address fraud, security or technical issues, as authorized by law; and/or (h) otherwise comply with applicable laws.
7. How does FIRST protect information:
FIRST uses technical and organizational measures to protect data including, but not limited to: conducting third-party security audits, firewalls, maintaining security patches on external systems, a log auditing system to identify breaches, and ensuring that all web connections are over HTTPS. Access to personal data is available through your user identification and password selected by you. This password is encrypted. We recommend that you do not divulge your password to anyone and no one at FIRST or who represents FIRST will ever ask for your password. In addition, your personal data resides on a secure server to which only select FIRST personnel and Service Providers have secure access.
8. Cookies:
When you use any of our Sites, we may store cookies on your computer in order to facilitate and customize the experience. A cookie is a small data text file, which a website stores on your computer's hard drive (if your Web browser permits) that can later be retrieved to identify you to us.
Our cookies store randomly assigned user identification numbers, the country where you are located, and your log-in name to welcome you back to a Site. Our cookies: (a) make your use of our Sites easier; (b) make our Sites run more smoothly; (c) track authenticated users visiting our Sites; and (d) help us to maintain secure Sites.
You may decline our cookies, but some parts of our Sites may not work properly as a result. You can at any time use your browser setting to delete our cookies from your system. We may use a third party to display information on our Sites. As part of the third-party service, they may place a separate cookie on your computer.
9. Privacy Policies of Third-Party Sites:
We may maintain links to other websites on our Sites. Links to alliances and sponsoring organizations are examples of these links. This Privacy Policy only applies to FIRST. Other sites accessible through our Site have their own privacy policies and data collection use and disclosure practices. Please consult each site’s privacy policy.
10. How you can rectify incorrect information:
You have the ability to access and edit the personal data you provide to us. Data may be changed by logging into your FIRST user’s account, or by requesting a change in writing. Requests in writing should be sent to privacy@firstinspires.org.
Please include your name, address, e-mail address, and/or phone number when you contact us regarding an update or correction to data. We reserve the right to confirm your identity before updating or correcting personal data. We encourage you to promptly update your personal data if it ever changes by logging-in to your FIRST accounts.
11. How you can object to certain uses of your data:
If you do not wish to receive email from FIRST, you may “opt-out” of receiving these communications by exercising your right to “opt out” by using the unsubscribe feature in the email or sending us an e-mail at at privacy@firstinspires.org.
12. How you can exercise your right to be forgotten:
You may request that your personal data at FIRST be deleted, by emailing privacy@firstinspires.org. You will need to complete a request form and provide information to confirm your identity at the time of your request. We reserve the right to confirm your identity before taking any action to delete your data. FIRST will assess each request to be forgotten on a case-by-case basis to determine the extent to which data can be deleted. FIRST will comply with all requests to be forgotten except where FIRST has a legal obligation to retain your data.
13. How you can exercise your right to data portability:
You have the right to receive a copy of the personal data you have provided to FIRST by emailing privacy@firstinspires.org. We reserve the right to confirm your identity before transmitting any personal data to you.
14. Cross-boarder data transfers:
FIRST and its programs operate internationally. However, FIRST is a United States based organization with headquarters in Manchester, New Hampshire, United States of America. FIRST stores data in the United States of America and inside the European Union within the member state of Germany. When you transfer data to FIRST it will be primarily transferred to, stored and processed in one of these locations.
Leading up to and during the performance of FIRST Programs, FIRST may process your personal data by transferring it to the US or may share your personal data with FIRST Program Delivery Organizations in other countries in order to carry out the activities specified in this Policy. We rely on your explicit affirmative consent as the lawful basis for this collection and transfer, and by submitting your personal data to FIRST, you consent to such transfers and to the storage, and processing of the information provided by you in any country where FIRST operates.
FIRST offers residents from outside of the US similar protections to the GDPR and other comprehensive privacy laws, including the EU-US Data Privacy Framework, the UK Extension to the EU-US Data Privacy Framework, and the Swiss-US Data Privacy Framework. However, there may be risks associated with any cross-border data transfer, and you are encouraged to evaluate data privacy risks before using any FIRST Sites or systems.
15. Special Notification for California Residents:
Users who reside in California and have provided their personal data to us may request information about our disclosures of certain categories of personal identifiable information to third parties for direct marketing purposes. Such requests must be submitted to us at privacy@firstinspires.org. Within thirty days of receiving such a request, we will provide a list of the categories of personal identifiable information disclosed to third parties for use in direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year.
16. FIRST Donor Privacy Policy:
This section applies to all donor-related information received by FIRST, both online and offline, from any donor.
FIRST and its third-party donation processors collect and store donor information including name, address, email address, phone number, alumni status, and donation amounts. Unless authorized by the donor, mandated by law or necessary for the processing and analyzing of donations, FIRST will not share donor information with any other entity. If the donor notified us that the donor's employer will match the donation and the donor requests that we reach out to obtain the matching gift, we may disclose the donor's contact information (name, postal address, email address and telephone number) and donation information (donation amount and supported projects) to the employer. We are not responsible for the privacy practices of donors' employers. For more information regarding the handling of information by an employer, please refer to the employer's privacy policies.
Unless a donor chooses to remain anonymous, FIRST may publish donor names in its Annual Report.
17. Collection of personal data by third parties at FIRST events:
FIRST may allow third parties the opportunity to conduct outreach and engagement activities at FIRST events. As part of these activities these groups may request to collect the personal data of event participants. Such third-party data collections will always be voluntary and are not a requirement for FIRST Program or event participation. Personal data collected by other organizations is not covered by the FIRST Privacy Policy but is subject to the policies of these third parties. Participants should always review the privacy practices of these groups before submitting any personal data.
18. Changes to this Privacy Policy:
We reserve the right to change this Privacy Policy at any time. Such changes, modifications, additions, or deletions shall be effective immediately upon notice thereof, which may be given by means including, but not limited to, posting the revised Privacy Policy at any of our Sites. You acknowledge and agree that it is your responsibility to review the Site you are using and this Policy periodically, and to be aware of any modifications. Your continued use of a Site after any such modifications will constitute your; (a) acknowledgment of any modified Policy; and (b) agreement to abide and be bound by any modified Policy. To the extent that any modifications to this Policy materially alters how FIRST will use information collected under prior version of the Policy, FIRST will provide you notice by email using your email on file, and where required by law, will obtain your consent.
19. How to contact us:
Questions
If you have any questions about this Privacy Policy, the practices of any of our Sites, or your dealings with any of our Sites, or wish to exercise data privacy rights applicable to your jurisdiction, including but not limited to erasure, correction, or to receive a copy of your data, contact us via email at privacy@firstinspires.org, or by phone or regular mail (see below).
Complaints or Data Breach Notification
FIRST has a Data Protection Officer and Data Governance Team who lead investigative action, handle complaints and data breach notification. To file a complaint, email privacy@firstinspires.org, or contact us by phone or regular mail.
To report a data breach, email helpdesk@firstinspires.org and CC privacy@firstinspires.org, or call one of the numbers below during regular business hours.
Contact Us by Phone
You may call us at 800-871-8326 (US, Canada, and Mexico) or 1-603-666-3906 (outside North America), Monday - Friday, 8:30 - 5:00 EST/EDT.
Contact Us by Mail
FIRST
200 Bedford Street
Manchester, NH, United States, 03101