Merge pull request #287 from enove/feature-privacy-policy

Setup Privacy Policy sidebar and link in contact section. Regarding #285.

packages/thriver-core-components/lib/component-sidebar/aside.js

@@ -105,6 +105,13 @@ Template.aside.helpers({
     width: 700,
     position: 'right',
     template: 'payments',
+  }, {
+    title: 'Privacy Policy',
+    icon: 'eye',
+    id: 'legal-privacy-policy',
+    width: 700,
+    position: 'right',
+    template: 'legal-privacy-policy',
   }],
 });
 

packages/thriver-core-components/lib/component-sidebar/sidebars.less

@@ -40,6 +40,18 @@ aside.off-canvas{
         -webkit-box-shadow: 0px 0px 5px 0px rgba(0, 0, 0, 0.3);
         @media @mobile { .shadowNone; }
     }
+    .sidebar-document{
+        padding: 40px;
+        text-align: left;
+        &, p, h1, h2, h3, h4{ color: #fff; }
+        h2{
+            text-transform: uppercase;
+            font-size: 15px;
+            line-height: 20px;
+            margin-top: 40px;
+            margin-bottom: 10px;
+        }
+    }
     form + button[data-action], .ref{
         cursor: pointer;
         color: #ffffff;

packages/thriver-core-styles/lib/styles/icons.import.less

@@ -10,6 +10,7 @@ bell "\f0f3",
 user "\f007",
 caret-right "\f0da",
 news "\f1ea",
+eye "\f06e",
 institution "\f19c",
 heart "\f004",
 important "\f06a",

packages/thriver-navigation/lib/utility.js

@@ -101,6 +101,13 @@ Thriver.utilityNavigationHelpers = {
     sidebar: 'payments',
     position: 'right',
     user: 'public',
+  }, {
+    title: 'Privacy Policy',
+    icon: 'eye',
+    type: 'sidebar',
+    sidebar: 'legal-privacy-policy',
+    position: 'right',
+    user: 'public',
   }, {
     // Youtube
     title: '<span class="mobile">Youtube</span>',

packages/wcasa:contact/lib/templates/contact.html

@@ -25,7 +25,10 @@ <h1>{{heading}}</h1>
     <div class="footerBrand">
       <img src="{{imgSrc}}" alt="{{imgAlt}}" />
     </div>
-    <p class="copyright">&copy; {{copyright}}</p>
+    <p class="copyright">
+      &copy; {{copyright}}<br><br>
+      <a href="/legal-privacy-policy">Privacy Policy</a>
+    </p>
   </section>
 </template>
 
@@ -54,3 +57,82 @@ <h3><span class="fa">&#xf06a;</span> Your message failed to send!</h3>
     <p>Please try again later or contact the site administrator for support.</p>
   </div>
 </template>
+
+<template name="legal-privacy-policy">
+  <div class="sidebar-document">
+    <p>This privacy notice discloses the privacy practices of the Wisconsin Coalition Against Sexual Assault (WCASA) and our website, https://www.wcasa.org. This privacy notice applies solely to information collected by this website, except where stated otherwise.</p>
+    <h2>Who owns the information we collect?</h2>
+    <p>We are the sole owners of the information collected on this site. We only have access to or collect information that you voluntarily give us by visiting the website, by email, or other direct contact from you. We will not sell (transfer ownership), rent, or trade this information.</p>
+    <h2>What personal information do we collect from the people that visit our website?</h2>
+    <p>When registering on our site, as appropriate, you may be asked to enter your name, email address, and other information we use to understand our audience or requested by our funders.</p>
+    <h2>When do we collect information?</h2>
+    <p>We collect information from you when you register on our site, subscribe to a newsletter, respond to a survey, fill out a form or enter information on our site. We also use Google Analytics to gather information about interactions with our website and produce aggregate reports about our visitors.</p>
+    <h2>How do we use your information?</h2>
+    <p>We may use the information we collect from you when you register, sign up for our newsletter, respond to a survey or other communication, visit the website, or use other site features in the following ways:</p>
+    <ul>
+      <li>To improve our website.</li>
+      <li>To send periodic emails to you.</li>
+      <li>To follow up with you after correspondence (email or phone inquiries).</li>
+      <li>To provide you with information or services described in a form you respond to.</li>
+      <li>To report on website traffic and activities to our current or future funders.</li>
+    </ul>
+    <h2>How do we protect your information?</h2>
+    <p>Our website is hosted by Heroku, a Salesforce company, that employs a number of security measures to protect the integrity of its web servers from intrusion.  For more information about the security and privacy controls implemented in Salesforce&apos;s infrastructure, visit <a href="https://www.salesforce.com/company/privacy/" target="_blank">https://www.salesforce.com/company/privacy/</a>.</p>
+    <h2>Do we use 'cookies'?</h2>
+    <p>Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enables the site's or service provider's systems to recognize your browser and capture and remember certain information. For instance, we use cookies to remember that you have logged into our website. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.</p>
+    <p>You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since each browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies.</p>
+    <h2>What happens if users disable cookies in their browser?</h2>
+    <p>If you turn cookies off, you will not be able to log into the website. This may prevent you from leaving comments on articles or sharing other forms of content.</p>
+    <h2>Links</h2>
+    <p>This web site contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personally identifiable information.</p>
+    <h2>California Online Privacy Protection Act (CalOPPA)</h2>
+    <p>CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require any person or company in the United States that operates websites collecting personally identifiable information from California consumers to post a privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. See more at: <a href="http://consumercal.org/california-online-privacy-protection-act-caloppa" target="_blank">http://consumercal.org/california-online-privacy-protection-act-caloppa</a></p>
+    <p>According to CalOPPA, we agree to the following:</p>
+    <ul>
+      <li>Users can visit our site anonymously.</li>
+      <li>Our Privacy Policy link includes the word 'Privacy' and can easily be found on our website.</li>
+      <li>You will be notified of any Privacy Policy changes on our Privacy Policy page.</li>
+      <li>Your personal information can be changed by logging in to your account.</li>
+    </ul>
+    <h2>How does our site handle Do Not Track signals?</h2>
+    <p>Do Not Track (DNT) is a privacy preference that users may be able to set in some web browsers. It allows users to opt out of tracking by websites and online services. Currently, the World Wide Web Consortium (W3C) does not have established universal standards regarding DNT signals, and therefore, the Website does not recognize DNT privacy preferences.</p>
+    <h2>COPPA (Children Online Privacy Protection Act)</h2>
+    <p>When it comes to the collection of personal information from children under the age of 13 years old, the Children's Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, United States' consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online. We do not produce content, develop materials, or provide services designed for children under the age of 13 years old. Any child-oriented content found on our site is intended for use by adults who work with children.</p>
+    <h2>Fair Information Practices</h2>
+    <p>The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to be compliant with the various privacy laws that protect personal information.</p>
+    <p>To be in line with Fair Information Practices, we will take the following responsive action should a data breach occur:</p>
+    <ul>
+      <li>If you have provided your email address, we will notify you via email within seven business days after we become aware of the breach unless we are otherwise instructed by law enforcement during their investigation.</li>
+      <li>We agree to the Individual Redress Principle, which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.</li>
+    </ul>
+    <h2>CAN-SPAM Act</h2>
+    <p>The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations. We collect your email address in order to:
+      <ul>
+        <li>Send information, respond to inquiries, and/or other requests or questions</li>
+      </ul>
+    </p>
+    <p>To be in accordance with CAN-SPAM, we agree to the following:
+      <ul>
+        <li>Not use false or misleading subjects or email addresses.</li>
+        <li>Identify the message as an advertisement in some reasonable way.</li>
+        <li>Include the physical address of our business or site headquarters.</li>
+        <li>Monitor third-party email marketing services for compliance, if one is used.</li>
+        <li>Honor opt-out/unsubscribe requests quickly.</li>
+        <li>Allow users to unsubscribe by using the link at the bottom of each email.</li>
+      </ul>
+    </p>
+    <p>If at any time you would like to unsubscribe from receiving future emails, you can email us at <a href="mailto:wcasa@wcasa.org">wcasa@wcasa.org</a> and we will promptly remove you from all correspondence. You can also follow the instructions at the bottom of any email you receive from us that has been sent through a bulk emailing service.</p>
+    <h2>Contacting Us</h2>
+    <p>If there are any questions regarding this privacy policy, you may contact us using the information below.</p>
+    <p>
+      <address>
+        Wisconsin Coalition Against Sexual Assault<br>
+        2801 West Beltline Highway<br>
+        Suite 202<br>
+        Madison, WI  53713<br>
+        (608) 257-2150
+      </address>
+    </p>
+    <p><em>Last Edited on 2017-08-27</em></p>
+  </div>
+</template>

packages/wcasa:contact/lib/templates/contact.less

@@ -177,6 +177,15 @@ section.contact{
   ul.contactInfo li, p.address li{ margin-bottom: 0px; }
 }
 
+div.sidebar-document {
+  a { color: @white; text-decoration: underline; }
+  li { list-style: initial; margin: 0 20px; }
+}
+
+#utility a[aria-controls="legal-privacy-policy"]{
+  display: none;
+}
+
 @media @mobile{
   section.contact{
     padding: 20px;
@@ -251,4 +260,4 @@ section.contact{
       margin: 20px;
     }
   }
-}
+}