General Information

As consumers ourselves, we expect every company to respect our individual privacy. As such, we maintain a high standard for your privacy. Your data is your data, and we work hard to keep it that way. Our procedures as they relate to your data are outlined below, in an effort to keep you informed on our decisions and earn your trust in all that we do.

This Privacy Policy is in accordance with our Terms of Service. It sets out our privacy practices and explains how we handle the information we collect when you visit and use our sites, services, mobile applications, products, and content (“Services”).

We provide this Privacy Policy ("Notice" or “Policy”) to define our information policies and practices, and to assist you in protecting your privacy. This Privacy Policy may be updated from time to time, for instance when we update the functionality of the Services or when there are regulatory changes.

Special Terms

If you are a user having your usual residence in the European Union, you should see our special Section on your GDPR rights.

What we may collect

The Types of Information We Collect

When you access the official Bonfire Services, certain client information and essential and nonessential technical information (collectively “access information”) listed below is automatically collected. No other information is collected through the official Bonfire Services, except when you deliberately send it to us (for example, by clicking a link to send us an e-mail). Examples of the information you might choose to send us are listed below as “optional information.”

Access Information (automatically collected)

  • Client information: the Internet domain and Internet address of the computer you are using.
  • Essential technical information: identification of the page or service you are requesting, type of browser and operating system you are using; and the date and time of access.
  • Nonessential technical information: the Internet address of the Web site from which you linked directly to the respective Bonfire Service, and the “cookie information” used to direct and tailor information based on your entry path to the site.
  • Third-party Tracking Tools: Bonfire Services may use third-party tracking tools to monitor and improve the site or to provide information that may be of interest to users.

Optional information (deliberately sent)

  • E-mail: your name, e-mail address, and the content of your e-mail.
  • Phone number: your mobile number for transactional communication when required by the Services
  • Online forms: all the data you choose to fill in or confirm. This may include credit or debit card information if you are ordering a product or making a payment See below for more specific information about children’s online activities.

How We Use Information

As a general rule, Bonfire does not track individual visitor profiles. We do, however, analyze aggregate traffic/access information for resource management and site planning purposes. Ingenious, Inc. reserves the right to use log detail to investigate resource management or security concerns.

Access Information:

Client information is used to route the requested Web page to your computer for viewing. In theory, the requested Web page and the routing information could be intercepted by other entities involved in transmitting the requested page to you. We do not control the privacy practices of those entities.

Essential and nonessential technical information lets us respond to your request in an appropriate format [or in a personalized manner] and helps us plan Web site improvements. To expedite this process, the Bonfire website may use “cookies.” Usually a cookie enables our Web site to tailor what you see according to the way you entered the site (i.e., if you entered by pushing a button identifying yourself as a student, your subsequent views of information might be tailored for student audiences).

We also use non-identifying and aggregate information to better design our Web site. For example, we may determine that X number of individuals visited a certain area on our Web site, or that Y number of men and Z number of women filled out a particular registration form. But we do not disclose information that could identify those specific individuals.

Optional Information:

Optional information enables us to provide services or information tailored more specifically to your needs, to forward your message or inquiry to another entity that is better able to do so, and to plan Web site improvements.

We use the information you provide about yourself or about someone else when placing a request for service only to complete that order or request. We do not share this information with outside parties, except to the extent necessary to complete that order or request.

We generally use return e-mail addresses only to answer the e-mail we receive. Such addresses are generally not used for any other purpose and by policy are not shared with outside parties. We never use or share the personally identifiable information provided to us online in ways unrelated to the purpose described.

Please note that we may still use any aggregated and de-identified Personal Information that does not identify any individual, and may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Text messages and emails from Bonfire

Sometimes we’ll send administrative messages about account or Services changes via text message or email, e.g. when you request to reset your password. It may not be possible to opt out of administrative messages. You can opt out of most other types of messages, e.g. new feature emails.

Children’s Online Activities and Programs

Bonfire is operated by Ingenious, Inc. and is intended for use by adults. Ingenious, Inc.— and subsequently, Bonfire—does not knowingly collect Personal Information from children under the age of 13. If we learn that we have collected Personal Information of a child under the age of 13 that was not supplied to us voluntarily, we will delete that data from our systems.

Children – Some internet sites may ask you to share information about yourself. Before sending any information about yourself over the Internet to us or anyone else, be sure to ask your parents for permission.

Parents – Bonfire recommends that parents take an active role in their children’s use of the Internet. We encourage you to talk to your children about safe and responsible use of their personal information while using the Internet. Here are some tips:

  • Teach children never to give Personal Information (such as name, address, phone number, school name, etc.) unless supervised by a parent or responsible adult.
  • Know the sites your children are visiting and which sites are appropriate.
  • Look for website privacy policies and know how your child’s information is treated

Miscellaneous

Data Storage

Bonfire uses third-party vendors and hosting partners, such as Amazon, for hardware, software, networking, storage, and related technology we need to run our Services. We maintain two types of logs: server logs and event logs.

Modifying your personal information or deleting your account

If you have a Bonfire account, you can access and modify your personal information, or delete your account here.

To protect information from accidental or malicious destruction, we may not immediately delete residual copies from our active servers and may not remove information from our backup systems. If you delete your account, your account and content may be unrecoverable.

Data Security

We use encryption (HTTPS/TLS) to protect data transmitted to and from our site. However, no data transmission over the Internet is 100% secure, so we can’t guarantee security. You use the Service at your own risk, and you’re responsible for taking reasonable measures to secure your account (like using a strong password).

How to Contact the Bonfire Team

Should you have other questions or concerns about these privacy policies and practices, please send an e-mail to security@bonfire.camp.

Changes to this Notice

Ingenious, Inc. reserves the right to change this Notice at any time. Changes to this Notice will be available at this page. Your continued use of our website after any changes are posted will constitute acceptance of such changes.


EU General Data Protection Regulation (GDPR)

Rights

If you are an individual inside the EU and you interact with Bonfire Services in the context of this Notice, the GDPR provides the following rights. To exercise any of these rights, please contact us at gdpr-security@bonfire.camp.

Be informed – collection and use of your data described herein;

  • Request access to or correct inaccurate personal data held about you;
  • Request that personal data be erased when it’s no longer needed or if processing it is unlawful;
  • Object to the processing of personal data for marketing purposes or on grounds relating to their particular situation;
  • Request restriction of processing of personal data in specific cases;
  • Obtain your personal data (‘data portability’);
  • Request to not be subject to a decision based solely on automated processing of personal data, including profiling.

Because we want to avoid taking action regarding your Personal Data at the direction of someone other than you, we will ask you for information verifying your identity. The Bonfire team will respond to your request without undue delay. Individuals may also wish to contact or file a complaint with the applicable Data Protection Authority.

Basis for Processing Data

Personal data will only be processed when the law permits this to happen. In some cases, an Ingenious, Inc. entity may provide other information about its processing activities in its own supplemental or separate notice. Most commonly, personal data will be processed by Bonfire in the following circumstances:

  • Where you have given us your consent.
  • In order to fulfill Ingenious, Inc.’s obligations to you as part of your participation in our programs or use of our Services.
  • Where Ingenious, Inc. needs to comply with a legal obligation (for example, the detection or prevention of crime and financial regulations).
  • Where it is necessary for Ingenious, Inc.’s legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • To protect the vital interests of the data subject or of another person. Special Category Data

We may process special category personal data in the following circumstances where, in addition to a lawful basis for processing, there exists one of the following grounds:

  • Explicit consent – where you have given us explicit consent.
  • Legal obligation related to employment or enrollment – The processing is necessary for a legal obligation in the field of employment or enrollment at Ingenious, Inc..
  • Vital interests – The processing is necessary in order to protect the vital interests of the individual where the data subject is physically or legally incapable of giving consent (i.e., during a medical emergency).
  • Public information – The processing relates to personal data which is made public by the data subject.
  • Legal claims – The processing is necessary for the establishment, exercise or defense of legal claims.
  • Substantial public interest – The processing is necessary for reasons of substantial public interest.
  • Healthcare – The processing is necessary for healthcare purposes and is subject to suitable safeguards.
  • Public health – The processing is necessary for public health purposes.
  • Archive – The processing is necessary for archiving, scientific or historical research purposes, or statistical purposes.

Ingenious, Inc. will use personal data for the purposes for which it was collected unless it is considered reasonably that it is needed for another purpose and the reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and will explain the legal basis that permits it to do so. We may process your personal data without your knowledge or consent, in compliance with this notice, where permitted by law.

International Transfers of Personal Data out of the EU

As an American company, the processing of most personal data by Ingenious, Inc. will take place in the United States. Visitors to this website acknowledge that personal data provided or collected through Bonfire will be transferred to the United States, and by continuing to use the website, you consent to this transfer.