Virtual Sandtray Privacy Policies
Virtual Sandtray recognizes that respecting user privacy over the Internet is of utmost importance. This privacy statement is designed to provide information about the privacy and data collection practices for the site: http://www.virtualsandtray.org. The Site is operated by Virtual Sandtray LLC.
If you have questions or concerns regarding this statement, you should first contact our site coordinator at firstname.lastname@example.org.
Identifying Information. In general, you can visit the Site without telling us who you are or providing any information about yourself. In some areas of the Site, we ask you to provide information that will enable us to process an order, offer services that require registration, assist you with technical support issues or to follow up with you. Generally, Virtual Sandtray requests identifying information when you:
- Register on any of our web sites
- Place an order
- Provide feedback to an online survey or tell us about an idea or suggestion
- Participate in a rebate program, contest, or other promotional offer
- Post on sites related to the program
- Request information or files from technical support or customer service
In these instances, Virtual Sandtray will ask for your name, address, e-mail address, phone number and other appropriate information needed to provide you with these services.
In all instances, if you receive a newsletter or other mailing from us, you will always be able to “unsubscribe” to these mailings at any time.
What Virtual Sandtray Will Do With Your Information
If you choose to give us personal information for any of the purposes above, this information is retained by Virtual Sandtray and will only be used by Virtual Sandtray to support your customer relationship with us. We will not add you to a mailing list or newsletter without you registering yourself for this service. We will only contact you if further information is required from you to complete a service.
As the owner of the device, you are the primary source of security for the device running Virtual Sandtray. It is recommended that you utilize a passcode or similar mechanism to limit or eliminate unfettered access to the device. It is also recommended that you do not allow clients unattended access to explore the files and programs beyond what is needed for treatment. Ideally, you should have a device dedicated to Virtual Sandtray in order to avoid allowing clients access to your other files, emails and any other potentially sensitive information.
Access To Photos On Device
In order for Virtual Sandtray to take screenshots of the tray, it necessary for you to allow it permission to save photos. There is no functionality to view pictures built into the app, it only saves the picture.
Access To Videos On Device
In order for Virtual Sandtray to take video of the tray, it necessary for you to allow it permission to save video. It is up to you to appropriately choose whether to utilize the microphone while recording the video. There is no functionality to view videos built into the app, it only saves the video.
Access To Address Book On Device
In order to more easily establish a colleague connection, the app may access your address book. The data is only used to provide you with a list of people that you may use in order to establish a connection. It is not stored, transmitted or utilized beyond what is necessary in order to establish a colleague connection. If you wish to not utilize this feature, manually type in the email address.
When entering emails you may notice that the app validates email addresses. The app is not storing, transmitting or otherwise running the email against any stored data. The app is only comparing the email address to a pattern to validate that it is possibly valid, which will be denoted by a green icon.
Remote client feature
Only the information necessary to conduct the session is stored on the servers long enough to facilitate the session. All data sent between therapist and client(s) is minimized to the minimum necessary to ensure functionality. Data between the therapist and client(s) device is encrypted device to device with industry standard encryption methodologies and implementations.
Virtual Sandtray does not assume any responsibility in regards to you being able to use it as a treatment tool for clients in remote locations. The Virtual Sandtray program does no verification of client or therapist location via ip addresses or any other method, there we can not subsequently verify that no laws are being broken in regards to treatment that falls out of licenses and jurisdictions. It is your responsibility to verify that you are legally able to treat the person using Virtual Sandtray.
In order to facilitate the cooperative environment that Virtual Sandtray allows, you can establish a colleague connection with which allows to share and receive trays. You must first know the trusted person’s email to send the request. The person receiving the request will get an email and then must accept the request that you sent. Then you can share trays.
At any point, either side of the connection (originator or receiver of the request) may delete the colleague connection.
When sharing trays, encrypted versions of them are stored on servers operated by Virtual Sandtray in order to facilitate them being utilized by the colleague you specified when sharing. The trays are sent through encrypted communications. The share life span is 7 days on the server, they are forever deleted after the expiry period. It is up to you on the sending end to remove identifying information from the saved tray before sending, such as the client’s name being in the filename. Before you download a shared tray onto your device, you are given the opportunity to rename it to any valid filename of your choosing or accept the tray’s name as sent. It is up to the sender of the tray to utilize a filename that reflects and satisfies both of your requirements for privacy and security before being sent.
Virtual Sandtray utilized mailing lists to facilitate dissemination of information. You will not be automatically added to any mailing lists. In order to receive information from a mailing list, you will have to manually add yourself. If at any point you wish to stop receiving the mailing list emails, you may simply unsubscribe to stop receiving the emails.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Deletion of data
If at any time you require deletion of any data required to run the app that is stored on Virtual Sandtray servers, send an email to email@example.com. After completion of the appropriate verification process, your data will be removed from the server.
It is your responsibility to fully remove the application from your device. Any data related to the application will be removed from your device when you remove the application.
This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Third parties and your data
We will never share any of your data with third parties regardless of circumstance. Inquiries from governmental agencies will require valid warrants.
Third party embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Third Party Links
Sandtrayplay.com does provide links to other sites. Other Internet sites and services have separate privacy and data collection practices. Once you leave virtualsandtray.org, Virtual Sandtray cannot control, and has no responsibility for, the privacy policies or data collection activities at another site.
Children’s Privacy Protection
Virtual Sandtray is sensitive to the heightened need to protect the privacy of children under the age of 13. The vast majority of the material on our web site is not intended for children and is not targeted to children under the age of 13. We do not knowingly collect data from children and, if we learn that we have received personal data from a child, we will remove this information from our database.
Changes to this Policy
Credit Card Security
We are a USA based company and all servers used by Virtual Sandtray are USA based. We do offer Virtual Sandtray for purchase in countries that fall under the jurisdiction of the GDPR. We do realized that Virtual Sandtray may be purchased in, for example, the USA and used in countries that fall under the jurisdiction of the GDPR. This website is accessible to people that fall under the jurisdiction of the GDPR.
What data that is either stored by the Virtual Sandtray application and this website are on or transmitted through servers/providers that have been verified as GDPR compliant. For information regarding GDPR, you can reference the section below how to do it electronically or contact us in writing at:
151 N Cherry St
Fruita, CO 81521