Privacy Policy
Collaborative Student Transportation
Last Updated: February 28, 2025
Collaborative Student Transportation (“CST,” “we” or “us”) respects individuals’ privacy and is committed to protecting personal information.
This Privacy Policy (the “Policy”) explains our practices for handling information we may collect and use about users of our mobile application (or “App”), prospective service recipients, existing service recipients, educational and operational partners, and others with whom we interact in making our App and related services available to users and otherwise providing information about our organization, which also may be shared and/or collected through our website and/or when registering to use the App and/or accessing services or information through our website rather than through the App (collectively, the “Services”). This Policy describes the types of personal information we may receive, how we may use and disclose the information, and certain rights and options individuals may have regarding their information.
By providing us with personal information or using the Services, you expressly consent to the information-handling practices described in this Policy. If you do not agree with this Policy, please do not use the Services or provide us with your information.
Important Information for Drivers
In some cases, we may be collecting personal information about or from a driver who is employed or engaged by one of our operational partners. Each driver’s employer determines when, how, and why such driver’s personal information is made available to CST. For example, drivers have consented to the collection and processing of their precise geolocation information by virtue of, and in the course of, their employment. If you are a driver and use the App and/or the Services, please contact your employer to learn more about your employer’s data handling practices and your rights with respect to your personal information.
Important Information About This Policy
While we always aim to provide complete and transparent information about how we process your personal information, we reserve the right to amend or update this Policy from time to time, or to create additional policies, in order to accurately reflect changed circumstances or new legal requirements. As a result, it is important that you read this Policy closely so that you are fully aware of how and why we are using your personal information.
To assist us in ensuring that we can provide the most accurate information possible, we ask that you check this Policy for updates. All such updates are binding and applicable from the date posted, and your continued use of the App constitutes your agreement to any and all such updates. We also ask that, where we have an ongoing relationship with you and any of the data you have provided becomes no longer accurate, you keep us informed of this so we can amend our records accordingly.
Personal Information We Receive or Collect About You
For the purposes of this Policy, “personal information” is any information that identifies, relates to, or can be used to contact a particular individual.
In some cases, we may be collecting personal information about or from a driver who is employed by one of our operational partners. While this Policy describes how we collect and use drivers’ personal information, we recommend drivers reach out to their employers for further information or to learn more about the contexts in which such information is collected.
Information You Provide
The personal information we collect from you can be categorized as follows:
Contact information – first name, last name, email address (personal or business), mailing address (personal or business), telephone number (personal or business).
Account information – if you have an account with us, user ID, account username, account password, account number, and other information that we may request or that you may provide relating to your account.
Employer information – if you are a driver, or a school or district employee or administrator, or other operational partner employee, your employer’s name, your position, and the details of your relationship with your employer.
Custodian details – if you are a custodian using our Services, the details of your relationship with a particular student, your preferences for notifications or communications, and other profile information collected throughout the course of obtaining access to and using the Services.
Student details – when a student is benefiting from the Services, their name, their relationships to any custodians or schools or districts, their geolocation information and demographic information. Note, however, that our Services are not directed to children for their use. Parents, custodians, drivers, and school staff are the designated users of our websites and mobile applications.
Precise geolocation information – our ride services require the collection and processing of drivers’ and students’ precise geolocation information for the purposes of ensuring students are picked up and arrive at requisite locations, as well as to keep school personnel and custodians up to date as to a student’s travel to and from school. This information is not used by CST to infer characteristics about drivers or students.
Transactional information – details about your transactions with us, including method of payment, payments received, payment details, transaction history, and other information relating to any payments transmitted to us by you or your organization.
Marketing information – details regarding informational and promotional materials you may have requested or received from us, the properties or communities in which you are interested, your receipt of promotional communications, and information on your marketing or communication preferences.
Communication information – copies of communications and inquiries you have submitted to us, including through email, calls, chatbots, and features available on our Services.
Device and usage information – details regarding how and when you use our App and/or website, including the device used to connect to our App or website, your IP address and device identifier, the frequency and duration of your usage, the pages you view, what websites or search terms referred you to our App or website, and information about your interaction with our App or website.
We collect this information when you use, visit or navigate our App, website, or other technology solutions, fill in forms through use of our Services, submit applications or inquiries to us, submit payments to us, communicate with us (including by phone, email, or otherwise), visit or engage with our social media pages, participate in surveys or sponsored activities, or otherwise provide us with personal information.
Please note that we may aggregate or anonymize the foregoing types of information such that they are no longer capable of identifying you, in which case they are no longer considered “personal information.” We may also collect information about you from third-party sources and information about you that is publicly available.
Automatically Collected Usage and Device Information
Like most App and website operators, we use various technologies to automatically collect information about visitors. Those technologies include:
Cookies. Cookies are small text files that a website transfers to a visitor’s browser or device for recordkeeping purposes. We use cookies to personalize visitors’ experiences on our website, provide content that we believe may be of interest, track visitor trends and patterns, engage in marketing and advertising, and otherwise analyze our website traffic. For further information about cookies, including how to refuse cookies, please visit www.allaboutcookies.org. Please note that if cookies are disabled, you may not be able to enjoy certain features of our website.
Log Files and Device Identifiers. We use log files to track actions occurring on the App or website and collect data about visitors, including IP address, browser type, Internet service provider, referring/exit pages, date/time stamps, and device identifiers. This information is used for security purposes and to detect and prevent fraud.
Pixels, tags, and web beacons. Our App or website may also use “pixels,” “tags,” or “web beacons.” When we refer to “pixels,” we are generally referring to all of these types of technologies. These technologies are small pieces of code that run when a page or email is loaded. They are used to monitor the behavior of the visitor or email recipient—such as what icons were clicked or whether links in an email were opened—and gather analytics. For example, when you open our homepage, a pixel may run and generate information based on the visit, and then this information is processed by us and our vendors. Pixels work in conjunction with cookies to let us know what portions of our App or website are of interest to you and to help us provide you with tailored information from our App or website. If you turn off cookies, the pixels, tags, and web beacons we use may still detect certain information about your interaction with our Services and disregard any cookie-prohibitive markers or signals. Note, the vendors that supply us these pixels, tags, web beacons, or similar tracking technologies collect your personal information instantaneously and simultaneous to our collection of your information; in some cases, they may use the information for their own or others’ purposes.
Analytics. Our App and website may also use third-party analytics tools, such as Google Analytics. You can find more information about how data is collected and processed in connection with the Google Analytics service here. You can also read Google’s privacy policy here.
The information collected through these technologies may be combined with personal information or aggregated with other information we technologically or manually collect about or from you. We may disclose information about your use of our App or website to our advertising and analytics partners, who may combine it with other information that you previously provided to them.
Information from Other Sources
We may obtain both personal and non-personal information about you from our vendors including but not limited to driving services, affiliates, business partners, schools and school systems, government entities, contractors, suppliers, and other third parties and add it to other information we have collected. We, and the third parties we engage, may combine information we collect from you over time and with information obtained from other sources. This helps us improve the information’s overall accuracy and completeness, and also helps us better tailor our interactions with you.
D. Social Media
If you interact with us on any social media platform (e.g., Meta, X, LinkedIn), depending on your social media privacy settings, the personal information that you submit on the social media platform may be read, collected, or used by us as described in this Policy. In addition, where we respond to any interaction with you on social media, your account name/handle may be viewable by any and all members or users of our social media accounts. Social media platforms operate independently from us and we are not responsible for the personal information that you choose to submit or link on any social media platform. We encourage you to review the privacy policies and settings of any social media platform with which you interact to help you understand their privacy practices.
How We Use Personal Information
We (or service providers acting on our behalf) use the personal information identified above for one or more of the following purposes:
Negotiating, entering into, and managing our relationship and agreements with you, including making our ride services available to students, schools and districts, and others in the community.
Process requests or inquiries regarding our Services, and to otherwise make information about our Services available to prospective and existing customers and users.
Verifying information you make available in connection with your use of our Services, including our mobile applications, and other information you may disclose in the context of partnering with our organization or signing up to use our Services.
Administering our software solutions, including our custodian and driver mobile applications, and the interfaces through which drivers, custodians, and school staff interact with our Services.
Providing and optimizing your experience on our Services and ensuring that our content is presented to you in the most effective manner.
Communicating with you regarding our Services, our agreements with you, and other issues.
Sending you promotional or informational communications and solicitations, tracking your marketing preferences, and for our internal marketing purposes.
Managing customer service issues, including issues relating to the performance of our Services and client feedback.
Developing, updating, and improving our Services, including our technology solutions, our user experience, and our knowledge and insights regarding potential operational partners and other users of our Services.
Preventing and detecting fraud, financial crime, hacking activities, security breaches, and other unlawful activities in connection with our Services.
Enforcing our agreements with schools, driving partners, custodians, or vendors, complying with our legal or regulatory obligations, and defending or advancing legal claims.
Notifying you about changes to our Services or material changes to this Policy.
Providing you with surveys or otherwise soliciting feedback from you.
Performing other functions as otherwise described to you at the time of collection or to which you otherwise consent.
For more information about your options relating to your personal information and your communication preferences, see “Your Choices About Personal Information” below.
Our Marketing Efforts
We may send you direct marketing communications from time to time including news, updates, offers, and other promotions relating to our services and activities. We will only send marketing messages where the law allows us to do so and, in the event that you no longer wish to receive marketing from us, then you can always unsubscribe using the option provided in the communication you have received (e.g., in the footer of an email) or by contacting us using the information below.
Disclosure of Personal Information
When the information we collect about you is aggregated, anonymized, or otherwise does not identify you, we may use that information for any purpose or disclose it to third parties, to the extent permitted by applicable law.
In addition, we may disclose your personal information to the following types of organizations or persons:
Service providers we use to facilitate our business operations and administer our technology solutions. For example, our service providers include (i) IT and system administration providers, (ii) data storage providers, (iii) vendors to facilitate payments and payment processing, (iv) vendors that verify insurance coverage, employment and other relevant details about you, (v) vendors that ensure our mobile applications are available for use.
Other users of the Services, such as when a custodian or school professional needs to know the location of a student and/or a driver.
Marketing and advertising vendors that may assist with lead generation, hosting information relating to partners and customers, marketing automation, advertisement placement and targeting, and marketing campaigns and communications.
Analytics vendors in order to understand our website and mobile application traffic and usage patterns and optimize our Services. Note, the technologies we use on our App or website to automatically collect information about you and your interaction with our App or website may be supplied by third-party vendors that collect your information instantaneously and simultaneous to our collection of your information. They may also use your information for their own or others’ purposes.
Our affiliated or related entities who may use your information to provide you the details of their services or otherwise market to you.
Regulatory and governmental authorities, law enforcement agencies, and courts, as necessary to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful request for information, or to otherwise protect our rights.
Our professional advisors, such as lawyers, accountants, and other similar advisors.
Buyers or other successors prior to or in the event of a merger, acquisition, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as a part of bankruptcy, liquidation, or similar proceeding, where the information is among the assets being transferred.
Other parties for any purpose we disclose at the time you provide the information.
We further reserve the right to refer or disclose your information to law enforcement or regulatory authorities in the event that we believe you, other individuals, our partners or service providers, or anyone else is in danger, at risk of harm, in violation of applicable laws, or representing a safety concern.
Protection of Personal Information
We use appropriate administrative, technical, and physical measures to protect your personal information from loss, theft, and unauthorized use, disclosure, or modification. Please be aware that no data transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot ensure or warranty the security of any information you transmit to us and you do so at your own risk.
Your Choices About Personal Information
We respect your right to make choices about the ways we collect, use, and disclose your information. We try to offer you meaningful choices regarding your personal information. Some choices you have regarding personal information include the following.
Marketing Emails – As required by applicable laws, you can opt-out of receiving promotional emails from us by clicking the “opt out” link in any such promotional emails and following the instructions provided.
Tracking Technologies – Depending on your browser or device, you may have the option to set the browser to accept all cookies, reject all cookies, notify you when a cookie is set, or delete cookies. Each browser and device are different, so we recommend you evaluate the tools and settings available in your browser or device, as well as any available instructions for the same. Please note that if you disable or delete cookies, you may not be able to access or use certain features of our website. The National Advertising Initiative also makes resources available to assist consumers in opt-out of certain tailored online ads, which you can access here: https://optout.networkadvertising.org/?c=1.
Google Analytics – As discussed above, we use Google Analytics in connection with our Services. If you would like to refrain from having your data collected by Google Analytics, Google has developed an opt-out browser that you can use. You can find more information on how Google uses information it collects here.
Declining to Provide Information – You can choose not to provide us with information we may request through our Services, but that may result in you being unable to use certain features of our Services, request information, or initiate other transactions with us.
Do Not Track Mechanisms – Please note that our Services does not honor “Do Not Track” signals, and such signals will not impact the operation of our App or website.
In addition to the above, you may contact us using the details provided at the end of this Policy with any questions about the choices relating to your personal information.
Additional Information for California Residents
This Notice at Collection is provided pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA"). It applies to California residents and provides details regarding the types of personal information that CST collects, and how we use that information, when an individual when accesses, uses, or interacts with our website or App.
Categories of personal information about consumers to be collected. * ***No sensitive personal information about consumers will be collected. **None of the information described in this Notice at Collection is “sold” or “shared” (as those terms are defined by the CCPA). Identifiers and personal information, such as: unique personal identifier, online identifier, IP address; if you fill out a “Contact Us” form or similar, a real name, alias, postal address, email address, phone number; if you use the website to log into our application, your username and password.Internet activity, such as unique personal identifier, browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement, including page views and clicking tendencies. The business purposes for which the above categories of personal information are collected and used.Providing and optimizing your experience on our website and ensuring that our content is presented to you in the most effective manner. Communicating with you and responding to your inquiries. Engaging in analytics regarding use of products and services.For marketing to current or potential customers. Developing, updating, and improving our solutions, customer service, customer experience, and marketing efforts, and otherwise improving our knowledge and insights regarding customers.To help maintain the safety, security, and integrity of our website.Preventing and detecting fraud, hacking activities, security breaches, and other unlawful activities in connection with our solutions.The criteria used by us to determine the period of time such personal information will be retainedWe will retain the personal information we collect and use so long as we have a legitimate business need to do so, or as required by law (e.g., for tax, legal, accounting, or other purposes), whichever is the longer.
To learn more about our online and offline practices in connection with the collection, processing, and disclosure of personal information relating to California residents, continue to read this section.
Information We Collect and Disclose
As defined by the CCPA, “personal information” includes any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include information certain regulated information or public information.
In the past 12 months, CST has collected the following categories of personal information from consumers and disclosed such information to the following categories of third parties for the business or commercial purposes described below.
Categories of PI CollectedExamplesCategories of Third Parties to Whom Disclosed Identifiers A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account username and password, or other similar identifiers. IT and cloud/hosting service providers, such as our email providers, business application providers, managed services providers, and IT consultants Online analytics and marketing/advertising service providers Financial institutions and payment processorsProfessional advisors (accountants, lawyers, and auditors)Other users of our services whom you direct us to provide the informationCommercial information Records of services purchased, obtained, or considered by you or your organization, or other purchase histories, customer services inquiries, requests, and communications. IT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, managed services providers, and IT consultantsMarketing/advertising service providers Financial institutions and payment processorsProfessional advisors (accountants, lawyers, and auditors)Internet or other similar network activity Browsing history, search history, information on a consumer’s interaction with our website, including forms on our website. IT and cloud/hosting service providers Online analytics and marketing/advertising service providersPersonal information types listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) A name, signature, address, telephone number, or employment information. Some personal information included in this category may overlap with other categories. IT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, managed services providers, and IT consultants Online analytics and marketing/advertising service providers Professional advisors (accountants, lawyers, and auditors)Other users of our services whom you direct us to provide the informationProfessional or employment-related informationEmployer, positionIT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, managed services providers, and IT consultantsMarketing/advertising service providers Financial institutions and payment processorsProfessional advisors (accountants, lawyers, and auditors)Other users of our services whom you direct us to provide the informationSensory data Voicemail or similar audio recordings. IT and cloud/hosting service providers, such as our email providers, business application providers, hosting providers, and telephone communication providers
From time to time, CST may be required to disclose your information to governmental authorities for the purpose of complying with applicable laws and regulations or in response to legal process. We may also disclose your personal information to third parties in connection with the sale of our business or assets, or any merger or similar corporate matter, when your personal information is part of the assets involved in such transaction.
Finally, we may “aggregate” or “deidentify” information from you pursuant to the CCPA, in which event the information is no longer “personal information.”
Applicable Retention Periods
For each category of personal information identified above, we will retain your personal information only for as long as necessary to fulfill your requests or the purposes for which it was obtained, as set forth in this Notice. The criteria used to determine our retention periods include (i) to fulfill the purpose for which the information was collected, (ii) for as long as we have an ongoing relationship with you, and (iii) as required by a legal obligation to which we are subject.
Categories of Sources of Personal Information
CST collects these categories of personal information from the following categories of sources:
Direct collection: We collect information directly from you when you choose to provide it to us by filling out forms on our website, engaging in transactions with us, signing up to receive promotional or information communications from us, communicating with us about our solutions, or otherwise directly providing the information to us.
Indirect and technology-based collection: We also collect certain information from you automatically when you visit, use, or navigate our website or App. CST collects certain identifiers (such as IP addresses) and internet and similar network activity (such as website usage data) from you indirectly using cookie, pixels, and passive tracking technologies.
Collection via social media: We may collect personal information about social media users, including basic user profile information (such as username), user-generated content (such as posts, comments, pages, profiles, or feeds) and associated metadata (such as time and location of a post or comment); contact details (such as name, email address, telephone number, if made public by the user); and additional individual information published by the user (such as employer, profession, age, location, education information, habits, etc.). The type and scope of personal data obtained from social media platforms depends on the type of APIs and permissions set out by the respective platforms and the administrative permissions granted by customers, where applicable.
Third-party collection: We will obtain information from our school district and administrative partners, as well as our organizational partners that assist us in providing the Services.
Business or Commercial Purposes for Collecting and Disclosing Personal Information
We collect and disclose the personal information described above for the following business or commercial purposes (as well as any other purposes as set forth in our Privacy Policy).
Providing and optimizing your experience on our website and App, and in using our Services, and ensuring that our content is presented to you in the most effective manner.
Providing you with our products and services, as well as any reasonable customer support services.
Fulfilling transactions with you or your organization, processing your payments, and managing the transaction process.
Communicating with you and responding to your inquiries about our services, including to provide you with promotional and informational communications regarding our services, informing you about new solutions, updating you about changes to our website, and investigating any concerns you have about our solutions or your transactions.
Developing, updating, and improving our services, customer service, customer experience, and marketing efforts, and otherwise improving our knowledge and insights regarding customers.
Preventing and detecting fraud, financial crime, hacking activities, security breaches, and other unlawful activities in connection with the website or purchase and use of our solutions.
Enforcing our agreements with our organizational partners or service recipients, and complying with our legal or regulatory obligations.
Performing other functions as otherwise described to you at the time of collection or to which you otherwise consent.
Sensitive Personal Information
CST does not use or disclose “sensitive personal information” (as defined by the CCPA) for the purposes of inferring characteristics about California consumers. Accordingly, CST treats any such information as “personal information” consistent with applicable provisions of the CCPA.
Sale or Sharing of Personal Information
In the past 12 months, CST has not “sold” or “shared” any categories of personal information, as those terms are defined by the CCPA. CST does not have actual knowledge that it sells or shares the personal information of consumers under 16 years of age.
Your Rights Under the CCPA
Subject to exceptions, the CCPA provides California residents with the rights discussed below. For convenience, and as required by the CCPA, we explain how you can exercise those rights, to the extent they are applicable.
Right to Know. You have the right to request that we provide you certain information about our collection and use of your personal information during the past twelve (12) months (or longer, as permitted by the CCPA). Specifically, you may request that we disclose (in whole or part):
The categories of personal information we collected about you;
The categories of sources for the personal information we collected about you;
The business and commercial purposes for collecting (or selling or sharing, if applicable) your personal information;
The categories of third parties to whom we disclose (or sell or share, if applicable) your personal information;
The specific pieces of personal information we collected about you;
If we disclosed your personal information for a business purpose, the categories of personal information received by each category of third party; and
If applicable, the categories of personal information that we sold, and for each category, the categories of third parties whom such information was sold.
As noted above, you have the right to request that we provide copies of the specific pieces of personal information we collected about you. If a verifiable consumer request is made, and subject to any exceptions or limitations under the CCPA, we will take steps to deliver the personal information to you either by mail or electronically. If we provide the information to you electronically, it will be in a portable and readily useable format, to the extent technically feasible. Consistent with the CCPA and our interest in the security of your personal information, we will describe but may not provide copies of certain personal information we may receive from you (e.g., driver’s license number, other government-issued identification number, financial account number, health or medical identification number, account password, or security questions or answers) in response to a CCPA request, to the extent any of those items are in our possession.
Right to Request Deletion. You have the right to request that we delete personal information we collected from you, subject to any exceptions or limitations under the CCPA.
Right to Correct Inaccurate Information. If we maintain inaccurate personal information about you, you have the right to request that we correct that inaccurate personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
Consumers in California also have the right to opt-out of (a) the sale of personal information, or (b) the sharing of their personal information for the purposes of cross-context behavioral advertising (as defined in the CCPA). California consumers also have the right to limit the use or disclosure of sensitive personal information by the business if such information is used or disclosed for certain purposes, as required by the CCPA. Because CST does not engage in any of the foregoing activities, these rights are not available.
Exercising Your Rights
To exercise the rights described above, you—or someone authorized to act on your behalf—must submit a verifiable consumer request to us by sending an e-mail to: hello@drivecst.org with the subject line: “CCPA Request” or calling us at 612-808-8868. Your request must include your name, email address, mailing address, phone number, the nature of your inquiry and the context in which we may have received your information. If you are an agent submitting a request on behalf of a consumer, we may request that you submit a signed permission from the consumer authorizing you to make the request. In order to protect the privacy and data security of consumers, the verifiable consumer request must:
Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative of such consumer; and
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
As indicated above, please be aware that the CCPA provides certain limitations and exceptions to the foregoing rights, which may result in us denying or limiting our response to your request.
You may only make a verifiable consumer request to know twice within a 12-month period. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We may also request that you provide additional information if needed to verify your identity or authority to make the request. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you or the consumer on whose behalf you are making the request.
Response Timing and Format
The CCPA requires us to respond to a verifiable consumer request within forty-five (45) days of its receipt; however, we may extend that period by an additional 45 days. If we require more time, we will inform you of the reason and extension period in writing. We will deliver our written response via e-mail. Any disclosures we provide will only cover the 12-month period preceding the receipt of the verifiable consumer request, provided that you may request disclosure beyond the 12-month period as permitted by the CCPA. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For requests to know specific pieces of information collected about you, we will select the format of our response; the format will be readily useable and should allow you to transmit the information from one entity to another. We will not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing the request.
Our Commitment Not to Discriminate
Consistent with the CCPA, we will not discriminate against you for exercising any of your CCPA rights by:
Denying you goods or services.
Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Providing you a different level or quality of goods or services.
Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Changes to this Notice
We reserve the right to amend this Notice at our discretion and at any time. If there are changes to this Notice, we will post them here and update the “Last Updated” date at the top of this document. Continued use of this website after any changes is deemed to be acceptance of those changes. Please check this page periodically for updates.
Data Disclosures for Direct Marketing Purposes
California Civil Code § 1798.83 (California’s Shine the Light Act) further permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. If you are a California resident, you may ask us to refrain from providing your personal information to certain of our affiliates and other third parties for their marketing purposes. Please tell us your preference by contacting us at the contact information below.
Additional Information for Washington Residents
This section applies solely with respect to “consumers” as defined by the Washington My Health My Data Act (2023 Wash. Laws 191; HB 1155) (the “MHMDA”). “Consumer health data” is any personal information that is linked or reasonably linkable to a consumer (as that term is defined by the MHMDA) and that identifies the consumer’s past, present, or future physical or mental health status.
Where warranted, CST collects information about individual students’ health conditions for the purposes of ensuring that the student who is benefiting from CST’s Services receives Services appropriately tailored to such health condition for the student’s safety. For example, if a student requires a wheelchair-accessible vehicle, CST may note that information where relevant to ensure an appropriate vehicle is deployed. This information may be collected from the student’s custodian or a school administrator or resource. This information may be disclosed to CST’s service providers or vendors, as described above (e.g., CST’s email and communications vendors). It is not shared with any “third parties” (as that term is defined by the MHMDA).
Subject to certain exceptions and limitations, the MHMDA affords consumers the right to confirm CST is collecting and processing such information, as well as to access the information; withdraw consent from the collection of such information; and to delete such information. To exercise such rights, please contact CST at the information below. If your request to exercise a right under the MHMDA is denied, you may appeal that decision using the appeal information supplied by CST. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Washington State Attorney General at www.atg.wa.gov/file-complaint.
Additional Information for Nebraska Residents
The above sections of this Policy describe the categories of personal data processed by us, the purposes for the processing of such personal data, the categories of personal data that may be disclosed to third parties, and the categories of third parties to whom we may disclose personal data.
Under Nebraska law, and to the extent applicable, you may have the right to request (1) that we confirm that we are processing your personal data, (2) access to the personal data we process, (3) correct inaccuracies in the personal data we process, taking into account the nature of the personal data and the purposes of the processing of such personal data, (4) delete the personal data provided by you or obtained about you, subject to certain exceptions under applicable laws, (5) a copy of the personal data that we process, subject to certain limitations and exceptions, or (6) opt out of the processing of your personal data for the purposes of targeted advertising, the sale of personal data, or profiling in furtherance of a decision that produces a legal or similarly significant effect.
In order to exercise any of the above-described rights, you or an agent acting on your behalf must send an email with the subject, “Nebraska Privacy Request,” or call us, in each case at the contact information below. We may require you or your agent to provide us information that enables us to authenticate your request. If we are not able to authenticate your request using commercially reasonable efforts, we may decline to comply with your request. If we refuse to take action on your request, we will notify you of the same. If you wish to appeal our decision, please send us an email to the address below with the subject, “Nebraska Privacy Appeal.”
Links to Third-Party Websites
Our App or website may contain links to third-party websites, including the websites of vendors we use to process information on our behalf. Such websites have separate privacy policies that you should review. We do not control these third-party websites and are not responsible for the content of linked websites or those companies’ data-handling practices.
Children’s Privacy
As noted above, our Services are intended for use by a general audience. While we collect certain student information, our App is not directed at, or intended for use directly by, children under the age of 13 years. Should we discover that a child under the appropriate age provided his or her personal information through direct use of our Services, we will use that information only to respond to that child and inform them that we must have parental consent before receiving such information.
Changes to this Policy
Please note that we may change this Policy from time to time. If there are changes to our Policy, we will post them here and update the “Last Updated” date at the top of this document. Continued use of our Services after any changes is deemed to be acceptance of those changes. Accordingly, we encourage you to check the Policy periodically for updates.
How to Contact Us
For questions or more information about our privacy practices, please contact us by using the contact information provided below:
Collaborative Student Transportation
615 1st Ave NE, Suite 115
Minneapolis, MN 55413
Email: hello@drivecst.org
Phone: 612-808-8868