Date: 12 September 2016
Vista has created this security and privacy statement in order to document and communicate its commitment to doing business with the highest ethical standards and appropriate internal controls.
We respect your privacy. Information you entrust to Vista will be handled with the greatest care, and Vista will not use the information in ways to which you have not consented or is not required by law.
Links to Other Sites - This site does not contain links to other sites.
WEB SITE INFORMATION GATHERING
Vista recognizes the importance of keeping the information we collect about you confidential. We always take great care to protect what you entrust to us. Vista is committed to protecting the privacy of visitors to our website.
Personal Information Gathering - We do not automatically collect personally identifiable information (PII) about our web site visitors. We may record the Internet protocol (IP) address of the computer you are using, the browser software used, the operating systems used, and the websites from which our visitors link directly to our site. We aggregate and use this information to determine how many visitors we have to different pages on our web site, to detect and correct systems problems, and to improve the usability of our web site. This information is not connected to individual names or personal identities.
Explicit Information Gathering - You can examine our entire web site without providing any information whatsoever. Our web site’s request-for-more-information form requires users to give us contact information. This information is used to provide information to those who inquire about our products and services.
Personal Information Usage - When you disclose personal information to us that is where it stays. The only exception involves disclosure to the government according too normal business practice, for instance for the collection of taxes, and according to the orders of a court, for example responding to a subpoena or search warrant. We do not sell, rent, trade, lend, or otherwise transfer such personal information to affiliates, subsidiaries, sister companies, holding companies, parent companies, strategic partners, or any other organization.
Precautions for Children - Vista does not attempt to collect personal information from children, and we do not provide services to children. The Vista website is not directed to children under age 18, and we do not knowingly collect personal information from children under age 18. If a child sends personal information to us, and this information can be identified as originating from a child, the information will be deleted. We cannot always determine which information originates with a user that is a child. We do not maintain databases about children.
EMAIL LIST PRIVACY
Opt-in Email Lists - Vista DOES NOT use email lists that we have assembled from people who have indicated they want additional information about our services. Additionally, Vista DOES NOT use email lists that are comprised of people who have requested additional information about services similar to those Vista provides.
Third Party Email Lists – Vista DOES NOT currently (but may in the future) purchase email addresses and other contact information from (vendor name) for the purposes of marketing and selling our products and services.
Personal Contacts: On occasion Vista personnel may give presentations at conferences and seminars; write articles and newsletters; and/or participate in similar types of group and individual communications. We often receive business cards as well as requests for additional information or help with risk related issues. When we receive requests for information or help in person, from our web site from information volunteered by our web site visitors, or from conferences from people indicating they want more information about Vista’s type of services, we will place these individuals on our contact list.
Third Party Product Distribution – DOES NOT currently use a third party/distributor to distribute its products or services. Vista DOES NOT provide any third party/distributor with the names and email addresses of our subscribers to facilitate distribution; we do not give them access to any other personal information.
Email List Privacy - Vista does not sell, rent or share our email database or lists with any other third parties. We do not link our email lists to any other databases. We do not store emails or individual information on our web server. Vista does not store personally identifiable information, but if it would it would be stored on servers behind our firewall.
Third Party Access to Your Personal Information
If you outsource or use vendors to process personal information, outline what type of access the third party is given, why they are given access, and what they do with the information.
Third Party Access to Personal Information - Vista may use third-parties to process your personal information. In these cases, the information is only used for Vista business purposes. Vista contractually prohibits these vendors from using your personal data for any other activities, and from disclosing, selling or leasing them to any other parties.
THIRD PARTY ADVERTISING
Third Party Ads – The Vista web site does not contain advertisements from third parties.
Behavioral Targeting - In order to better serve customers via our web site, Vista uses software (Google Analytics) to track behavior while on the the Vista website. It DOES NOT track online behavior of its web site visitors to include their visits to other web sites. This information is used to solely to distribute content that is more relevant to web site users, and it is not stored or sold to any third parties.
Third Party Certification - Vista DOES NOT use a third party to validate the privacy policies on its web site in that the site is utilized mainly for marketing and advertising purposes. It does have a request for information application; however, data (name/phone number/email address) provided by the inquirer is not stored in an electronic format. The data supplied is used only for a return response by Vista. It does not collect and/or disseminate Web site visitors’ information
Compelled Disclosure - There may be times when we are required by law to disclose the information that you have submitted. Unless we are legally prohibited to do so, we will do our best to provide you with notice that a request for your information has been made to give you an opportunity to object to the disclosure. If you do not challenge the disclosure request, we may be legally required to turn over your information.
WEB SITE SECURITY
Security Measures - Our site is protected from front end users, but access from back end users include a variety of security measures such as change control procedures, passwords, and physical access controls. We also employ a variety of other mechanisms to ensure that data you provide is not lost, misused, or altered inappropriately. These controls include data confidentiality policies and regular database backups.
Encryption Policy - Please be aware that the information you send to us in the information request form, privacy information request form, or in an email message will not be encrypted. Do not send any confidential information within clear text forms or email messages. If you want to give us confidential information, please call us at the number given at the bottom of this page.
Encryption Policy - We use (type of encryption, such as SSL, SHTTP, etc.) encryption to protect the information you submit to us.
Storage of Personally Identifiable Information (PII) - We do not store any personally identifiable information on our web server.
Accountability - Information security personnel ensure the security of the information we process and store.
Policies and Procedures - Vista has internal policies and procedures to limit access to your information to only those who have a business need to view it.
Sensitive Communicating Via Email and Web Page
Sending Confidential Information – Web sites visitors must not use this site to submit confidential information to Vista. To arrange for the delivery of highly sensitive information, contact Vista directly by calling (phone number) to communicate any confidential information.
Collecting Confidential Information – Vista DOES NOT currently collect PII; however, if it does in the future, it will always use encryption when collecting personal information via web forms. Web site users can identify these forms by looking in the address bar of the browser, where the “https” in the URL indicates a secure connection. Site users can also view the “padlock” icon within the browser window. A closed padlock [insert image] indicates an encrypted connection.
YOUR PERSONAL INFORMATION
Access to Personal Information - We make every effort to keep our records accurate. As noted Vista DOES NOT your personal information in a database to include the information you fill out on the information request form.
Your Opt-In and Opt-Out Decisions
Product Information - If you would like to receive information regarding our services or publications, please phone (503-697-2210) and/or fill out the information request form on the Vista web site.
Privacy Policies - If you have a question about our privacy practices, please phone (503-697-2210) and/or email using the information request form on the Vista website.
Email Lists – Vista does not maintain a database of emails and/or email lists.
Email Change Notices - If you prefer, we will be glad to send you an email notice whenever the policy is updated. Please fill out our privacy information request form (insert link) if you would like to be notified via email.