CU VILLAGE.COM PRIVACY POLICY
CU Village.com's policies and procedures for handling customer information have been created with the understanding that Internet technologies are still evolving and that Internet business methods are continuing to evolve to meet the needs and opportunities of the changing technologies. As a result, these policies and procedures are subject to change.

In the course of serving its customers, CUV may acquire, store and transmit customer communications and information that customers may regard as private or sensitive. Some of this information—such as the customer's name, address, telephone number, and credit card data—is provided to CUV by its customers in order to establish service. Other information—such as the customer's account status, choice of services, and customer logs—is created and maintained by CUV in the normal course of providing service. CUV also use cookies, which are small pieces of information that a Web site can store in a designated file on a user's computer for various reasons. For example, CUV uses cookies on the landing pages of products sold online which record the customer information that is required on the order form. This information is then forwarded to an internal sales tracking database within CUV database. In addition, CUV may store customers' electronic mail and other communications as a necessary incident to the transmission and delivery of those communications. CUV may share limited customer contact information with selected partners to provide customers with information about products or special that might be of interest to the customer. CUV will not otherwise disclose its customers' personal and account information unless CUV has reason to believe that disclosing such information is necessary to identify, make contact with, or bring legal action against someone who may be causing harm or interfering with the rights or property of CUV, or CUV's customers, or others, or where CUV has a good faith belief that the law requires such disclosure. Furthermore, CUV also will not, except for reasons stated below, disclose to third parties the contents of any electronic mail or other electronic communications that CUV stores or transmits for its customers. The circumstances under which CUV will disclose such electronic customer communications are when:

1. it is necessary in order to provide service to the customer;
2. it is necessary to protect the legitimate interests of CUV and our customers;
3. it is required to cooperate with interception orders, warrants, or other legal process that CUV determines in its sole discretion to be valid and enforceable; and
4. it is necessary to provide to a law enforcement agency when the contents are inadvertently obtained by CUV and appears to pertain to the commission of a crime

Protecting Children's Privacy Online
The Children's Online Privacy Protection Act (COPPA) was passed by Congress in October 1998, with a requirement that the Federal Trade Commission (FTC) issue and enforce rules concerning children's online privacy. The primary goal of the Act and the Rule is to place parents in control over what information is collected from their children online. The Rule was designed to be strong, yet flexible, to protect children while recognizing the dynamic nature of the Internet. Click here to read the Frequently Asked Questions about the Children's Online Privacy Protection Rule.


What These Privacy Rules Mean to YOU
CU Village is committed to protecting the privacy of children (and everyone) who visits this site. You probably noticed that we don't ask you for your name, we don't ask you for your e-mail address, and we don't have a chat room where other people can ask you for personal information.

Why don't we care about all of your personal information? Because we want you to be a safe cyber-surfer…and we want you to have fun and learn while you're at our site. That's all…just have some fun and learn a few things!

Click here for our Internet Safety Tips.

Security
CU Village.com will protect the confidentiality of its customers' information, account information and personal communications to the fullest extent possible and consistent with the law and the legitimate interests of CU Village.com, its partners, its employees and other customers of CU Village.com's services. To guard against the loss, misuse, and alteration of information that is collected from customers, CU Village.com has appropriate physical, electronic, and managerial procedures in place.

CU Village.com's Web hosting servers are 'hardened' against hackers with proprietary tools, OS tweaks, network procedures and constant monitoring. This is not a guarantee that a hacker could not succeed.

Through Verio, we have System Administrators that are dedicated to Web hosting security. They insure that we are current with all OS security patches. We have very high-level software maintenance contracts with our Vendors (SGI, Cisco, Foundry) so that we are sure to have the latest patches and support staff available to us 24x7x365 for fixes.

Security audits are run regularly on our servers. This supplements our internal efforts to keep our servers as protected as possible. We do record and monitor illegal port accesses both on the networking hardware and the servers. We log all accesses to our servers that allows us to check the accesses for intrusion attempts. Additional technologies are also used to ensure notification of any active attacks.

For Denial of Service attacks, a new procedure that our System Administrators implemented called "ipfilterd" allows us to block attacks directed at a single Web site on a server rather than a network level giving us better granularity. "spamd" is another tool used to minimize the effect of attacks on the system—specifically email. Blocking spam makes us less of a target for those hackers that target Spammers. We also have the following implemented services:

• Triple data backup
• Accessible 24-hour user volume backup
• Regularly scheduled digital tape backups
• Each Virtual Server resides in a protected sandbox
• Potentially insecure programs are disabled or removed
• Hacking alert system immediately notifies system administrators
• Redundant OC12, OC3, and DS3 Internet connectivity
• Cisco routers and switches
• Redundant power backup
• 24/7 data center monitoring
• Security hardened operating systems