Privacy Policy (4-12)
We will not disclose your personally identifiable information to
unaffiliated third parties without your express consent, except in the
following limited circumstances:
4.1 Gift of Life Site Vendors. We may employ other companies
to perform functions on our behalf, such as maintaining the Website,
providing services related to the Site, collecting information,
responding to and sending electronic mail, or other functions necessary
to our business. We may need to share your personally identifiable
information with these companies (collectively, "Site Vendors"). We will
provide Site Vendors with only that information necessary to perform
their functions, and we will not allow them to use your personally
identifiable information for any other purpose.
4.2 Imminent Harm. We may reveal your personally identifiable
information to attorneys, private investigator organizations or law
enforcement agencies if we believe (a) that you are in risk of harm from
another, or (b) that you are harming or interfering (or will imminently
harm or interfere) with others or violating (either intentionally or
unintentionally) our Terms and Conditions of Use or otherwise violating
legal rights.
4.3 Legal. Gift of Life will reveal your personally
identifiable information, to the extent we reasonably believe we are
required to do so by law. If we receive legal process calling for the
disclosure of your personally identifiable information we will attempt
to notify you via the email address you supplied during registration
within a reasonable amount of time before we respond to the request,
unless such notification is not permitted.
4.4 Transfer of Site. Gift of Life shall be entitled to
transfer to a third party information it collects, including any
personally identifiable information, in connection with a sale or
transfer of all or substantially all of the assets of the business
entity responsible for the information under this Policy, provided the
acquiring third party has agreed to safeguard your personally
identifiable information with protections that in all material respects
are the same as or more protective than those set out in this Privacy
Policy.

5.1 Discretionary Account Information. To allow
appropriate control over personally identifiable information, you can
contact us at the address provided in Section 11 to access the
personally identifiable information you have provided to us via the
Website or to change or update discretionary information that you have
previously submitted.
5.2 Opt-Out. If we choose to send to you bulletins, updates,
or other unsolicited communications that are marketing-related
materials, we will provide you with the ability to decline -- or
“opt-out of” – receiving such communications. Instructions for
opting-out will be provided if and when we determine to send you such a
communication. Please understand that you will not be allowed to
"opt–out" of formal notices concerning operation of this Website, and
legal and other related notices concerning your relationship to the
Site.
5.3 Deleting Information. Finally, if you request, unless you
have registered as a Donor, we will remove your name and all other
personally identifiable information from our databases. Please
understand, however, that it may be impossible to remove this
information completely, due to backups and records of deletions. In
addition, please understand that, if you request deletion of your
information, you will be unable to utilize associated features of the
Website and any associated services or information. You may not remove
de-identified or Aggregate Information from our databases. Donor
information is governed by the Registry Consent and may not be deleted,
but may, at the Donor's request, be removed from the active registry
list.

6. Security
We have put in place security systems designed to prevent
unauthorized access to or disclosure of information you provide to us,
and we take all reasonable steps to secure and safeguard this
information. We store all personally identifiable information we receive
on a separate system, designed to be secure and isolated from direct
connection to the Internet. Gift of Life employees (and employees of
our Site Vendors) are required to acknowledge that they understand and
will abide by our policies with respect to the confidentiality of
personally identifiable information. Moreover, we provide access to our
databases containing personally identifiable information on a
need-to-know basis only.
Our security systems are therefore structured to deter and prevent
hackers and others from accessing information you provide to us. We also
use software programs to monitor network traffic to identify
unauthorized attempts to upload or change information, or otherwise
cause damage. Please understand, though, that we do not warrant as
fail-proof the security of information provided by or submitted to Gift
of Life. Due to the nature of Internet communications and evolving
technologies, we cannot provide, and disclaim, assurance that the
information you provide us will remain free from loss, misuse, or
alteration by third parties who, despite our efforts, obtain
unauthorized access.

7. Notice of Security Incident
If we detect, despite the safeguards set out above, an intrusion or
other unauthorized access to or use of personally identifiable
information (an "Intrusion"), we will (i) notify effected users of the
Intrusion if the information at issue is sensitive, in our discretion,
(ii) deliver this notice by the means we deem most efficient under the
circumstances (such as, for example, first class mail or email); (iii)
use contact information for each affected user that is current in our
files; and (iv) use commercially reasonable efforts to accomplish these
steps and effect this notice in a timely manner. To the extent
applicable law requires steps in addition to those specified above, we
will under all circumstances comply with applicable law.

8. Privacy Protection For Children
Our Website is not directed at children, and we will not accept or
request personally identifiable information from individuals we know to
be under 13. In accordance with the Children’s Online Privacy
Protection Act ("COPPA"), if we learn that a child under 13 has provided
personally identifiable information, we will either (i) delete this
information from our databases, in accordance with our deletion policy,
set out in Section 5.3, or (ii) obtain verifiable parental consent, in
accordance with COPPA.

9. Notification of Changes
From time to time, Gift of Life may change its Privacy Policy. If we
make any changes regarding disclosure of personally identifiable
information to third parties, we will attempt to contact you prior to
the date the modified policy is scheduled to take effect. We will post
notice of the new Policy from the privacy link on our Website. With
respect to Site Visitors and Patients, your use of our Site following
any such change constitutes your agreement to follow and be bound by the
Privacy Policy, as changed. With respect to Financial Supporters,
Donors, and Medical Professionals, no such changes will take effect
unless and until you have provided us with your consent to such changes,
in accordance with Sections 1.2 or Section 1.3, above.

10. Relationship to Terms of Use and Other Contracts
This Privacy Policy must be read in conjunction with our Terms and
Conditions of Use, and the provisions of our Terms and Conditions of Use
are incorporated herein. To the extent the Terms and Conditions of Use
conflict with the terms of this Privacy Policy, the terms of this
Privacy Policy will control. This Privacy Policy should also be read in
connection with the Registry Consent (for Donors), and the MatchQuestTM License (for Medical Professionals).

If you have any questions about this Privacy Policy, the practices of
this Site, or your dealings with this Website, please contact us at:
Attention: Operations Manager
Phone: 1-800-962-7769

12. Effective Date
The effective date of this Privacy Policy is March 7, 2006.