Privacy policy

Privacy Policy

Last Updated: June 11, 2026

1. Introduction

This Privacy Policy describes how Cooperative Educational Service Agency 6 (“CESA 6,” “we,” “us,” or “our”) collects, uses, and discloses information when you use our website at www.cesa6.org and related online services (collectively, the “Service”).

CESA 6 is a public educational service agency organized under Wisconsin Statute § 116, headquartered at 2300 State Road 44, Oshkosh, WI 54904. We provide educational support services and programs to Wisconsin school districts, we operate a youth apprenticeship program and we operate an e-commerce store through which educational products and services may be purchased.

Audience. Our Service is directed to person 13 years of age and older. We do not knowingly collect personal information from individuals under the age of 13 through this website. If you are under 13, please do not use the Service or submit any personal information to us. If we become aware that we have inadvertently collected personal information from someone under the age of 13, we will promptly delete it.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Definitions

“Personal Data” means any information that relates to an identified or identifiable individual, including information that could reasonably be linked to you.

“Usage Data” means data collected automatically when you use the Service, such as your IP address, browser type, pages visited, and time spent on those pages.

“Service” refers to the CESA 6 website at www.cesa6.org and related online services, including the e-commerce store.

“Service Provider” means a third-party company or individual that processes data on our behalf to facilitate or support the Service.

“Cookies” are small files placed on your device by a website that store information about your browsing session or preferences.

3. Information We Collect

3.1 Information You Provide

When you interact with the Service, for example, by creating an account, placing an order, registering for an event, or contacting us, you may provide us with:

  • Name and contact information (email address, phone number, mailing address)

  • Organization name and role (e.g., your school district and position)

  • Account credentials (username and password)

  • Communications you send to us

3.2 Payment and Order Information

Our e-commerce store is operated through Shopify, a third-party e-commerce platform. When you make a purchase, payment card information and financial details are collected and processed directly by Shopify and its payment processors. CESA 6 does not receive, store, or have access to your payment card number, bank account information, or other sensitive financial data. Please review Shopify’s Privacy Policy for information on how your payment data is handled. We do receive order confirmation details, including your name, shipping address, email address, and the items purchased, in order to fulfill and manage your order.

3.3 Usage Data

We automatically collect certain information when you visit or use the Service, including:

  • IP address and general location (city/region level)

  • Browser type and version

  • Pages visited, time spent, and navigation paths

  • Device type and operating system

  • Referring website or source

3.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service, understand how it is used, and deliver relevant advertising. A cookie is a small file placed on your device that allows a website to recognize your browser and remember certain information across visits. Similar technologies such as pixel tags and device identifiers serve comparable functions.

We use these technologies for the following purposes:

Essential. Some cookies are necessary for the Service to function. They enable core features such as navigation, account authentication, and shopping cart functionality. Without them, basic parts of the Service cannot be provided. These cannot be disabled through our cookie controls.

Functionality. These technologies remember choices you make such as your login credentials or language preference so you do not have to re-enter them each time you visit. They make the Service more convenient and personalized to you.

Analytics. We use analytics technologies to understand how visitors use the Service — for example, which pages are visited most often and how users navigate between them. This helps us identify improvements and measure the effectiveness of our content. Information collected for analytics purposes is used in aggregate or pseudonymous form.

Advertising. We use advertising technologies to deliver content and advertisements relevant to your interests, including on third-party websites after you have visited our Service. These technologies help us and our advertising partners understand whether ads are effective and allow us to avoid showing you the same ad repeatedly.

You can control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or alert you when cookies are being set. Note that disabling certain cookies may affect your ability to use parts of the Service. For information on limiting advertising-related tracking specifically, see Section 7.

4. How We Use Your Information

CESA 6 uses the information we collect for the following purposes:

  • To provide, operate, and maintain the Service

  • To process and fulfill orders placed through the e-commerce store

  • To create and manage your account

  • To communicate with you about your account, orders, or inquiries

  • To send you information about programs, products, events, and services that may be of interest to you (you may opt out at any time; see Section 8)

  • To serve targeted and interest-based advertising, including on third-party websites (see Section 7)

  • To analyze how the Service is used and improve its features and performance

  • To detect, investigate, and prevent fraudulent or unauthorized activity

  • To comply with applicable legal obligations

  • For business planning purposes, such as evaluating partnerships or operational changes

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including website hosting, analytics, email delivery, customer support, and e-commerce operations. These providers are contractually required to use your information only to perform services for us and to maintain appropriate security.

5.2 Advertising Partners

We work with third-party advertising partners, including Google, to serve targeted advertisements on our Service and on third-party websites. These partners may use cookies and similar technologies to collect information about your activity on our Service in order to show you relevant ads. See Section 7 for opt-out options.

5.3 Business Partners

We may share information with trusted organizational partners to offer you certain programs, products, or services. We do not authorize these partners to use your information for purposes other than those described to you.

5.4 Legal Requirements and Protection

We may disclose your information if we believe in good faith that doing so is necessary to:

  • Comply with a legal obligation or respond to a valid legal request (such as a court order or subpoena)

  • Protect the rights, property, or safety of CESA 6, our users, or the public

  • Investigate or prevent suspected fraud or security incidents

5.5 Business Transfers

If CESA 6 undergoes a reorganization, merger, or transfer of assets, personal information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a materially different privacy policy.

5.6 With Your Consent

We may disclose your information for other purposes with your explicit consent.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Factors we consider include:

  • The nature and sensitivity of the information

  • Our ongoing relationship with you (e.g., active account or recent purchase)

  • Legal or regulatory obligations to retain records

  • Potential disputes or enforcement needs

When personal information is no longer needed, we delete or de-identify it in accordance with our data retention practices.

7. Advertising and Opt-Out Rights

Our Service uses interest-based advertising technologies. This means that third-party partners may use information about your visits to our Service (and other websites) to show you advertisements tailored to your interests.

7.1 Google Advertising

We use Google Analytics and Google Ads, which may collect and use data for analytics and advertising purposes. To limit Google’s use of your data:

Google Analytics: You can install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting data about your visits. The add-on works by preventing the Google Analytics JavaScript (gtag.js, analytics.js) from sending visit information to Google. Note that it does not prevent other analytics tools from operating, nor does it stop data from being sent to the website itself.

Google Ads: You can manage your Google ad personalization preferences, including turning off personalized ads, through My Ad Center or by visiting adssettings.google.com. Turning off personalization means you will still see Google ads, but they will not be tailored to your interests or browsing history.

You can limit targeted Meta advertising by visiting the Meta Accounts Center at accountscenter.facebook.com and navigating to Ad preferences. From there you can manage settings including your activity off Meta technologies, which controls whether data shared with Meta by third-party websites and apps, such as CESA 6’s website, is used to show you personalized ads. Note that Meta’s ad preference controls are subject to change, and some forms of ad personalization may not be fully opt-out eligible depending on your region and how you use Meta products.

7.2 Cookie Controls

You can control or disable cookies through your browser settings. Note that opting out of advertising cookies does not mean you will stop seeing ads. It means the ads you see will be less tailored to your interests. Opt-outs are browser-specific; you will need to opt out separately on each browser and device you use.

7.3 Mobile Devices

On mobile devices, you may limit ad tracking through your device settings:

  • iOS: Settings → Privacy & Security → Tracking

  • Android: Settings → Google → Ads → Opt out of Ads Personalization

8. Communications and Email Marketing

We may send you emails about CESA 6 programs, events, products, and services. You may opt out of marketing emails at any time by clicking the unsubscribe link in any email we send, or by contacting us at the address below. Please note that opting out of marketing emails does not affect transactional communications related to your account or orders.

We use HubSpot to manage and send marketing emails. We also use the HubSpot service Hapily for event registration and for managing our your apprenticeship program at https://www.yawisconsin.org/ For more information about how HubSpot handles your personal information, see HubSpot’s Privacy Policy.

9. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your information.

In the event of a data breach affecting your personal information, we will notify you as required by applicable law, including Wisconsin’s data breach notification statute (Wis. Stat. § 134.98).

10. Data Transfers

Your information may be processed and stored on servers located outside of Wisconsin or the United States. By using the Service, you consent to the transfer of your information to locations that may have different data protection laws than your jurisdiction. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy wherever it is processed.

11. Your Choices and Our Commitments

CESA 6 is committed to giving you meaningful control over your personal information. While Wisconsin law does not currently provide a general statutory right to access, correct, or delete personal information held by organizations like ours, we voluntarily extend the following choices and commitments to users of our Service:

Opt-Out of Marketing Communications. You may opt out of receiving marketing emails from us at any time by clicking the unsubscribe link in any email we send or by contacting us directly. This right is enforceable under federal law (CAN-SPAM Act). Opting out of marketing emails does not affect transactional communications related to your account or orders.

Opt-Out of Targeted Advertising. You may limit interest-based advertising served through our Service using the tools described in Section 7. These tools operate at the level of our advertising partners and your browser or device settings.

Access. If you would like to know what personal information we hold about you, you may contact us and we will make reasonable efforts to provide you with that information. We may need to verify your identity before responding.

Correction. If you believe that personal information we hold about you is inaccurate or incomplete, you may contact us and we will make reasonable efforts to correct it.

Deletion. If you would like us to delete personal information we hold about you, you may contact us and we will make reasonable efforts to honor that request. Please be aware that we may need to retain certain information to fulfill legal obligations, resolve disputes, complete transactions, or maintain the security and integrity of our Service.

Account Settings. If you have a registered account, you may update certain personal information directly by logging in and visiting your account settings.

We will respond to requests submitted under this section within 30 days. We will not charge a fee for reasonable requests, and we will not treat you differently or deny you access to our Service because you exercised any of the choices described here. We may need to verify your identity before processing certain requests to protect against unauthorized access to your information.

To submit a request, please contact us using the information in Section 17.

12. Do Not Track

Our Service does not currently respond to “Do Not Track” signals from browsers. You may, however, use the opt-out mechanisms described in Section 7 to limit tracking and targeted advertising.

13. Links to Third-Party Websites

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

15. Education Records and FERPA

Some of the programs and services CESA 6 provides to Wisconsin school districts may involve the creation, receipt, or maintenance of education records, as that term is defined under the Family Educational Rights and Privacy Act (“FERPA”), 20 U.S.C. § 1232g, and its implementing regulations at 34 C.F.R. Part 99. CESA 6 may also maintain education records in connection with its youth apprenticeship program. This section describes how CESA 6 handles such records and the rights of eligible students and parents under FERPA.

Scope of This Section. This section applies only to education records maintained by CESA 6 in connection with its programs and services to school districts and its youth apprenticeship program. It does not apply to general website usage data or information collected from visitors to this website in the ordinary course, which is governed by the remainder of this Privacy Policy.

Protection of Education Records. CESA 6 does not disclose education records without the prior written consent of the eligible student or parent, except as permitted by FERPA. Permissible disclosures without consent include, among others, disclosures to school officials with a legitimate educational interest, disclosures to other schools to which a student is transferring, and disclosures required by law. CESA 6 also complies with Wisconsin’s pupil records law, Wis. Stat. § 118.125, which provides additional protections for student records maintained by Wisconsin educational agencies.

FERPA Rights. FERPA affords eligible students and parents of minor students certain rights with respect to education records maintained by CESA 6, including: the right to inspect and review those records; the right to request correction of records believed to be inaccurate or misleading; and the right to consent to disclosures of personally identifiable information, except to the extent FERPA authorizes disclosure without consent. Eligible students and parents who believe their FERPA rights have been violated may file a complaint with the U.S. Department of Education’s Family Policy Compliance Office.

Separate Program Notices. Participants in CESA 6 programs that involve education records, including the youth apprenticeship program at yawisconsin.org, may receive a separate notice describing CESA 6’s practices with respect to those records. Where provided, that notice supplements this Privacy Policy for program participants. If you have questions about education records or FERPA rights in connection with a specific CESA 6 program, please contact us using the information in Section 17.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Service. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this policy and, where appropriate, by email or a prominent notice on the Service. Your continued use of the Service after any update constitutes your acceptance of the revised policy.

17. Contact Us. 

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Cooperative Educational Service Agency 6 (CESA 6)

2300 State Road 44

Oshkosh, WI 54904

Email: info@cesa6.org

Phone: 920.236.0510