Privacy Policy

1. Introduction

The Orange County Korean American Bar Association ("OCKABA," "we," "us," or "our") is a voluntary bar association based in Orange County, California. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our website at ockaba.org (the "Site") or use our services.

By using the Site, you agree to the collection and use of information in accordance with this policy. Please also review our Terms of Use.

2. Information We Collect

Account Information

When you create an account, we collect your name and email address. Authentication is handled through a 6-digit email verification code or LinkedIn OAuth. We do not store passwords.

Profile Information

You may optionally provide additional profile information including your practice area, law firm or organization, year admitted to the bar, LinkedIn URL, phone number, profile photo, and biographical information.

Membership and Payment Information

We collect membership tier and status information. All payment processing is handled entirely by Stripe. OCKABA does not receive, store, or have access to your credit card numbers or full payment account details.

Event and Donation Information

When you register for events or make donations, we collect your name, email address, membership status, and transaction details (amount, fund selection, or event selection). Payment is processed by Stripe as described above.

Email Subscriptions

If you subscribe to our mailing list, we collect your email address and subscription preferences.

Photos and Images

Profile photos and gallery images you upload are stored with our image hosting provider, Cloudinary.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and membership
• To process membership payments, event registrations, and donations
• To send transactional emails (membership confirmations, event registrations, donation receipts)
• To send organizational communications and newsletters (with your consent)
• To display your information in the member directory (only if you opt in)
• To operate, maintain, and improve the Site
• To respond to your inquiries and provide support

4. Member Directory

OCKABA maintains a member directory accessible to other members. Participation in the directory is optional. You may control your directory visibility through your profile settings at any time.

5. Third-Party Services

We use the following third-party services to operate the Site. Each service has its own privacy policy governing their use of your data:

• Supabase — database hosting and user authentication
• Stripe — payment processing for memberships, events, and donations
• Cloudinary — image storage and delivery
• Resend — transactional and marketing email delivery
• Vercel — website hosting
• LinkedIn — optional OAuth authentication

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• With the third-party service providers listed above, solely to operate the Site and provide our services
• In the member directory, only if you have opted in to directory visibility
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of OCKABA, our members, or the public

7. Cookies and Tracking

We use cookies minimally and only for essential purposes. Our Site uses authentication session cookies to keep you logged in. We do not use advertising cookies or third-party tracking technologies for marketing purposes.

8. Data Retention

We retain your personal information for as long as your membership or account is active and for a reasonable period thereafter, as necessary to fulfill the purposes outlined in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements.

9. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights Under California Law (CCPA)

As a California-based organization, we comply with the California Consumer Privacy Act (CCPA). California residents have the following rights regarding their personal information:

• Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete — You may request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out — We do not sell personal information. If this practice changes, we will provide an opt-out mechanism.
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at [email protected].

11. Email Communications

You may unsubscribe from marketing and newsletter emails at any time by using the unsubscribe link included in each email. Transactional emails related to your account, membership, event registrations, and donations will continue to be sent as necessary.

12. Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can promptly remove it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Site after any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: