Your Privacy
Privacy Policy
Last updated:
How the Soap Lake Chamber of Commerce handles website information, cookies, Google account connections, inquiries, and payments.
Guided Requests and Email Confirmation
Our guided contact form collects your name, email, optional phone number, and details relevant to volunteering, contributing goods or services, membership, or general questions. An unrecognized email and browser must confirm a single-use link before the request enters the Chamber inbox. The link expires after 24 hours. Pending request details are encrypted in application storage; the delivery email address is stored separately for confirmation. Expired pending requests are removed on the next contact or inbox request. A replacement confirmation link invalidates the earlier link without extending the original deadline. A verified Google email or a current verified-browser proof can submit without another confirmation.
Remembered Email and Conversation Archives
After email confirmation, an essential HttpOnly cookie named slcc_verified_email remembers that verified email on this browser for 30 days. A hashed proof and the verified email are stored until expiry; expired proofs are removed during contact or inbox requests. This does not sign you into a Google account or grant access to other conversations. Delete this cookie to remove the remembered proof from your browser. Members and Chamber staff have separate conversation archives. Archiving retains messages; a new reply can return a conversation to the recipient inbox. Staff assignment restricts access to the assigned staff member and master administrators, while conversation owners retain their access. Staff with conversation access can download private copies or permanently delete the conversation with confirmation. Deletion removes the application conversation, messages, and associated new notification records; delivered emails, earlier notification records, downloaded copies, backups and limited audit records may remain under their separate retention arrangements.
Plain-Text Messages
Chamber messages are accepted as plain text. Messages containing markup, encoded escape sequences, hidden control characters, or invalid text may be rejected. Previously stored content that fails these checks may be withheld from display. These checks help protect conversations; they do not change who is authorized to access them.
Who We Are and How to Contact Us
This policy covers this Soap Lake Chamber of Commerce website and the services described below. For privacy questions or requests, email [email protected] or write to Soap Lake Chamber of Commerce, PO Box 433, Soap Lake, WA 98851. Please identify the account, inquiry, or listing involved without sending passwords, payment-card numbers, or identity documents unless we arrange a secure verification method.
Information You Provide
When you contact the Chamber, we receive your name, email address, message, and any information you choose to include. Membership, event, vendor, or donation inquiries may also include business and participation details. We use this information to respond, provide requested services, maintain relevant records, and address security or legal obligations. Please do not send sensitive health information or payment-card details through messages.
Website Visits and Service Providers
Hosting is provided by dulyhost. Hosting services may keep traffic logs on the server that include IP addresses, requested pages, timestamps, browser information, referring pages, and error or security records. These logs may be used to deliver and protect the website and to enhance the security or operation of the website and hosting services. Traffic may also pass through Cloudflare where configured. Authorized technical support and email providers may process information necessary to operate these services. Their processing may occur outside your state or country.
Google Account Connections
Google sign-in is optional for browsing public pages. If you choose to connect, we request basic identity permissions (openid, email, profile). We store your Google account identifier, name, verified email address, account role, and sign-in records to identify you and control account access. Connecting does not automatically associate you with a member listing; that requires Chamber review.
How Google Information Is Used
The account connection is limited to authentication and the account services you choose. It does not request access to Gmail messages, Drive files, calendars, contacts, or your Google password. Google processes the sign-in on its own services. The application uses a temporary access token to retrieve identity information and does not persist Google access or refresh tokens. Google identity information is not used by this application for advertising or sold to advertisers.
Cookies and Browser Controls
When enabled account or private messaging services are used, the application sets an essential cookie named slcc_session to maintain access and protect forms and sign-in. It is a browser-session cookie; browsers may restore session cookies when reopening. Application access expires after 12 hours of inactivity. Public information pages do not require this application cookie. You can delete or block cookies in your browser, but sign-in and private conversation access may stop working. Google and embedded payment providers may use their own cookies or similar storage under their policies.
Google Analytics and Your Choices
With your permission, this website uses Google Analytics 4 to measure public-page visits and interactions such as navigation, outbound business-link clicks, downloads, image views, member-detail views, contact-link clicks, and scrolling. Google receives technical connection information and analytics data, including a pseudonymous browser identifier, device/browser information, and the public page being viewed. We do not load the Google tag until you choose Accept analytics. You can choose Reject analytics or use Privacy choices in the footer to change or withdraw consent at any time. Your choice is stored in this browser for up to 180 days. Analytics cookies (_ga and _ga_*) are configured with a maximum 180-day lifetime without renewal on each visit; rejecting clears accessible Analytics cookies. Google may process information outside your country under its policies. Google account connection is separate and does not grant tracking permission. Public-page analytics applies to visitors, signed-in members, and staff alike after consent. Signing in does not itself disable or authorize analytics. This application excludes admin activities, private account/message/setup pages, and pages opened with query strings or fragments. We do not deliberately send names, email addresses, message contents, form values, account identifiers, or access tokens. Google Signals and advertising personalization are disabled by this integration. Opening a Zeffy form is not recorded as a purchase; verified payment tracking is not yet connected. Google Analytics report retention is controlled by the Chamber property settings and is separate from browser-cookie lifetime. Contact the Chamber with privacy or deletion requests. Hosting/security logs and third-party embedded services remain subject to the separate disclosures in this policy.
Private Messages, Access Links and Email
When messaging is available, we store contact details, inquiry category, subject, message history, account associations, and handling records so authorized Chamber staff can respond. These messages are not public member listings. Email providers process delivery addresses and notification content. Private recovery links grant access to a conversation: keep them confidential. Recovery links expire after ten days and are single-use; new links can replace older ones. Admin invitations expire after three days and may be revoked earlier. Link expiration does not itself delete the underlying conversation or account record.
Membership Payments and Zeffy
Membership and donation forms are provided through Zeffy. Opening a page with an embedded Zeffy form connects your browser to that provider, which receives connection information and may use cookies or similar technologies even before you submit a payment. Information entered in the form is processed by Zeffy and its payment providers. The Chamber can receive the contact, membership, donation, and transaction records needed to administer your participation. The Chamber website application does not collect or store full payment-card numbers. The planned automatic connection between website member records and Zeffy is not yet enabled.
Public Listings and External Links
Current member listings and Chamber publications contain information intended for public display and may be indexed by search engines. Previous-year membership directories display names only, not business contact details or member logos. Google sign-in details and private messages are not automatically published. Contact us to request a listing correction. Links to other businesses, social networks, and external services lead to sites governed by their own privacy practices.
Access, Sharing and Security
Information may be accessed by authorized Chamber staff and service providers as needed to operate the site, answer inquiries, administer participation, prevent abuse, or meet applicable legal obligations. Account services use access controls, protected sessions, and security records, including hashed network identifiers for rate limiting and administrative audit records. No internet transmission or storage system can be guaranteed completely secure. Keep access links private and tell us promptly if you suspect unauthorized access.
Retention and Your Choices
Retention depends on the record and purpose, including ongoing requests, membership or transaction administration, security investigations, backups, and legal obligations. Expiring a cookie, invitation, or access link is not automatic deletion of stored records. Email the Chamber to request access, correction, or deletion of your information, or help closing an account. We may need to verify your identity and retain records where required or justified by applicable obligations; we will explain relevant limitations. Rights and response requirements depend on applicable law. Removing the connection in your Google Account stops that connection but does not automatically erase Chamber records or end an existing Chamber session; also sign out and contact us about deletion.
Children and Policy Changes
Account and inquiry services are intended for adults or use with a parent or guardian. Please contact us if you believe a child has supplied personal information inappropriately so we can review it. We will revise this policy when our information practices or services change, update the date above, and provide additional notice or obtain consent when required.