Boreham Library Privacy Policy [working draft of 080529]

Please note that the following campus policies take overall precedence for and otherwise affect privacy and collection of information:

Click here for the Library Privacy Policy.


Introduction

One of the cornerstones of librarianship is respect for the privacy of library users. The Boreham Library recognizes the importance of protecting privacy and the confidentiality of the information shared with the Library when using web sites or other Library services. Described below is the Library policy on the collection, use, disclosure, maintenance and protection of personal information.

What information is collected and how it is used

The Library web server may collect certain technical information from patrons' web browsers, including browser type, operating system type, internet address, and the web address of the page linked to these sites. This is done to facilitate and improve the Library's online services and does not identify specific individuals. In some cases the Library web server may use browser "cookies" or other technologies to maintain session and preference information or to provide other complex functionality. Internet browsers may be adjusted to disable the use of cookies and other web technologies; however, some features of this web site may not function properly if these technologies are blocked.

To gather web traffic information the Library may use Google Analytics, which places a cookie on each visitor's machine for each session. For privacy reasons the statistics gathered by Google Analytics do not include individual IP addresses or other individually identifiable information. Individual visitor access is represented by the name of the individual's Internet service provider (ISP). Statistical information is stored on Google servers for two years and the Library uses this information for comparative purposes.

The Boreham Library does maintain certain personally identifiable information for Library accounts of valid library users, using specific security precautions. For persons affiliated with the University of Arkansas - Fort Smith, the Library should automatically receive personally identifiable information to create and update your library account from the campus system. The Library will maintain confidentiality of information sought or received and materials consulted, borrowed or acquired. The Library maintains several web-based management tools such as online forms to reserve materials. The personally identifiable information voluntarily submitted through these tools and stored in the Library's computer systems will only be used to maintain library accounts and provide services to our patrons. It is not made available to any other entity outside the Library except as required by law or appropriate law enforcement procedures.

In the event of overdue materials, materials requested through the Library, and similar situations requiring notification of Library users, Library staff will simply state that materials are overdue, available, etc., when leaving messages with any third party, in order to maintain confidentiality.

Services provided by third parties

The Library web site contains links to web sites and licensed databases that are not maintained or supported by the Boreham Library or the University of Arkansas - Fort Smith. In some cases library services may be provided via third party tools. The Boreham Library is not responsible for the privacy or the content of these third parties, and we encourage users of these services to familiarize themselves with their policies before using them.

Access to patron information

Any person is entitled to view his/her library account information in person or online, using proper authentication. Campus account information for students must be corrected through the Registrar's Office and library account information for University employees must be corrected through Human Resources.

No library employee shall reveal the identity of a borrower to any requestor. Library staff will refer all requests for personal information to the Provost of the University.

Security

Transmissions made on the Internet are generally not secure, since the information is transferred in clear text. In some cases transactions made via the Library's web site are conducted using a SSL (Secure Socket Layer protocol) connection in order to provide increased security to the information as it is transmitted. Only authorized Library staff with assigned passwords may access personally identifiable information stored in the Library's computer systems, and then only for the purpose of performing library work. The Library uses industry-standard security measures to protect any personal information provided to the Library. However, the Library cannot guarantee that submissions to the Library's web site, any content residing on Library servers, or any transmissions from the Library servers will be completely secure. All precautions considered legally reasonable for the Library will be taken with personally identifiable information.

Contact

If there is a question/concern about this policy, please contact the Library Director at (479)788-7205.

References

This policy was developed using the American Library Association guidelines, the Confidentiality of Personally Identifiable Information about Library Users as amended 2004, by the American Library Association Council, the Duke University Libraries privacy policy, and the Vanderbilt University policy.