Opening its doors in October 2016, Community First High School (501c3 Nonprofit Organization) strives to curve the dropout rate among students in the northwestern Louisiana region. Community First High School's intent is to enable individuals to overcome obstacles faced by lacking a traditional High School Diploma. Community First High School has a highly qualified staff beginning with the Founder, Garrison Peters, who has been self-funding Community First High School for the last three years. The additional staff consists of a Director of Management, two Counselors, Public Relations, Administrative Assistant, and Six Certified Teachers.

Community First High School strives to (F)focus on quality of life (I)instruction that is (R) rigorous, but meaningful to prepare (S)students for success for a University, (T) technological, and Trade society where critical thinkers are created for the future & beyond. Community First High School is a non-profit free school that specializes in mentoring individuals aged 16 and older who are not enrolled in school and/or do not have a high school diploma and want to receive a HISET (High School Equivalency Test) diploma. Community First High School offers educational instruction, family counseling, mentoring, health and financial literacy, domestic violence prevention against men and women, food programs for young mothers/fathers, job placement, and interview preparation. Community First High School also promotes giving back through community service as students are required to earn at least eight hours by volunteering at other non-profit organizations. Additionally, students can attain a Degree or Certification in a vocational skill obtained through partnerships with local businesses that specialize in trades such as construction, allied health, social services, administrative roles, and teacher assistants. Follow-up services are conducted for at least twelve months after a student exits the program. Community First High School will call listed contacts, schedule home visits to follow the progress of our students, and maintain open communication to track and monitor post-secondary educational or employment retention and participant’s needs. For all students who are in post-secondary school, Community First High School sets aside a day for graduated students to return and work with current students on lessons that they are having difficulty mastering.

Notice of Nondiscriminatory Policy As To Students:

 Community First High School admits students of any race, color, national and ethnic origin to all the rights, privileges, programs, and activities generally accorded or made available

 to students at the school. It does not discriminate on the basis of race, color, national and ethnic  origin in administration of its educational policies, admissions policies, and school-administered programs.

Community First High School Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from www.communityfirsthiset.com/ (the “Site”).

PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Plugins, Ecwid Commerce Store

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, debit cards, email address, and phone number. We refer to this information as “Order Information.”

OTHER INFORMATION WE COLLECT: OFFLINE DATA, PURCHASED MARKETING DATA/LISTS

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

HOW DO WE USE YOUR PERSONAL INFORMATION?

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:

Communicate with you;

Screen our orders for potential risk or fraud; and

When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site--you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

BEHAVIORAL ADVERTISING

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

COMMON LINKS INCLUDE:

FACEBOOK - https://www.facebook.com/settings/?tab=ads

GOOGLE - https://www.google.com/settings/ads/anonymous

BING - https://advertise.bingads.microsoft.com/en-us/reso...

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.

YOUR RIGHTS

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.

DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

AGE RESTRICTION FOR MINORS

The Site is not intended for individuals under the age of 18 years.

CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at mayacommunityfirst@gmail.com or by mail using the details provided below:

202 Miller St., Minden, LA, 71055, United States

PCI DSS stand for Payment card Industry Data Security Standard and is a worldwide security standard assembled by the Payment Card

Industry Security Standards Council (PCI SSC).

Purpose: The PCI DSS, a set of comprehensive requirements for enhancing payment account data security, was developed by the founding payment brands of the PCI Security Standards Council (PCI SSC). The PCI SSC is responsible for managing the security standards, while compliance with the PCI set of standards is enforced by the founding members of the Council: American Express, Discover Financial Services, MasterCard Worldwide and Visa Inc.

PCI DSS includes technical and operational requirements for security management, policies, procedures, network architecture, software design and other critical protective measures to prevent credit card fraud, hacking and various other security vulnerabilities and threats. The standards apply to all organizations that store, process or transmit cardholder data.

Reason for the Policy: The standards are designed to protect cardholder information of patrons that utilize a credit card to transact business with CALS. This policy is intended to be used in conjunction with the complete PCI-DSS requirements as established and revised by the PCI Security Standards Council.

Entities Affected by this Policy: All departments that collect, maintain or have access to credit card information must comply with PCI policy. These currently include:

    All Central Arkansas Library System (CALS) Branches and Departments

Who Should Read this Policy: All persons who have access to credit card information, including:

    Every employee that accesses handles or maintains credit card information. CALS employees include full-, part-time and temporary staff members

    CNS staff responsible for scanning CALS’s system to ensure no credit card numbers are stored electronically.

Definitions:

Merchant Account – A relationship between CALS and a bank in order to accept credit card transactions. The merchant account is tied to a general ledger account to distribute funds appropriately to the organization (owner) for which the account was set up.

Coordinator – CALS official who has oversight responsibility for the regulation/standard. Regulation monitors stay abreast of updates to their respective regulations, ensure policies are up to date and notify CNS about changes.

Credit Card Data – Full magnetic strip or the PAN (Primary Account Number) plus any of the following:

    Cardholder name

    Expiration date

    Service Code

PCI-DSS – Payment Card Industry Data Security Standard

PCI Security Standards Council – The security standards council defines credentials and qualifications for assessors and vendors as well as maintaining the PCI-DSS.

Self-Assessment – The PCI Self-Assessment Questionnaire (SAQ) is a validation tool that is primarily used by merchants to demonstrate compliance to the PCI DSS.

PAN – Primary Account Number is the payment card number (credit or debit) that identifies the issuer and the particular cardholder account. It is also called Account Number.

Overview: Credit card companies and financial institutions validate that vendors (CALS) are rated based on their volume of transactions. The rating that a company receives determines the process that they must go through in order to be validated. There are four levels of PCI Compliance, with level 1 being the most stringent and level 4 being the least stringent. If a merchant suffers an attack that has caused account data to be compromised, the merchant level requirement goes up to level 1 automatically. Based on the number of credit card transactions processed annually across CALS locations (less than 20K per year), and the fact that CALS has not experienced a breach, CALS would be classified as a Level 4.

CALS policy prohibits the storing of any credit card information in an electronic format on any computer, server or database including Excel spreadsheets. It further prohibits the emailing of credit card information. Based on this policy, compliance with a number of the PCI Compliance requirements do not apply. The following list communicates the full scope of the compliance requirements but based on CALS policy that prohibits storing of credit card information electronically and utilizing third-party vendors for web-based credit card processing, some may not be relevant.

Requirements:

    Build and Maintain a Secure Network

    Maintain a Vulnerability Management Program

    Implement Strong Access Control Measures

    Regularly Monitor and Test Networks

    Maintain an Information Security Policy

    Ensure Third Party Compliance

    Training

Recommendations:

    Complete an annual self-assessment

    Perform a quarterly Network scan

Without adherence to the PCI-DSS standards, CALS would be in a position of unnecessary reputational risk and financial liability. Merchant account holders who fail to comply are subject to:

    Any fines imposed by the payment card industry

    Any additional monetary costs associated with remediation, assessment, forensic analysis or legal fees

    Suspension of the merchant account.

Procedures:

CALS requires compliance with PCI standards. To achieve compliance, the following requirements must be met by departments accepting credit cards to process payments on behalf of CALS.

General Requirements

    Credit card merchant accounts must be approved by CALS management.

    Management and employees must be familiar with and adhere to the PCI-DSS requirements of the PCI Security Standards Council.

    Management in departments accepting credit cards must conduct an annual self-assessment against the requirements and report results to the Coordinator. All employees involved in processing credit card payments sign a statement that they have read, understood, and agree to adhere to Information Security policies of CALS and this policy.

    Any proposal for a new process (electronic or paper) related to the storage, transmission or processing of credit card data must be brought to the attention of and be approved by CALS management.

Storage and Disposal

    Credit card information must NOT be entered/stored on CALS network servers, workstations, or laptops.

    Credit card information must NOT be transmitted via email.

    Web payments must be processed using a PCI-compliant service provider approved by the CALS management. Credit card numbers must NOT be entered into a web page of a server hosted on the CALS network.

    Although electronic storage of credit card data is prohibited by this policy, CALS will perform a quarterly Network scan to ensure that the policy has not been violated.

    Any paper documents containing credit card information should be limited to only information required to transact business, only those individuals who have a business need to have access, should be in a secure location, and must be destroyed via approved methods once business needs no longer require retention.

    All credit card processing machines must be programmed to printout only the last four or first six characters of a credit card number.

    Securely dispose of sensitive cardholder data when no longer needed for reconciliation, business or legal purposes. In no instance shall this exceed four years. Secured destruction must be via shredding either in house or with a third-party provider with certificate of disposal.

    Neither the full contents of any track for the magnetic strip nor the three-digit card validation code may be stored in a database, log file, or point of sale product.

Third Party Vendors (Processors, Software Providers, Payment Gateways, or Other Service Providers)

    CALS management must approve each merchant bank or processing contact of any third-party vendor that is engage in, or propose to engage in, the processing or storage of transaction data on behalf of CALS—regardless of the manner or duration of such activities.

    Ensure that all third-party vendors adhere to all rules and regulations governing cardholder information security.

    Contractually require that all third parties involved in credit card transactions meet all PCI security standards, and that they provide proof of compliance and efforts at maintaining ongoing compliance.

Self-Assessment

    The Coordinator will notify each department head of the timeline to complete and submit the annual assessment.

    The PCI-DSS Self-Assessment Questionnaire must be completed by the merchant account owner annually and anytime a credit card related system or process changes. This assessment is the responsibility of the head of the department approved to accept credit cards.

Training

    Ongoing training programs must be offered to train employees on PCI DSS and importance of compliance.

Responsible Organization/Party: CALS management shall serve as the Coordinator of the policy which includes responsibility for notifying the Information Security Officer, applicable Department Heads and Data Managers about changes to the policy.

Enforcement: The Information Security Officer will oversee enforcement of the policy. Additionally, this individual will investigate any reported violations of this policy, lead investigations about credit card security breaches and may terminate access to protected information of any users who fail to comply with the policy.

Additional Resources

    PCI Compliance Guide http://www.pcicomplianceguide.org/

    PCI DSS Resources https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml

   Donations to Community First High School are non-refundable.

Please validate your orders because Community First High School will not refund a donor’s contribution due to the following circumstances:

    The donation will been used in the immediate and ongoing service of the public good (Northwest Louisiana Community);

    The return of the donation would significantly negatively impact the financial health of the organization;

    Community First High School has agreed and is able to use the donation according to the donor’s intent and/or gift agreement.

Gifts made to Community First High School will be used in accordance with 501c3 regulations. Upon discretion and consent of Community First High School's Board of Directors, these gifts may be redirected towards expansion of Community First High School's efforts.

The IRS ruling: “a donation to a charitable organization is considered an irrevocable gift”. Please see IRS pub 1771, IRS pub 526, and 26 US Code § 170

Web Site Terms and Conditions of Use

1. Terms

By accessing this web site, you are agreeing to be bound by these web site Terms and Conditions of Use, all applicable laws and regulations, and agree that you are responsible for compliance with any applicable local laws. If you do not agree with any of these terms, you are prohibited from using or accessing this site. The materials contained in this web site are protected by applicable copyright and trade mark law.

2. Use License

    Permission is granted to temporarily download one copy of the materials (information or software) on Community First High School's web site for personal, non-commercial transitory viewing only. This is the grant of a license, not a transfer of title, and under this license you may not:

    modify or copy the materials;

    use the materials for any commercial purpose, or for any public display (commercial or non-commercial);

    attempt to decompile or reverse engineer any software contained on Community First High School's web site;

    remove any copyright or other proprietary notations from the materials; or

    transfer the materials to another person or “mirror” the materials on any other server.

2. This license shall automatically terminate if you violate any of these restrictions and may be terminated by Community First High School at any time. Upon terminating your viewing of these materials or upon the termination of this license, you must destroy any downloaded materials in your possession whether in electronic or printed format.

3. Disclaimer

    The materials on Community First High School's web site are provided “as is”. Community First High School makes no warranties, expressed or implied, and hereby disclaims and negates all other warranties, including without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or other violation of rights. Further, Community First High School does not warrant or make any representations concerning the accuracy, likely results, or reliability of the use of the materials on its Internet web site or otherwise relating to such materials or on any sites linked to this site.

4. Limitations

In no event shall Community First High School or its suppliers be liable for any damages (including, without limitation, damages for loss of data or profit, or due to business interruption,) arising out of the use or inability to use the materials on Community First High School Internet site, even if Community First High School or a Community First High School authorized representative has been notified orally or in writing of the possibility of such damage. Because some jurisdictions do not allow limitations on implied warranties, or limitations of liability for consequential or incidental damages, these limitations may not apply to you.

5. Revisions and Errata

The materials appearing on Community First High School's web site could include technical, typographical, or photographic errors. Community First High School does not warrant that any of the materials on its web site are accurate, complete, or current. Community First High School may make changes to the materials contained on its web site at any time without notice. Community First High School does not, however, make any commitment to update the materials.

6. Links

Community First High School has not reviewed all of the sites linked to its Internet web site and is not responsible for the contents of any such linked site. The inclusion of any link does not imply endorsement by Community First High School of the site. Use of any such linked web site is at the user’s own risk.

7. Site Terms of Use Modifications

Community First High School may revise these terms of use for its web site at any time without notice. By using this web site you are agreeing to be bound by the then current version of these Terms and Conditions of Use.

8. Governing Law

Any claim relating to Community First High School's web site shall be governed by the laws of the State of Louisiana without regard to its conflict of law provisions.

General Terms and Conditions applicable to Use of a Web Site.

‍