KCA Privacy Practices

How the Kansas Chiropractic Association collects, uses, shares, and safeguards your information.

Effective date: October 29, 2026

The Kansas Chiropractic Association (“KCA,” “we,” “us,” or “our”) respects your privacy. This policy explains what information we collect, how we use and disclose it, how long we keep it, and the choices available to you when you use KCA services.

1. Scope

This policy applies to kansaschiro.com and other websites, pages, forms, social-media profiles, and digital services operated by KCA; the KCA Connect mobile application; KCA Exchange (the member forum); and information KCA receives by email, telephone, mail, in person, or through membership, event, education, advocacy, and business activities. Together, these are referred to as the “Services.”

Some Services direct you to a third party, such as CE21, an app store, a payment processor, the U.S. Census Bureau, Open States/Plural Open, or an external website. A third party’s own privacy policy applies to information it collects directly from you or receives while providing its service.

2. Information We Collect

Information you provide

Contact and identity information, such as your name, mailing address, business address, email address, telephone number, photograph, and account or customer identifiers.
Membership and professional information, such as membership category and status, chiropractic license and practice information, employer or practice affiliation, district, committee, leadership, and directory information.
Transaction and participation information, such as membership purchases or renewals, event registrations, continuing-education activity, orders, sponsorships, donations, and communications with KCA. Payment credentials may be collected directly by CE21 or another payment processor rather than by KCA.
Communications and submissions, such as messages, survey responses, award nominations, classified advertisements, applications, documents, and requests for assistance.
Forum information, such as posts, replies, messages with moderators, uploaded images and files, profile details, and your acceptance of the Forum User Agreement and Antitrust Notice, as described in Section 5.
Optional demographic, accessibility, or accommodation information that you choose to provide.
Employment, contractor, or payee information, including tax or government identification information when reasonably required for employment, contracting, payment, or legal compliance. KCA does not request such identifiers merely to use the KCA Connect app.

Information collected automatically

When you use the Services, KCA and its service providers may automatically process technical and usage information, including:

Internet Protocol (IP) address, date and time, requested page or endpoint, referring page, browser type, device type, operating system, language, and approximate country or region derived from network information.
Website activity such as pages viewed, links selected, session activity, and campaign or referral information.
Mobile-app information such as app version, device model, operating system, push-notification permission and delivery status, push token, app session count and duration, and notification interactions.
Cookies, local storage, mobile application storage, and similar technologies used for authentication, security, preferences, analytics, performance, and app functionality.

Information received from others

KCA may receive information from CE21, event and education providers, payment processors, licensing or public records, business partners, association vendors, and other sources when permitted by law. This may include membership status, customer identifiers, course or registration records, transaction status, professional information, and updated contact information.

3. KCA Connect Mobile App

Member verification through CE21

KCA Connect does not maintain a separate traditional KCA password account. When you choose to verify membership, the app sends the CE21 email address and password you enter over an encrypted connection to KCA’s WordPress server. KCA’s server relays those credentials to CE21 to authenticate the account and determine whether the account has an active qualifying KCA membership.

KCA uses the password only to complete that verification request and does not intentionally store it in the app, the KCA membership database, analytics, or application logs. CE21 processes the credentials under its own privacy and security practices. KCA receives membership-related information returned by CE21, which may include your name, CE21 customer identifier, membership group, membership status, and membership end date.

For an active qualifying member, KCA issues a signed member token that allows the app to request member-only WordPress content. The token is a bearer credential, expires after 72 hours, and is stored on the device with membership status information. The app treats membership verification as current for up to 72 hours. Signing out removes the stored membership record and member-scoped caches.

Information stored on the device

To provide expected app functionality and limited offline access, KCA Connect may store the following on your device:

Membership status, member name, CE21 customer identifier, membership details, verification time, and the time-limited member token.
Cached website content, including member-only article content retrieved while an active member token is available.
Your notification history and notification-related data received by the app.
A successful legislator lookup, including the address and returned legislator list, for up to 30 days as described below.
Other ordinary content caches and preferences used to improve loading and offline behavior.

You can remove member-scoped stored information by signing out. You can remove a saved legislator lookup by selecting “Change address” or signing out. Uninstalling the app removes its local app data, subject to the device platform’s backup, restore, and operating-system behavior.

Push notifications and OneSignal

KCA Connect uses OneSignal to deliver and measure push notifications. When the native app initializes OneSignal, OneSignal and the Apple or Google push-notification service may process information such as the push token, notification permission and subscription status, first and last app session time, session count and duration, app version, device operating system, device model, device language, time zone, country, cellular carrier, IP address, and notification delivery or interaction information. KCA does not intentionally send your CE21 password or legislator-lookup address to OneSignal.

You can control whether KCA Connect may display notifications through your device settings. Disabling notifications may not delete information previously processed by OneSignal; contact KCA to request assistance with a privacy request involving the app’s notification record.

Calendar, telephone, email, browser, and sharing actions

KCA Connect requests calendar access only when needed to add an event at your direction. When you choose to call, email, open a website, contact a legislator, or share content, the app hands that action to your device, mail provider, telephone provider, browser, calendar provider, or sharing service. Those providers may process information under their own privacy policies.

4. Find Your Legislator

When you choose to use Find Your Legislator on kansaschiro.com or in KCA Connect, KCA processes the street address you enter to provide the feature. The address is sent securely in the request body to KCA’s website and then to the U.S. Census Geocoder, which converts it to latitude and longitude. KCA sends only those coordinates—not the street address—to Open States/Plural Open to identify the elected officials who represent that location.

KCA does not intentionally place the address in the lookup URL, store the street address or an address-derived lookup key in the WordPress lookup database, or cache the lookup response. KCA uses the address only to perform the lookup. Standard network and security infrastructure may process the IP address and ordinary request metadata, but the lookup is designed so the street address is not part of the URL or ordinary access-log request line.

KCA Connect stores a successful address and its legislator results on your device for up to 30 days so you do not need to enter it again. You can remove the saved information sooner by selecting “Change address” or signing out.

5. KCA Exchange

KCA Exchange (the “Forum”) is a private discussion forum for eligible KCA members at exchange.kansaschiro.com. It is available on the KCA website and in KCA Connect. The Forum runs on Discourse software, and Communiteq hosts it for KCA. Your use of the Forum is also governed by the Forum User Agreement, which you accept when you first sign in.

Signing in through CE21

You sign in to the Forum with your CE21 account. The Forum sends you to CE21’s sign-in page, and KCA and the Forum do not receive your CE21 password. After you sign in, CE21 confirms whether you hold an eligible, active KCA membership and sends the Forum your name, email address, and CE21 customer identifier. The Forum uses this information to create and maintain your Forum account and to confirm your eligibility each time you sign in.

Information the Forum collects

Account and profile information: name, email address, username, CE21 customer identifier, student-member designation, any photo or biography you add, and the date you accepted the Forum User Agreement and Antitrust Notice.
Content you post: topics, replies, edits, uploaded images and files, reactions, poll responses, reports you submit about other content, and messages you exchange with Forum moderators. Members cannot send personal messages to each other.
Activity and preferences: topics and posts you view, reading time, bookmarks, searches within the Forum, notification and email settings, and members you choose to ignore or mute.
Technical information: IP address, browser and device type, sign-in and session times, and security logs. The Forum uses cookies to keep you signed in and to protect your session.

Who can see your Forum information

Your name, profile, student designation (if any), and posts are visible to other signed-in Forum members. The Forum is not open to the public, and search engines cannot index it. Forum moderators and KCA administrators can see account information, including email and IP addresses. They can also see Forum content, including edited, hidden, and deleted versions and messages exchanged with moderators.

The Forum User Agreement prohibits sharing Forum content outside the Forum without permission. However, KCA cannot prevent every member from copying or disclosing content. Do not post anything you would not want disclosed, and never post information that could identify a patient.

How KCA uses Forum information

KCA uses Forum information to operate the Forum; verify eligibility; send the notifications and email summaries you choose; moderate content and enforce the Forum User Agreement; respond to legal and regulatory requests; and protect KCA, members, and the public. The Forum automatically screens posts for antitrust-sensitive terms, potentially identifiable patient information, and abusive language, and may hold a post for moderator review before it appears. As described in the Forum User Agreement, KCA may also use posted content for association purposes, such as newsletters and educational materials.

The Forum in KCA Connect

KCA Connect opens the Forum in a browser built into the app. The Forum and CE21 sign-in pages load directly from those services. When you sign in with your CE21 password, CE21 also passes you briefly through kansaschiro.com, which signs you in to the KCA website as part of the same step. KCA Connect does not read or store what you type on the CE21 sign-in page. The sign-in cookies for the Forum, CE21, and the KCA website are stored in the app’s browser storage on your device so you stay signed in. Signing out of KCA Connect or uninstalling the app removes them, subject to device-platform behavior.

When your membership ends

Forum access requires an active, eligible membership. Eligibility is checked each time you sign in, and Forum sessions expire after no more than seven days, so access ends within about a week after a membership lapses. Content you posted remains visible to active members.

Closing your Forum account

You may ask KCA to close your Forum account by emailing kca@kansaschiro.com. KCA closes an account by de-identifying it. Your name, email address, username, profile, and other personal account details are removed or replaced, and your posts remain on the Forum without identifying you. As described in the Forum User Agreement, KCA does not delete posted content on request, although moderators may remove content under the Agreement. KCA may retain content, including earlier versions, when needed for moderation, disputes, or legal or regulatory requests. If you remain an eligible member and sign in again, a new Forum account is created.

KCA keeps a separate record of each closed account, limited to your name, email address, CE21 customer identifier, and your acceptance of the Forum User Agreement and Antitrust Notice, for five years after the account is closed, and then deletes it.

6. Website Cookies and Analytics

KCA websites use cookies and similar technologies for functions such as sessions, authentication, security, preferences, performance, and analytics. Some cookies last only for a browser session; others may remain until they expire or you delete them.

KCA uses Google Analytics to understand aggregate website use and improve the website. Google Analytics may process online identifiers, cookie or device information, IP-derived location information, browser and device characteristics, pages viewed, referral information, and interactions with the website. KCA configures its custom analytics events not to include a legislator address, CE21 password, or member token.

Most browsers let you block or delete cookies. Blocking cookies may affect sign-in, preferences, analytics, and other website functions. Your browser, device, and applicable Google controls may provide additional privacy choices.

7. How We Use Information

KCA uses information for purposes including:

Providing, administering, maintaining, securing, and improving the Services.
Processing membership, event, education, product, sponsorship, directory, advocacy, and other association activities.
Authenticating members and providing member-only content.
Communicating about transactions, membership, programs, legislative matters, services, security, support, and association news.
Responding to questions, requests, applications, and complaints.
Maintaining professional and member directories when applicable.
Measuring and improving website, app, campaign, event, and service performance.
Detecting, investigating, and preventing fraud, abuse, security incidents, and unlawful activity.
Complying with legal, tax, accounting, contractual, audit, insurance, and recordkeeping obligations; establishing or defending legal claims; and protecting KCA, members, users, and the public.

8. How We Disclose Information

KCA may disclose information in the following circumstances:

Service providers. Vendors that help KCA provide hosting, WordPress services, membership and learning services, payment processing, event registration, email, mail, notifications, analytics, security, professional services, and customer support may process information for those purposes.
CE21. KCA uses CE21 for membership, learning, events, authentication, and related association services. The KCA Connect credential relay and membership verification are described above.
Legislator lookup providers. The U.S. Census Geocoder receives the entered address; Open States/Plural Open receives only the resulting coordinates.
Forum hosting and members. Communiteq hosts the Forum and processes Forum information on KCA’s behalf. Forum notification emails are sent through Communiteq’s email servers. Your Forum profile and posts are visible to other Forum members, as described in Section 5.
Directories and association activities. Information you authorize or reasonably expect to be public—such as directory listings, leadership roles, award information, sponsorship information, event participation, or a submitted classified advertisement—may be published or shared with relevant audiences.
Legal and safety. KCA may disclose information when reasonably necessary to comply with law, regulation, subpoena, court order, or legal process; protect rights, property, safety, and security; investigate fraud or abuse; or enforce agreements.
Organizational transactions. Information may be transferred as part of a merger, reorganization, financing, sale of assets, or similar organizational transaction, subject to appropriate protections.
With your direction or consent. KCA may disclose information when you ask us to do so or give consent.

KCA does not sell or rent member email addresses. KCA may send information about member benefits or third-party offerings on behalf of a partner, use vendors to deliver those communications, or disclose information when otherwise described in this policy or authorized by you.

9. Public and Member Directories

KCA may publish professional directory information so patients, members, or the public can locate or learn about participating chiropractors and association leaders. Directory information may include a name, professional title, practice name, business contact information, location, photograph, district, committee or leadership role, and other approved professional information. Contact KCA if you need to correct directory information or ask whether an available field can be withheld.

10. Communications and Marketing Choices

You may unsubscribe from marketing email by using the unsubscribe link in the message or contacting KCA. KCA may still send non-marketing communications such as transaction confirmations, membership or account notices, security messages, legal notices, and responses to your requests. You can manage mobile push notifications in device settings.

11. Retention

KCA retains personal information for as long as reasonably necessary for the purposes described in this policy, including to provide Services, maintain business and association records, meet legal and contractual obligations, resolve disputes, enforce agreements, and protect security. Retention depends on the type of information and the context in which it was collected.

The website legislator lookup does not intentionally retain the street address or an address-derived lookup key in its WordPress lookup database.
KCA Connect retains a successful legislator address and results on the device for up to 30 days, unless removed sooner by Change address, sign-out, or uninstall.
A KCA Connect member token expires after 72 hours. Related local membership information remains on the device until it is removed through app controls, application data is cleared, or the app is uninstalled, subject to platform behavior.

Forum posts and account records are kept while the Forum operates, subject to the de-identification described in Section 5. Earlier and deleted versions of posts may be kept as described in the Forum User Agreement.

Forum email logs and search logs are deleted after 90 days. The IP addresses stored with your Forum account are kept while the account exists and are removed when it is de-identified. Security and moderation records are kept as long as needed to protect the Forum and handle disputes. Communiteq makes daily backups of the Forum and keeps them under its own backup schedule.

When a Forum account is closed, a record of the member’s name, email address, CE21 customer identifier, and acceptance of the Forum User Agreement and Antitrust Notice is kept for five years after closure and then deleted.

Service providers, including CE21, OneSignal, Communiteq, Google, Apple, and hosting or security providers, retain information under their own agreements, policies, settings, and legal obligations.

When KCA deletes information, it may remain for a limited period in backups, security records, legal records, or archives where deletion is not immediately practical or where continued retention is permitted or required by law.

12. Security

KCA uses reasonable administrative, technical, and physical safeguards designed to protect information. These include encrypted network connections for the Services, access controls, and security and monitoring measures appropriate to the nature of the information. No method of transmission or storage is completely secure, and KCA cannot guarantee absolute security.

Protect your CE21 credentials and device, use a unique password, do not share the member token, sign out when appropriate, and notify KCA or CE21 promptly if you believe an account, credential, or device has been compromised.

13. Children

The Services are intended for chiropractic professionals, students, association participants, and adults seeking association information. They are not directed to children under 13, and KCA does not knowingly collect personal information online from a child under 13 without authorization required by applicable law. Contact KCA if you believe a child has provided personal information inappropriately.

14. Your Privacy Choices and Requests

Depending on your relationship with KCA and applicable law, you may ask KCA to provide access to, correct, or delete personal information; limit or object to certain processing; withdraw consent where processing is based on consent; or provide information about applicable disclosures. KCA may need to verify your identity and may retain information when permitted or required by law. KCA will not discriminate against you for exercising a privacy right provided by applicable law. Requests about KCA Exchange are handled as described in Section 5. KCA closes a Forum account by de-identifying it, and posted content is not deleted on request.

To make a request, email kca@kansaschiro.com or use the contact information below. Clearly describe the information or service involved. For information held directly by CE21, OneSignal, Apple, Google, the U.S. Census Bureau, Open States/Plural Open, or another independent provider, you may also need to contact that provider.

15. External Links and Third-Party Services

The Services contain links to external websites, applications, stores, social-media platforms, mail and telephone providers, and other third-party services. KCA does not control their privacy practices. Review the privacy information of the service you choose to use.

16. Processing in the United States

KCA is based in Kansas, and the Services are operated primarily in the United States. Information may be processed in the United States or other locations where KCA’s service providers operate. Privacy laws in those locations may differ from the laws where you live. KCA Exchange is hosted by Communiteq in a data center located in the United States. Communiteq stores offsite backup copies of the Forum with a backup provider in the Netherlands.

17. Changes to This Policy

KCA may update this policy as its Services, vendors, practices, or legal obligations change. KCA will post the revised policy at kansaschiro.com/kca-privacy-practices/ and update the effective date. When required, KCA will provide additional notice or request consent.

18. Contact Information

For questions, complaints, or privacy requests, contact:

Kansas Chiropractic Association
Attn: Privacy Practices
800 SW Jackson, Suite 1416C
Topeka, KS 66612
Telephone: (785) 233-0697
Email: kca@kansaschiro.com