KCA Privacy Practices

Website, Member Services, and KCA Connect Mobile App

Effective date: July 16, 2026

The Kansas Chiropractic Association (“KCA,” “we,” “us,” or “our”) respects your privacy. This policy explains what information we collect, how we use and disclose it, how long we keep it, and the choices available to you when you use KCA services.

1. Scope

This policy applies to kansaschiro.com and other websites, pages, forms, social-media profiles, and digital services operated by KCA; the KCA Connect mobile application; and information KCA receives by email, telephone, mail, in person, or through membership, event, education, advocacy, and business activities. Together, these are referred to as the “Services.”

Some Services direct you to a third party, such as CE21, an app store, a payment processor, the U.S. Census Bureau, Open States/Plural Open, or an external website. A third party’s own privacy policy applies to information it collects directly from you or receives while providing its service.

2. Information We Collect

Information you provide

  • Contact and identity information, such as your name, mailing address, business address, email address, telephone number, photograph, and account or customer identifiers.
  • Membership and professional information, such as membership category and status, chiropractic license and practice information, employer or practice affiliation, district, committee, leadership, and directory information.
  • Transaction and participation information, such as membership purchases or renewals, event registrations, continuing-education activity, orders, sponsorships, donations, and communications with KCA. Payment credentials may be collected directly by CE21 or another payment processor rather than by KCA.
  • Communications and submissions, such as messages, survey responses, award nominations, classified advertisements, applications, documents, and requests for assistance.
  • Optional demographic, accessibility, or accommodation information that you choose to provide.
  • Employment, contractor, or payee information, including tax or government identification information when reasonably required for employment, contracting, payment, or legal compliance. KCA does not request such identifiers merely to use the KCA Connect app.

Information collected automatically

When you use the Services, KCA and its service providers may automatically process technical and usage information, including:

  • Internet Protocol (IP) address, date and time, requested page or endpoint, referring page, browser type, device type, operating system, language, and approximate country or region derived from network information.
  • Website activity such as pages viewed, links selected, session activity, and campaign or referral information.
  • Mobile-app information such as app version, device model, operating system, push-notification permission and delivery status, push token, app session count and duration, and notification interactions.
  • Cookies, local storage, mobile application storage, and similar technologies used for authentication, security, preferences, analytics, performance, and app functionality.

Information received from others

KCA may receive information from CE21, event and education providers, payment processors, licensing or public records, business partners, association vendors, and other sources when permitted by law. This may include membership status, customer identifiers, course or registration records, transaction status, professional information, and updated contact information.

3. KCA Connect Mobile App

Member verification through CE21

KCA Connect does not maintain a separate traditional KCA password account. When you choose to verify membership, the app sends the CE21 email address and password you enter over an encrypted connection to KCA’s WordPress server. KCA’s server relays those credentials to CE21 to authenticate the account and determine whether the account has an active qualifying KCA membership.

KCA uses the password only to complete that verification request and does not intentionally store it in the app, the KCA membership database, analytics, or application logs. CE21 processes the credentials under its own privacy and security practices. KCA receives membership-related information returned by CE21, which may include your name, CE21 customer identifier, membership group, membership status, and membership end date.

For an active qualifying member, KCA issues a signed member token that allows the app to request member-only WordPress content. The token is a bearer credential, expires after 72 hours, and is stored on the device with membership status information. The app treats membership verification as current for up to 72 hours. Signing out removes the stored membership record and member-scoped caches.

Information stored on the device

To provide expected app functionality and limited offline access, KCA Connect may store the following on your device:

  • Membership status, member name, CE21 customer identifier, membership details, verification time, and the time-limited member token.
  • Cached website content, including member-only article content retrieved while an active member token is available.
  • Your notification history and notification-related data received by the app.
  • A successful legislator lookup, including the address and returned legislator list, for up to 30 days as described below.
  • Other ordinary content caches and preferences used to improve loading and offline behavior.

You can remove member-scoped stored information by signing out. You can remove a saved legislator lookup by selecting “Change address” or signing out. Uninstalling the app removes its local app data, subject to the device platform’s backup, restore, and operating-system behavior.

Push notifications and OneSignal

KCA Connect uses OneSignal to deliver and measure push notifications. When the native app initializes OneSignal, OneSignal and the Apple or Google push-notification service may process information such as the push token, notification permission and subscription status, first and last app session time, session count and duration, app version, device operating system, device model, device language, time zone, country, cellular carrier, IP address, and notification delivery or interaction information. KCA does not intentionally send your CE21 password or legislator-lookup address to OneSignal.

You can control whether KCA Connect may display notifications through your device settings. Disabling notifications may not delete information previously processed by OneSignal; contact KCA to request assistance with a privacy request involving the app’s notification record.

Calendar, telephone, email, browser, and sharing actions

KCA Connect requests calendar access only when needed to add an event at your direction. When you choose to call, email, open a website, contact a legislator, or share content, the app hands that action to your device, mail provider, telephone provider, browser, calendar provider, or sharing service. Those providers may process information under their own privacy policies.

4. Find Your Legislator

When you choose to use Find Your Legislator on kansaschiro.com or in KCA Connect, KCA processes the street address you enter to provide the feature. The address is sent securely in the request body to KCA’s website and then to the U.S. Census Geocoder, which converts it to latitude and longitude. KCA sends only those coordinates—not the street address—to Open States/Plural Open to identify the elected officials who represent that location.

KCA does not intentionally place the address in the lookup URL, store the street address or an address-derived lookup key in the WordPress lookup database, or cache the lookup response. KCA uses the address only to perform the lookup. Standard network and security infrastructure may process the IP address and ordinary request metadata, but the lookup is designed so the street address is not part of the URL or ordinary access-log request line.

KCA Connect stores a successful address and its legislator results on your device for up to 30 days so you do not need to enter it again. You can remove the saved information sooner by selecting “Change address” or signing out.

5. Website Cookies and Analytics

KCA websites use cookies and similar technologies for functions such as sessions, authentication, security, preferences, performance, and analytics. Some cookies last only for a browser session; others may remain until they expire or you delete them.

KCA uses Google Analytics to understand aggregate website use and improve the website. Google Analytics may process online identifiers, cookie or device information, IP-derived location information, browser and device characteristics, pages viewed, referral information, and interactions with the website. KCA configures its custom analytics events not to include a legislator address, CE21 password, or member token.

Most browsers let you block or delete cookies. Blocking cookies may affect sign-in, preferences, analytics, and other website functions. Your browser, device, and applicable Google controls may provide additional privacy choices.

6. How We Use Information

KCA uses information for purposes including:

  • Providing, administering, maintaining, securing, and improving the Services.
  • Processing membership, event, education, product, sponsorship, directory, advocacy, and other association activities.
  • Authenticating members and providing member-only content.
  • Communicating about transactions, membership, programs, legislative matters, services, security, support, and association news.
  • Responding to questions, requests, applications, and complaints.
  • Maintaining professional and member directories when applicable.
  • Measuring and improving website, app, campaign, event, and service performance.
  • Detecting, investigating, and preventing fraud, abuse, security incidents, and unlawful activity.
  • Complying with legal, tax, accounting, contractual, audit, insurance, and recordkeeping obligations; establishing or defending legal claims; and protecting KCA, members, users, and the public.

7. How We Disclose Information

KCA may disclose information in the following circumstances:

  • Service providers. Vendors that help KCA provide hosting, WordPress services, membership and learning services, payment processing, event registration, email, mail, notifications, analytics, security, professional services, and customer support may process information for those purposes.
  • KCA uses CE21 for membership, learning, events, authentication, and related association services. The KCA Connect credential relay and membership verification are described above.
  • Legislator lookup providers. The U.S. Census Geocoder receives the entered address; Open States/Plural Open receives only the resulting coordinates.
  • Directories and association activities. Information you authorize or reasonably expect to be public—such as directory listings, leadership roles, award information, sponsorship information, event participation, or a submitted classified advertisement—may be published or shared with relevant audiences.
  • Legal and safety. KCA may disclose information when reasonably necessary to comply with law, regulation, subpoena, court order, or legal process; protect rights, property, safety, and security; investigate fraud or abuse; or enforce agreements.
  • Organizational transactions. Information may be transferred as part of a merger, reorganization, financing, sale of assets, or similar organizational transaction, subject to appropriate protections.
  • With your direction or consent. KCA may disclose information when you ask us to do so or give consent.

KCA does not sell or rent member email addresses. KCA may send information about member benefits or third-party offerings on behalf of a partner, use vendors to deliver those communications, or disclose information when otherwise described in this policy or authorized by you.

8. Public and Member Directories

KCA may publish professional directory information so patients, members, or the public can locate or learn about participating chiropractors and association leaders. Directory information may include a name, professional title, practice name, business contact information, location, photograph, district, committee or leadership role, and other approved professional information. Contact KCA if you need to correct directory information or ask whether an available field can be withheld.

9. Communications and Marketing Choices

You may unsubscribe from marketing email by using the unsubscribe link in the message or contacting KCA. KCA may still send non-marketing communications such as transaction confirmations, membership or account notices, security messages, legal notices, and responses to your requests. You can manage mobile push notifications in device settings.

10. Retention

KCA retains personal information for as long as reasonably necessary for the purposes described in this policy, including to provide Services, maintain business and association records, meet legal and contractual obligations, resolve disputes, enforce agreements, and protect security. Retention depends on the type of information and the context in which it was collected.

  • The website legislator lookup does not intentionally retain the street address or an address-derived lookup key in its WordPress lookup database.
  • KCA Connect retains a successful legislator address and results on the device for up to 30 days, unless removed sooner by Change address, sign-out, or uninstall.
  • A KCA Connect member token expires after 72 hours. Related local membership information remains on the device until it is removed through app controls, application data is cleared, or the app is uninstalled, subject to platform behavior.
  • Service providers, including CE21, OneSignal, Google, Apple, and hosting or security providers, retain information under their own agreements, policies, settings, and legal obligations.

When KCA deletes information, it may remain for a limited period in backups, security records, legal records, or archives where deletion is not immediately practical or where continued retention is permitted or required by law.

11. Security

KCA uses reasonable administrative, technical, and physical safeguards designed to protect information. These include encrypted network connections for the Services, access controls, and security and monitoring measures appropriate to the nature of the information. No method of transmission or storage is completely secure, and KCA cannot guarantee absolute security.

Protect your CE21 credentials and device, use a unique password, do not share the member token, sign out when appropriate, and notify KCA or CE21 promptly if you believe an account, credential, or device has been compromised.

12. Children

The Services are intended for chiropractic professionals, students, association participants, and adults seeking association information. They are not directed to children under 13, and KCA does not knowingly collect personal information online from a child under 13 without authorization required by applicable law. Contact KCA if you believe a child has provided personal information inappropriately.

13. Your Privacy Choices and Requests

Depending on your relationship with KCA and applicable law, you may ask KCA to provide access to, correct, or delete personal information; limit or object to certain processing; withdraw consent where processing is based on consent; or provide information about applicable disclosures. KCA may need to verify your identity and may retain information when permitted or required by law. KCA will not discriminate against you for exercising a privacy right provided by applicable law.

To make a request, email kca@kansaschiro.com or use the contact information below. Clearly describe the information or service involved. For information held directly by CE21, OneSignal, Apple, Google, the U.S. Census Bureau, Open States/Plural Open, or another independent provider, you may also need to contact that provider.

14. External Links and Third-Party Services

The Services contain links to external websites, applications, stores, social-media platforms, mail and telephone providers, and other third-party services. KCA does not control their privacy practices. Review the privacy information of the service you choose to use.

15. Processing in the United States

KCA is based in Kansas, and the Services are operated primarily in the United States. Information may be processed in the United States or other locations where KCA’s service providers operate. Privacy laws in those locations may differ from the laws where you live.

16. Changes to This Policy

KCA may update this policy as its Services, vendors, practices, or legal obligations change. KCA will post the revised policy at kansaschiro.com/kca-privacy-practices/ and update the effective date. When required, KCA will provide additional notice or request consent.

17. Contact Information

For questions, complaints, or privacy requests, contact:

Kansas Chiropractic Association
Attn: Privacy Practices
800 SW Jackson, Suite 1416C
Topeka, KS 66612
Telephone: (785) 233-0697
Email: kca@kansaschiro.com