Privacy Policy

Effective Date: July 14, 2026

1. Who We Are

United Keetoowah Band Federal Corporation (“UKBFC,” “we,” “us,” or “our”) is a federally chartered corporation organized as the economic development arm of the United Keetoowah Band of Cherokee Indians in Oklahoma (the “Tribe”). UKBFC is a separate legal entity from the Tribe. UKBFC operates and oversees a family of business units, each of which may maintain its own website. This Privacy Policy governs personal information collected through those websites, as listed in Section 2.

2. Sites Covered by This Policy

This Privacy Policy applies to the following websites, collectively referred to as the “Sites”:

Each business unit operates under UKBFC. Where a specific business unit has data practices that differ from the general practices described here (for example, health information handling or payment processing), those differences are called out in the relevant section below.

3. Information We Collect

3.1 Information You Provide Directly

We collect information you submit directly to us through the Sites, including:

  • Contact form submissions (name, email address, phone number, message content, and any other information you choose to include)
  • Job application information submitted through our Paycom-hosted application system, accessed via embedded links on our business unit sites
  • Booking and reservation information submitted through third-party booking systems (see Section 4)
  • Event ticket and order information submitted through third-party ticketing systems (see Section 4)

3.2 Health Information (EchotaBehavioralHealth.com and EchotaWellness.com)

Through EchotaBehavioralHealth.com and EchotaWellness.com, we collect contact information (such as name, phone number, and email address) to schedule referral and intake appointments. Beyond this initial contact information, protected health information (PHI) is managed internally using HIPAA-compliant third-party software, separate from the public website. We apply Health Insurance Portability and Accountability Act (HIPAA) standards to the handling of all PHI, regardless of where it is collected.

3.3 Information Collected Automatically

When you visit the Sites, we and our service providers automatically collect certain information through cookies and similar tracking technologies, including:

  • Google — site analytics and related services
  • Meta — site analytics and advertising-related services

This may include your IP address, browser type, device information, pages viewed, referring website, and interaction data. You can control cookies through your browser settings; disabling cookies may affect functionality of the Sites.

4. Payment Processing

Certain business units process payments through third-party platforms, which handle payment data directly. UKBFC does not store full payment card information on our servers.

These providers have their own privacy policies governing the information they collect and process. We encourage you to review those policies directly.

5. How We Use Information

We use the information we collect to:

  • Respond to inquiries submitted through contact forms
  • Process and evaluate job applications
  • Process bookings, reservations, ticket orders, and related payments through our third-party providers
  • Operate, maintain, and improve the Sites
  • Communicate with you about our business units’ services
  • Meet legal, regulatory, and contractual obligations, including HIPAA obligations where applicable

6. Who We Share Information With

We share personal information with the following categories of service providers and parties, limited to what is necessary for the purposes described:

  • Website hosting and management: WordPress, GoDaddy
  • Design and creative production: BuzzCube
  • SEO and web services: Bliss Web Solutions
  • Recruiting and applicant tracking: Paycom
  • Analytics and advertising: Google, Meta
  • Booking and payment processing: Odoo, Stripe, TheTicketing.Co

Business information and employee information may also be shared with the United Keetoowah Band of Cherokee Indians where appropriate in connection with UKBFC’s role as the Tribe’s economic development arm. We do not sell personal information to third parties.

7. Children’s Privacy

The Sites are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us using the information in Section 11 and we will take appropriate steps to address it.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, taking into account the differing operational, legal, and regulatory requirements of UKBFC’s various business units. Retention periods vary by business unit and data type.

9. Your Choices

If you would like to request access to, correction of, or deletion of your personal information, contact us using the information in Section 11. We will respond to reasonable requests consistent with our legal and contractual obligations.

10. Governing Law

This Policy is governed by the tribal law of the United Keetoowah Band of Cherokee Indians in Oklahoma and applicable United States federal law and regulations.

11. Contact Us

Questions about this Privacy Policy or requests regarding your personal information can be directed to:

Jeremy Combs, Marketing Manager
United Keetoowah Band Federal Corporation
Email: jcombs@ukb-nsn.gov
Mailing Address: PO Box 1245, Tahlequah, OK 74465

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.