Information Gathered from Third Parties
We may obtain User Information from certain third-party sources, such as public databases, social media platforms, third-party data brokers and our joint marketing and resale partners. We take steps to ensure that such third parties are legally permitted or required to disclose User Information to Us, provided, however, that We are not responsible for the accuracy or use of such User Information. Our use and disclosure of User Information is described further elsewhere in this Notice (see Use of User Information and Disclosure of User Information).
Website Usage Data
We may automatically collect User Information about your interaction with Our website, using usage data tracking and analytics technologies, like cookies and clear gifs. This User Information provides information about how users interact with Our website, which allows Our sales, marketing, and product management teams to, among other things, prepare reports on use of the website, analyze website insights, create new features or functionalities for or further develop the website and enrich the website user interface and experience. Additional information about the methods We use to automatically collect User Information with respect to Our website, as well as users’ choices with respect to Our collection of User Information, is described elsewhere in this Notice (see Cookies).
Information Collection by Third Parties
In the course of accessing or using Our website, procuring or using of Our services, or engaging in any live, mailed, or electronic communications with Us, users may provide User Information to third parties or third parties may use information collection or tracking technologies to collect User Information about users. These third parties may include:
- The users’ electronic communication devices (e.g., phones, tablets, laptops, and desktop computers) or telecommunications service provider;
- The manufacturers, distributors, or retailers of the users’ electronic communication devices, as well the parties who may control or access the users’ electronic communication devices, such as their employers;
- The developers of the operating system or other applications operating on the users’ electronic communication devices or with which the users interact using their electronic communication devices, including the Internet browsers through which users access Our website; or
- The persons responsible for developing, hosting or otherwise making available webpages and associated content, including the third parties of such persons, to the extent users interact with links or plug-ins to other webpages and associated content through or in connection with Our website.
The User Information these third parties collect may be associated with users directly, or the third parties may collect User Information about particular users over time and across different websites, apps, and other online or offline services or interactions.
For example, Our website may include social network sharing plug-ins or widgets that may provide User Information to the associated social networks or third parties regarding users’ interaction with our website, even if such users do not click on or otherwise interact with the plug-in or widget. When a user loads a page on Our website that has a social media plug-in from a third-party site or service, such as a “Like” or “Share” button, the user is also loading content from the third-party site or service, and the information transmitted to such third-party site or service may include identifiers assigned by the site or service, such as browser type, operating system, device type, IP address, and the URL of the web page where the plug-in or widget appears. In addition, third-party sites or services may use information collection or tracking technologies, like cookies, to collect User Information about users for targeted online marketing and other purposes.
We do not control these third parties’ information collection or tracking technologies, We do not accept responsibility or liability for the conduct of such third parties, and this Notice does not detail the data handling policies and practices of such third parties. If users have any questions about the third parties described in this section of the Notice (Information Collection by Third Parties), users should contact the relevant third party directly.
Use of User Information
We use User Information that We collect, as outlined elsewhere in this notice (see Collection of User Information), for the following purposes:
- Website and services: To provide, improve, and customize Our website and services, which furthers our legitimate interest in operating Our business and communicating with the public regarding Our website and services; supporting or provisioning users’ procurement, access to, and use of Our website or services; analyzing, understanding, and obtaining insights into how Our website and services are being used by users and how users are communicating with Us; benchmarking, auditing, developing, and improving Our website, services, and communications; monitoring the health, performance, and security of Our website and services; and exploring and developing new methods of developing and growing Our business.
- Sales and marketing: To deliver and facilitate communications about Our business and services, cybersecurity-related developments, and other relevant information in forms such as surveys, alerts or notifications, newsletters, invitations, and announcements. We will normally ask users to agree—or “opt-in”—to receiving sales and marketing communications, but sometimes, where users have previously communicated with Us or requested information from Us, we will send such communications about the same or similar communication or information after users have the option and elect not to opt-out of receiving such communications. Additional information about the sales and marketing communications opt-out process is described elsewhere in this Notice (see Sales and Marketing Communications Opt-Out).
- Legal interests: To comply with, conform to the requirements of, or carry out Our obligations and enforce Our rights arising under any applicable law or legal agreements between Us and users or the persons on whose behalf users act, such as users’ employers, to the extent We believe necessary or appropriate in the relevant circumstances. We also use User Information to further our legitimate interest in preventing, detecting, and deterring fraudulent activities, misuse of our website and services, or other inappropriate conduct and to promote the health, safety, and security of Our users, customers, website, and services, and other third parties.
- Administrative and corporate transactions: For general business administrative purposes and to explore or consummate certain corporate or enterprise transactions, such as a reorganization, merger, liquidation, receivership or transfer of some or all of Our business assets or equity.
- Consent or Instruction: To discharge actions that users instruct us to undertake or for which users provide consent or to interact with and respond to users’ other inquiries, communications, or requests for information.
We do not sell User Information for monetary consideration, and we will not sell User Information without providing any notice or right of opt-out as may be required under applicable law.
Disclosure of User Information
We disclose User Information that we collect and use, as outlined elsewhere in this notice (see Collection of User Information and Use of User Information), to the following groups of persons:
- ReliaQuest group: To Our personnel, subsidiaries, parent and holding companies, and other interests under our control to provide Our website and services and to communicate with users.
- Service providers: To Our service providers, contractors, vendors, subprocessors and other third parties, who support or enable Us to provide Our website and services, to communicate with users, and to perform related services, such as web hosting providers, customer relationship management tool providers, information technology service providers, analytics providers, and those applicable persons identified in Our current list of Third Party Platform Providers.
- Authorized resellers: To Our authorized resellers and channel vendors, who assist Us in selling or delivering Our services and communicating with users.
- Professional advisers and government entities: To consultants, advisers, and similar professional service providers, public or private adjudicative bodies (such as courts, arbitrators, or administrative tribunals), public or private enforcement, legislative, or investigative bodies (such as regulatory or law enforcement agencies), and other affected or interested persons in connection with Our efforts to comply with, conform to the requirements of, or carry out Our obligations and enforce Our rights arising under any applicable law or legal agreements between Us and users or the persons on whose behalf users act, such as users’ employers, to the extent We believe necessary or appropriate in the relevant circumstances and to further our legitimate interest in preventing, detecting, and deterring fraudulent activities, misuse of our website and services, or other inappropriate conduct and to promote the health, safety, and security of Our users, customers, website, and services, and other third parties.
- Administrative and corporate transactions: To consultants, advisers and similar professional service providers, and targets, bidders, financiers, and similar interested persons in connection with our exploration or consummation of certain corporate or enterprise transactions.
- Consent or Instruction: To the persons necessary or appropriate for Us to discharge actions that users instruct Us to undertake or for which users provide consent.
Jurisdiction-Specific Information on Privacy Rights
Depending on where users reside or the jurisdiction in or through which users access or use Our website, procure or use Our services, or engage in any live, mailed, or electronic communication with Us, and the laws applicable to such users and the relevant User Information in those circumstances, users may be able to exercise certain privacy rights related to the User Information that We collect, as outlined in the following bullet points.
- Right of access: The right to request access to User Information that We hold about the requesting user and information about Our use of such User Information and with whom we share such User Information. This may include the right to request that We provide a copy of the requesting user’s User Information, as well as the following information about Our collection, use, and disclosure of such User Information over the twelve-month period preceding the request: (i) the categories of and specific items of User Information We have collected about the requesting user; (ii) the categories of sources from which We collect such User Information; (iii) the categories of business or commercial purposes for collecting such User Information; (iv) the categories of third parties to whom such User Information was disclosed for a business purpose; and/or (v) and categories of User Information disclosed for a business purpose.
- Right of correction: The right to request that We correct inaccurate User Information maintained about the requesting user.
- Right to erase or delete: The right to request that We delete the requesting user’s User Information in certain circumstances and subject to certain exceptions. We cannot delete User Information except by also deleting the relevant user account.
- Right to object or restrict: The right to object to Our processing of the objecting user’s User Information and, in certain circumstances, the right to require Us to stop processing such User Information We hold about the objecting user other than for storage purposes and/or the right to restrict or limit Our use or disclosure of sensitive User Information, if any, to only what is necessary to provide users with the ability to access or use Our website, procure or use Our services, or engage in any communication with Us.
- Right to portability: The right to request the portability of the requesting user’s User Information that We process.
- Right to withdraw consent: Where We rely on consent to process a user’s User Information, the right to withdraw consent at any time by notifying Us in the manner described in the Contact Information section of this Notice. Withdrawing consent will not affect the lawfulness of Our processing before the user withdrew the user’s consent or the processing of the user’s User Information on another lawful basis.
- Right to nondiscrimination: We will not discriminate against a user for exercising the rights to which the user is entitled.
- Right to opt-out of sale: We do not sell User Information. To the extent that We sold User Information, the user would have the right to instruct Us not to sell the instructing user’s User Information.
If a user is entitled to one or more of the foregoing rights, the user may exercise the right(s) to which the user is entitled by notifying Us of the user’s specific request in the manner described in the Contact Information section of this Notice. If a user is unsure if the user is entitled to one or more of the foregoing rights, the user should consult the laws and regulations of the user’s applicable jurisdiction. We will use commercially reasonable efforts to comply with users’ requests.
For users’ protection, We will only respond to verifiable requests. Accordingly, We may need to collect certain information from the requesting user to verify the user’s identity, such as the user’s email address, government-issued identification, or date of birth, before providing a substantive response to the user’s request. We may need to retain certain information for record keeping or legal purposes or to complete any transactions initiated before the user’s request.
The user may also be able to designate an authorized agent to exercise the right(s) to which the user is entitled. To do so, the user must provide the authorized agent written and signed permission to exercise such rights on the user’s behalf. We reserve the right to require the user’s agent to verify the agent’s identity and to confirm directly with the user that the user has provided the authorized agent permission to exercise the user’s right(s).
The rights and procedures described this section are in addition to the other terms of this Notice and are intended to supplement the remainder of this Notice where required by applicable law. The rights to which users may be entitled vary by the applicable jurisdiction and the facts and circumstances in which the rights are invoked, and, accordingly, one or more of the rights or procedures described in this section of the Notice may not apply, in full or in part, to a particular user. Furthermore, some rights may be limited by applicable law, such as if fulfilling a user’s request for access to or deletion of User Information will adversely affect other individuals or Our trade secrets or intellectual property, an overriding public interest justifications exist, or We are by law required to retain or to delete or deny access to User Information.
International Transfers of User Information
ReliaQuest is based in the United States of America (“USA”), but We have global operations. When users access or use Our website, procure or use Our services, or communicate with ReliaQuest, users provide User Information to ReliaQuest in the USA. ReliaQuest’s subsidiaries and the third parties to whom ReliaQuest discloses User Information to and receives User Information from are based in the USA, European Union, United Kingdom, India, Singapore and other jurisdictions, some of which may not have laws that require the same level of protection for User Information as where a user resides or the jurisdiction in which the user accesses or uses Our website, procures or uses Our services, or communicates with ReliaQuest. We implement appropriate transfer mechanisms in accordance with applicable law to protect the User Information that We transfer, including by using the standard contractual clauses approved by the European Union’s European Commission and the United Kingdom’s Information Commissioner’s Office. Users may request additional information about the transfer mechanisms employed by ReliaQuest in the manner described in the Contact Information section of this Notice.
While We no longer rely on the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the USA Department of Commerce (“Privacy Shield”) as an allowable transfer mechanism for User Information, ReliaQuest complies with the Privacy Shield regarding the collection, use, and retention of User Information transferred from the European Union and Switzerland to the USA. ReliaQuest has certified to the USA Department of Commerce that ReliaQuest adheres to the Privacy Shield principles. If there is any conflict between the terms in this Notice and the Privacy Shield principles, the Privacy Shield principles shall govern. To learn more about the Privacy Shield program, and to view Our certification, please visit https://www.privacyshield.gov/.
In compliance with the Privacy Shield principles, ReliaQuest commits to resolve complaints about Our collection or use of User Information. Users residing in or subject to the laws of the European Union or Swiss Confederation with inquiries or complaints regarding our Privacy Shield policy should first contact ReliaQuest in the manner described in the Contact Information section of this Notice. ReliaQuest has further committed to refer unresolved Privacy Shield complaints to the American Arbitration Association. If a user does not receive timely acknowledgement of the user’s complaint from Us, or if We have not addressed the user’s complaint to the user’s satisfaction, please visit http://go.adr.org/privacyshield.html for more information and to file a complaint. ReliaQuest has further committed to cooperate with the panel established by the data protection authorities of the European Union and Swiss Confederation with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the European Union or Switzerland in the context of the employment relationship.
ReliaQuest is subject to the investigatory and enforcement powers of the USA Federal Trade Commission (“FTC”), and the FTC has jurisdiction over ReliaQuest’s compliance with the Privacy Shield.
In cases of onward transfer to third parties of User Information relating to users residing in or subject to the laws of the European Union or Swiss Confederation pursuant to the Privacy Shield where such User Information is not protected in accordance with the Privacy Shield principles, ReliaQuest is potentially liable.
Cookies
Our website uses certain usage data tracking and analytics technologies, like cookies and clear gifs, to help Us identify users and users’ interests, remember users’ preferences, analyze users’ interactions with Our website, market Our services to users, control access to certain content on Our website, monitor and protect Our website, and to process communications or requests for information from users. In this section of the Notice, we refer to these types of usage data tracking and analytics technologies simply as “Cookies.”
Cookies that We Use
We classify the Cookies that we use, as described in the below chart, into the following categories:
- Functionality and Performance: This kind of Cookie is used to implement additional functionalities of Our website or to enhance its features or performance. Use cases for these Cookies include the implementation of website support or engagement features, like live web chat, non-necessary forms, or automatically-filled text boxes, or providing quantitative measures of website visitors and the website’s performance for troubleshooting and analytics so We can improve the performance of Our website and provide more relevant content to users.
- Advertising and Analytics: This kind of Cookie is used to provide behavioral advertising and re-marketing analytics data. In other words, these Cookies are used to deliver advertisements that are relevant to users and their interests, to limit how frequently (if at all) that users are presented with an advertisement, to help gauge the efficacy of Our advertisements and understand users’ behavior after they are presented or engage with an advertisement.