Snapshot 35508
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Legal Center Privacy Policy Last Updated: September 15, 2026 Enboarder Legal Centre Privacy Notice How Enboarder collects, uses, shares, protects, and manages personal information across our website, platform, client relationships, and employment processes. Who we are Enboarder Inc. and its affiliated entities, including Enboarder Ltd (UK) and Enboard.Me Pty Ltd (Australia) (“Enboarder”, “we”, “us”, or “our”), offer an onboarding and engagement platform (Platform) available through its website and accessible on any device to employers. Using our Platform, our employer clients (Clients) build customized workflows on their own to create engaging experiences with their employees. Who is the controller? For visitors to our public website, http://www.enboarder.com, (Website), prospective Clients, recipients of our marketing communications, employees and applicants, Enboarder acts as an independent controller of your personal information. For data processed in the Platform on behalf of our employer Clients about their employees and other end users (Client Users), Enboarder acts as a processor/service provider and processes Client data only on the documented instructions of the relevant Client. What this privacy notice covers This Privacy Notice (“Notice”) describes how we collect and process personal information when acting as a controller, meaning we determine the purposes and means of processing that personal information. This Notice describes the rights available to you regarding our use of your personal information. This Privacy Notice does not generally apply to the extent Enboarder processes personal information as a data processor/service provider. In these circumstances, Enboarder processes personal information in accordance with a data processing agreement, or other applicable privacy terms, that we have entered into with the relevant Client. Client Users access our services through their employer or another Enboarder Client, and their accounts are administered by those organizations and governed by their respective privacy policies. We encourage you to review the privacy notices of the relevant Client for more information about their privacy practices. Who this covers Website visitors, Clients, prospective Clients, employees, applicants, and other individuals interacting with Enboarder. Where we operate Enboarder Inc. (US), Enboarder Ltd (UK), and Enboard.Me Pty Ltd (Australia). Cross-border transfers use Standard Contractual Clauses. Your choices You may request access, correction, deletion, or other available privacy rights by contacting us. PLEASE READ THIS PRIVACY NOTICE CAREFULLY AS IT DESCRIBES YOUR RIGHTS, RESPONSIBILITIES, AND LIABILITIES. BY ACCESSING OR USING THE SERVICES OR OTHERWISE PROVIDING US WITH PERSONAL INFORMATION, YOU ARE CONSENTING TO THE TERMS OF THIS PRIVACY NOTICE, OUR TERMS OF SERVICE AND COOKIE POLICY. IF YOU CHOOSE NOT TO AGREE TO THIS PRIVACY NOTICE, PLEASE DISCONTINUE USE OF THE SERVICES. Notice at Collection This section serves as our Notice at Collection for California residents under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (together, CCPA). It describes the categories of personal information we collect about California consumers, the purposes for which we use that information, whether we “sell” or “share” it as those terms are defined in the CCPA, and how long we retain each category or the criteria we use to determine that period. The information in this section is also intended to provide a clear summary of our data practices for individuals in other jurisdictions, including the European Economic Area and the United Kingdom, in line with our transparency obligations under applicable data protection laws such as the GDPR. 1. Categories of Personal Information We Collect “Personal information” or “personal data” is any information that alone or in conjunction with other information or data, identifies or is linked to a particular individual or household and that is subject to, or otherwise afforded protection under a data protection law, statute, or regulation. The term “personal information” does not include anonymized or de-identified data that is not attributable to a particular individual or household and that is not otherwise subject to a data protection law, statute, or regulation. “Sensitive personal information” is a category of personal information defined as sensitive under certain laws. This could include certain personal identifiers like Social Security numbers, passport numbers, or driver’s license numbers, financial information, racial or ethnic origin, physical or mental health condition or information, or other employment, financial or health information. We do not sell your personal information. We do not sell personal information in any category. Two categories, Online Identifiers and Internet and Electronic Network Data, may be “shared” for cross-context behavioral advertising, and you can opt out at any time using the Cookie Settings link in the Website footer. Notice at collection. The table below summarizes each category of personal information we collect: examples, our legal basis, the business purpose, whether we sell or share it, and how long we typically retain it. Scroll the table sideways to see all seven columns. The category column stays in place as you scroll. Personal Information Category Description/Examples Legal Basis Business purposes Sold? Shared for cross-context behavioral advertising? Typical retention Personal Identifiers and contact information Identifiers, such as your full name, mailing address, email address, and telephone number. Performance of a contract with you Compliance with legal obligations and the exercise of our legal rights Consent (where required under applicable laws) To create and manage accounts, communicate with individuals, provide services, and respond to inquiries, including sales and support interactions No No Retained for the duration of the relationship and for a reasonable period thereafter based on legal, contractual, or operational requirements Registration Data Information provided when you register for an account to use the Services, including position, usernames and passwords. Performance of a contract with you Consent (where required under applicable laws) To create, authenticate, and maintain user accounts and enable access to the Platform No No Retained for as long as the account is active and for a reasonable period thereafter Demographic Data Data about you such as your country of residence and preferred language. Performance of a contract with you Consent (where required under applicable laws) To localize services, personalize user experience, and support analytics and reporting No No Retained for a reasonable period based on business need and analytics usage Payment Data Data necessary to accept and confirm payments processed by our third-party payment processor. Performance of a contract with you Compliance with legal obligations and the exercise of our legal rights Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To process payments, manage billing, comply with financial reporting obligations, and prevent fraud No No Retained in accordance with financial recordkeeping and tax obligations Online Identifiers Persistent identifiers (IP address, cookies, device ID, beacons, ad identifiers, etc.) that recognize your device over time. Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To operate and secure the Website and Platform, analyze usage, measure marketing effectiveness, and improve services No Yes Retained for a reasonable period in line with cookie and analytics practices Commercial Information Records of Services purchased, obtained, or considered, including usage tendencies. Performance of a contract with you Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To manage customer relationships, track service usage, support sales activities, and improve offerings No No Retained for the duration of the customer relationship and for a reasonable period thereafter Business Contact Data Information about individuals from organizations we conduct or may conduct business with. Performance of a contract with you Legitimate interest (to improve our business and Services) Compliance with legal obligations and the exercise of our legal rights Consent (where required under applicable laws) To manage business relationships, conduct sales and partnership activities, and communicate with clients and vendors No No Retained while the relationship is active and for a reasonable period thereafter Marketing and Communications Data Data related to marketing preferences and subscription choices. Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To manage communication preferences, deliver marketing campaigns, and measure campaign performance No No Retained until individuals opt out or after a reasonable period of inactivity Internet and Electronic Network Data Browsing history, search terms, interaction logs, and WiFi-derived data. Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To analyze website usage, improve performance, monitor security, and enhance user experience No Yes Retained for a reasonable period based on analytics and security needs Your Feedback Information shared through surveys, reviews, or service feedback forms. Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To improve services, support product development, and address user concerns No No Retained as long as necessary to analyze and improve services Visitor Information Data provided when visiting an Enboarder facility (visitor logs, parking data). Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To manage facility access, ensure security, and maintain visitor records No No Retained for a limited period consistent with security and operational needs Video and Images Photos you provide or video recordings captured through security or conferencing systems. Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To support security monitoring, communications, and use of collaboration and conferencing tools No No Retained for a limited period unless required for investigation or legal purposes Location Data Approximate location from IP address, city, region, or postal code. Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To support security, fraud prevention, analytics, and localized service delivery No No Retained for a reasonable period consistent with analytics and operational needs Professional or Employment Data Job application details including CV, employment history, qualifications, references, and certain sensitive data. Legitimate interest (to improve our business and Services) Compliance with legal obligations and the exercise of our legal rights Consent (where required under applicable laws) To manage recruitment, employment, and HR operations No No Retained in accordance with employment and legal requirements Communications Content and Recordings Emails, calls, chat interactions, forms, reviews, support requests, and online submissions. Performance of a contract with you Legitimate interest (to improve our business and Services) Consent (where required under applicable laws) To provide customer support, manage relationships, maintain records of interactions, and improve services No No Retained for a reasonable period based on business need and legal requirements Information from third parties Enboarder may receive information from partners, service providers, events, co-marketing activities, and social media interactions where permitted by law. Information We Collect from Third Parties From time to time, we may receive personal information about you from third party sources. These third-party sources may include marketing and event partners (for example where we co-author a white paper, co-sponsor a webinar series, or receive an attendee list from a conference organizer), public business contact databases, social media platforms, and our service providers (such as analytics and advertising partners) who help us understand and improve how our Website and Platform are used. For more information on how your engagement with us on social media may impact how your personal information is collected or shared, see Section 11 Social Media Features. Children’s privacy. The Website and Platform are not intended for children under 16. Information About Children The Website and Platform are not intended for or targeted at children under 16, and we do not knowingly or intentionally collect information about children under 16. If you believe that we have collected information about a child under 16, please contact us at [email protected], so that we may delete the information. 2. How We Use Information We Collect Operate services Manage accounts, provide services, support users, and process payments. Improve experiences Analyze Platform and Website usage to improve performance and personalization. Communicate Send notices, policy updates, service messages, and marketing where permitted. Protect and comply Meet legal obligations, prevent fraud, and protect Enboarder and third parties. To Support Everyday Operations In addition to the uses identified elsewhere in this Privacy Notice, we may use your personal information for business purposes, including to: Provide and maintain our services. We may use your personal information to manage your account with us, provide access to and use of our services, complete a purchase or provide customer support. Improve our Platform and Website. We may use your personal information to analyze, improve or deliver our services and to develop new ones. We may also use it to analyze how visitors use the Platform and Website in order to enhance and personalize your experience. Enboarder and its partners use cookies or similar technologies (such as web beacons) to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole. To find out more about how we use cookies on our Website and how to manage your cookie preferences please see our Cookie Policy available here. Communicate notices about Enboarder services. We may use your personal information to send information to you regarding updates and changes to our Terms of Service, Privacy Notice or other legal agreements. Process payments. We use Client financial information such as your signature, credit card and bank account information, VAT numbers and other tax identifiers that you use to pay for our Services. We use a third-party service provider to manage credit card processing. This service provider is not permitted to store, retain, or use information you provide except for the sole purpose of credit card processing on our behalf. Provide marketing communications or promote our services. We may use your personal information to send Enboarder promotional and informational content we think may be of interest to in accordance with your communication preferences. We may also use your personal information if it is contained in a client testimonial or comment on our Website. We obtain each Client’s consent via email prior to posting the client’s name and testimonial. Comply with legal requirements and protect the safety and security of our business. We may use your personal information to comply with laws, regulations or other legal obligations, to assist in an investigation, to protect and defend our rights and property or the rights of third parties or enforce terms and conditions. We may also use your personal information to prevent suspected fraud, threats to our network or other illegal activities, prevent misuse or for any other reason permitted by law. Facilitate recruiting, hiring and employment. If you are an Enboarder employee or a prospective employee of Enboarder, we may collect personal information directly from you or indirectly from recruitment agencies, your references, or past employers as part of the recruitment process and human resources management. This may include name, address, phone number, employment history and experience and other employment related information. We may also collect sensitive information about you and you consent to us collecting this information for employment relationship purposes. This may include health information or racial or ethnic origin. 3. How We Share Information We Collect We may disclose personal information in accordance with applicable law and for the purposes described above, including: To your employer who is our Client; To our related corporate entities; To anyone to whom our assets or businesses (or any part of them) are transferred; When we may be required, authorized or permitted by law, including to government agencies, regulatory bodies and law enforcement agencies; To our business advisors acting as service providers or processors including lawyers, bankers, auditors, and insurers; and To any other service provider, contractor or third party where you have provided your consent. We may also disclose personal information to third parties such as our contractors, suppliers, agents and service providers who help us deliver, administer and support our functions and activities, including: Hosting our servers and website; Conducting research, surveys and data analysis; Providing IT services; Data processing, storage and back-up; Processing payments; and Delivering marketing and digital marketing services If you facilitate a transaction with us, or request information from or otherwise engage with us, and such activities require us to share your personal information with a service provider or other third party, you hereby consent to such disclosure and/or direct us to intentionally disclose your personal information to the service provider or third party. 4. International Data Transfers Enboarder is an international company. Where information is transferred across borders, Enboarder applies appropriate safeguards such as Standard Contractual Clauses where required. Enboarder is an international company based in the US, with locations in Australia and the UK as well. We may transfer your personal information to countries other than the one in which you live, including transfers to the United States. To the extent that personal information is transferred abroad, Enboarder will ensure compliance with the requirements of the applicable laws in the respective jurisdiction in line with our obligations. In particular, Enboarder uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to, among others, Australia, UK, and the United States. Enboarder will transfer your personal information to facilitate the provision of the Services. A copy of our standard data processing addendum, incorporating the Standard Contractual Clauses, can be found in our Data Protection Addendum in our Terms of Service. 5. Corporate Restructuring Events If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company would receive all information gathered by Enboarder on the Website and the Platform. In this event, you will be notified via email and/or a prominent notice on our Website, of any change in ownership, uses of your personal information, and choices you may have regarding your personal information. 6. Compelled Disclosure We reserve the right to use or disclose your personal information if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process. 7. Retention of Personal Information How long we keep information we collect about you depends on the type of information collected, as further described below. The retention periods or criteria described in Section 1 (Notice at Collection) are based on factors such as the type of data processed, applicable legal requirements, and the nature of our relationship with you. We retain personal information that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements). When we have no ongoing legitimate business need to process your personal information, we securely delete the information or anonymize it so that it is no longer personal information or, if this is not possible, securely store your personal information and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request, as described in the “How to Access & Control Your Personal Data” section below. If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us or ceased using your Enboarder account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created. 8. Security of Your Personal Information We use physical, technical, and organizational measures to help protect personal information, while recognizing that no information system can be guaranteed to be completely secure. We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use or disclosure. We secure the personal information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All personal information is protected using appropriate physical, technical and organizational measures. For more on security at Enboarder, please see https://enboarder.com/information-security-policy/. HOWEVER, NO INFORMATION SYSTEM CAN BE FULLY SECURE, AND WE CANNOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR PERSONAL INFORMATION. MOREOVER, WE ARE NOT RESPONSIBLE FOR THE SECURITY OF PERSONAL INFORMATION YOU TRANSMIT TO THE WEBSITE AND/OR THE SERVICES OVER NETWORKS THAT WE DO NOT CONTROL, INCLUDING THE INTERNET AND WIRELESS NETWORKS, AND YOU PROVIDE US WITH ANY PERSONAL INFORMATION AND DATA AT YOUR OWN RISK. TO THE EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE OR OTHERWISE RESPONSIBLE FOR ANY DATA INCIDENT OR EVENT THAT MAY COMPROMISE THE CONFIDENTIALITY, INTEGRITY, OR SECURITY OF YOUR PERSONAL INFORMATION CAUSED BY A THIRD PARTY. 9. Cookies and Similar Technologies Cookies. As mentioned in Section 2 above, Enboarder and its partners use cookies or similar technologies (such as web beacons or pixels) to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole. To find out more about how we use cookies on our Website and how to manage your cookie preferences please see our Cookie Policy available here. Enboarder uses Google Analytics to learn how people interact with our Websites. To learn more about Google’s privacy practices, visit Google’s Privacy & Terms at https://policies.google.com/technologies/partner-sites. You may opt out of those cookies by visiting https://tools.google.com/dlpage/gaoptout to manage your cookie preferences. Enboarder may occasionally use other analytics providers. These third parties may combine your information with the information of other individuals for analytics purposes. 10. Direct Marketing We may send direct marketing communications to our existing and prospective Clients about our activities and services and other material that we think you would find interesting or useful. If you do not wish to receive such direct marketing communications, you can always opt out. If you are receiving email communications from us, there will be a mechanism to opt out contained in each of those emails. To stop receiving other communications from us, you can contact us via any of the channels listed below. If you choose to opt out of all direct marketing communications, please note that Enboarder may still contact you and your employees for other reasonable purposes, including information that Enboarder is legally required to send, notifications of changes to Enboarder services or policies and information regarding the use, rights, benefits or obligations of users of our services. 11. Social Media Features Our Websites include social media features, such as the Facebook Like button and Widgets, such as the Share This button or interactive mini-programs that run on our Websites. These features may collect your IP address, which page you are visiting on our Websites, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Websites. This Privacy Notice does not apply to these features. Your interactions with these features are governed by the privacy policy and other policies of the companies providing them. If You Make a Public Post, Others May See It. Your personal information may be publicly available if you identify us in your social media pages or on various social media platforms by tagging us using a hashtag (#) or “at” (@) indicator. Your personal information also may be publicly available if you make a post on a social media site on a page we maintain. We maintain Enboarder social media pages on the following sites: Facebook at https://www.facebook.com/enboarder/ X at https://twitter.com/enboarder LinkedIn at https://www.linkedin.com/company/enboarder/ Instagram at https://www.instagram.com/enboarder/ When you use a social media site, your personal information is subject to the privacy policies of those sites. However, once your personal information is in our possession, we will treat it in accordance with this Privacy Notice. We strongly recommend you review the privacy policies of any third-party sites you visit to understand the data collection and use practices of that third party. 12. External Websites Our Websites provide links to other websites. We do not control, and are not responsible for, the content or practices of these other websites. Our provision of such links does not constitute our endorsement of these other websites, their content, their owners, or their practices. This Privacy Notice does not apply to these other websites, which are subject to any privacy and other policies they may have. 13. Public Forums We offer publicly accessible blogs. Please keep in mind that if you directly disclose any information through our public blogs, this information may be collected and used by others. We will correct or delete any information you have posted on the Websites if you so request, as described in “Opting Out and Unsubscribing” below. 14. How to Access & Control Your Personal Data 1 Submit your request Email [email protected] or write to Enboarder at the address listed below. 2 Verification We may verify your identity or your authorized agent before taking action. 3 Response We will respond within a reasonable timeframe and notify you of the action taken. Reviewing, Correcting and Removing Your Personal Information If you are a California resident, please refer to Section 15 or for EEA/UK residents please refer to Section 16 for more information on access and control of your personal data. We will take all reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up-to-date, and we will try to confirm your details through our communications with you and promptly add updated or new personal information to existing records when we are advised. However, we rely on the accuracy of personal information as provided to us both directly and indirectly. We encourage all users (whether of the Website, social channels, or Platform) to regularly review and update their personal information. If any of your details change, please notify us as soon as you can or log into your online profile or subscription center to update it. If you believe we are holding information about you that is inaccurate, incomplete, irrelevant or misleading, you can ask us to correct it or delete it altogether. To exercise any of these options, please contact us at [email protected] or by mail to Enboarder, 111 Congress Ave., Suite 500 Austin, TX 78701, Attention: Privacy. We will respond to your request to change, correct, or delete your information within a reasonable timeframe and notify you of the action we have taken. 15. California Privacy Rights Data Privacy Rights. Pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, California residents are entitled to certain data privacy rights: Right to Know (Specific Pieces of Personal Information). You have the right to know the specific pieces of your personal information that we have collected about you. Right to Know (Categories of Personal Information). You have the right to know (i) the categories of personal information we have collected from you; (ii) the categories of sources from which the personal information is collected; (iii) the categories of your personal information we have sold or disclosed for a business purpose; (iv) the categories of third parties to whom your personal information was sold or disclosed for a business purpose; and (v) the business or commercial purpose for collecting or selling your personal information. Right to Delete. You have the right to request that we delete your personal information that we have collected and retain. Right to Correct. You have the right to request that we correct inaccurate personal information that we have collected and retain. Nondiscrimination. You have the right not to be subject to discrimination for asserting your rights under the CCPA. Submit a Privacy Request. To submit a privacy request, you (or your authorized agent) may contact us in accordance with the “Contact Us” section listed below. However, any such authorized agent must be registered with the California Secretary of State to conduct business in California. Privacy Request Verification Process. If you (or your authorized agent) make any request related to your personal information, Company will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, Company will, to the extent required or permitted by law, require you (or your authorized agent) to verify your request via email, request certain contact information or government identifiers, and we will match at least two pieces of such personal information with data that we have previously collected from you before granting you access to, erasing, or correcting, specific pieces or categories of personal information, or otherwise responding to your request. We may require written documentation that demonstrates a third party is authorized to serve as your agent for the purposes of submitting the requests set forth herein, unless you have provided the authorized agent with power of attorney pursuant to California Probate Code §§ 4121 to 4130. None of the CCPA’s rights are absolute, and such rights are subject to legal and regulatory exceptions and exemptions. For more information about the CCPA, please see: https://oag.ca.gov/privacy/ccpa. Sale and sharing of personal information. We do not sell personal information for monetary or other valuable consideration. We use certain analytics and advertising cookies and similar technologies on our Website that may involve the “sharing” of personal information (such as identifiers and usage data) with third-party partners for cross-context behavioral advertising. You can opt out of this sharing by adjusting your preferences in our cookie management tool (for example, a “Cookie Settings” link in the Website footer) or by contacting us at [email protected]. Sensitive personal information. We use sensitive personal information only for limited and permitted purposes, including employment-related purposes such as identity verification, background checks, administering payroll and benefits, and monitoring diversity initiatives, and otherwise as permitted by California law. We do not use or disclose sensitive personal information to infer characteristics about you or for cross-context behavioral advertising. As a result, we do not offer a separate “Limit the Use of My Sensitive Personal Information” link. 16. European/UK Privacy Rights Data Privacy Rights. For individuals in the European Economic Area (EEA) and the United Kingdom, the controller of your personal information is the applicable Enboarder entity identified in the “Who we are” section, which may be Enboarder Ltd (United Kingdom) or another Enboarder group company depending on your relationship with us. You are entitled to the following privacy rights: Right to Know. You may have the right to know about what personal information Company collects and processes about you, including the types of personal information we collect and process, the sources of such personal information, our retention criteria, with whom we share your personal information, cross-border data transfers, and how to file complaints and inquiries. Access Rights. You may have the right to ask us whether we process any of your personal information and, if so, receive access to such personal information. When complying with an access request, we will also provide you with additional information, such as the purposes of the processing, the categories of personal information concerned as well as any other information necessary for you to exercise the essence of this right. Rectification. You may have the right to have your personal information corrected/rectified in case of inaccuracy or incompleteness. Upon request, we will correct inaccurate personal information about you and, taking into account the purposes of the processing, update any incomplete personal information, which may include the provision of a supplementary statement. Erasure. You may have the right to have your personal information erased, which means the deletion of your personal information by us. However, your right to erasure is subject to statutory limits and prerequisites (e.g., where your personal information is no longer necessary in relation to the initial purposes for which it was processed, your personal information was processed unlawfully). Restriction of Processing. You may have the right to obtain the restriction of the processing of your personal information, which means that we suspend the processing of your personal information for a certain period of time. Circumstances which may give rise to this right include situations where the accuracy of your personal information is contested, but we need time to verify the inaccuracy (if any) of your personal information. Data Portability. You may have the right to request we provide you with your personal information in a structured, commonly used and machine-readable format and to have such data transmitted directly to another controller, where technically feasible. Right to Object. You may have the right to object to the processing of your personal information, which means you may request we no longer process your personal information. This only applies in case the “legitimate interests” ground (including profiling) constitutes the legal basis for processing (see below “Legal Basis for Processing”). However, at any time (and free of charge) you can object to having your personal information processed for direct marketing purposes. Automated Decision Making. You may have the right to object to having us use your personal information to conduct automated decision making. However, Company does not engage in any activity that subjects our customers, website users, survey participants, or others to a decision based solely on automated processing, including profiling, which produces legal effects, or similarly significant results, impacting them. Withdrawing Consent. You also may withdraw your consent at any time if we are solely relying on your consent for the processing of your personal information. However, this will not impact our legal basis to process such personal information prior to the withdrawal of your consent. 17. Privacy Request To submit these abovementioned privacy requests, please contact us at [email protected]. You may designate an authorized agent to submit a privacy request on your behalf. Privacy Request Verification Process. If you make any request related to your personal information, the Company will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, before granting you access to, erasing, or correcting, specific pieces or categories of personal information or otherwise responding to your request, the Company will, to the extent required or permitted by law, (i) require you (or your authorized agent) to verify your request via email, (ii) request certain contact information or government identifiers, and (iii) match at least two pieces of such personal information with data that we have previously collected from you. None of your privacy rights are absolute, and such rights are subject to exceptions and exemptions. 18. Legal Basis for Processing For purposes of the EU/UK GDPR, we can collect and process your data under one of the following legal bases: Consent. We can collect and process your data with your consent. For example, if you have given your consent to receiving marketing material from us at the point we collected your information. Contractual Obligations. We need your personal information to comply with our contractual obligations. For example, if you have subscribed to one of our services, we use your personal information to fulfill, and deliver that service to you. Legal Compliance. If the law requires us to, we may need to collect and process your data. Legitimate interest. We may use your data as required in the normal course of operating our businesses and services unless our legitimate interests are overridden by your rights. Vital interests. We may need to process your personal information if the processing is necessary to protect your vital interests (for example, health and safety reasons if you attend a meeting at a Company location). 19. Other jurisdictions We operate globally and our privacy practices are designed to comply with applicable data protection laws in the jurisdictions where we do business, including, where applicable, the Australian Privacy Act 1988 and similar laws in other countries. Depending on where you live, you may have additional rights in relation to your personal information, such as rights to access, correct or update your information, to object or restrict certain processing, or to lodge a complaint with your local data protection authority. You can exercise these rights by contacting us at [email protected], and we will respond in accordance with applicable law. 20. Complaints Depending on applicable law, you may have the right to submit a complaint to a data protection authority responsible for overseeing our compliance with data protection law in your jurisdiction. Please see a list of potentially applicable regulatory authorities: For data protection authorities in the EU, please see here: https://edpb.europa.eu/about-edpb/about-edpb/members_en. For the data protection authority in the UK, please contact the Information Commissioner’s Office (ico.org.uk). We would, however, appreciate the opportunity to address your concerns, so please feel free to contact us regarding any complaint you may have. We will not discriminate against individuals for exercising their data privacy rights or filing a privacy complaint. 21. Changes to the Privacy Notice We periodically update this Privacy Notice. We will post any privacy notice changes on this page and, if the changes are significant, we will provide a more prominent notice by sending you an email notification. While we will notify you of any material changes to this Privacy Notice prior to the changes becoming effective, we encourage you to review this Privacy Notice periodically. Any revised Privacy Notice will take effect as the last updated date on our Website. 22. Contact Us Questions or privacy requests? Contact the Enboarder privacy team using the email or postal details below. External DPO: Allison Gay, RSM US LLP Email: [email protected] Postal Mail: 111 Congress Ave., Suite 500 Austin, TX 78701, Attn: Legal Scroll to Top