What this policy covers
Your privacy is important to us, and so is being transparent about how we collect, use, and share information about you. This policy is intended to help you understand:
- What information we collect about you
- How we use information we collect
- How we share information we collect
- How we store and secure information we collect
- How to access and control your information
- How we transfer information we collect internationally
- Other important privacy information
When we refer to “we,” or “us” in this policy, we mean PMWeb Inc., which controls the information PMWeb Inc. collects when you use the Services.
Where we provide the Services under contract with an organization (for example your employer), that organization controls the information processed by the Services. For more information, please see Notice to End Users below.
What information we collect about you
We collect information about you when you provide it to us, when you use our Services, and when other sources provide it to us, as further described below.
PMWeb, Inc. collects different types of personally identifiable information in order to be able to provide its services to you. Such information may include but is not limited to name, mailing address, telephone numbers, email addresses, credit card information and other. Users provide all such information voluntarily through various order forms, email messages sent to PMWeb, Inc., LiveChat, telephone, etc.
PMWeb, Inc. also collects different types of non-personally identifiable information that may include referral URLs, users’ IP addresses, users’ use of website, information about the browsers used by the user, etc.
This website uses Internet Protocol (IP) Addresses. An IP Address is a number assigned to your computer by your Internet service provider so you can access the Internet. Generally, an IP address changes each time you connect to the Internet (it is a “dynamic” address). Note, however, that if you have a broadband connection, depending on your individual circumstance, it is possible that your IP Address that we collect may contain information that could be deemed identifiable. We use your IP address to report aggregate information on use and to help improve the website.
How we use information we collect
PMWeb Inc. uses all collected information primarily for provisioning the services you have ordered and providing you with ongoing user support. We may also use your information for sending periodic emails announcing important service changes, new features, technical issues updates and news, promotional activities, etc. You can decide NOT to receive such emails by replying to any of them with “Unsubscribe” in the subject. User information is also used for improving PMWeb, Inc.’s business processes to make your overall user experience more rewarding. Your information can also be used for resolving ownership and other disputes and enforcing agreements between you and PMWeb, Inc.
How we share information we collect
We may share your information with agents, contractors or partners of PMWeb, Inc. in connection with services that these individuals or entities perform for, or with, PMWeb, Inc. These agents, contractors or partners are restricted from using this data in any way other than to provide services for PMWeb, Inc., or services for the collaboration in which they and PMWeb, Inc. are engaged (for example, some of our products are developed and marketed through joint agreements with other companies). We may, for example, provide your information to agents, contractors or partners for hosting our databases, for data processing services, or so that they can mail you information that you requested.
PMWeb, Inc. reserves the right to share your information in response to duly authorized information requests of governmental authorities or where required by law. In exceptionally rare circumstances where national, state or company security is at issue (such as with the World Trade Center terrorist act in September, 2001), PMWeb, Inc. reserves the right to share our entire database of visitors and customers with appropriate governmental authorities.
How we store and secure information we collect
Information storage and security
We guarantee that we strictly apply all industry standard security measures to protect your personal information. Such measures include without limitation: data encryption (SSL and others), password protected access to users’ personal information, limited access to the sensitive data, encrypted transfer of sensitive data submitted by the user through PMWeb, Inc.’s order forms, login forms etc. There may be security and privacy limitations, which are beyond PMWeb, Inc.’s control. By choosing to provide personal information to PMWeb, Inc. you understand and agree that the security, integrity and privacy of your information cannot be 100% guaranteed.
How long we keep information
How long we keep information we collect about you depends on the type of information, as described in further detail below. After such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.
- Managed accounts: If the Services are made available to you through an organization (e.g., your employer), we retain your information as long as required by the administrator of your account. For more information, see “Managed accounts and administrators” above.
- Marketing information: If you have elected to receive marketing emails from us, we retain information about your marketing preferences unless you specifically ask us to delete such information. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.
How to access and control your information
You have certain choices available to you when it comes to your information. Below is a summary of those choices, how to exercise them and any limitations. We will respond to requests about this within a reasonable timeframe.
You have the right to request a copy of your information, to object to our use of your information (including for marketing purposes), to request the deletion or restriction of your information, or to request your information in a structured, electronic format. Below, we describe the tools and processes for making these requests. You can exercise some of the choices by logging into the Services and using settings available within the Services or your account. Where the Services are administered for you by an administrator (see “Notice to End Users” below), you may need to contact your administrator to assist with your requests first. For all other requests, you may contact us as provided in the Contact Us section below to request assistance.
Your request and choices may be limited in certain cases: for example, if fulfilling your request would reveal information about another person, or if you ask to delete information which we or your administrator are permitted by law or have compelling legitimate interests to keep. Where you have asked us to share data with third parties you will need to contact those third-party service providers directly to have your information deleted or otherwise restricted. If you have unresolved concerns, you may have the right to complain to a data protection authority in the country where you live, where you work or where you feel your rights were infringed.
At the request of the disclosing party, PMWeb Inc. shall:
- Securely destroy or at PMWeb Inc.’s discretion, return to the disclosing party all documents and materials (and any copies) containing, reflecting, incorporating, or based on the disclosing party’s Confidential Information;
- Securely destroy all the disclosing party’s Confidential Information from its computer systems or which is stored in electronic form (to the extent possible); and
certify in writing to the disclosing party that it has complied with the requirements of this clause, provided that PMWeb Inc. may retain documents and materials containing, reflecting, incorporating, or based on the Confidential Information to the extent required by law or any applicable governmental or regulatory authority and to the extent reasonable to permit PMWeb Inc. to keep evidence that it has performed its obligations under any agreement with the disclosing party.
How we transfer information we collect internationally
International transfers of information we collect
We collect information globally and primarily store that information in the United States. We transfer, process and store your information outside of your country of residence, to wherever we, PMWeb Inc. or our third-party service providers operate for the purpose of providing you the Services. Whenever we transfer your information, we take steps to protect it.
- International transfers within the PMWeb Inc. Companies: To facilitate our global operations, we transfer information to the United States and allow access to that information from countries in which PMWeb Inc. and other PMWeb Inc. corporate affiliates have operations for the purposes described in this policy. These countries may not have equivalent privacy and data protection laws to the laws of many of the countries where our customers and users are based. When we share information about you within and among PMWeb Inc. corporate affiliates, we make use of standard contractual data protection clauses, which have been approved by the European Commission, and we rely on the EU-U.S. and Swiss-U.S. Privacy Shield Framework to safeguard the transfer of information we collect from the European Economic Area and Switzerland. Please see our Privacy Shield notice below for more information or contact us as provided below.
Privacy Shield Notice
You have a right to access your data by contacting PMWeb Inc.
An individual who seeks access, or who seeks to correct, amend or delete inaccurate data, should direct his query to PMWeb Inc., Attention: David Stone, 1 Pope Street, Wakefield, MA 01880, firstname.lastname@example.org
If requested to remove data, we will respond within a reasonable timeframe.
An individual wishing to limit the use or sharing of their data should contact PMWeb Inc., Attention: David Stone, 1 Pope Street, Wakefield, MA 01880, email@example.com
PMWeb, Inc., 1 Pope Street, Wakefield, MA 01880, firstname.lastname@example.org
PMWeb Inc. has further committed to refer unresolved privacy complaints under the EU-US Privacy Shield Principles to BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.
PMWeb Inc. is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC)
Please note that if your complaint is not resolved through these channels, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel.
We may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.
In cases of onward transfer to third parties of data of EU individuals received pursuant to the EU-US Privacy Shield, PMWeb Inc. is potentially liable.
Other important privacy information
Notice to End Users
Our products are use by organizations. Where the Services are made available to you through an organization (e.g. your employer), that organization is the administrator of the Services and is responsible for the end-users and/or Service sites over which it has control. If this is the case, please direct your data privacy questions to your administrator, as your use of the Services is subject to that organization’s policies. We are not responsible for the privacy or security practices of an administrator’s organization, which may be different than this policy.
Even if the Services are not currently administered to you by an organization, if you are a member of a team administered by an organization, or if you use an email address provided by an organization (such as your work email address) to access the Services, then the administrator of that team or the owner of the domain associated with your organizational email address (e.g. your employer) may assert administrative control over your account and use of the Services at a later date. You will be notified if this happens.
Board, team, and enterprise administrators are able to restrict your access to and privileges within the respective board, team or enterprise the administrator controls. In some cases, enterprise administrators can also:
- require you to reset your account password;
- restrict, suspend or terminate your access to the Services or your account;
- control your ability to edit, restrict, modify or delete account information;
- change your account information, including profile information or the email address associated with your account;
- access information in and about your account;
- access or retain information stored as part of your account; and
If you do not want an administrator to be able to assert control over your account or use of the Services, you should deactivate your membership with the relevant board, team or enterprise or remove any email addresses containing a domain owned or controlled by the administrator entirely from your account. Once an administrator asserts control over your account or use of the Services, you may no longer be able to withdraw membership or change the email address associated with your account without administrator approval.
Please contact your organization or refer to your administrator’s organizational policies for more information.
Our policy towards children
The Services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact our support services.18
We may update this Privacy and Data Security Policy from time to time. When we do update it, for your convenience, we will make the updated policy available from our website at PMWeb.com or from David Stone our Data Protection Officer
Your information is controlled by PMWeb Inc., Inc. If you have questions or concerns about how your information is handled, please direct your inquiry to PMWeb Inc. or if you are a resident of the European Economic Area, please contact our EU Representative.