Effective January 26, 2023
Workgrid Software, Inc. ( “Workgrid” or “we”, “us” and “our”) focuses on creating solutions that solve the most common and inefficient workplace technology challenges faced by mid large global businesses. In doing so, we are committed to securing your privacy on the web and on our platform. Please read the following Privacy Notice which explains how we endeavor to build your trust and security through our policies.
In this privacy notice, we explain how we collect, process, use, disclose, and protect your information. This policy applies to all visitors of our website www.workgrid.com and users of our platform. If you are just visiting our website, we collect data only directly from you with your consent.
What Personal Data Do We Collect?
The types of personal data we gather and share depend on your relationship to us. For example, we may gather different data if you are a simply visiting our website, subscribing to our content, or using our platform. If you are using our platform, we do not control which information your employer decides to provide. For a better understanding of what information your employer provides, we recommend contacting your employer directly. In the past 12 months, we have only collected the categories of personal data described in this notice. We do not normally collect GDPR sensitive categories of personal information.
The type of information your employer may provide to us to use our platform may include:
Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, Social Security Number, or other similar identifiers;
Personal Data, such as your address, telephone number, employment information, or profile picture;
Protected classification characteristics described in California Civil Code 1798.80(e), including age, marital status, sex (including gender, gender identity, gender expression), or veteran or military status;
Biometric Data, such as voice prints or activity patterns used to extract a template or other comparable identifiers;
Internet or other similar network activity, such as data about your interaction with our website, application, or advertisement;
Geolocation Data, such as physical location or movements.
Inferences drawn from other personal data, such as a profile reflecting a person’s preferences or behavior;
Marketing and Communications Data, such as your preferences in receiving marketing from us and your communication preferences.
If you are not a user of our platform, our collection of your information is limited to:
Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or other similar identifiers;
Personal Data, such as your address, telephone number, employment information, or profile picture;
Marketing and Communications Data, such as your preferences in receiving marketing from us and your communication preferences
How Do You Collect My Data?
Only you or your employer provide us with personal information in the following circumstances:
Your employer and you use our platform and provide your information to us directly
You visit our website, call us, or provide your information in person
You subscribe to our newsletter, blog, or other content
How Do We Use Your Personal Data?
Workgrid uses your data to provide you our products and services and as otherwise provided in this notice. We may use your data and the data of our former customers for our business purposes.
The below table describes our business purposes, the data categories associated with each purpose, and the lawful basis for processing your personal data:
Day to Day Business and Operations
Business Purpose | Data Categories | Lawful Basis For Processing |
|---|---|---|
Creating, maintaining, customizing, and securing accounts; | Identifiers & Personal Data | Legitimate interest in servicing your account |
Supporting day-to-day business functions; | Protected Classification Characteristics | Consent provided by you to your employer |
Doing internal research for technology and development; | Biometric Data | Fulfilling a contract |
Marketing and creating products and services; | Internet or other similar network activity | |
Conducting audits related to a current contact with a consumer and other transactions; | Geolocation Data | |
As described at or before the point of gathering personal data or with your authorization; | Inferences drawn from other personal information | |
Marketing and Communications Data | Legitimate interest in servicing your account |
Security and Fraud Detection
Business Purpose | Data Categories | Lawful Basis For Processing |
|---|---|---|
Detecting security issues; | Identifiers | Legitimate interest in securing your account |
Protecting against fraud or illegal activity, and to comply with regulatory and law | Personal Information | Consent provided by you to your employwer |
Managing risk and securing our systems, assets, infrastructure, and premises; | Protected Classification Characteristics | Fulfilling a contract |
Help to ensure the safety and security of Workgrid staff, assets, and resources, which may include physical and virtual access controls and access rights management; | Internet or other similar network activity | |
Supervisory controls and other monitoring and reviews, as permitted by law; and emergency and business continuity management; | Geolocation | |
Inferences drawn from other personal information |
Regulatory and Legal Requirements
Business Purpose | Data Categories | Lawful Basis For Processing |
|---|---|---|
Controls and access rights management; | Identifiers | |
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Workgrid’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by Workgrid is among the assets transferred; | Personal Data | |
Exercising and defending our legal rights and positions; | Protected Classification | |
To meet Workgrid contract obligations; | Biometric Data | |
To respond to law enforcement requests as required by applicable law, court order, or governmental regulations; | Internet or other similar network | |
As otherwise permitted by law; | Geolocation Data | |
Inferences drawn from other personal information | ||
Marketing and Communications Data |
Improve Your Customer Experience and Our Products
Business Purpose | Data Categories | Lawful Basis For Processing |
|---|---|---|
Improve your customer experience, our products, and service; | Identifiers | Legitimate interest to improve the customer experience and support for you and your employer |
To provide support, personalize, and develop our website, products, and services; | Personal Data | Consent provided by you to your employer |
Create and offer new products and services; | Protected Classification Characteristics | Fulfilling a contract |
Biometric Data | ||
Internet or other similar network activity | ||
Geolocation Data | ||
Inferences drawn from other personal information | ||
Marketing and Communications Data |
Analytics to identify, understand, and manage our risks and products
Business Purpose | Data Categories | Lawful Basis For Processing |
|---|---|---|
Conducting analytics to better identify, understand, and manage risk and our products | Identifiers & Personal Data | Legitimate interest to manage our product |
Protected Classification Characteristics | Consent provided by you to your employer | |
Biometric Data | Fulfilling a contract | |
Internet or other similar network activity | ||
Geolocation Data | ||
Inferences drawn from other personal information | ||
Marketing and Communications Data |
Customer service and technical support
Business Purpose | Data Categories | Lawful Basis For Processing |
|---|---|---|
Answer questions and provide notifications; | Identifiers | Legitimate interest to provide support for our product |
Provide customer and technical support | Personal Data | Consent provided by you to your employer |
Internet or other similar network activity | Fulfilling a contract | |
Geolocation Data | ||
Inferences drawn from other personal information |
Do We Share Your Personal Data?
Workgrid does not sell your personal data as defined by California law. Workgrid may share personal data with the following third parties, including:
Workgrid affiliates; Service Providers, such as Amazon Web Services;
Public entities as required by law (e.g. regulatory, quasi-regulatory, tax or other authorities, law enforcement agencies, courts, arbitrational bodies, and fraud prevention agencies);
Advisors including law firms, accountants, auditors, etc.;
We may also share data with other companies that provide marketing services on our behalf. We will not share your personal data with others for their own marketing purposes. Workgrid is liable for any processing of personal data by such third parties that is inconsistent with data protection principles unless Workgrid was not responsible for the event giving rise to any alleged damage.
How Long Do We Retain Your Data?
We will keep your personal data for as long as reasonably necessary to fulfill the purposes set out in section 3 above and to comply with our legal and regulatory obligations. If we hold your information due to your employer’s usage of our platform, we will retain the data only as so long as required to fulfill the terms of our agreement with your employer. At the completion of the agreement, we will delete any information that we are not legally required to hold.
Will My Data Leave My Country?
If you or your employer is based outside of the United States, your data may be transferred outside your country. If you or your employer is based in the European Economic Area or United Kingdom, Workgrid will generally receive your personal information in reliance on GDPR Standard Contractual Clauses. We use robust IT security standards to protect your data.
How Do We Keep your Personal Data Safe?
We maintain appropriate technical, organizational, and physical safeguards designed to protect the personal data we process in accordance with client instructions and in line with our legal and regulatory obligations. The security measures in place on our website and computer systems are in place to protect the loss, misuse or alteration of the information you provide to us. These security measures cover access controls, encryption, network and host security, physical security, data recovery and business continuity. Our standards may change from time to time as we react to market challenges and changing regulatory requirements in multiple jurisdictions.
Because emails submitted via this website are not protected by the same security measures we use in other areas where we actively collect information, you should be particularly careful in deciding what information you wish to send to us via email.
In the event that you become aware of any actual or potential misuse of any such information or for more information on IT Security please contact us using the details below.
Does Workgrid Use Cookies?
Cookies are sets of information that our web server assigns to you when you visit our web site. Cookies are used in a few areas of our site for maintaining information between pages. These cookies simply carry forward information that you submitted on one screen to the next screen, eliminating the need for redundant entry. We may use IP addresses to derive certain other information concerning businesses visiting our websites as described in this policy, but we do not analyze this information in a way which would reveal the identity of the individual browsing our websites. When you select one of our products or services, register for a newsletter or email alert, fill out an online form, or complete a survey, we may try to identify your browser and we may combine information from cookies, Web beacons, and other information collected online with other data that we maintain about you. You do have a choice whether or not to accept the cookie, however, if you reject the cookie or if cookies are disabled on your web browser, some parts of the web site will not be operable.
We use pixels tags, transparent GIF files, and third-party vendors to help manage our online advertising and promotions. These tags collect anonymous (not personally identifiable) information about which advertisements and promotions bring users to our Web site. The tags enable us to recognize a unique cookie on your Web browser, which in turn enables us to learn how users respond to our online advertisements and promotions. With both cookie and tag technology, the information that we collect and share is anonymous and not personally identifiable. It does not contain your name, address, telephone number, or email address.
Non Workgrid Websites
Workgrid is not responsible for the privacy practices or the content of any other web sites on the Internet that may be linked to the Workgrid web site or platform. Please note that when you click on links to web sites outside of our website or platform, you are transferred to another web site that may not be under Workgrid’s control. We encourage you to read the privacy statements of these linked sites as their privacy policy may differ from ours.
What Rights Do I Have to Learn More About My Personal Data?
Depending your location, you may have rights under applicable data protection regulations such as the EU General Data Protection Regulation and California Consumer Privacy Act. Below please find a list of your rights. Your rights and our responses may vary depending on which laws apply to you. In certain circumstances, there may be exemptions to these rights. For example, we may have a legal obligation to share data with a government entity or may not be able to delete data required to fulfill a regulatory requirement.
Rights Under the GDPR
The Right To Access Your Personal Data
To the extent required by law, we will also tell you of any persons or organizations to whom we have shared the data. Some data we are not required to share depending on your region.
The Right To Rectification/Correction
If you believe the data we have about you is incorrect, you may notify us in writing of what you would like to correct and why. We will respond within thirty business days. If we agree, we will change our records. We will send the change to any organization that has received the inaccurate information from us. It will also be included in any later disclosures to others. If we disagree, we will tell you why. You can write us with a short statement explaining why you believe that the data is incorrect. This will become part of the file. We will also send it to any persons that have received the disputed information from us. It will also be included in any later disclosures to others.
The Right To Restriction of Processing
If you are based in the EEA or in a region with a comparable data protection law, you are entitled to ask us to stop using your personal data, for example if you believe such data is inaccurate or no longer needed.
The Right to Withdraw Your Consent
Where we rely on your consent in order to process your personal data, you have the right to withdraw such consent to further use of your personal data. Please note that for some purposes, we need your consent in order to provide you our services and may not be able to do so if you withdraw your consent.
The Right to Erasure/Deletion
This is also sometimes known as the right to be forgotten. It entitles you, in certain circumstances, to request deletion of your personal data. While we assess every request, there are other factors that will need to be taken into consideration, such as if we have a regulatory obligation to keep your data.
The Right to Object
In certain circumstances, you have the right to object to our processing.
Marketing: You have control over the extent to which we market to you and you have the right to request that we stop sending you marketing messages at any time. You can do this either by clicking on the “unsubscribe” button in any email that we send to you or by contacting us using the details set out below.
Please note that even if you exercise this right because you do not want to receive marketing messages, we may still send you service-related communications where necessary.
Processing based on our legitimate interests: Where we process your personal data based on our legitimate interests, you can object to our processing. We will consider your objection and determine whether or not our legitimate interests prejudice your privacy rights.
The Right to Data Portability
In certain circumstances, you can request that we transfer personal data that you have provided to us to a third party.
Rights Relating to Automated Decision-Making
We do not carry out any automated decision making. If this changes in the future, we will provide you with an updated notice setting out our decision-making process.
The Right to Make A Complaint with the Regulator
You have the right to complain to your country’s Data Protection Regulator if you believe that we have breached data protection laws when using your personal data. Please visit your Data Protection Regulator’s website for more information. Please note that lodging a complaint will not affect any other legal rights or remedies that you have.
Rights Under the CCPA
Right to Access
You have the right to request that we disclose the following to you, in each case, in the twelve (12) month period preceding your request: the categories of personal information we have collected about you; the categories of sources from which the personal information was/is collected our business or commercial purpose for collecting personal information; the categories of third parties with whom we share personal information; the specific pieces of information we have collected about you; the categories of personal information about you, if any, that we have disclosed for monetary or other valuable consideration, and the categories of third parties to which we have disclosed the information, by category or categories of personal information for each third party to which we disclosed the personal information; and the categories of personal information about you that we disclosed for a business purpose.
Right To Deletion
You have the right to request that we delete personal information that we have collected from you, subject to certain exemptions as permitted by law.
You may only make a verifiable consumer request under CCPA for access or data portability twice within a twelve (12) month period. The verifiable consumer request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorized representative of such person; and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
Rights to opt in and out of information selling
California consumers have the right to direct businesses not to sell your personal information (opt-out rights), and personal information of minors under 16 years of age will not be sold, as is their right, without theirs or their parents' opt-in consent. Workgrid does not sell the personal information of consumers.
No discrimination
You have the right not to be discriminated against for exercising any of your CCPA rights. Unless permitted by the CCPA, Workgrid will not:
·Deny you goods or services;
Charge you different prices or rates for goods or services, including through granting discounts, other benefits, or imposing penalties;
Provide you a different level or quality of goods or services; and
Suggest that you may receive a different price or rate for goods or services, or a different level or quality of goods or services.
Response Timing
Workgrid endeavors to respond to a verifiable consumer request within forty-five (45) days of its receipt. If more time is needed, we will inform you of the reason and extension period in writing. Any disclosures that will be provided will only cover the twelve (12) month period preceding our receipt of the verifiable consumer request. If we are unable to fulfill your request, you will be provided with the reason that the request cannot be completed.
No Account Needed
You do not need to create an account with Workgrid to exercise your rights. Workgrid will only use personal information provided in a request to review and comply with the request.
Contact Information
If you have questions regarding Workgrid’s Privacy Policy, you may contact Workgrid via email at: business@workgrid.com or you may write to us at:
Email: Data_Protection_Office@Workgrid.com
Mail: Workgrid Software, Inc.
175 Berkeley Street, Boston, MA 02116
Telephone: 855-437-1472