ENROLLSY, INC. PRIVACY POLICY

Effective July 3, 2017

Updated: January 13, 2021


INTRODUCTION

Enrollsy, Inc. ("Enrollsy") respects your privacy and is committed to protecting it. Our Privacy Policy explains how we do this and how you can exercise your privacy rights. This policy uses the term "Personal Information" to mean information relating to an identified or identifiable individual (e.g., name, address, email address, or phone number).

If you have any questions or concerns about our use of your Personal Information, please contact us using the contact details provided below.

Enrollsy is a cloud-based software provider headquartered in Utah. We help companies manage and optimize their enrollment and customer engagement processes. For simplicity, we have separated this Privacy Policy into two sections. The first explains how Enrollsy collects and uses the Personal Information of visitors to our website found at www.enrollsy.com (the "Website Privacy Policy"). The second explains how our customers use our cloud enrollment software and associated apps (the "Services") to collect Personal Information from their customers (the "Services Privacy Policy"). Please note that the data controller of Personal Information collected through our website is Enrollsy, Inc. The data controller of Personal Information collected through our Services is the Enrollsy customer who has purchased our Services.

Website Privacy Policy

PERSONAL INFORMATION WE COLLECT

Enrollsy may collect the following information, including Personal Information from and about you:

From your interaction with Sales, Marketing, and Customer Support: We collect Personal Information such as your name, company name, email address, phone number, and billing information when you request a demo of our Services, sign up for a plan (including abandoned carts), or request sales information or customer service.

Cookies, Scripts, and Related Technologies: When you visit our website, we (and some third-party service providers) receive and record Personal Information you may have provided, including your digital signature or IP address. The technologies we use to track your movements around our website include cookies, tracking scripts and pixels, and tagging technologies. We use these tools to understand your preferences and improve your experience on our website.

HOW ENROLLSY USES YOUR PERSONAL INFORMATION

We may use the information we collect, including Personal Information, for the following purposes:

  • To customize our website: We will analyze the data we collect about your use of our website.
  • To communicate with you: If you request more information about our products, we will contact you using the information you provide. We may send you information about products and services with your prior opt-in consent where required by applicable law.
  • To aggregate data: We anonymize and aggregate data collected through our website and create statistics that help us improve our business. These statistics do not identify any customers or individuals or contain any Personal Information.

HOW ENROLLSY MAY DISCLOSE OR SHARE YOUR INFORMATION

We do not sell or otherwise disclose Personal Information we collect about you, except as described below.

We may share your Personal Information:

  • With our partners and third-party service providers. We authorize these service providers to use or disclose the information only as necessary to perform services on behalf of Enrollsy (for example, to support the delivery of, provide functionality on, or help enhance our website's security or to process payments). We require these service providers by contract to safeguard the privacy and security of Personal Information that they process on our behalf;
  • To any competent law enforcement body, regulatory, government agency, court, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  • To an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, provided that we inform such third parties that they must use your Personal Information only for the purposes disclosed in this Website Privacy Policy; and
  • To any other person with your consent to the disclosure.

Our website may contain links to third-party websites or third-party applications ("apps"). When you click on a link to any other website, app, or location, you will leave our website and go to another site. Another entity may collect Personal Information or anonymized data from you. We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Website Privacy Policy do not apply to these external websites, apps, or content, or to any collection of your Personal Information after you click on links to such outside websites or apps. We encourage you to read the privacy policies of every website you visit or app you use. The links to third party websites, apps, or locations are for your convenience. They do not signify Enrollsy's endorsement of such third parties or their products, apps, content, or websites.

HOW ENROLLSY HOLDS AND SECURES YOUR INFORMATION

We care about your Personal Information security and take appropriate steps, including technical and organizational measures, to ensure that your Personal Information is treated securely per this Website Privacy Policy. These measures are designed to provide a security level appropriate to the risk of processing your Personal Information.

INTERNATIONAL DATA TRANSFERS

Your Personal Information may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different from your country (and, in some cases, may not be as protective).

Specifically, our Website servers are located in the United States, and our third-party service providers and partners operate worldwide. This means that we may process your Personal Information in any of these countries.

However, we have taken appropriate safeguards to require that your personal information remain protected according to this Website Privacy Policy.

If you are a visitor from the European Economic Area, our legal basis for collecting and using the personal information described above will depend on the Personal Information concerned and the specific context in which we collect it.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us at info@enrollsy.com.

HOW LONG ENROLLSY RETAINS YOUR PERSONAL INFORMATION

We retain your Personal Information if we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it. Suppose this is not possible (for example, because your Personal Information has been stored in backup archives). In that case, we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

YOUR DATA PROTECTION RIGHTS

You have the following data protection rights:

  • If you wish to access, correct, update, or request deletion of your Personal Information, you can do so at any time by contacting us at info@enrollsy.com.
  • In addition, if you are a resident of the European Union, you can object to the processing of your Personal Information, ask us to restrict the processing of your Personal Information, or request portability of your Personal Information by contacting us at info@enrollsy.com.
  • You have the right to opt-out of the marketing communications we send you at any time. You can do so by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), please contact us at info@enrollsy.com.
  • Similarly, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted beforehand. Withdrawal will also not affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
  • You have the right to complain to a data protection authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights per applicable data protection laws.

Services Privacy Policy

This Services Privacy Policy does not apply to our customers, who manage the Personal Information they collect through our Services under their privacy policies. Enrollsy only processes Personal Information stored in our Services as a data processor on behalf of our customers and per their instructions. We have no direct relationship with the individuals whose Personal Information our customers collect. For example, if you enroll online with one of our customers, your Personal Information will be automatically transferred to Enrollsy. However, the company offering enrollment is the data controller. You should contact that entity directly with any questions you may have regarding its privacy policies or data processing practices, or if you want to modify your Personal Information, restrict its processing, or delete it from our Services.

PERSONAL INFORMATION WE PROCESS

Enrollsy processes certain Personal Information input or uploaded into our Services by our customers' employees, including contact information, photos, enrollee activities, notes, and other information.

Enrollsy will use such Personal Information only as necessary to provide and deliver the Services to the customer, to prevent or address any service or technical issues, to respond to a customer's support request, or for any other purpose provided for in the customer agreement, or in accordance with or as may be required by law.

HOW ENROLLSY USES YOUR PERSONAL INFORMATION

Enrollsy may access or use the Personal Information collected through the Services for a range of reasons, which may include:

  • To provide, operate, optimize and maintain the Services;
  • To address customer questions and support requests;
  • To manage Enrollsy's platform, system administration, and security;
  • To compile aggregated statistics about the operation and use of the Services and to better understand the preferences of our customers;
  • To send customers technical alerts, reports, updates, security notifications, and other Service-related communications;
  • To carry out research and development to improve our products and services;
  • To investigate and prevent fraud, unauthorized access or use of Services, breaches of terms and policies, and other wrongful behavior;
  • To carry out other legitimate business purposes and other lawful purposes about which Enrollsy will notify You.

HOW ENROLLSY MAY DISCLOSE OR SHARE YOUR INFORMATION

We do not sell or otherwise disclose Personal Information we process in our Services, except as described in this Services Privacy Policy or as we disclose to you when this information is collected. As described in more detail below, we may share your Personal Information:

  • With third-party data subprocessors. We authorize these subprocessors to use the information only as necessary to assist Enrollsy in providing the Services (for example, to provide cloud storage services, support ticketing, payment processing, or to enhance security). We require these subprocessors by contract to safeguard the privacy and security of any Personal Information that they process on our behalf;
  • To any competent law enforcement body, regulatory, government agency, court, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  • To an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets, provided that we inform such third parties that they must use your Personal Information only for the purposes disclosed in this Services Privacy Policy; and
  • To any other person with your consent to the disclosure.

Our customers may choose to integrate their Enrollsy accounts with other third-party service providers. While we try to select integration partners that share our privacy standards, their websites and services are outside of our control and are not covered by this Services Privacy Policy, and we are not responsible for their content, security, or privacy practices.

HOW ENROLLSY HOLDS AND SECURES YOUR INFORMATION

We care about your Personal Information security and take appropriate steps to ensure that your Personal Information is treated securely. The measures we use are designed to provide a security level appropriate to the risk of processing your Personal Information and protect its loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Such measures shall include, as appropriate:

  • the pseudonymization and encryption of Personal Information;
  • the ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services;
  • the ability to restore the availability and access to Personal Information promptly in the event of a physical or technical incident;
  • a process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing.

INTERNATIONAL DATA TRANSFERS

Your Personal Information may be transferred to and processed in countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective).

Specifically, Services are hosted on servers located in the United States. This means that your Personal Information is processed in the United States. We reserve the right to work with third-party processors of information who may reside outside of the United States, which means there is a chance some of your information may be processed outside of the United States.

However, we have taken appropriate safeguards to require that your personal information remain protected according to this Services Privacy Policy.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us at info@enrollsy.com.

HOW LONG ENROLLSY RETAINS YOUR PERSONAL INFORMATION

We retain Personal Information we process where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it or, if this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

Any Personal Information we process on behalf of our customers is retained per the timeframes set out in the relevant customer agreements.

YOUR DATA PROTECTION RIGHTS

You have the following data protection rights:

  • If you wish to access, correct, update, or request deletion of your Personal Information, you can do so at any time.
  • In addition, if you are a resident of the European Union, you can object to the processing of your Personal Information, ask us to restrict the processing of your Personal Information, or request portability of your Personal Information.
  • Similarly, if Personal Information was collected with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing conducted prior to your withdrawal, nor will it affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
  • You have the right to complain to a data protection authority about the collection and use of your Personal Information. For more information, please contact your local data protection authority.

Please note that you should direct any requests related to the data protection rights described above to the Enrollsy customer who holds the relevant Enrollsy account. As a data processor of any Personal Information stored and processed on the Services, Enrollsy will not respond directly to such requests and refer them to the relevant Customer.

CHILDREN'S PRIVACY

We do not knowingly collect, maintain, or use Personal Information received from children under 13 years of age, and no part of our website is directed to children under the age of 13. We will take steps to delete it if we learn we have inadvertently collected it.

If you learn that your child has provided us with Personal Information without your consent, you may alert us at info@enrollsy.com. If we learn that we have collected any Personal Information from children under 13, we will promptly take steps to delete such information and terminate the account.

UPDATES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to change legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

You can see when this Privacy Policy was last updated by checking the "last updated" date displayed at the top of this Privacy Policy.

CONTACT INFORMATION

If you want to provide comments or questions about our Privacy Policy or to exercise your rights, feel free to contact us at info@enrollsy.com.