Effective: July 3, 2022
If you have any questions or concerns about our use of your Personal Information, please contact us using the contact details provided below.
Please note that the data controller of Personal Information processed through our website is Enrollsy, Inc. The data controller of Personal Information processed through our Services is the Enrollsy customer who has purchased our Services. We rely on your compliance with our Terms of Service or other agreement(s) you may have with us to process Personal Information through the Services.
Enrollsy may process the following information, including Personal Information from and about you:
From your interaction with Sales, Marketing, and Customer Support: We process Personal Information such as your name, company name, email address, phone number, and billing information when you request a demo of our Services, sign up for a plan (including abandoned carts), or request sales information or customer service.
Cookies, Scripts, and Related Technologies: When you visit our website, we (and some third-party service providers) receive and record Personal Information you may have provided, including your digital signature or IP address. The technologies we use to track your movements around our website include cookies, tracking scripts and pixels, and tagging technologies. We use these tools to understand your preferences and improve your experience on our website.
In general, our lawful basis for processing your Personal Information is based on your specific consent or your contract with us.
When you enter into an agreement with us, either by registering for and accessing the website, by executing an agreement in hard copy or by clicking “I Accept” or similar language online, we will process your Personal Information for the purposes of fulfilling the terms of our contract with you. In that case, our processing of your Personal Information is based on the contract, so your withdrawal of consent will only be effective after the purposes for processing that Personal Information has been fulfilled and after we no longer have a legal obligation to process that Personal Information.
In all cases, we will comply with applicable law and we will cease processing your Personal Information after the legal right, obligation, or another lawful basis expires.
If you have questions about or need further information concerning the legal basis on which we process and use your Personal Information, please contact us at email@example.com.
We may use the information we process, including Personal Information, for the following purposes:
We do not sell or otherwise disclose the Personal Information we process about you, except as described below.
We may share your Personal Information:
Enrollsy processes certain Personal Information input or uploaded into our Services by our customers' employees or End Users, including contact information, photos, enrollee activities, notes, and other information.
Enrollsy will use such Personal Information only as necessary to provide and deliver the Services to our customer, to prevent or address any service or technical issues, to respond to a customer's support request, or for any other purpose provided for in the customer agreement, or in accordance with or as may be required by law.
In general, our lawful basis for processing such Personal Information is based on our contract with our customers and, as may be applicable, an End User’s specific consent. We rely on our customers' compliance with our Terms of Service or the separate agreement we may have with our customers to process Personal Information in our Services. We may also process Personal Information for our legitimate business interests, where applicable.
In all cases, we will comply with applicable law and we will cease processing Personal Information after the legal right, obligation, or another lawful basis expires.
If you have questions about or need further information concerning the legal basis on which we process and use your personal information, please contact us at firstname.lastname@example.org.
Enrollsy may access or use the Personal Information processed through the Services for a range of reasons, which may include:
We care about your Personal Information security and take appropriate steps to ensure that your Personal Information is treated securely. The measures we use are designed to provide a security level appropriate to the risk of processing your Personal Information and protect its loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Such measures include, but are not limited to:
Your Personal Information will be processed on servers located in the United States. Your Personal Information may also be transferred to and processed by our third-party service providers, subprocessors, and partners.
Personal Information that is transferred to our third-party service providers, subprocessors, and partners may be processed, in countries other than the country in which you are a resident, according to their individual privacy policies. These countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). We will comply with all applicable laws related to the transfer of your Personal Information to other countries.
Your web browser(s) may offer a "Do Not Track" option, which allows the individual to signal to operators of websites and web applications and services (including behavioral advertising services) that he or she does not wish such operators to track certain of his or her online activities over time and across different websites. We do our best to support Do Not Track requests but cannot guarantee full support based on the variety of internet browsers and technologies which means that we may process information about your online activity both while you are using the website and Services and after your use of the website and Services.
Under applicable data protection, privacy, and other laws, you may have certain rights related to your access and control of your Personal Information. Such rights may include the following:
We may use additional processes to verify your identity before we reveal or delete any of your Personal Information, including two-factor or two-step authentication measures to ensure we can identify you.
This list may not include all of your rights under applicable laws. If you believe you have additional rights, please contact us using the methods herein.
Further, although we currently do not process Personal Information without consent, if we at any time in the future process Personal Information without your express consent, you may opt-out or withdraw consent at any time.
Please note that exercising any of the above rights may limit or eliminate our ability to provide you the website or the Services. If so, we may terminate the Services or your access to the website due to such requests.
We will try to comply with your request(s) as soon as reasonably practicable and at the very least as required under applicable law. Upon receipt of your written request, we will provide you with a copy of your information, although in certain limited circumstances we may not be able to make all relevant information available to you, such as where that information also pertains to another user. In such circumstances we will provide reasons for the denial to you upon request. Please note that if you are an End User, you should contact the entity who is our customer to make any data requests.
Please also note that if you do opt-out of receiving marketing-related emails from us, we may still send you messages for administrative or other purposes directly relating to your use of the website and Services, and you cannot opt-out from receiving those messages while continuing to use the website and Services.
To exercise any of these rights, or if you have any questions about our processing of your Personal Information, please contact us at email@example.com.
The Regulation (EU) 2016/679 (General Data Protection Regulation) made effective in Europe on May 25, 2018 (“GDPR”) requires that we clearly describe to data subjects the data we process and how we use that data. These Privacy Policies do that and if you have any questions for us regarding our data processing, please contact us at firstname.lastname@example.org]. We comply with the GDPR requirements to the extent they apply to us.
We are based in the United States. By accessing or using the Services or otherwise providing information to us, you understand that your information will be subject to processing, transfer, and storage in and to the United States.
Due to the nature of our Services, we typically act as a "Processor" as defined under the GDPR. If you believe that this role should be defined differently, please contact us email@example.com.
Pursuant to the GDPR, residents of the EU (and the EEA, as applicable) have the right to obtain our confirmation of whether we maintain personal information relating to them in the United States. If you are a resident of Europe, upon request from you, we will provide you with access to the Data that we hold about you. Please contact us if you have any questions.
Further, if you are a resident of the United Kingdom ("UK"), to the extent the GDPR as incorporated into UK law pursuant to s.3 of the European Union (Withdrawal Act) 2018 (as amended, the "UK GDPR") is different than the GDPR, we will follow all supplemental requirements under the UK GDPR and you have all rights as a UK citizen under the UK GDPR.
California adopted the California Consumer Privacy Act (“CCPA”), which took effect at the beginning of 2020 and has now adopted the California Privacy Rights Act ("CPRA"), portions of which took effect January 1, 2022. We comply with the requirements of the CCPA and CPRA to the extent they apply to us.
If you are a California resident, you may request to exercise your rights for any Personal Information we have processed in the 12 months prior to your request. Such request covers any categories, sources, purposes, and, if applicable, third parties to whom we share the Personal Information. Further, you can exercise any of your rights free of discrimination, for example, we cannot increase the price of the Services or decrease the quality of the Services because you exercise your rights.
Due to the nature of our Services, we typically act as a "service provider" as defined under the CCPA and CPRA. If you believe that this role should be defined differently, please contact us at firstname.lastname@example.org.
We strive to comply with all data protection and privacy laws in applicable jurisdictions, to the extent such laws apply to us and our Services. We strive to be transparent about our data processing activities and have disclosed our practices throughout these Privacy Policies. If you have any questions about your rights under any applicable data protection and privacy laws, please contact us email@example.com.
Other than for Personal Information processed for the specific purpose of providing the Services to our customers and their End Users, we do not knowingly process Personal Information from individuals who are under 13. If we become aware that we have processed Personal Information from a person under 13, except to provide the Services, and except to the extent allowed or required by law, then we will attempt to delete such Personal Information as soon as possible, subject to our obligations under applicable law. If you are under the age of 18 in the jurisdiction in which you reside and want to make a request under applicable law, we may require you to make such request through a parent or guardian. If you believe that we have processed Personal Information from a person under 13 in contravention of this policy, our provision of the Services, or applicable law, please contact us at firstname.lastname@example.org.