Effective Date: December 15, 2020
INFORMATION COLLECTION AND USE
We may collect certain personally-identifiable information from you as follows:
Device Information. We may collect information about your device, including the Internet Protocol (“IP”) address, hardware model, operations system and version, unique mobile identifiers, mobile network information (as allowed by the mobile network) or platform information (as allowed by the specific platform type). We may ask for access to your location-based information, with your consent.
Pixel Tags/Web Beacons. A pixel tag (also known as a web beacon) is a piece of code embedded on our Site that collects information about users’ engagement on that web page. The use of a pixel allows us to record, for example, that a user has visited a web page or clicked on an advertisement.
Analytics. Squarespace uses analytics tools to help us measure traffic and usage trends for our Site. These tools collect information sent by your browser as part of a web page request, including the web pages you visit, your browser add-ons, and other information that assists us in improving our Site. We may collect and use this analytics information together with your Personal Information and stitch together session data from user visits to build a broader profile of our individual users so that we can serve you better.
Financial Information. If you purchase any products or services from ElastiFlow through our Site, you will provide your financial information. Your financial information will not be disclosed to a third party except only as needed to process the transaction (for example, to a third-party payment processor who is our service provider). We do not retain your financial information once the transaction is completed. As a visitor or user of our Site, we will not ask for your Social Security Number.
Special Offers, Promotions, Newsletters and Updates. If you register to our Site and authorize us to do so, we will contact you, according to your privacy preferences to inform you of special offers, promotional deals, newsletters, and updates to our service offerings.
INFORMATION SHARING AND DISCLOSURE
Business Partners. ElastiFlow may share personally identifiable information with our business partners and affiliates for our and our affiliates’ internal business purposes or to provide you with a product or service that you have requested. We may also provide personally identifiable information to business partners with whom we may jointly offer products or services, or whose products or services we believe may be of interest to you. In such cases, our business partner’s name will appear, along with ours. ElastiFlow requires our affiliates and business partners to agree in writing to maintain the confidentiality and security of personally identifiable information they maintain on our behalf and not to use it for any purpose other than the purpose for which we provided them.
Others. ElastiFlow and its service providers reserve the right to disclose information about you, including personally identifiable information, to:
(a) comply with the law or respond to lawful requests or legal process; (b) protect the rights or property of ElastiFlow, its providers, suppliers and licensors or other clients or third parties; (c) respond to your requests; (d) to enforce our policies or contracts; (e) to collect amounts owed to us; or (f) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of ElastiFlow, its providers, suppliers and licensors or other clients or third parties, or otherwise necessary or advisable.
USE OF SITE
As is true of most websites, ElastiFlow and our service providers may observe your activities on our Site and gather certain information automatically when you visit our Site, such as internet protocol (IP) addresses, Site pages visited, and clickstream data. We and our service providers use this information, which does not identify individual users, to analyze trends, to administer our Site and services, to track users’ movements around our Site and services, to gather demographic information about our user base in aggregate, and for marketing research purposes. Unless we notify you otherwise, we do not link this automatically-collected data to personally identifiable information.
THIRD PARTY SITES AND SOCIAL MEDIA FEATURES
Our Site contains links to third party sites and certain social media features (such as the Facebook Like button) that are not owned or controlled by us. We are not responsible for the privacy practices of such other sites or your interaction with such sites or features. We encourage you to be aware when you leave our Site and to read the privacy statements of every website that collects personally identifiable information.
The security of your personal information is important to us. When you enter your personal information to our Site using our provided forms and Site pages, we use industry standard encryption designed to safely deliver your details. ElastiFlow follows generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we cannot, therefore, guarantee the absolute security of anything transmitted via the Internet, you may take comfort in knowing that ElastiFlow uses commercially acceptable means to protect your personal information. If you have any questions about security on our Site, you are always welcome to contact us at firstname.lastname@example.org.
ACCOUNT INFORMATION & RETENTION
You may update, correct or delete information about you at any time by logging into your online account and modifying your information or by emailing us at email@example.com. We will retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Notice. If you wish to deactivate your account, please email us at firstname.lastname@example.org, but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period. We will respond to your access request within 45 days.
We will retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information to comply with our legal obligations, resolve disputes and enforce our agreements. We will retain personal data we process on behalf of our customers as directed by paying customers. ElastiFlow will retain this personal information as necessary to comply with legal obligations, resolve disputes, and enforce agreements. Upon request, ElastiFlow will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information that we are aware of. To request this information, contact us at email@example.com.
If ElastiFlow goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personally identifiable information will likely be among the assets transferred. ElastiFlow does not guarantee that any entity receiving such information in connection with one of these transactions will comply with all terms of this policy.
CONSENT TO TRANSFER AND PROCESSING
Personal information collected through our Site and/or its services may be stored and processed in the United States or in any other country in which ElastiFlow or its providers (or its or their affiliates or providers) maintain facilities. By using our Site and/or its services, you consent to any such transfer and processing of information outside of your country.
You have the right to opt out of certain uses and disclosures of your personally identifiable information. Where you have consented to ElastiFlow’s processing of your personally identifiable information, you may withdraw that consent at any time and opt-out to further processing by contacting firstname.lastname@example.org. Even if you opt-out, we may still collect and use non-personally identifiable information regarding your activities on our Site and/or information from the advertisements on third party websites for non-interest-based advertising purposes, such as to determine the effectiveness of the advertisements.
Do Not Track (”DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
If you are under the age of 13, please do not use or access our Site or services in any way. We will not knowingly collect or use any personal information from any children under the age of 13. If we become aware that we have collected any personal information from children under 13, we will promptly delete such information from our databases.
INTERNATIONAL DATA TRANSFER AND CONTRACTUAL TERMS
ElastiFlow complies with the General Data Protection Regulation 2016/679 (GDPR). To further support compliance with the GDPR, ElastiFlow commits to resolve complaints about our collection or use of your personal information. EU individuals with inquiries or complaints regarding our GDPR compliance should first contact ElastiFlow at: email@example.com. ElastiFlow has further committed to cooperate with the panel established by the EU data protection authorities (DPAs) regarding unresolved GDPR complaints concerning data transferred from the EU. For certain commercial customers, ElastiFlow will also enter into the model clauses to further support its compliance with the GDPR.
DATA PROTECTION OFFICER
To communicate with our Data Protection Officer, please email firstname.lastname@example.org.
IDENTIFYING THE DATA CONTROLLER AND PROCESSOR
Data protection law in certain jurisdictions differentiates between the “controller” and “processor” of information. In general, Customer is the controller of Customer Data. In general, ElastiFlow is the processor of Customer Data and the controller of Other Information. ElastiFlow , Inc., a US company based in San Francisco, California is the controller of Other Information and a processor of Customer Data relating to Authorized Users who use Workspaces established for Customers in the US and Canada.
Individuals located in certain countries, including the European Economic Area, have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to Information, as well as to seek to update, delete or correct this Information. You can usually do this using the settings and tools provided in your Services account. If you cannot use the settings and tools, contact “Customer Support” for additional access and assistance.
To the extent that ElastiFlow’s processing of your Personal Data is subject to the General Data Protection Regulation, ElastiFlow relies on its legitimate interests, described above, to process your data. ElastiFlow may also process Other Information that constitutes your Personal Data for direct marketing purposes and you have a right to object to ElastiFlow’s use of your Personal Data for this purpose at any time.
DATA PROTECTION AUTHORITY
Subject to applicable law, you also have the right to (i) restrict ElastiFlow’s use of Other Information that constitutes your Personal Data and (ii) lodge a complaint with your local data protection authority or the Federal Trade Commission, which is ElastiFlow’s lead supervisory authority. If you are a resident of the European Economic Area and believe we maintain your Personal Data within the scope of the GDPR, you may direct questions or complaints to our lead supervisory authority:
Federal Trade Commission
600 Pennsylvania Avenue, NW
Washington, DC 20580
Telephone: (202) 326-2222
ElastiFlow works with the following Sub-processors.
Hubspot - CRM / Service Desk
Slack - Transactional Communications
If you have a concern about our handling of your personal information, please get in contact us email@example.com.
If you believe ElastiFlow processes your personal data under reliance of the GDPR and have inquiries and concerns that you would like to discuss with us, please contact us at firstname.lastname@example.org. ElastiFlow will respond to your inquiry within 30 days.
ELASTIFLOW BINDING CORPORATE RULES FOR PII
In addition to the privacy principles and the practices described in our privacy notice, ElastiFlow, Inc has established a set of Corporate Rules (also referred to as Binding Corporate Rules for the Protection of PII).
These Corporate Rules are a commitment by ElastiFlow, Inc. to adequately protect your personal information regardless of where the data resides, and depending upon your location, may provide additional privacy rights through your privacy regulator or a court.
CHANGES TO THIS POLICY