This Policy describes how we collect, use, and disclose personal information that we obtain about visitors to our website at www.4insite.com (the “Site”) and users of our 4Insite Platform (“Platform”), including any mobile application (“App”) provided to access the Platform (collectively, the “Services”), and how we use and disclose that information.
By visiting the Site, or using any of our Services, you agree that your personal information will be handled as described in this Policy. Your use of our Site or Services, and any dispute over privacy, is subject to this Policy and the Terms of Service for the Platform, including its provisions for limitations on damages and the resolution of disputes.
Please note that residents of California may have additional rights as set forth in the California Privacy Notice below and residents of the European Union may have additional rights as set forth in the GDPR Notice below.
The Information We Collect About You
We collect information about you directly from you and from third parties, as well as automatically through your use of our Site or Services.
Information We Collect Directly From You.
You may browse certain areas of the Site without registering with us or providing us personal information. However, we collect certain personal information from you in certain cases as set forth below:
Information Uploaded to the Platform by Customers.
The Platform and Services can be used by our customers to upload information about their employees and contractors, including name, title, photos, videos, training history, information about the work they are performing, geolocation, salary, hours worked, certifications, employee scorecard, and performance metrics (“User Supplied Data”). You are responsible for ensuring that you have all required permissions and consents to provide such User Supplied Data to us for use in connection with the Services and that our use of such User Supplied Data to provide the Services does not violate any applicable law, rule, regulation, or order. User Supplied Data is used by us to provide the Platform and Services to our customers.
Information We Collect Automatically.
How We Use Your Information
We use your information, including personal information, for the following purposes:
How We Share Your Information
We may share your information, including personal information, as follows:
Please note that except as noted above, we will not sell or share your personal information with any third party for their direct marketing purposes without your consent.
Currently, our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies), but such disabling will impair use of the Site and Services.
Cookies. Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Site and Services, while others are used to enable a faster log-in process or to allow us to track your activities at our Site and Services. There are two types of cookies: session and persistent cookies.
Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our Site who disable cookies will not be able to browse certain areas of the Site or use the Services.
Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.
Security of My Personal Information
We have implemented commercially reasonable precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. For any personal information transferred from another country to the United States, we ensure that we protect your personal information with the level of security required to transfer your personal information from your country to the United State.
Please be aware that despite our efforts, no data security measures can guarantee 100% security. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.
What Rights Do I Have Regarding My Personal Information
You may request access, a copy, modification, or deletion of personal information that you have submitted to us by contacting us at email@example.com. We will use reasonable efforts to accommodate such requests to the extent required by law, provided that we may be required to retain personal information to comply with legal obligations, accounting requirements, or for other business purposes. We may request additional information to verify the identity of the requesting party before responding to a request. Please note that copies of information that you have updated, modified, or deleted may remain viewable in cached and archived pages of the Site for a period of time.
What Choices Do I Have Regarding Use of My Personal Information for Marketing?
We may send periodic promotional or informational emails to you. You may opt-out of such communications by following the opt-out instructions contained in the e-mail. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving emails about recommendations or other information we think may interest you, we may still send you e-mails about your account or any Services you have requested or received from us.
Location of Information
Our Site and Services are offered from the United States. We store any information we collect in the United States. If you access the Services or Site from outside the United States, you agree to the transfer of your information to the United States, which may have less protections for your personal information than your jurisdiction of residence. As noted above, we ensure that any personal information transferred to the United State is subject to security measures required to permit such transfer under the applicable data protection laws of your country of residence.
Children Under 16
Our Site and Services are not designed for children under 16. If we discover that a child under 16 has provided us with personal information, we will delete such information from our systems.
If you have questions about the privacy aspects of our Site or Services or would like to make a complaint, please contact us at firstname.lastname@example.org.
Changes to this Policy
This Policy is current as of the Effective Date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on the Site. If we make any changes to this Policy that materially affect our practices with regard to the personal information we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Site or if you have an account with us, providing notice to the e-mail address in your account (for this reason you should make sure to update your account information promptly if it changes).
CALIFORNIA PRIVACY NOTICE
This California Privacy Notice supplements the Policy and contains the disclosures required under the California Consumer Privacy Act (“CCPA”). For individuals who are California residents, the CCPA requires certain disclosures about the categories of personal information we collect and how we use it, the categories of sources from whom we collect personal information, and the third parties with whom we share it.
Personal Information Covered:
Please note that for California residents, the term personal information means information that identifies, relates to, describes, is reasonably capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer or household as defined in the CCPA. All other capitalized terms have the same meanings as given them in the Policy.
This notice, and the rights specified in this notice, do not apply to personal information collected from or about employees, officers, directors, or contractors of 4Insite that is exempt under California Civil Code section 1798.145(h) or collected from or about employees, officers, directors, or contractors of customers of 4Insite or a 4Insite Provider that is exempt under California Civil Code section 1798.145(n).
Your rights: If you are a California resident, you have the right to request 4Insite to:
NOTE: we do not sell your personal information. Therefore, we do not provide an opt-out for the sale of personal information.
How to Submit Requests:
If you are a California resident who has provided personal information to 4Insite, or a California resident that reasonably believes that 4Insite collected or stores their Personal Information, you may exercise your rights under the CCPA and submit your requests in one of the following methods: (a) by submitting this online form; or (b) by emailing us at privacy@4Insite.com. In addition, we are service providers for User Supplied Data and in such cases, we will send the request to the business that provided such data to the Services for a response.
In order to submit a request, we will need to verify your identity. If you have an account with us that is password-protected, we may verify your identity through our existing authentication practices for your account.
If you do not have an account with us, and your request concerns “categories” of personal information collected, we can request from you two data points of personal information to verify your identity. If you do not have an account with us, and your request concerns specific personal information, we can request from you at least three data points of personal information as well as a signed declaration with penalty of perjury to verify your identity.
Please note that following your verified request, we will send you your personal information from the following email address: email@example.com. (Any response to your request, including any personal information, may be sent as an encrypted file.)
Please note that once you have submitted a request, we will send you a receipt, acknowledging your request, within 10 days. If, for some reason, you do not receive such a receipt within 10 days of your submitted request, please send us an email to firstname.lastname@example.org as an error may have occurred.
We will process and respond to your request within 45 days after it is received (in some cases, as is allowed under the CCPA, this process may be extended by an additional 45-90 days).
Please note, that regarding requests under subsections (a) and (b) above, you may only make two requests in a 12-month period, and the information provided need only cover the 12-month period prior to your request.
Authorized Agents: As a California resident, you also have the right to designate an agent to exercise these rights on your behalf. We may require proof that you have designated the authorized agent to act on your behalf and to verify your identity directly with us. Please contact us at email@example.com for more information if you wish to submit a request through an authorized agent.
Non-Discrimination: We hereby inform you that you have a right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA. If you exercise any of your rights under the CCPA, we may not deny you goods or services for that reason, or subject you to different prices than those paid by other consumers, unless provided otherwise under the CCPA, Federal, or State law.
Notice of Information We Collect: Pursuant to California Civil Section 1798.100(b), this serves as notice of the categories of personal information that we collected within the last 12 months through the Site and Services, the business and commercial purposes for which the information was collected, the categories of sources of personal information and categories of third parties to whom we disclosed personal information:
|Category||Collected||Business or Commercial Purpose||Categories of Sources of Personal Information||Categories of Third Parties to Whom Disclosed|
|A. Identifiers.||YES||To set up user accounts and provide the Site and Services, to market and advertise the Services, respond to inquiries, to process job applications received through the Site and for security and fraud prevention.||You, customers and their Authorized Users that provide User Supplied Data, 4Insite Providers if the Platform is provided to your company by such provider, and our service providers.||Customers and their Authorized Users that access and use the Service, our Affiliates, 4Insite Providers if the Platform is provided to your company by such provider, and our service providers.|
|B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).||YES||To set up user accounts and provide the Site and Services, to market and advertise the Services, respond to inquiries, to process job applications, and for security and fraud prevention.||You, customers and their Authorized Users that provide User Supplied Data, and our service providers.||Customers and their Authorized Users that access and use the Service, our Affiliates, 4Insite Providers if the Platform is provided to your company by such provider, and our service providers.|
|C. Protected classification characteristics under California or federal law.||NO||Not applicable||Not applicable||Not applicable|
|D. Commercial information.||NO||Not applicable||Not applicable||Not applicable|
|E. Biometric information.||NO||Not applicable||Not applicable||Not applicable|
|F. Internet or other similar network activity.||YES||To provide and monitor use of the Site and Services, to market and advertise the Services, for security and fraud prevention and to improve and develop new features for the Sites and Services.||You, customers and their Authorized Users, 4Insite Providers if Platform is provided to your company by such providers and our service providers.||Our Affiliates, 4Insite Providers if the Platform is provided to your company by such provider, and our service providers|
|G. Geolocation data.||YES, if a user has opted in when using the App.||To provide and monitor use of the Site and Services, and for security and fraud prevention.||You, customers and their Authorized Users, 4Insite Providers if the Platform is provided to your company by such providers and our service providers||Customers and their Authorized Users that access and use the Service, our Affiliates, 4Insite Providers if the Platform is provided to your company by such provider, and our service providers.|
|H. Sensory data.||YES, photos and videos may be submitted in connection with the Platform.||To provide the Site and Services and for security and fraud prevention.||You, customers, and their Authorized Users and 4Insite Providers if Platform is provided to your company by such providers.||Customers and their Authorized Users that access and use the Service, our Affiliates, 4Insite Providers if the Platform is provided to your company by such provider, and service|
|I. Professional or employmentrelated information.||x||YES, in connection with job applications and title, salary and other information uploaded to the Platform by customers.||To process job applications received through the Site and in connection with certain features and modules of the Services, such as those relating to training and compliance.||You, customers, and their Authorized Users and 4Insite Providers if Platform is provided to your company by such providers|
|J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).||NO||Not applicable||Not applicable||Not applicable|
|K. Inferences drawn from other personal information.||NO||Not applicable||Not applicable||Not applicable|
Please note that when we disclose personal information for a business purpose to a third-party service provider, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
This GDPR Notice outlines certain additional information that we are obligated to provide to residents of the European Union as well as certain rights such residents have with respect to the processing of their personal data under European Union General Data Protection Regulation 2016/679 and its amendments (“GDPR”). Capitalized terms not otherwise defined in this Policy shall have the meaning given them in the GDPR. For purposes of this notice, we use the terms “personal data,” “process,” “controller,” and “data subject” as each such term is defined in the GDPR.
The controller of personal data collected through the Site is 4Insite, LLC, 5049 Roberts, Avenue, McClellan, CA 95652.
LEGAL BASIS FOR PROCESSING OF PERSONAL INFORMATION
We process the personal data from EU data subjects for the purposes described in the sections entitled “The Information We Collect About You” and “How We Use Your Information” in our Policy. We rely on several legal basis for our processing activities:
We retain personal data about you for the time necessary to accomplish the purpose for which such information was collected, usually for the duration of any contractual relationship or the period in which we provided Services to you or your company, and for any period thereafter as legally required or permitted by applicable law. Our retention policies reflect applicable statute of limitation periods and legal requirements.
DATA SUBJECT RIGHTS
Data subjects of the European Union have the following rights:
If you believe our processing of your personal data violates the GDPR, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged violation.
Submitting Requests. You can submit requests under the GDPR by contacting us at firstname.lastname@example.org. We will respond to all such requests within 30 days of our receipt of the request, unless there are extenuating circumstances, in which event we may take up to 60 days to respond. We will inform you if we expect our response to take longer than 30 days. Please note, however, that certain personal information may be exempt from such rights pursuant to applicable data protection laws. In addition, we will not respond to any request unless we are able to appropriately verify the requester’s identity. We may charge you a reasonable fee for subsequent copies of personal information that you request. In addition, if we consider that a request is manifestly unfounded or excessive, we may either request a reasonable fee to deal with the request or refuse to deal with the request.