Our Commitment to Your Privacy
The Site also includes our Chrome extension and customer subdomains, e.g. company-name.screenstepslive.com.
What information do we collect?
“Personal Data’ means any information relating to an identified or identifiable natural person. We collect Personal Data from two classes of users of the Services: Administrators for entities that contract with us or that might be interested in contracting with us (“Customers”) and the persons that Customer desire to use the Services to provide information or training to them (“End Users”).
For Customers, we will collect Personal Data such as the names, e-mail addresses, name of the entity they represent and phone numbers and IP Address you access the Site or Service from. We also will collect content such as knowledge-base articles, checklists and courses (“Program Information) and a history of the Program Information posted (“Program History”). We may also collect credit card information from the account owner for a Customer account.
For End Users, we collect Personal Data such as names, user names and email addresses. We also collect End User IP addresses, search history within the ScreenSteps knowledge base and history of access to the Program Information.
Finally if an End User or Customer submits a comment, we will collect it, and the time and place the comment was posted.
We and our third-party service providers may collect certain tracking information about your use of our Site and Service. For example, we collect;
- Log information (including your IP address, browser type, Internet service provider, referring and exit pages, operating system, dates/time of access, and related data)
- Information collected by cookies and tracking pixels (as discussed below)
- Web beacons (also called "Internet tags" or "clear gifs"; used to count visitors to our Site and which pages were viewed and links clicked)
- Embedded scripts (code temporarily downloaded onto your device to collect information about your interactions with the Service and thereafter deleted or deactivated)
Here are the cookies services we use:
Intercom. Intercom uses “Cookies” to allow you to chat with our agents across multiple pages when using our website to answer your questions and provide customer service. You may deactivate Intercom with the help of a browser add-on if you do not want this live chat functionality. This add-on can be downloaded at: http://www.ghostery.com.
How do we use your data?
Analytics: Company utilizes Tracking Information to access anonymous data to help us understand how our Services are used. We use Tracking Information to customize content for you and improve our Services. Google Analytics and Keen.io provide reports to Company with website trends without identifying individual visitors.
Providing the Services. We use your Personal Data to provide the Services, provide customer service/support and communicate with you regarding the Services and new features. If you are a Customer, it enables us to track your use for customer service purposes. We use the Programming Information created by Customers to provide the Services to End Users connected to the Customers. If you are an End User, we use your Personal Data and history of access to identify you, enable you to establish feedback using comments and track your use of the Services for customers.
Validating Access to Content. For Customers, we use the Personal Data of customers tied to Programming Information and Program History to validate your right to use our Services. We use the Program History and history of access by End Users tied to their Personal Data to validate the identities of End Users and track their use to report to Customers as a part of our Services. These are essential components of our Services.
Direct Marketing. We use Customer Personal Data to communicate with you regarding the provision of the Services, but also to let you know about additional features and services we provide that may be of interest to you. If you do not wish to receive marketing communications, you may opt out at any time by [Need instructions]
How Do We Share Your Data
We will not sell, rent, or share Personal Data with third parties outside of our company without your consent, except in the following ways:
Customers. Our service involves providing a platform to present knowledge base and course content from Customers to End Users. This involves presenting the content and ensuring that certain End Users have accessed and reviewed the content for the benefit of both the Customer and End User. As such, we share End User contact information and applicable End User search history and End User Program Information access history with Customers to confirm End User attendance and review of the content.
Comments. If you post a comment, it will be shared with other End Users accessing the Programming Information and the Customer that posted the Programming Information. Once posted, comments cannot be edited, but may be deleted by contacting the Customer that is providing the Programming Information.
Law Enforcement and Internal Operations
We sometimes contract with other companies and individuals to perform functions or services on our behalf. Our categories of service providers includes software maintenance, data hosting, sending email messages, project management and customer service. We necessarily have to share your Personal Data with such third parties as may be required to perform their functions. We take steps to ensure that these parties take protecting your privacy as seriously as we do, including entering into Data Processing Addendum, EU Model Clauses and/or ensuring they have EU-U.S. and Swiss-US Privacy Shield certification since all of our service providers are in the United States.
Third Party Service Providers
Third Parties that collect and share Personal Data with us regarding End Users or Customers
Hubspot. Hubspot provides a customer relationship management tool that enables us to collect Customer Personal Data and Program information and Program History to onboard and manage customers so that we may provide the Services. Hubspot is self-certified under the US-EU Data Privacy Shield and is subject to a Data Processing Addendum with us with EU Standard Contractual Clauses so that processing may take place in the United States. Please refer to Hubspot’s Privacy Statement for more information.
How is My Data Protected?
We have implemented reasonable administrative, technical and physical security measures to protect your personal information against unauthorized access, destruction or alteration. For example:
- SSL encryption (https) everywhere where we deal with personal data.
- Password protection on your account.
- Data is kept on secure, encrypted servers, located in the US.
- Restricting staff access to Personal Data protected by password logins.
- Regular staff privacy and security training
- Payment services are tokenized
However, because no security system can be 100% effective, we cannot completely guarantee the security of any information we store, process or transmit.
Payments Encryption: Company utilizes only PCI-DSS compliant third party payment processors to ensure the security of your personal information.
Right to Review and Rectify Your Personal Data.
Customers can see a history of what articles and courses they have viewed or complete on their account as well as your Account Information.
You can update most of your Account Information by logging on to your account. However, if additional assistance is required to change or delete inaccuracies within other Personal Data or would like to know what other information about you was collected, please contact us at firstname.lastname@example.org.
Right to Remove or Withdraw Consent.
You have the right to withdraw consent where such consent is required to share or use data and you may request that we delete your Personal Data.
If you would like to delete comments posted, please contact your employer or entity that has provided the Programming Information.
If you receive newsletter or marketing communications from us and no longer wish to receive them, please follow the removal instructions in the email or change your account settings. You can delete your Account Information by logging into your account and canceling your account. However, since your Account Information and Account History is required for us to provide the Services to you, deleting it will also terminate your access to the services. Deleting your Personal Data does not mean that all of it will be removed. We take steps to delete Personal Data that is no longer necessary in relation to provide the Services by deleting it within 120 days of your terminating your account or if the account remains unused for more than one year. Account data will be deleted within 90 days. Account images will be deleted within 120 days and will be permanently removed from our backup systems within 140 days. We may be required by law, to retain it to exercise or defend legal claims, or contractual obligations with our customers to retain some information in connection with our obligation to provide the Services. We may de-identify and anonymize some data for purposes of retaining it.
If you would like us to transmit your Personal Data to another company providing similar services, we will work with them to do so upon request and verification of such request with both the requestor and the company receiving the Personal Data.
Right to Redress
If you are a subject of the European Union or European Economic Area and Switzerland and you believe we have violated any data protection laws that apply to you, you have a right to file a complaint. Please contact the Information Commissioner’s Office in the United Kingdom.
Processing End User Data for Customers
Our Services may involve the processing of Personal Data on behalf of our customers. When we do so, we are acting as processors for the controllers of such data. As such, we take steps to ensure that Personal Data subject to GDPR is processed in accordance with controller instructions and GDPR such as entering into a Data Processing Addendum incorporating EU Standard Contractual Clauses governing the processing, transmission and use of such End User Personal Data. If you wish to exercise your data subject rights to review, rectify, delete or port your End User Personal Data please contact the controller to make such request. If you make the request to us, we will work with the controller to process and evaluate such request to confirm whether deletion is required by GDPR.
Transnational Transfer of Data
If you are providing your Personal Data to us directly to use our Site or Services, we will transmit your data, including your Personal Data, to the United States in order to fulfill our contractual obligations to you.
Your California Privacy Rights
California residents who have an established business relationship with ScreenSteps may make a written request to Company about whether Company has disclosed any Personal Information to any third parties for the third parties' direct marketing purposes during the prior calendar year. To make such a request, please send an email at email@example.com or write us:
PO Box 801
McLean, VA 22101
Third Party Websites
We may link to other websites. When you click on one of these links, you are ‘clicking’ to another website. Company does not control the data collection or privacy practices of such third party sites. We encourage you to read the privacy policies of any third party sites, as their collection, use and storage practices and policies may differ from ours.
Minors Under 16 Years of Age
Company does not knowingly collect or store any personal information from or about children under the age of 16.
If you believe a child under the age of 16 has under any circumstances provided us with personal information and data, a parent or legal guardian can email us at firstname.lastname@example.org to request that their children’s information be deleted from our records.
Do Not Track
Do Not Track” or DNT is a feature enabled on some browsers that sends a signal to request that a web application disable its tracking or cross-site user tracking. At present, our Site does not respond to or alter its practices when a DNT signal is received.
Last Updated: March 4, 2020