Last updated: May 25, 2018 

Governance Compass (“Compass”, “us” or “we”) understands that your privacy is important to you. Compass is strongly committed to protecting your privacy and the personal information that you may provide to us as you access and use our Services. For the purposes of this privacy policy, “Services” includes: www.governance-compass.com and app.governance-compass.com associated with our board service (“Compass”), and all associated services and applications to the Website and Compass, such as our applications for the App Store (iOS), Google Play (Android) and BlackBerry World (BlackBerry OS).  The use of information collected through our Services shall be limited to the purpose of providing the service for which the Client has engaged Compass.

What information is collected?

"Personally Identifiable Information" means any information that may be used to identify an individual including, but not limited to, a first and last name, home or other physical address, an email address phone number or other contact information, whether at work or at home. Compass does not collect your Personally Identifiable Information when you use our Services except as follows: 1. Information that we require in connection with creation of a mandatory user profile that is required for account set-up and user login authentication, which may include without limitation your name, title, email, and personal questions and answers about you for security purposes that you choose to provide. You or your company must have a current subscription to register for and access our Services. 2. Any other optional information about yourself or your company that you may voluntarily disclose at your option in connection with your use of the functionality of our Services. 3. Information on our server logs that we automatically receive and record from your browser, including without limitation your IP address, cookie information and the page you request. 4. When using one of our applications we may collect your device ID; IP Address and language information; device name and model; operating system type, name, and version; and certain other information pertaining to your device. We do not track location-based information from your device. 

How is such information used? 

Your Personally Identifiable Information will be used solely for the following purposes: 1. Making available and providing our Services to you, which may include without limitation providing you with access to our products, delivering technical support services, personalizing our service, and allocating system resources. 2. Communicating with you about service updates, new features, technical issues, and/or changes to this Privacy Policy. 3. Conducting analysis for product development, improving our Services and other internal business purposes, which may include analyzing user profiles and aggregating demographic data supplied by users for market analysis purposes. 4. Conducting analysis of aggregated data for benchmarking purposes used in a completely anonymous manner in our Services. 5. Complying with any requirements of law. We will retain personal data we process on behalf of our Clients for as long as needed to provide the Services to our Clients. Compass will retain and use this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. 

Is the information shared or disclosed?

Compass does not rent, sell or share Personally Identifiable Information it collects about you, nor any information about your company, the Client, to or with third parties, except as follows: 1. Upon request by the company, the Client, that has made you an authorized user of our Services. 2. To Compass subsidiaries and affiliates. 3. To any third-party service providers who are hired by Compass to provide services to Compass related to the provision of the Services, provided that we require these parties to maintain the confidentiality of your information, controlled by confidentiality obligations that are similar to those in the service agreements with our Clients, and disclose it only as necessary for them to provide their services. 4. If required to do so by law or in the good faith belief that such action is necessary to: (1) conform to the edicts of the law or comply with legal process served on Compass or the Service; (2) protect and defend the rights or property of Compass; or (3) act in urgent circumstances to protect the personal safety of users of Compass, its web site(s), product or services or the public from harm or harassment. If we receive legal process calling for the disclosure of any of your Personally Identifiable Information we will, if permitted by law, attempt to notify you via the E-mail address you supplied during registration at least five (5) business days before we respond to the request. 5. If Compass should ever merge with another entity or undergo any other corporate reorganization, we may transfer and sell the information you provide to us through the Services to a third party or share your Personally Identifiable Information with any third party that acquires or succeeds to Compass’ capital stock or business assets to which the Services relate.

Web links and social media

This Website may contain links to external sites, which sites are not governed by this privacy policy, and Compass does not take responsibility for the privacy practices of any third party sites to which we link. We encourage you to review the privacy policies of any such sites before you submit information there. This Website does not contain any social media features.

Payment processing 

Compass does not process payments through its website or its applications. 

Data collected from or for our clients

Compass collects information under the direction of those entities with whom it has entered into a contractual relationship for the provision of Compass Services (its “Clients”), and has no direct relationship with the individuals whose personal data it processes on behalf of its Clients. We will process such data as directed by our Clients; our Clients’ use and disclosure of the personal data they submit to us and these Services are not subject to this privacy statement. If you are using Compass Services on behalf of one of our Clients and would no longer like to be contacted by the Client that uses our service, please contact the Client that you interact with directly. As noted, Compass has no direct relationship with the individuals whose personal data it processes on behalf of its Clients. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct his query to Compass’ Client (the data controller). If a Client requests Compass to amend or remove the data, we comply with such requests in accordance with the contractual relationship we have with the relevant Client and we will respond to their request within 30 working days. 

International transfers

Personally Identifiable Information collected through the Services may be stored and processed in the United Kingdom or any other country in which Compass or its affiliates, subsidiaries or agents maintain facilities, and by using the Services, you consent to any such transfer of information outside of your country.

Security

The security of your personal information and our Clients’ information is important to us. When you enter semi-sensitive information (such as filling a survey), we encrypt the transmission of that information using secure socket layer technology (SSL)/transport layer security technology (TLS). We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. 

Revisions to this policy

We may update this privacy policy to reflect changes to our information practices. If we make any material changes we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on this website, prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of our Services constitutes your agreement to this privacy policy and any updates or revisions. 

Contact us

If you have any questions about this privacy policy, the practices of this website, or your dealings with this website or its applications, please contact us via e-mail at info@governance-compass.com.