This policy also explains your choices about how we use information about you. Your choices include how you can object to certain uses of information about you and how you can access and update certain information about you. If you do not agree with this policy, do not access or use our Website or interact with any other aspect of our business.
Where we provide the Website under contract with an organization (for example your employer) that organization controls the information processed by the Website. For more information, please see Notice to End Users below.
Notice to End Users
Our Website are intended for use by organizations. Where the Website are made available to you through an organization (e.g. your employer), that organization is the administrator of the Website and is responsible for the accounts over which it has control. If this is the case, please direct your data privacy questions to your administrator, as your use of the Website is subject to that organization’s policies. You can find your account administrator contact information in our product website, under Help -> Contact Us menu.
We are not responsible for the privacy or security practices of an administrator’s organization, which may be different than this policy. Please contact your organization or refer to your administrator’s organizational policies for more information.
Your administrators have near complete access to your information in Outcome Chains, including:
- require you to reset your account password
- restrict, suspend or terminate your access to the Outcome Chains product website
- access information in and about your account
- access or retain information stored as part of your account
- change the email address associated with your account
- change your information, including profile information
- restrict your ability to edit, restrict, modify or delete information
- access your messages in Outcome Chains chat rooms
- access your Outcome Chains and content stored in Outcome Chains
Personal Data that we collect
“Personal Data means any information about an individual from which that person can be identified. This information you disclose to us during your access and use of our Website is referred to generally in this policy as “Personal Data “.
Personal Data you choose to provide to us
We collect information about you when you choose to enter it into the Website or otherwise provide it directly to us.
- Depending on your interactions with us, that Personal Data may include:
- Your name
- Your job title
- Your profile photo
- Your employer
- Email address
- Phone number
- You may also choose to provide Personal Data when you:
- Register for access to our Website, or free resource (i.e., any form submission where you provide additional information above and beyond the information listed above)
- Submit a complaint or dispute to us in conjunction with data/privacy issues outlined below in the section titled “EU-U.S. Privacy Shield and Dispute Resolution”
- Email any OCI employee for assistance
- Identify yourself, beyond an anonymous inquiry, via any other means, such as in-person meeting, phone or postal mail
- Upload content to our Website when using our products
Data we automatically collect
- When you access our Website and content online via mobile phone, computer, tablet or any other device, we automatically collect the following information:
- IP address from your ISP connection or mobile carrier
- Cookies and other tracking technologies (e.g., web beacons) to provide functionality and to recognize you across different Website and devices.
- Your device type, browser version, screen resolution, and operating system
- Pages on the Website visited
- Referring websites (websites linking to the Website accessed)
- Amount of time spent on each page of the Website
- Search inquiries using a Website search function
Personal Data entered by other users of our Website
Other users of our Website may provide information about you when they submit content through the Website. For example, we may receive your name and email address from other users when they provide it to share an Outcome Chains with you. Also, an administrator may add your contact information in order to create an Outcome Chains account for you.
How we use your Personal Data
We use data that we collect from you:
- for that which you have provided permission
- as necessary to deliver the Website that you purchase or interact with
- as we might be required or permitted for legal compliance or other lawful purposes
These users may include but are not limited to:
- Delivering, improving, updating and enhancing the Website that we provide to you in order to ensure a positive and effective user experience with our Website.
- Helping to diagnose problems should a technical issue arise with our servers
- Gathering usage information when accessing our Website
- Delivering customized content based upon your activities
- Diagnosing potential problems to include identifying security risks, errors, or needed enhancements to our Website
- Collecting aggregate statistics about the use of our Website
- Tracking the number of users who visit our Website
- Delivering data/search results based upon similar usage trends and analyses
- Helping us to better manage content access trends, and enable the ability to add and/or to delete content based on user utilization
- Understanding and analyzing how you utilize our Website and determining which products and services are most relevant to you.
In addition, we may use your Personal Data for any of the following purposes:
- To respond to an inquiry from you. We have to know how to address you and look up the content to which you are entitled access.
- To enable your use of our Website in accordance with any contractual obligations that we or our business partners are required to deliver
- To verify your identity when you communicate with us
- To contact you regarding contractual or mandatory outages, or other non-transactional requirements
- To provide the Website you requested after you have consented to the collection of Personal Data to facilitate that request
- To send you agreements, invoices, or modifications to the terms and conditions of our Website
- To send you emails relating to any information that you have consented to receive (i.e., opted into)
- To collect payments or to notify you of Website modifications/cancellations
- To provide you with information where we are legally required to do so
We may contact you directly or through a third-party service provider regarding products or services you have signed up or purchased from us, in order to deliver transactional or service related communications. For example, we sometimes send emails to our users to inform them of important or significant product enhancements.
How we share Personal Data that we collect
Sharing your Personal Data with other Website users
When you use the Website, we share certain information about you with other Website users.
For collaboration: You can create content, which may contain Personal Data about you, and grant permission for others to view, share, edit, copy and/or download that content based upon settings that you or your administrator (if applicable) select. Some of the collaboration features of the Website display selected information from your profile to other Website users when you share or interact with specific content. For example, when you share an Outcome Chains to other users, your profile picture and name is displayed next to your shared content, so that other users with access to the information understand who shared the content.
OCI and its affiliates may disclose your Personal Data
We will share your Personal Data where there is a lawful ground to do so, such as:
- To the extent required by law; if we have reason to believe that disclosure will assist in investigations relating to the security and protection of our systems; or in response to search warrants, subpoenas, other judicial or administrative process, national security letters, or other demands that compel the release of Personal Data under applicable law
- In connection with a sale, merger, reorganization, or other transfer of OCI’s business (including under bankruptcy proceedings)
- To meet our contractual obligations where a vendor or third party is processing Personal Data on our behalf.
- To meet your sponsoring organization’s requirements
Data processors and disclosure of your Personal Data
OCI may use the services of third parties. Those services include but are not limited to:
- Website hosting
- Software as a Service (SaaS) applications for customer relationship management and data analytics
- Processing payments
- Marketing automation tools
- Various other SaaS applications for which OCI controls data input
We only share your Personal Data as necessary for any third party to provide the services as requested or as needed on our behalf. These third parties (and any subcontractors) are subject to strict data processing terms and conditions, and are prohibited from utilizing, sharing or retaining your Personal Data for any purpose other than as they have been specifically contracted for (or with your prior consent).
How we store, secure and retain Personal Data
OCI uses data hosting service providers in the United States. We utilize industry-standard administrative, physical, and technical safeguards to protect Personal Data received from our users and website visitors. OCI will protect Personal Data by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. Safeguards for OCI’s internal systems and infrastructure include transport layer security or secure sockets layer protocols to protect and encrypt Personal Data in transit, and data encryption at rest. These methodologies, unfortunately, cannot 100% guarantee that Internet transmissions will be protected, secured, or not otherwise intercepted.
We retain personal data only for as long as necessary for lawful basis of processing a service that you have requested, and thereafter for legitimate legal or business purposes. These might include retention periods mandated by law, contract or similar obligations applicable to our business operations; for preserving, resolving, defending or enforcing our legal/contractual rights; or as needed to maintain adequate and accurate business and financial records.
How we transfer Personal Data that we collect internationally
How you can access and control your information
Access and rectification of your Personal Data
You can access the Personal Data about you that OCI possesses for instance, to make changes or updates to it. Most changes to your Personal Data can be made from your account profile pages on our product website. For any information that you cannot change, please contact OCI for assistance at email@example.com.
Requests to stop processing your Personal Data
In some cases, you may ask us to stop processing your Personal Data except where processing is required by applicable law, or, where OCI has a lawful basis to continue doing so as required by law or permitted by applicable laws and regulations. Most communications to our users provide within them a mechanism to ‘opt out’ of data processing activities. If you are unable to locate within a communication to you the ability to opt out, please contact OCI for assistance at firstname.lastname@example.org. Administrative and contractual emails about your account and services may still be sent.
Providing consent or withdrawing consent
Deleting your Personal Data
Our product website gives you the ability to delete certain information about you from within the Website. For example, you can remove content that contains information about you using our delete feature in our product site, and you can remove certain profile information within your profile settings. You can also request your OCI account administrators to remove your information. Please note, however, that we may need to retain certain information for record keeping purposes, to complete transactions or to comply with our legal obligations. For any information that you cannot delete, please contact OCI at email@example.com for assistance.
Restricting the processing of Personal Data
You may ask that we restrict your personal data (i.e., keep but not use) where:
- The accuracy of the personal data is contested
- The processing is unlawful, but you do not want it erased
- We no longer need the personal data, but you require it for the establishment, exercise or defense of legal claims
- You have objected to the processing and verification as to our overriding legitimate grounds is pending
We can continue to use your personal data:
- Where we have your consent to do so
- For the establishment, exercise or defense of legal claims
- To protect the rights of another
- For reasons of important public interest
For restricting the process of Personal Data, please contact OCI with you request at firstname.lastname@example.org.
You may request a copy of your Personal Data in an electronic format that you can take to other service providers. Depending on the context, this applies to some of your information, but not to all your information. Should you request it, we will provide you with an electronic file of your basic account information within 30 days by providing a link to a location where the data can be downloaded. To make data portability request, please contact OCI with you request at email@example.com.
Cookies and Other Technologies
We may use (or we may contract with service providers to use) various technologies to collect information about your activities while using our Website.
We may deploy on your computer or device with one or more “cookies” in order for our Website to perform optimally, facilitate your access to our Website, and to personalize your user experience, A cookie is a small data file that our Website saves on your computer or mobile device when you visit our Website. It enables our Website to remember your actions, browsing activities, favorite content, and preferences (such as clicking “Remember me” during login). Whenever you sign into our Website, we will record your user ID in a cookie file on your computer or mobile device.
Information collected by cookies may include:
- Your browser or operating system
- Your manner of connecting to the Internet (including the type of device you are using) and the name of your Internet service provider or wireless carrier
- Your Internet protocol (IP) address
- Data relating to malfunctions or problems occurring when you use OCI Website
- App usage for statistical and research purposes
We use a combination of Google Analytics, marketing automation, and cookies on our Website that identify your computer to help us analyze traffic patterns on our Website as well as to provide you with a better experience by showing you content that matches your interests, improving content, and making the Website easier to use.
Through the use of a cookie, OCI may also automatically collect information about your online activity on our Website, such as the web pages you visit, the links you click, and the searches you conduct.
Google will use this information for the purpose of evaluating your use of our Website, creating reports on website activity, and providing other services relating to Internet usage. Google may also pass this information onto third parties when required to do so by judicial or administrative process or otherwise to the extent required by law, or when such third parties process the information on Google’s behalf.
By using one of our Website, you consent to the processing of data about your visit by Google in the manner and for the purposes set out above.
OCI may use standard Internet technology, such as web beacons (also called “clear GIFs” or “pixel tags”), locally stored objects (often referred to as “flash cookies”), and other similar technologies, to deliver or communicate with cookies and track your use of our Website and content presented via the Website. OCI may also include web beacons in email messages to determine whether messages have been opened and acted upon. The information OCI obtains in this manner enables customization of the programs and Website that OCI offers and measures the overall effectiveness of OCI’s online content.
‘Do Not Track’ notifications.
Some browsers allow you to automatically notify websites you visit not to track you using a “Do Not Track” signal. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, we currently do not alter our practices when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” you may wish to visit www.allaboutdnt.com.
OCI does not allow minors, meaning individuals under the age of 18, to utilize any of its Website. Our Website are not targeted to nor intended to be consumed by or designed to entice the use by individuals under the age of 18. If you know of or have reason to believe anyone under the age of 18 has provided us with any personal data, please contact us at firstname.lastname@example.org.
EU-U.S. Privacy Shield and Dispute Resolution
OCI participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework (“PSF”). OCI is committed to protecting all data in accordance with PSF’s applicable Principles. This commitment applies to all Personal Data that OCI controls on behalf of its Website and all Personal Data it processes on behalf for which OCI is not the controller of the data.
Under the PSF, OCI accepts responsibility for the Personal Data received via OCI’s Website and subsequently transferred to third parties in connection with performing business processes to which you have consented, working with partners to provide services mentioned above, or when compelled by applicable law.
With respect to Personal Data received or transferred pursuant to the PSF, OCI is subject to the regulatory enforcement powers of the Federal Trade Commission (hereafter “FTC”).
In compliance with the PSF, OCI commits to resolve complaints about your privacy and our collection or use of your Personal Data. Should you, and specifically anyone who is a citizen of a member state of the European Economic Area, have any privacy or data issues, please contact OCI using a method in the “How to contact us” section.
OCI has further committed to referring unresolved privacy complaints under the PSF to the independent recourse mechanism offered by JAMS. If you have an unresolved privacy or data related violation that OCI has not responded to in three days and effectively resolved within 45 days, please file a complaint with JAMS https://www.jamsadr.com/file-an-eu-us-privacy-shield-or-safe-harbor-claim
(free of charge). Additionally, you may contact the FTC (free of charge) via https://www.ftccomplaintassistant.gov/. The PSF outlines your rights at https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint.
OCI has further committed to refer unresolved PSF complaints to ICDR/AAA Privacy Shield Program, an alternative dispute resolution provider located in the United States. ICDR/AAA provides binding arbitration as an additional dispute resolution mechanism if the JAMS dispute resolution does not resolve your complaint. If the Privacy Shield procedures have not addressed your complaint to your satisfaction, please contact or visit go.adr.org/privacyshield.html for more information or to file a complaint. The services of ICDR/AAA are provided at no cost to you.
If you believe the security of your Personal Data has been compromised via any of OCI’s Website, contact us immediately at 844.624.2666 or email email@example.com
Amendments to this Policy
How to contact us
Outcome Chains, Inc.
17065 Camino San Bernardo, Suite 100
San Diego, CA 92127
By Phone: 844.624.2666
We will respond to all requests, inquiries or concerns within thirty (30) days.