Human Cloudz Privacy Policy

Human Cloudz (“Human Cloudz“, “us“, “we“, or “our“) recognize and respect the importance of maintaining the privacy of our Customers and their Personnel. This Privacy Notice describes the types of Personal Data (as defined below) we collect from you when you visit our website (“Site“) and/or use our Platform or App (collectively, the “Services“), and also how we collect, process, transfer, store and disclose such Personal Data. It also describes how you are able to control certain uses of the Personal Data.

“Personal Data” means any information that refers to, is related to, or is associated with an identified or identifiable individual or the workplace of the indivual work for.

If you are registering a “Customer Account” on behalf of a Customer (as an “Account Owner“), you further represent that you are authorized to enter into and bind the Customer to these Terms and register the Customer for to our Platform and Services.

Customer Account. a Customer Account must be created by an Account Owner. An Account Owner may create profiles for other Customer Personnel within the Customer Account (“Personnel Profiles”). Personnel Profiles may be designated either as an additional Account Owner, as an “Administrator” or as an “Employee”. Account Owners, Administrators, and Employees are granted different permissions within the Customer Account.

Administrator. Account Owners may open Administrator Personnel Profiles. Administrators serve as authorized representatives of the Customer and will have certain permissions that allow them to set-up and manage the Customer’s dedicated App on the Customer’s behalf. Administrators shall be authorized to grant access to the App to Employees and to block Employees from using the App, and to set up Employee permissions within the App. Administrators may view all of the Employees’ information and may access all data uploaded by an Employee to the App. The Administrator may also receive reports based on Employees’ use of the App.

Employees. Administrators may open Employee Personnel Profiles. Following creation of a Personnel Profile for an Employee, the Employee will receive a link allowing them to confirm the Personnel Profile and access the Company’s dedicated App. Alternatively, Employees may be sent a link to allow them to request to join the App. After filling out a request form, the Administrator may approve the request and open a Personnel Profile for the applicable Employee.

Our Role can be as Data Processor or Data Controller:

– As Data Processor. When we collect, process and manage Personal Data in the context of providing Services to our business customer (“Customer”). Our Customer is the data controller with respect to such Personal Data and we are the data processor. This includes Personal Data uploaded to our Platform by our Customers’ employees, service providers and / or independent contractors appointed by our Customer (“Customer Data”).

Our processing of such Customer Data on behalf and under the instruction of the respective Customer is governed by our Data Processing Addendum with them. For more information, please refer to Section 8 below.

– As Data Controller. When we process Personal Data of Account Owners and Administrators (excluding Customer Data, as detailed above), and visitors to our websites, and any other prospective customer, certain user data or partner.

Personal Data We Collect, and the usage, Depending on your usage, we collect different types of Personal Data, and we and any of our third-party contractors and service providers use the Personal Data we collect for different purposes, as specified below. You do not have to provide us with your Personal Data, but if you refuse to provide such Personal Data we may not be able to register you to the Platform or Apps and/or provide you with the Services.

Site Visitors – If you are a visitor to the Site, we collect the following types of Personal Data from you:

Contact Information
What Personal Data We Collect: When you request information from us through the Site, fill out (online) forms, or contact us for any other reason, we will collect any data you provide, such as your name and/or email address, and the content of your inquiry. we use this data to respond to your request or inquiry (Legitimate Interest).
Automatically Collected Data
What Personal Data We Collect: When you visit the Site we automatically collect information about your computer or mobile device, including non-Personal Data such as your operating system and browser type, internet service provider (ISP), and Personal Data such as your IP address, browsing history on our site, as well as referring and exit pages (the pages you clicked to reach our site and the pages you clicked from our site), how often you visit or use the Site, which pages you visit and when, which website, ad or email messages were presented to you and any information regarding your viewing history on our Site. For more information about the cookies and similar technologies we use and how to adjust your preferences on the Site, please see our Cookie Policy.

we use this data: (1) to understand how our users use our Site, including to develop new products or services and improve current content, products, and services (Legitimate Interest); (2) to prevent fraud, protect the security of our Site and address any problems with the site.

Account Owners, Administrators & Employees. If you are an Account Owner, Administrator, or an Employee (which includes service providers or independent contractors of one of our Customers) (collectively, a “User”), using the Platform and/or an App in connection with a Customer account, we collect the following types of Personal Data from you:

Registration Data
What Personal Data We Collect: If you are an Account Owner, in order to use our Services, you will be required to register and to provide Personal Data requested by us, which includes your full name, email address and phone number. Administrators and Employees may be requested to provide additional details such as job title, profile picture or any other information as required by either your Administrator or Account Owner.
How we use this data: (1) to provide you access to the Platform, Apps, and/or Services, to respond to your inquiries and requests and to contact and communicate with you (Performance of a Contract); (2) to prevent fraud, protect the security of and address any problems with the Platform, Apps, and/or Services ; (3) to create a general profile of Customers and usage profile of their respective Users in order to improve and optimize our Services.
Automatically Collected Data
What Personal Data We Collect: When you use the Services, we automatically collect information about your computer or mobile device, including non-Personal Data such as your operating system and browser type, internet service provider (ISP) and language settings and Personal Data such as your IP address, browsing history, including referring and exit pages, connectivity, technical and usage data, activity logs, the relevant cookies and pixels installed or utilized on your device, clicks, use of features and other interactions, and any information regarding your viewing history on the Platform or App, browser language, and browser time zone. This data is collected and generated automatically, including through the use of analytics tools (including cookies and pixels) which collects data such as: how often Users use the Services, how Users interact with and use the Services and their various features and technical data concerning the performance, functionality, fraudulent activities and stability of the Platform. For more information about the cookies and similar technologies we use and how to adjust your preferences on the Platform or App, please see the section “Cookies and Similar Technologies” below. How we use this data: (1) to review, to analyze usage and service operations, including to develop new products or services and improve current content, products, and services ; (2) to prevent fraud, protect the security of our Services and address any problems with the Services.
Materials You Upload
What Personal Data We collect: Any personal data, including text, documents and images you upload to the Platform. The usage of this personal data and rule will be determined by the Customer to which your account is associated. For more information on this see Section 8 below.
Geo-location
What Personal Data We Collect: when you use specific functionalities in our App, you may be asked to share your mobile device’s precise (GPS) geo-location information. Such geo-location information may include physical locations visited (latitude & longitude). Whether or not we collect this geo-location data is entirely determined by your Account Owner or Administrator in their sole discretion. For example, they may only allow you to clock-in or clock out if they are able to verify your location via your device. If you do not wish to allow the collection of your precise location, in most cases you will be able to turn off such data collection at any time by accessing the privacy settings of your mobile device and/or adjusting the permissions for the App. Please note, however, that some of the App’s features may not work properly if you turn this off, and we are not responsible for any implication of turning off such geo-location tracking. How we use this data: Human Cloudz does not use geo-location data for its own purposes. The usage of geo-location data and legal basis will be determined by the Customer to which your account is associated. For more information on this see Section 8 below.

Communications

Service Communications. We may send you service-related communications, including service announcements and administrative messages (such as log-in attempts or password reset attempts).

You can ask us to stop sending email by following the “unsubscribe” link you will find on all the email marketing messages we send you. Alternatively, you can contact us at support@humancloudz.com.
You can change the way your browser manages cookies, which may be used to deliver online advertising, by following the settings on your browser as explained in our Cookie Policy.

Sharing the Personal Data We Collect. We share your Personal Data with other entities as follows:

Customers. If you are an Employee, Account Owner or Administrator we may share your Personal Data with the Customer (or any individual acting on their behalf, for example an Account Owner or Administrator) with whom your account is associated. This includes where we are requested to share Personal Data regarding your usage of the Platform or App, your chats, IP address, or geo-location that we have collected. Other Employees within the account may have access to some of your Personal Data (for example Registration Data) depending on the settings within the account (set by you or your Account Owner/Administrator).
Affiliates. We may share information, including your Personal Data, with our affiliates, subsidiaries and holding company (whether existing now or those that may be incorporated in the future). Should Human Cloudz or the holding company or any of its subsidiaries or affiliates undergo any change in control or ownership, including by means of merger, acquisition or purchase of substantially all or part of its assets, your Personal Data may be shared with or transferred to the parties involved in such an event. We may disclose Personal Data to a third-party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal Data may also be disclosed in the event of insolvency, bankruptcy or due to any legal matters.
Service Providers, and Subcontractors. We disclose information, including Personal Data we collect from and/or about you, to our trusted service providers and subcontractors, who have agreed to confidentiality restrictions and who use such information solely on our behalf in order to: (1) help us provide you with the Platform, Apps, and/or Services; (2) aid in our understanding of how you use our Platform, Apps, and/or Services; (3) for the purpose of improving, optimizing and sending promotional communications (see above for more details); and (4) provide us with IT and system administration services, data backup, security, and storage services, data analysis, data enrichment services, and payment processing.
Law Enforcement Related Disclosure. We may share your Personal Data with third parties: (i) if we believe in good faith that disclosure is appropriate to protect our or a third party’s rights, property or safety (including the enforcement of the Terms and this Privacy Notice); (ii) when required by law, regulation subpoena, court order or other law enforcement related issues, agencies and/or authorities; (iii) as is necessary to comply with any legal and/or regulatory obligation; or (iv) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and services.
Law Enforcement Related Disclosure. We may share your Personal Data with third parties: (i) if we believe in good faith that disclosure is appropriate to protect our or a third party’s rights, property or safety (including the enforcement of the Terms and this Privacy Notice); (ii) when required by law, regulation subpoena, court order or other law enforcement related issues, agencies and/or authorities; (iii) as is necessary to comply with any legal and/or regulatory obligation; or (iv) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and services.

Security. We have implemented and maintain appropriate technical and organization security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to Personal Data appropriate to the nature of such data. The measures we take include:

Safeguards – The physical, electronic, and procedural safeguards we employ to protect your Personal Data include secure servers, firewalls, antivirus, and SSL encryption of data.
Access Control – We dedicate efforts for a proper management of system entries and limit access only to authorized personnel on a need to know basis of least privilege rules, review permissions quarterly, and revoke access immediately after termination of our employees.
Internal Policies – We maintain and regularly review and update our privacy related and information security policies.
Personnel – We require new employees of ours to sign non-disclosure agreements according to applicable law and industry customary practice.
Encryption – We encrypt the data in transit using secure TLS/ SSL protocols.
Database Backup – Our databases are backed up on a periodic basis for certain data and are verified regularly. Backups are encrypted and stored within the production environment to preserve their confidentiality and integrity, are tested regularly to ensure availability, and are accessible only by authorized personnel.

While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee that our Sites, Apps, Platform, and Service will be immune from any malfunctions, unlawful interceptions or access, or other kinds of abuse and misuse. As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect user IDs and passwords, please take appropriate measures to protect this information.

Your Rights – How to Access and Limit Our Use of Certain Personal Data.

Subject to applicable law, and in some cases dependent upon the processing activity we are undertaking, you have certain rights in relation to your Personal Data as detailed below.

Right of Access. You have a right to know what Personal Data we collect about you and, in some cases, to have such Personal Data provided to you. Subject to applicable law, we may charge you a fee for this access. Please note that we may not be able to provide you with all the information you request, and, in such case, we will endeavor to explain to you why.
Right to Data Portability. If the processing is based on your consent or performance of a contract with you and processing is being carried out by automated means, you may be entitled to (request that we) provide you or another party with a copy of the Personal Data you provided to us in a structured, commonly-used, and machine-readable format.
Right to Correct Personal Data. You may request that we update, complete, correct or delete inaccurate, incomplete, or outdated Personal Data.
Deletion of Personal Data (“Right to Be Forgotten”). You have a right to request that we delete your Personal Data if either: (i) it is no longer needed for the purpose for which it was collected, (ii) our processing was based on your consent and you have withdrawn your consent, (iii) you have successfully exercised your Right to Object (see below), (iv) processing was unlawful, or (iv) we are required to erase it in order to comply with a legal obligation. We cannot restore information once it has been deleted. Please note that to ensure that we do not collect any further Personal Data, you should also delete our App from your mobile devices, terminate your account with us, and clear our cookies from any device where you have used our Platform or an App. We may retain certain Personal Data (including following your request to delete) for audit and record-keeping purposes, or as otherwise permitted and/or required under applicable law.
Withdrawal of Consent. You may withdraw your consent in connection with any processing of your Personal Data based on previously granted consent. This will not affect the lawfulness of any processing prior to such withdrawal.
Right to Lodge a Complaint. You may have the right to submit a complaint if you have any concerns about how we are processing your Personal Data. We will investigate and attempt to resolve every complaints. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with any information and/or comply with any of your requests, which may include asking you to sign into your account in the Services. If you are an Employee, for any requests to exercise such rights with respect to information we hold about you, please contact your Company’s management directly as our registered Customer.
Face data. The required photo taken for attendances will be deleted in 3 (three) months. We keep the photo for the verification purpose only by account owner.

Retention

We retain Personal Data as necessary to maintain relationship and provide you with our Services and offerings; in order to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (i.e. as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use), all in accordance with our data retention policy and at our reasonable discretion. We may delete information from our systems without notice to you once we deem it is no longer necessary for these purposes.
In some circumstances, we may store your Personal Data for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, audit, accounting requirements and so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data, and whether those purposes can be achieved through other means, as well as applicable legal requirements.
With respect to data within our Services for which we serve as data processors (see “Materials you Upload” in section 1.2.4 above), we will retain that data for as long as directed by the applicable Customer. For example, a Customer may choose to archive Personal Data within the Platform of Employees who have been terminated, in which case such archived data will be retained until deleted by the Customer. If you have any questions regarding such Personal Data, please contact the relevant Customer directly.
Please contact us at support@humancloudz.com if you have any questions regarding our data retention periods.

Cookies and Similar Technologies

We use cookies and similar technologies for a number of reasons, including to help personalize your experience, in order for us to provide and monitor our Services and Sites, to ensure that they perform properly and to analyze our performance and marketing activities. Third parties through which we provide the Services and/or our business partners may be placing and reading cookies on your browser, or using web beacons to collect information in the course of advertising being served on different websites.

What are Cookies? A cookie is a small piece of text that is sent to a user’s browser or device. The browser provides this piece of text to the device of the originating user when this user returns. Some cookies are removed when you close your browser session. These are the “Session Cookies”. Some last for longer periods and are called “Persistent Cookies”. We use both types.
How We Use Cookies. We use cookies and similar technologies for a number of reasons, for example, we use persistent cookies to remember your log-in details and make it easier for you to log-in next time you access the Platform. To learn more about our practices concerning cookies and tracking, please see our Cookie Policy.
We and/or our service providers use analytics tools, including “Google Analytics” to collect and analyze information about the use of the Site and/or Services, such as how often users visit the Site, what pages they visit when they do so, and what other sites and mobile applications they used prior to visiting the Site. By analyzing the information we receive, we may compile statistical information across a variety of platforms and users, which helps us improve our Site and Services, understand trends and customer needs and consider new products and services, and tailor existing products and services to customer desires. The information we collect is anonymous and aggregated and we will not link it to any Personal Data. We may share such anonymous information with our partners, without restriction, on commercial terms that we can determine in our sole discretion. You can find more information about how Google collects information and how you can control such use at https://policies.google.com/technologies/partner-sites.

Controller or Processor

Human Cloudz is the “data controller” of:

its Site Visitors’ and Customers’ Personal Data,
Account Owners’ & Administrators’ Registration Data, and Automatically Collected Data; and
Employees’ Automatically Collected Data, as detailed in Section 1 above.

Accordingly, we assume the responsibilities of a data controller (solely to the extent applicable under law), as set forth in this Privacy Policy.

Human Cloudz is the “data processor” of:

Materials Uploaded by Users,
Employees’ Registration Data, and
Geo-Location Data,

as submitted by our Customers and their Users to the Services, or automatically collected by our Services during the use of our Services by said Users. We process such data on behalf of our Customer (who is the “data controller” of such data) and in accordance with its reasonable instructions, subject to our Terms, our Data Processing Addendum (to the extent applicable) and other commercial agreements with such Customer.

Our Customers are solely responsible for determining whether and how they wish to use our Services, and for ensuring that all individuals using the Services on the Customer’s behalf or at their request, as well as all individuals whose Personal Data may be included in the Services, have been provided with adequate notice and given informed consent to the processing of their Personal Data, where such consent is necessary or advised, and that all legal requirements applicable to the collection, use or other processing of data through our Services are fully met by the Customer. Our Customers are also responsible for handling data subject requests under applicable law, by their Users and other individuals whose data they process through the Services.

Changes to the Privacy Notice

We may update this Privacy Notice from time to time to keep it up to date with legal requirements and the way we operate our business, and we will place any updates on this webpage. Please check this page regularly to make sure you are familiar with the latest version. If we make material changes to this Privacy Notice, we will seek to inform you by notice on our Site or by email.

Comments and Questions

If you have any comments or questions about this Privacy Notice or if you wish to exercise any of your legal rights as set out herein, please contact us at support@humancloudz.com.