Privacy Policy

Privacy Policy

Effective March 11, 2020

Workgrid Software, Inc. ( “Workgrid” or “we”, “us” and “our”)  focuses on creating solutions that solve the most common and inefficient workplace technology challenges faced by mid-large global businesses.  In doing so, we are committed to "securing" your privacy on the web and on our platform. Please read the following Privacy Notice which explains how we endeavor to build your trust and security through our policies.

In this privacy notice, we explain how we collect, process, use, disclose, and protect your information. This policy applies to all visitors of our website www.workgrid.com and users of our platform. If you are just visiting our website, we collect data only directly from you with your consent.

Workgrid complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework (“Privacy Shield”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union, the United Kingdom and Switzerland to the United States. The Federal Trade Commission has jurisdiction over Workgrid’s compliance with the Privacy Shield.  Workgrid has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.  If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern.  To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

What Personal Data Do We Collect?

The types of personal data we gather and share depend on your relationship to us.  For example, we may gather different data if you are a simply visiting our website, subscribing to our content, or using our platform. If you are using our platform, we do not control which information your employer decides to provide. For a better understanding of what information your employer provides, we recommend contacting your employer directly. In the past 12 months, we have only collected the categories of personal data described in this notice. We do not normally collect GDPR sensitive categories of personal information.  

The type of information your employer may provide to us to use our platform may include:

  • Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, Social Security Number, or other similar identifiers;

  • Personal Data, such as your address, telephone number, employment information, or profile picture;

  • Protected classification characteristics described in California Civil Code § 1798.80(e), including age, marital status, sex (including gender, gender identity, gender expression), or veteran or military status;

  • Biometric Data, such as voice prints or activity patterns used to extract a template or other comparable identifiers;

  • Internet or other similar network activity, such as data about your interaction with our website, application, or advertisement;

  • Geolocation Data, such as physical location or movements.

  • Inferences drawn from other personal data, such as a profile reflecting a person’s preferences or behavior;

  • Marketing and Communications Data, such as your preferences in receiving marketing from us and your communication preferences

If you are not a user of our platform, our collection of your information is limited to:

  • Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, or other similar identifiers;

  • Personal Data, such as your address, telephone number, employment information, or profile picture;

  • Marketing and Communications Data, such as your preferences in receiving marketing from us and your communication preferences

How Do You Collect My Data?

Only you or your employer provide us with personal information in the following circumstances:

  • Your employer and you use our platform and provide your information to us directly

  • You visit our website, call us, or provide your information in person

  • You subscribe to our newsletter, blog, or other content

How Do We Use Your Personal Data?

Workgrid uses your data to provide you our products and services and as otherwise provided in this notice.  We may use your data and the data of our former customers for our business purposes. The below table describes our business purposes, the data categories associated with each purpose, and the lawful basis for processing your personal data:

Day to Day Business and Operations

Business PurposeData CategoriesLawful Basis For Processing
Creating, maintaining, customizing, and securing accounts;Identifiers & Personal DataLegitimate interest in servicing your account
Supporting day-to-day business functions;Protected Classification CharacteristicsConsent provided by you to your employer
Doing internal research for technology and development;Biometric DataFulfilling a contract
Marketing and creating products and services;Internet or other similar network activity
Conducting audits related to a current contact with a consumer and other transactions;Geolocation Data
As described at or before the point of gathering personal data or with your authorization;Inferences drawn from other personal information
Marketing and Communications DataLegitimate interest in servicing your account

Security and Fraud Detection

Business PurposeData CategoriesLawful Basis For Processing
Detecting security issues;IdentifiersLegitimate interest in securing your account
Protecting against fraud or illegal activity, and to comply with regulatory and lawPersonal InformationConsent provided by you to your employwer
Managing risk and securing our systems, assets, infrastructure, and premises;Protected Classification CharacteristicsFulfilling a contract
Help to ensure the safety and security of Workgrid staff, assets, and resources, which may include physical and virtual access controls and access rights management;Internet or other similar network activity
Supervisory controls and other monitoring and reviews, as permitted by law; and emergency and business continuity management;Geolocation
Inferences drawn from other personal information

Regulatory and Legal Requirements

Business PurposeData CategoriesLawful Basis For Processing
Controls and access rights management;IdentifiersLegal obligation
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Workgrid’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by Workgrid is among the assets transferred;Personal Data
Exercising and defending our legal rights and positions;Protected Classification
To meet Workgrid contract obligations;Biometric Data
To respond to law enforcement requests as required by applicable law, court order, or governmental regulations;Internet or other similar network
As otherwise permitted by law;Geolocation Data
Inferences drawn from other personal information
Marketing and Communications Data

Improve Your Customer Experience and Our Products

Business PurposeData CategoriesLawful Basis For Processing
Improve your customer experience, our products, and service;IdentifiersLegitimate interest to improve the customer experience and support for you and your employer
To provide support, personalize, and develop our website, products, and services;Personal DataConsent provided by you to your employer
Create and offer new products and services;Protected Classification CharacteristicsFulfilling a contract
Biometric Data
Internet or other similar network activity
Geolocation Data
Inferences drawn from other personal information
Marketing and Communications Data

Analytics to identify, understand, and manage our risks and products

Business PurposeData CategoriesLawful Basis For Processing
Conducting analytics to better identify, understand, and manage risk and our productsIdentifiers & Personal DataLegitimate interest to manage our product
Protected Classification CharacteristicsConsent provided by you to your employer
Biometric DataFulfilling a contract
Internet or other similar network activity
Geolocation Data
Inferences drawn from other personal information
Marketing and Communications Data

Customer service and technical support

Business PurposeData CategoriesLawful Basis For Processing
Answer questions and provide notifications;IdentifiersLegitimate interest to provide support for our product
Provide customer and technical supportPersonal DataConsent provided by you to your employer
Internet or other similar network activityFulfilling a contract
Geolocation Data
Inferences drawn from other personal information

Do We Share Your Personal Data?

Workgrid does not sell your personal data as defined by California law.  Workgrid may share personal data with the following third parties, including:

  • Workgrid affiliates;

  • Service Providers, such as Amazon Web Services;

  • Public entities as required by law (e.g. regulatory,quasi-regulatory, tax or other authorities, law enforcement agencies, courts, arbitrational bodies, and fraud prevention agencies);

  • Advisors including law firms, accountants, auditors, etc.;

We may also share data with other companies that provide marketing services on our behalf. We will not share your personal data with others for their own marketing purposes. 

In the context of an onward transfer, Workgrid takes responsibility for the processing of personal information it receives under the Privacy Shield and subsequently transfers to a third party acting as an agent on its behalf. Workgrid shall remain liable under the Privacy Shield Principles if its agent processes such personal information in a manner inconsistent with the Principles, unless Workgrid is able to show it is not responsible for the event giving rise to the damage.

How Long Do We Retain Your Data?

We will keep your personal data for as long as reasonably necessary to fulfill the purposes set out in section 3 above and to comply with our legal and regulatory obligations. If we hold your information due to your employer’s usage of our platform, we will retain the data only as so long as required to fulfill the terms of our agreement with your employer. At the completion of the agreement, we will delete any information that we are not legally required to hold.

Will my data leave my country?

If you or your employer is based outside of the United States, your data may be transferred outside your country. If you or your employer is based in the European Economic Area, United Kingdom, or Switzerland we will only transfer your personal data out of your country in reliance on GDPR Standard Contractual Clauses or Privacy Shield. We use robust IT security standards to protect your data.

How Do We Keep your Personal Data Safe?

We maintain appropriate technical, organizational, and physical safeguards designed to protect the personal data we process in accordance with client instructions and in line with our legal and regulatory obligations. The security measures in place on our website and computer systems are in place to protect the loss,misuse or alteration of the information you provide to us. These security measures cover access controls, encryption, network and host security, physical security, data recovery and business continuity. Our standards may change from time to time as we react to market challenges and changing regulatory requirements in multiple jurisdictions. Because emails submitted via this website are not protected by the same security measures we use in other areas where we actively collect information, you should be particularly careful in deciding what information you wish to send to us via email. In the event that you become aware of any actual or potential misuse of any such information or for more information on IT Security please contact us using the details below.

Does Workgrid Use Cookies?

Cookies are sets of information that our web server assigns to you when you visit our web site. Cookies are used in a few areas of our site for maintaining information between pages. These cookies simply carry forward information that you submitted on one screen to the next screen, eliminating the need for redundant entry. We may use IP addresses to derive certain other information concerning businesses visiting our websites as described in this policy, but we do not analyze this information in a way which would reveal the identity of the individual browsing our websites. When you select one of our products or services, register for a newsletter or email alert, fill out an online form, or complete a survey, we may try to identify your browser and we may combine information from cookies, Web beacons, and other information collected online with other data that we maintain about you. You do have a choice whether or not to accept the cookie, however, if you reject the cookie or if cookies are disabled on your web browser, some parts of the web site will not be operable.

We use pixels tags,transparent GIF files, and third party vendors to help manage our online advertising and promotions. These tags collect anonymous (not personally identifiable) information about which advertisements and promotions bring users to our Web site. The tags enable us to recognize a unique cookie on your Web browser, which in turn enables us to learn how users respond to our online advertisements and promotions. With both cookie and tag technology, the information that we collect and share is anonymous and not personally identifiable. It does not contain your name, address, telephone number, or email address.

Non Workgrid Websites

Workgrid is not responsible for the privacy practices or the content of any other web sites on the Internet that may be linked to the Workgrid web site or platform. Please note that when you click on links to web sites outside of our website or platform, you are transferred to another web site that may not be under Workgrid’s control. We encourage you to read the privacy statements of these linked sites,as their privacy policy may differ from ours.

What Rights Do I Have to Learn More About

My Personal Data? Depending your location, you may have rights under applicable data protection regulations such as the EU General Data Protection Regulation and California Consumer Privacy Act. Below please find a list of your rights. Your rights and our responses may vary depending on which laws apply to you.

The Right To Access Your Personal Data To the extent required by law, we will also tell you of any persons or organizations to whom we have shared the data. Some data we are not required to share depending on your region.

The Right To Rectification/Correction If you believe the data we have about you is incorrect, you may notify us in writing of what you would like to correct and why.  We will respond within thirty business days.  If we agree, we will change our records.  We will send the change to any organization that has received the inaccurate information from us.  It will also be included in any later disclosures to others. 

If we disagree, we will tell you why.  You can write us with a short statement explaining why you believe that the data is incorrect.  This will become part of the file.  We will also send it to any persons that have received the disputed information from us. It will also be included in any later disclosures to others.

The Right To Restriction of Processing If you are based in the EEA or in a region with a comparable data protection law, you are entitled to ask us to stop using your personal data, for example if you believe such data is inaccurate or no longer needed.

The Right to Withdraw Your Consent Where we rely on your consent in order to process your personal data, you have the right to withdraw such consent to further use of your personal data. Please note that for some purposes, we need your consent in order to provide you our services and may not be able to do so if you withdraw your consent.

The Right to Erasure/Deletion This is also sometimes known as the right to be forgotten. It entitles you, in certain circumstances, to request deletion of your personal data. While we assess every request, there are other factors that will need to be taken into consideration, such as if we have a regulatory obligation to keep your data.

The Right to Object In certain circumstances, you have the right to object to our processing.

Marketing: You have control over the extent to which we market to you and you have the right to request that we stop sending you marketing messages at any time.  You can do this either by clicking on the “unsubscribe” button in any email that we send to you or by contacting us using the details set out below.

Please note that even if you exercise this right because you do not want to receive marketing messages, we may still send you service related communications where necessary.

Processing based on our legitimate interests: Where we process your personal data based on our legitimate interests, you can object to our processing. We will consider your objection and determine whether or not our legitimate interests prejudice your privacy rights.

The Right to Data Portability

In certain circumstances, you can request that we transfer personal data that you have provided to us to a third party.

Rights Relating to Automated Decision-Making

We do not carry out any automated decision making. If this changes in the future, we will provide you with an updated notice setting out our decision-making process.

The Right to Make A Complaint with the Regulator

You have the right to complain to your country’s Data Protection Regulator if you believe that we have breached data protection laws when using your personal data. Please visit your Data Protection Regulator’s website for more information. Please note that lodging a complaint will not affect any other legal rights or remedies that you have.

Privacy Shield and Dispute Resolution

In compliance with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, Workgrid is committed to resolving your complaints regarding our privacy practices. You may, under certain conditions, invoke binding arbitration for any complaints regarding Privacy shield Compliance not resolved by any of the other Privacy Shield mechanisms. If you have any concerns, please contact us using the information in the “How To Contact Us” section below. Any privacy complaints from EU consumers regarding data received under Privacy Shield that we cannot resolve, we will refer to International Center for Dispute Resolution-American Arbitration Association (ICDR-AAA), an independent dispute resolution mechanism. For more information or to file a complaint, please visit https://go.adr.org/privacyshieldfiling.html.

Contact Information

If you have questions regarding Workgrid’s Privacy Policy, you may contact Workgrid via email at: business@workgrid.com or you may write to us at: Email:               Data_Protection_Office@Workgrid.com

Mail:          Workgrid Software, Inc. 175 Berkeley Street, Boston, MA 02116 Telephone: 855-437-1472