EFFECTIVE October 30, 2024
PRIVACY POLICY
The purpose of this Privacy Policy is to disclose what information we collect, how the information that is provided to FORM is used by our company, and how such information is both protected and made available on our websites. It also describes your choices regarding use, access, and correction of your personal information.
FORM Survey, Key Survey, FORM OpX, GoSpotCheck by FORM, and WorldAPP are the official trademarks of WorldAPP, Inc. This Privacy Policy applies to form.com, www.keysurvey.com owned and operated by WorldAPP, Inc.
Please note that this Privacy Policy only addresses activities of FORM and does not govern the collection and use of information by its customers, business partners, or other companies via WorldAPP platform. When FORM is acting as a processor, use of information collected through our service shall be limited to the purpose of providing the service for which the Customer has engaged FORM.
Information We Collect
From Individuals
FORM collects information from individuals who visit www.keysurvey.com and form.com websites, individuals who register to use our websites and companies who obtained personal information in accordance with applicable laws and make it available to us by means of using our services and products (hereinafter “you” or “Customer”).
When you register, request product information or support, FORM collects your identifiers such as name, middle name, last name; professional or employment-related information such as company name, title, phone, and e-mail address. If you register for an account on www.keysurvey.com and form.com, we will also collect such identifiers as the username (your e-mail address by default) and password you create for your account.
When you purchase services on www.keysurvey.com, and form.com, FORM collects your identifiers and professional or employment-related information such as first name, middle name, last name, phone, e-mail, company name, address, bank details.
When you subscribe to our blog, FORM collects your identifier such as e-mail address.
During the phone call, FORM may collect your identifiers, professional or employment-related information, audio information such as first name, middle name, last name, phone, e-mail or any other data that you may voluntarily provide (education information, commercial information etc.).
When you are subscribing for products of our subsidiaries and affiliates mentioned on form.com website, processing of your personal data is governed by the applicable privacy policies on their websites.
From Customers
FORM may also collect personal information under the direction of its Customers. When the personal information is electronically submitted by our Customers to www.keysurvey.com and form.com for hosting and processing FORM will not access, review, check, share, distribute, or reference any such personal information except as provided in the Agreement with the Customer, or as may be required by the legal regulations.
When we collect personal information under the direction of our Customers, we have no direct relationship with the individuals whose personal data we process. If you are a customer of one of our Customers and would no longer like to be contacted by one of our Customers that use our service, please contact the Customer that you interact with directly.
When Customers are using products of our subsidiaries and affiliates mentioned on form.com website, processing of our Customers’ data is governed by the applicable privacy policies and terms of use located on their websites.
Automatically
We may collect data automatically from your browser or from the services we are providing. For further information on the automatic data collection please refer to our Cookie Policies.
From Other Sources
We may collect personal information from the third parties, including when you give permission to our referral partners or social networks to disclose your information with us or where you have made your personal information publicly available online.
How We Use Your Information
We use personal information in the normal course of our business to perform the services you and our Customers request.
We use the information we collect from you to automatically pre-populate some variables in applications, specifically:
- Your e-mail is used as the application login, as a default value in “From Field” when you set-up e-mail campaigns, and as a default e-mail for application updates and alerts.
- We use your personal information to contact you personally through phone or e-mail regarding your application account or to respond to your request.
We also use the information we collect from you and our Customers during the period of your/our Customer’s subscription and for up to 2 months after the request/subscription expiration to periodically send you/our Customer FORM related e-mail communications that contain application hints/tips, corporate news and updates and/or invites to webinars/training sessions.
Our e-mail notification system stores your e-mail addresses on our server in a secured location. These e-mail addresses are kept on the server for tracking and click notification purposes. Much like form data, these addresses are yours, not the property of FORM. Our Customer Support team may examine these lists for support and troubleshooting purposes. FORM will never use or sell these e-mail addresses to anyone; any attempt to access your e-mail addresses without your authorization will be prosecuted.
When you provide us with personal data during the phone call, we will use it to fulfill the required support services or resolve any issues that you might have. Subject to the applicable legal requirements, we may record the phone calls and further use the call recordings for training and quality monitoring purposes.
When you provide your e-mail address to receive FORM newsletters we will use your e-mail to send the newsletter to you. We may send our newsletters to your updated e-mail address if we receive notification about such change. You may opt-out of receiving FORM newsletters at any time by following the instructions provided with it, updating your user profile, or by sending us an e-mail. We will make sure to process your request within 10 business days.
We also use aggregate information to determine what is of interest to our users as a group, and thereby improve our website.
We may transfer personal information to our partners, subsidiaries and affiliates if you showed your interest in purchasing their products. If you choose to subscribe to our partners’, subsidiaries’ or affiliates’ services, processing of your personal data will be governed by the applicable privacy policies located on their websites.
If required by the law or needed to fulfill our legitimate interests, we may share your personal information with professional third-party advisers (service providers, processors, or joint controllers), e.g. auditors, lawyers, accountants, insurers.
If we engage in the merger, acquisition, reorganization, or other significant corporate changes, we may transfer your data to the third parties involved in this process. If FORM is involved in such actions, you will be notified via e-mail and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information. We may transfer personal information to companies that help us provide our information, products, or services to you, such as agents, service providers, consultants. For instance, we may use e-mail service providers to send out e-mails on our behalf, and a payment processing company to bill you for services. We only share the information we collect with the third parties for the purposes of providing that service. Transfers to subsequent third parties are covered by the service agreements with our Customers. These companies are authorized to use your personal information only as necessary to provide these services to us. We may use service providers which may deliver artificial intelligence and generative artificial intelligence capabilities, machine learning, or other technology to process personal data and create AI-generated responses or other content according to the purposes outlined in this Privacy Policy.
These services may include:
- Payment processing
- Providing customer service
- Sending marketing communications
- Fulfilling subscription services
- Conducting research and analysis
- Providing cloud computing infrastructure
- Auditing and information security services
Survey / Form Data
When you publish your forms or surveys on the www.keysurvey.com and form.com servers, we will provide you with a unique URL to display your forms or surveys. FORM will not provide this URL to any other person or entity but will provide your form to any web browser requesting your unique URL. FORM has the right to review your form contents for violations of our Terms and Conditions of Subscription. If FORM determines your form is in violation of Terms and Conditions of Subscription, we will attempt to contact you and reserve the right to delete your form and results from our systems.
FORM will not attempt to read your form results at any time unless explicitly instructed to do so by you. We do not own the contents of the data for your form. FORM will only have access to your forms for purposes of backup and troubleshooting. When FORM receives your form results, we will store them in a secure location. We will only allow your form results to be downloaded directly into your desktop software. FORM has extensive security measures in place to protect your results while stored on our servers and we will prosecute any attempt to access this information without authorization.
Data Retention
We determine the personal data retention period on the basis of kinds of personal data processed and the potential risk of harm from unauthorized use of the personal data.
FORM retains all records of your orders, forms, and reports you have completed, and other miscellaneous account information for you. This has been done solely for the information and benefit of www.keysurvey.com and form.com users. This data is not accessible to anyone and any company outside FORM besides you, the User. We will retain your information for as long as your account is active, as needed to provide you services, as needed for the records keeping or other purposes stated in this Privacy Policy. If you wish to cancel your account or request that we no longer use your information to provide you services, contact us at [email protected]. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
We will retain personal data we process on behalf of our Customer for as long as needed to provide services to our Customer. FORM will retain this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
We will retain information derived from cookies or other tracking technologies for a reasonable period of time starting from the date such information was created.
Cookies and Tracking Technologies
Cookies (or similar technologies) are used by FORM and our partners, affiliates, analytics, or service providers, including Google, HubSpot, Outreach.io, Capterra, Bing, LinkedIn, and AdRoll. Cookies are small files produced by websites you visit which store information on the device you are using as you navigate the web pages.
These technologies are used for analyzing trends, administering the website, tracking user activity, and gathering demographic information. We may receive reports based on the use of these technologies by our partners on an individual as well as aggregated basis. We may use preferences, advertising, processes, session state, and analytics cookies. We also use cookies to monitor the performance and uptime of our web properties. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited.
To learn more about our cookie policy and how to control the use of our cookies on your device, please visit our Cookie Policy Page.
If you choose to subscribe to our partners’, subsidiaries’ or affiliates’ services and visit their websites, collection of cookies will be governed by the applicable cookie policies located on their websites.
Log Files
As is true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data. We do not link this automatically collected data to other information we collect about you.
Data Processing Purposes and Data Collection Legal Basis
We process personal information for the following purposes and under the following lawful bases:
- to create and manage user accounts necessary for providing the services for which the customer has engaged FORM
We may process your name, last name, middle name, e-mail address, phone number, title, e-mail address, username and password to enable you to create an account necessary for the provision of our services to the customers. The lawful basis for the processing of such data would be the necessity to perform a contract or our legitimate interest to provide our services and to administer the user accounts.
- to provide demos, trials and predict approximate pricing for the particular solution
We may process your name, last name, middle name, e-mail, address, areas of expertise and interests, phone number, title, company name, country or other information you have voluntarily chosen to share on the basis of our legitimate interest to engage future customers, provide our services offerings to customers and future customers.
- to manage our websites
We may process your personal data such as name, last name, middle name, e-mail, IP address, information collected via cookies basing on our legitimate interest to administer our websites and to provide our current customers and prospects with the services we are offering.
- to manage our blog
When you voluntarily provide us with your e-mail address to subscribe to our blog, your consent is our legal basis for such personal data processing.
- to comply with our internal policies and business processes (records keeping, reporting, planning, business strategy etc.)
Under our legitimate interest for business planning, records keeping or other business management operations we may process your name, last name, e-mail address or other information that you provide to us.
- to comply with legal requirements
We might need to process your personal data such as name, last name, middle name, e-mail, address, phone number, title, company name, country or other information you provided to us to comply with the law, respond to requests from the public authorities, courts, to comply with judicial proceedings, court orders and other official rulings. The basis of the personal data processing would be our legal obligation or a legitimate interest in protecting our rights and property, recovering damages, or pursuing other remedies available to us.
- to record phone calls
We may process and record personal data such as name, last name, middle name, phone number or any other personal data that you voluntarily provide us with during the phone calls. Our legal basis for such processing would be either your consent, or our legitimate interest in providing high quality support via phone calls, training our staff or resolution of any issues that might happen during the call or services provision.
- to provide support via chat, e-mails or other means, handle your requests
Your name, last name, middle name, e-mail, phone number or other personal data may be processed during the provision of the support services or handling of your requests by our teams. Our legal basis for the personal data processing in this case would be the legal obligation, the performance of the contract or our legitimate interest to maintaining the high-quality service, fulfilling your requests and communicating with you.
- to comply with any contractual obligations connected with the services provision
We may process your name, last name, middle name, e-mail address, phone number, bank details to fulfill our obligations for the performance of the contact with you, to manage payments, to complete the financial transactions necessary for the performance of the contract.
- to send newsletters or marketing communications
We may process your personal data such as e-mail, name, middle name, last name, phone number to send you our newsletters or marketing communications. We process this data on the basis of our legitimate interest in advertising our services, or your consent.
- to develop and improve our websites
Personal data such as your name, last or middle name, data derived from cookies, your e-mail address may be processed for the purposes of improving user experience, analyzing visitor’s preferences and needs and thus, improving the visitor’s experience on our websites. The processing is based on our legitimate interest to provide our users and visitors with properly working website which provides the most relevant information that would be of interest to our users and visitors.
- to prevent fraud, misuse of services, money laundering
We may process personal data such as website usage, name, middle name, last name, e-mail, address, phone number, bank details or other relevant information on the basis our legitimate interest to provide secure websites and services, to maintain the security of our company, to protect our rights and rights of the other parties.
- to enhance and grow our business
We may process your personal data such as name, middle name, last name, e-mail, address, phone number, title and company name under our legitimate interest to make our business more successful and contribute to its growth.
- to ensure physical security, IT and network security
If you visit our offices or have access to our IT infrastructure, we may process your name, last name, middle name, e-mail, address, company name, time and date of arrival, image, or video under our legitimate interest to ensure the security of our premises and infrastructure, to protect our rights and rights of any third parties.
- to protect your vital interests or vital interests of another natural person
In case of an accident, a force majeure, illness, or other life-threatening situation, we may process your personal data such as name, middle name, last name, e-mail, address, phone number, company name, title or other information about you in our possession under the lawful basis to protect your or third party’s vital interests.
Any other lawful bases for collecting and processing your personal information will depend on the type of personal information collected and purposes of its processing. Depending on the circumstances, FORM may rely on the following lawful basis of your personal data processing:
- you have given your consent to the processing;
- processing is necessary for the performance of a contract with you or for your benefit;
- processing is necessary to comply with FORM’s legal obligations;
- processing is necessary to protect your vital interests or vital interests of another natural person;
- processing is necessary for ensuring FORM’s legitimate interests, and there is no undue risk to your interests, fundamental rights and freedoms;
- processing is required or available under the applicable data protection legislation.
FORM may process the personal information you provided: in the European Economic Area, the United Kingdom, the United States, Poland, Ukraine or any other country outside the European Economic Area, where FORM operates, for use for any of the purposes described in this Privacy Policy.
FORM’s representative in the EU is DPO Consulting, in Paris, France.
You may reach data protection representative at DPO Consulting by sending an e-mail to the following address: [email protected].
You can reach FORM Data Protection Officer at [email protected] or (781) 849-8118.
Your Rights Regarding Your Personal Information
Upon request, if applicable, FORM will provide you with information about whether we hold any of your personal information.
The local data protection laws, including but not limited to the General Data Protection Regulation, UK GDPR, provide you with the following rights regarding your personal information:
- Right to know: you have a right to know whether your information is collected by FORM and be provided with certain information that describes your relationship with FORM.
- Right to access personal information: you may address FORM with a request to access your information processed by FORM at any time. We will disclose and deliver the required information to you in the manner described in the applicable law after receiving a verifiable request from you.
- Right to correct (rectify) your personal information: you may update your personal data within your account whenever needed on your own or e-mail our customer support for any assistance needed.
- Right to request deletion (erasure) of your personal data: right to erasure, “right to be forgotten” may be fulfilled by asking for your personal data FORM holds to be deleted in certain circumstances from FORM and/or third-party systems, as applicable. This includes, for example, situations when the data our company holds on you is no longer needed or when your data has been used unlawfully.
- Right to data portability (transfer your data): this right allows you to receive your personal data from the company and store it for your personal use or reuse it for purposes across various services.
- Right to withdraw consent: where we process your personal data based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. To withdraw your consent to the data processing, please contact FORM support team.
- Right to restrict the processing of personal information concerning you or personal data being processed: upon providing a particular reason, you can limit FORM’s use of your personal information. This is an alternative to request on erasure of your personal data.
- Right to object: you have a right to object to the processing of your personal data by FORM at any time. This will allow you to stop or prevent FORM from processing your personal data. You may object to your personal data processing in relation to all of the personal data FORM holds about you or only to certain information. Objection to processing may also relate to a particular purpose FORM is processing the data for. This right also includes a right to object to FORM processing of your personal information for direct marketing purposes.
- Right not to be subject to automated decision making, including profiling which produces legal effects or significantly affects you: you have a right not to be subject to a decision-making process that is fully automated and does not include any human input on the outcome. FORM does not have automated decision-making on its websites at the moment.
Specific information for California residents
According to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (“CPRA”), as an individual, you have the following rights:
1. Right to know/access your personal data. You may request that FORM discloses to you what personal information we have collected, used, shared, or sold about you, and why we collected, used, shared, or sold that information. Specifically, in respect of the preceding 12-month period you may request that FORM discloses:
- The categories of personal data collected;
- Specific pieces of personal data collected;
- The categories of sources from which FORM collected personal information;
- The purposes for which FORM uses the personal information;
- The categories of third parties with whom FORM shares or sells the personal information, or discloses for a business purpose;
- The categories of information that FORM sells or discloses, or disclosed to a third party for a business purpose.
If you provide us with a verifiable request to access your personal information, we will provide you with this information free of charge, in a readily usable format and within 45 days of the receipt of the request. If your request is complicated or there are other reasonable grounds, we may extend this term to 90 days, upon notice to you.
2. The right to delete personal information collected from you (with some exceptions)
You may request that FORM deletes personal information collected from you and to tell its service providers to do the same. Your verifiable consumer request to delete your personal data, subject to the exceptions provided by the law, will be processed by our company without charge and within 45 days of the receipt of the request. If reasonably necessary, we can extend this period by an additional 45 days upon notice to you. We may retain personal information as authorized under applicable law, such as personal information required or necessary to complete contractual obligations, to provide our services, to detect security incidents, protect against malicious or illegal activities, to identify and fix bugs, to exercise the right to a free speech or other rights, to comply with law enforcement requests pursuant to lawful process, for scientific, statistical or historical research, for our internal purposes that are in line with your reasonable expectations form us, or to comply with legal obligations.
3. Right to Opt-out of Sale or Sharing
You have a right to know whether any of your personal information is “sold” or “shared”, right to opt out of such “sales” or “sharing”. We may “sell” or “share” personal information, in the form of identifiers, IP addresses and internet activity information with the advertising companies for purposes of targeting advertisements on the advertising party’s or third-party websites, applications and services.
When you visit our website, we may share the following categories of information for such interest-based advertising, which may be considered a “sale” or “sharing” as defined by the CCPA: (1) device information and identifiers (IP address and unique advertising identifiers and cookies); and (2) connection and usage information (browsing history or app or website usage).
In the preceding 12 months we have collected and “shared” or “sold” identifiers mentioned above.
Other than collection of personal data via the cookies as stated above, we do not consider that our services constitute a “sale” of personal information under the CCPA.
Our services are not directed to individuals under 16 – so we do not knowingly “sell” or “share” the personal information of consumers under 16 years of age.
Do Not Sell My Personal Information. You may opt-out of such advertising cookies via our cookie banner or cookie preferences button/sign on the website, by going the Network Advertising Initiative and Digital Advertising Alliance websites as further detailed in our Cookie Policy or by contracting our support team via [email protected] or at (781) 849-8118.
4. Right to limit (opt out of) the use and disclosure of sensitive personal information: FORM does not collect sensitive personal information from you, but if you have any additional questions about your sensitive data collection and processing, please feel free to contact us at: (781) 849-8118 or send an e-mail to [email protected]
5. Right to non-discrimination
We will not discriminate against you for exercising any of your data privacy rights. For instance, we will not deny you goods or services; charge you different prices or rates for goods or services, including through granting discounts or other benefits, or impose penalties; provide you a different level or quality of goods or services; suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
6. Right to correct (rectify) your personal information: you may update your personal data within your account whenever needed on your own or e-mail our customer support for any assistance needed.
You may use an authorized agent to submit a request to know, to delete, or to correct your personal information. Before processing the request, we may verify both your and your agent’s identity and request a document authorizing your agent to make the request on your behalf.
California residents may only make a verifiable consumer request twice within a 12-month period.
Metrics
Metrics regarding Access, Delete and Do Not Sell My Personal Information requests submitted pursuant to the CCPA that FORM received, fulfilled (in whole or in part), and denied between January 1, 2023 and December 31, 2023. During the abovementioned period of time FORM did not receive Personal Information Requests pursuant to the CCPA.
Specific information for Colorado, Connecticut, Virginia residents
The state legislation such as Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act provide you, as an individual, the following rights:
- Right to access, request, and receive the personal information: you may address FORM with a request to access your information processed by FORM at any time. We will disclose and deliver the required information to you in the manner described in the applicable law after receiving a verifiable request from you.
- Right to correct (rectify) your personal information: you may update your personal data within your account whenever needed on your own or e-mail our customer support for any assistance needed.
- Right to request deletion (erasure) of your personal data: right to erasure may be fulfilled by asking for your personal data FORM holds to be deleted in certain circumstances from FORM and/or third-party systems, as applicable.
- Right to data portability (transfer your data): this right allows you to receive your personal data from the company in the portable and usable format.
- Right to Opt-out: you have a right to opt-out of the processing of your personal information for purposes of targeted advertising, the sale of personal information; or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- Right to non-discrimination. We will not discriminate against you for exercising any of your data privacy rights. For instance, we will not deny you goods or services; charge you different prices or rates for goods or services for exercising your rights.
- Right to appeal. If we refuse to take action on a request to exercise any of the rights mentioned above or any right provided to you by the law, you may appeal our refusal within a reasonable period after you have received notice of the refusal by contacting us via email at [email protected]. You may contact your State’s Attorney General if you have concerns about the results of the appeal.
Specific information for Utah residents
Utah Consumer Privacy Act provides you, as an individual, with the following rights:
- Right to know, access, request, and receive the personal information: you may address FORM with a request to access your information processed by FORM at any time. We will disclose and deliver the required information to you in the manner described in the applicable law after receiving a verifiable request from you.
- Right to request deletion (erasure) of your personal data: right to erasure may be fulfilled by asking for your personal data FORM holds to be deleted in certain circumstances.
- Right to data portability (transfer your data): this right allows you to receive your personal data from the company in the portable and usable format.
- Right to Opt-out: you have a right to opt-out of the processing of your personal information for purposes of targeted advertising and sale of personal information.
- Right to non-discrimination. We will not discriminate against you for exercising any of your data privacy rights. For instance, we will not deny you goods or services; charge you different prices or rates for goods or services for exercising your rights.
Specific information for Texas residents
The Texas Data Privacy and Security Act provides you, as an individual, with the following rights:
- Right to confirm whether we are processing your personal data and access it: you may address FORM with a request to access your information processed by FORM at any time. We will disclose and deliver the required information to you in the manner described in the applicable law after receiving a verifiable request from you.
- Right to correct (rectify) your personal information: you may update your personal data within your account whenever needed on your own or e-mail our customer support for any assistance needed.
- Right to request deletion (erasure) of your personal data: right to erasure may be fulfilled by asking for your personal data FORM holds to be deleted in certain circumstances from FORM and/or third-party systems, as applicable.
- Right to data portability (transfer your data): if the data is available in a digital format, this right allows you to receive your personal data from the company in the portable and usable format.
- Right to Opt-out: you have a right to opt-out of the processing of your personal information for purposes of targeted advertising, the sale of personal information; or profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you.
- Right to non-discrimination. We will not discriminate against you for exercising any of your data privacy rights. For instance, we will not deny you goods or services; charge you different prices or rates for goods or services for exercising your rights.
- Right to appeal. If we refuse to take action on a request to exercise any of the rights mentioned above or any right provided to you by the law, you may appeal our refusal within a reasonable period after you have received notice of the refusal by contacting us via email at [email protected]. You may contact Texas Attorney General if you have concerns about the results of the appeal Flow (texasattorneygeneral.gov)
We will try our best to respond to an authenticated consumer’s request to exercise any right without undue delay but no later than 45 days after receiving the request. The time period to substantively respond to a request may be extended by an additional 45 days when reasonably necessary.
Our response to your request will be free of charge, up to twice annually per consumer – unless the request is unfounded, excessive, or repetitive, in which case the consumer may be charged a reasonable administrative cost.
If we maintain the deidentified data about you, we will maintain and use your data without attempting to reidentify it.
Specific information for Oregon residents
The Oregon Consumer Privacy Act (OCPA) provides you, as an individual, the following rights:
- Right to confirm whether we were or are processing your personal data and the categories of personal data we are processing or processed.
- Right to access your personal data: you may address FORM with a request to access your information processed by FORM at any time. We will disclose and deliver the required information to you in the manner described in the applicable law after receiving a verifiable request from you.
- Right to correct (rectify) your personal information: you may update your personal data within your account whenever needed on your own or e-mail our customer support for any assistance needed.
- Right to request deletion (erasure) of your personal data: right to erasure may be fulfilled by asking for your personal data FORM holds to be deleted in certain circumstances from FORM and/or third-party systems, as applicable. This includes personal data you provided to us as a controller, personal data we obtained from another source and derived data.
- Right to data portability (transfer your data): this right allows you to receive your personal data from the company in the portable and usable format.
- Right to Opt-out: you have a right to opt-out of the processing of your personal information for purposes of targeted advertising, the sale of personal information; or profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you.
- Right to non-discrimination. We will not discriminate against you for exercising any of your data privacy rights. For instance, we will not deny you goods or services; charge you different prices or rates for goods or services for exercising your rights.
- Right to appeal. If we refuse to take action on a request to exercise any of the rights mentioned above or any right provided to you by the law, you may appeal our refusal within a reasonable period after you have received notice of the refusal by contacting us via email at [email protected]. You may contact Orgon Attorney General if you have concerns about the results of the appeal Attorney General – Oregon Department of Justice (state.or.us)
We will try our best to respond to an authenticated consumer’s request to exercise any right without undue delay but no later than 45 days after receiving the request. The time period to substantively respond to a request may be extended by an additional 45 days when reasonably necessary.
Our response to your request will be free of charge, once annually per consumer. We may charge a reasonable fee to cover the administrative costs of complying with a second or subsequent request within the 12-month period, unless the purpose of the second or subsequent request is to verify that we corrected inaccuracies in, or deleted, your personal data in compliance with your request.
If we maintain the deidentified data about you, we will maintain and use your data without attempting to reidentify it.
Specific information for Montana residents
The Montana Consumer Data Privacy Act (MCDPA) provides you, as an individual, the following rights:
- Right to confirm whether we are processing your personal data and access your personal data, unless such confirmation or access would require us to reveal a trade secret.
- Right to correct (rectify) your personal information: you may update your personal data within your account whenever needed on your own or e-mail our customer support for any assistance needed.
- Right to request deletion (erasure) of your personal data: right to erasure may be fulfilled by asking for your personal data FORM holds to be deleted in certain circumstances from FORM and/or third-party systems, as applicable.
- Right to data portability (transfer your data): this right allows you to receive your personal data from the company in the portable and usable format that allows you to transmit the personal data to another company without difficulties when the processing is carried out by automated means, provided that we are not required to reveal any trade secret.
- Right to Opt-out: you have a right to opt-out of the processing of your personal information for purposes of targeted advertising, the sale of personal information; or profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning you.
- Right to non-discrimination. We will not discriminate against you for exercising any of your data privacy rights. For instance, we will not deny you goods or services; charge you different prices or rates for goods or services for exercising your rights.
- Right to appeal. If we refuse to take action on a request to exercise any of the rights mentioned above or any right provided to you by the law, you may appeal our refusal within a reasonable period after you have received notice of the refusal by contacting us via email at [email protected]. You may contact Montana Attorney General if you have concerns about the results of the appeal: Attorney General’s Office – Montana Department of Justice.
You may use an authorized agent to submit a request regarding your personal information as determined by the law. Before processing the request, we may verify both your and your agent’s identity and request a document authorizing your agent to make the request on your behalf.
We will try our best to respond to an authenticated consumer’s request to exercise any right without undue delay but no later than 45 days after receiving the request. The time period to substantively respond to a request may be extended by an additional 45 days when reasonably necessary.
Our response to your request will be free of charge, once annually per consumer. We may charge a reasonable fee to cover the administrative costs of complying with a request or deny a request, if it is manifestly unfounded, excessive, technically infeasible, or repetitive.
If we maintain the deidentified data about you, we will maintain and use your data without attempting to reidentify it.
Please Contact Us if you have any further questions regarding your rights under the data protection laws.
You can fulfill the above-mentioned and other rights you have regarding your personal information by making the change on our member information page or by e-mailing our Customer Support at [email protected], by contacting us by telephone (781) 849-8118 or postal mail at the contact information listed below. We will respond to your request within a reasonable timeframe and as required by the applicable laws. Laws may also give you the right to designate an agent to exercise these rights on your behalf.
FORM acknowledges that you have the right to access your personal information. However, in situations where FORM processes our customers’ data (acts as processor), it has no direct relationship with the individuals whose personal data it processes. An individual who seeks access, or who seeks to correct, amend, delete inaccurate data, or exercise the other legal rights, should direct his query to FORM’s Customer (the data controller).
Cross-Border Data Transfers
Transfer of personal data collected from Individuals
When processing personal information transferred from the European Union, Switzerland, and United Kingdom to the third countries, we rely on the European Commission’s adequacy decisions about certain countries, use Standard Contractual Clauses approved by the European Commission, UK Data Processing Addendum, implement other means for ensuring adequate safeguards, or obtain your consent. You can receive more detailed information regarding the protection given to your personal data when it is transferred outside the European Economic Area and UK (including a sample copy of suitable safeguards or information regarding where they have been made available) by contacting us.
Transfer of personal data collected from Customers
When our Customers’ personal data is transferred from the EEA, the United Kingdom, or Switzerland to the third countries, FORM relies on Standard Contractual Clauses, UK Data Processing Addendum and adequacy decisions about certain countries, as applicable. FORM has implemented a Data Processing Agreement that includes the Standard Contractual Clauses.
EU-U.S. Data Privacy Framework
WorldAPP, Inc. complies with EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. WorldAPP, Inc. has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.”
WorldAPP Inc. is responsible for the processing of personal data it receives, under the Data Privacy Framework, and subsequently transfers to a third party acting as an agent on its behalf. WorldAPP Inc. complies with the Data Privacy Framework Principles for all onward transfers of personal data from the EU and UK, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Data Privacy Framework, WorldAPP Inc. is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, WorldAPP Inc. may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, WorldAPP, Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.trustarc.com/watchdog/request for more information or to file a complaint. The services of TRUSTe are provided at no cost to you.
Under certain conditions, more fully described on the Data Privacy Framework website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
How We Protect Your Information
Any information collected and processed by FORM is treated with the utmost confidentiality. FORM will not share, sell, rent out or otherwise willfully disclose any personal information gathered from Customers. We will make no public release of any personal information that is collected through our proprietary form tool. All company-specific information gathered through www.keysurvey.com and form.com will be the property of the Customer.
The security of your personal information is of great importance to FORM. We use various kinds of technical, physical, electronic, and administrative security mechanisms that are designed to protect your and our Customer’s data from loss, damage, deletion, misuse, unauthorized access, disclosure or alteration.
If you choose to upgrade your account on www.keysurvey.com and form.com via logging into your account. You do so over a secure connection utilizing Secure Sockets Layer (SSL). This ensures that your personal information is not at risk.
When you register with us or log in to our website, you can use a secure connection, ensuring that no one can steal your username and password, and use that to access any other information about you.
We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
If you have any questions about security on our website, you can e-mail us at [email protected].
Children’s Information
FORM does not target its website to children, and we will never knowingly collect personal information from children. If you have information that your children or any children under your care have provided us with information without your consent, please contact us at [email protected]. If we become aware that a subscriber is under the age of 16 and has registered, we will remove their personal information from our files.
By using www.keysurvey.com and form.com, you represent and warrant that you are not under 16 years of age.
Dispute Resolution Process
In the event that you feel FORM Privacy Policy has been violated, would like to report a vulnerability, or have a security concern regarding FORM services, you may submit a request to the FORM Customer Support team by e-mail at [email protected] or by phone (781) 849-8118 x1.
FORM will review the submitted request and assign it a tracking number. FORM will then respond to you, acknowledging receipt of the request, and outline the next steps in the process.
To help FORM more effectively respond to your requests, please provide us with any supporting material that would be useful in the investigation:
- A detailed description of the complaint, incident, or vulnerability
- Date and time of the occurrence
- Individuals involved in the occurrence
- Tool output
- Any other pertinent information
The information Customers share with FORM as part of this process is kept confidential within FORM and will not be shared with third parties without the Customer’s permission.
If the case has been confirmed, FORM will work to investigate and validate the reported incident or vulnerability. FORM classifies any and all confirmed privacy and security incident reports as Critical and aims for a maximum of one business hour initial response time. If additional information is required in order to validate or reproduce the issue, FORM will work with the Customer to obtain it.
In the event that violations of FORM Privacy and/or Security Policy are discovered, FORM will immediately seek a solution to the violating actions.
Upon completion of the investigation, information on the resolution will be delivered to the Customer.
The individual has a right, under certain conditions, to invoke binding arbitration or lodge a complaint with a supervisory authority.
Testimonials
We display personal testimonials of satisfied customers on our website in addition to other endorsements. With your consent we may post your testimonial along with your name on the www.keysurvey.com and form.com sites. If you want your testimonial updated or removed, please contact us at (781) 849-8118 or send an e-mail to [email protected].
Descriptive References
FORM is authorized to make descriptive references to Customer’s company name and URL on www.keysurvey.com and form.com websites and collateral promotional materials. All references to Customer’s name and URL will insure the benefit to the Customer. If you want your company name and URL removed, please contact us at (781) 849-8118 or send an e-mail to [email protected].
Referrals
If you choose to use the www.keysurvey.com and form.com referral service to refer a company to our website, we will ask for your contact’s name, phone number and e-mail address. We will attempt to contact the referred company using the data you provided. FORM stores this information for the purpose of sending contact e-mails and tracking the success of our referral program. If we are contacting you because your e-mail address was submitted to us via our referral service and wish to request your e-mail address no longer be used by us, you may do so by contacting us at (781) 849-8118 or e-mail us at [email protected].
Live Chat
We use live chat to assist you with any product or service-related questions or if you need support/technical assistance. In order to provide you with support, our live chat support agents will ask you for personal information such as name and e-mail address. If our live chat is offline, we will collect your name and e-mail address so that we may reply to your request later.
Anti-SPAM Policy
The information we collect is never sold, rented out, leased, traded, swapped, marketed, exchanged, bartered, distributed, or disclosed in any way. FORM and its users agree to never initiate any SPAM e-mailing. FORM anti-spam policy falls in compliance with US CAN-SPAM Act of 2003 S. 877.
Third Party Websites
Our website includes links to other websites whose privacy practices may differ from those of FORM. If you submit personal information to any of those websites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.
Third Party Advertisers
We partner with a third party to either display advertising on our website or to manage our advertising on other websites. Our third-party partner may use technologies such as cookies to gather information about your activities on this website and other websites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here. Please note this does not opt you out of being served ads. You will continue to receive generic ads.
Social Media Widgets
Our website includes social media features, such as the Twitter button, the LinkedIn button, the Instagram button, the YouTube button. These features may collect your IP address, which page you are visiting on our website, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing it.
Single Sign-on
You can log in to our website using sign-in services such as Salesforce.com or an Open ID provider. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name and e-mail address to pre-populate our sign-up form. Services like Salesforce.com give you the option to post information about your activities on this website to your profile page to share with others within your network.
Public Member Directory
We will list you in our publicly accessible member directory when you become a new member in our community forums. If you wish to request removal of your information from our directory, you can contact us at [email protected].
Legal Disclosure
We reserve the right to disclose your personal information as required by law and when we believe that disclosure is necessary to protect our rights, protect your safety or the safety of others, detect, prevent or investigate fraud, security or technical issues , enforce Terms of Use, including investigation of potential violations, or respond to requests by public authorities, including to meet national security or law enforcement requirements and/or to comply with a judicial proceeding, court order, or legal process served on our website.
Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes, we will notify you by e-mail (sent to the e-mail address specified in your account) or by means of a notice on this website prior to the change becoming effective.
We encourage you to periodically review this page for the latest information on our privacy practices.
Contact Us
If you have any questions or comments about our Privacy Policy, please contact us at [email protected].
You can also send your request by mail:
WorldAPP, Inc.
859 Willard Street,
Suite 400, Quincy MA 0216
