Last updated October 2023
Estimand Inc. and our subsidiaries (“Estimand” or “we”) are committed to complying with data protection legislation, including the data protection regime introduced by the General Data Protection Regulation (EU Regulation 2016/679, the “GDPR”), California Consumer Privacy Act of 2018 (the “CCPA”) as amended by the California Privacy Rights Act of 2020, and other applicable US consumer privacy laws. This privacy notice contains information on what personal data we collect, what we do with that information, and what rights you have.
We process some personal data in order to run our business. There are a limited number of circumstances where we may share your information with third parties (for example, pursuant to a court order, for our marketing purposes, if we are part of a merger, or with our business partners and service providers who support our business or collaborate with us). We take the security of your information seriously and take steps to keep your information secure. Please read the full Privacy and Security Statement below and you can always contact us if you have questions.
This Privacy and Security Statement does not apply to information collected on any third-party site or application (including advertising) that may link to or be accessible from our websites. We are not responsible for the privacy policies or data collection, use and disclosure practices of those sites. We encourage you to review the privacy policies of each site you visit.
Please read this Privacy and Security Statement carefully to understand Estimand’s policies and practices regarding your information and how we will treat it. By accessing or using any of our websites or services (including email communications), you agree to this Privacy and Security Statement. This Statement may change from time to time, and these changes may affect how we use the information described below, so please check the Privacy and Security Statement periodically for updates.
Notice about how we use and protect personal information
We collect several types of information for our business operations, including but not limited to:
Information you provide to us. When you navigate our websites or contact us, we may request or you may choose to provide us with certain information. This may include information by which you may be personally identified (“personal information”), such as name, employer, e-mail address or telephone number, and records and copies of your correspondence with us. For security purposes, we may also collect personal information from you if you visit one of our offices.
Information collected from forms on our websites. This may include information provided at the time of registering to use portions of our websites or our products and services, posting material, attending or registering to attend our virtual or in-person events, or requesting further services. We may ask you for information when you report a problem with our websites, products or services.
Usage details, IP addresses and cookies. As you navigate through and interact with our websites, we may automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device, as well as your browsing actions and patterns using common internet technologies, such as cookies and Web beacons. This may include details of your visits to our websites, including information about your connectivity, such as your IP address and browser information, location and time zone data, logs and other communication data, the websites or search terms that referred you to our websites, the resources and pages that you access and use on the websites, and some of the cookies that are installed on your device. This information helps us to improve our websites and to deliver better and more personalized content and services by enabling us to estimate our audience size and usage patterns, to recognize you when you return to our websites, and to enable us or our third-party vendors to serve ads tailored to your profile.
Email marketing. As a current or previous customer or user of our products or services, you may periodically receive emails from us containing details about features of the products you use and/or about similar products or services that we offer. Such processing may include the placing of beacons, or pixels, that let us know if you have opened our email, how long the email was open, and potentially related location and device information. We do this in order to see which emails are effective and which are not, so that we can improve our content and services. It helps us make sure that you are getting emails from us that you find useful and relevant.
Email alerts. If you sign up to receive email alerts from Estimand, we will retain your name and contact information for as long as you wish to continue receiving alerts. You may unsubscribe via the ‘unsubscribe’ link that appears at the bottom of our emails, or by contacting email@example.com.
General business-related information. We may also receive other personal information from or about you in the ordinary course of our business.
We use information that we collect about you or that you provide to us, including personal information:
- To present our websites, products and services to you and continuously improve upon them.
- To notify you about changes to our website, products or services (including new offerings) and promotions or events.
- To maintain the integrity and security of our websites, products, and services.
- For our ordinary business operations, including human resources, recruiting, equity investments, and business research and outreach.
Training and certification. Estimand will process the personal information provided by you, or on your behalf, in the course of signing up for, or taking part in, a Estimand training course or quiz. Estimand may receive the personal information directly from you if you apply directly through Estimand’s training properties; from your employer if carried out in the course of your employment; or one of our third-party training providers if you have signed up for the training through them. We will share your information with our third-party training platform and certification providers, as our service providers, for the purposes of enabling the provision of the training courses, quizzes and examinations. The information processed includes information you provide in the course of your application for a training course or quiz, together with the information collected as you progress through your learning journey (including your taking of the final test/examination and any certification you may receive as a result). The information collected and processed includes your name, contact details, your employer or quiz, the country in which you are located, your progress through the course, the results of any course or quiz and whether you have signed up to training marketing communications. Where you successfully complete a Estimand certified course or quiz, we will process your information for the purposes of certifying your successful participation in the applicable course or quiz. Where your training is part of the services provided to your employer, you employer’s privacy notice will apply to the processing of your data. Where you engage with our services through your employer, we may provide the result of any training course or quiz to your employer, where requested. The information will be processed to provide you with the training course you have signed up to and we may use your information to improve our courses, for troubleshooting, for customer service, to investigate complaints, or for legal claims.
Legal basis for the processing. We are not allowed to process personal data if we do not have a valid legal ground. Therefore, we will only process your personal data if:
- the processing is necessary to perform our contractual obligations towards you or to take pre-contractual steps at your request, such as when we authenticate your log-in to our services or ensure that you only have access to the services and data we have agreed to provide you with;
- the processing is necessary to comply with our legal or regulatory obligations, such as tax reporting or regulatory requirements;
- the processing is necessary for the legitimate interests of Estimand, and does not unduly affect your interests or fundamental rights and freedoms (see below);
- the processing is necessary for the performance of a task carried out in the public interest; or
- in some cases, and as may be requested from you from time to time, we have obtained prior consent.
To the extent that we process any special categories of data relating to you, we will do so because:
- the data has been manifestly made public;
- the processing is necessary for the establishment, exercise or defense of a legal claim;
- the processing is necessary for reasons of substantial public interest; or
- you have given your explicit consent to us to process that information (where legally permissible).
Disclosure of your information
Protecting your personal information is important to us and we neither rent nor sell your personal information to anyone. We may disclose or transfer personal information that we collect or you provide as described in this Privacy and Security Statement, including:
- To a buyer or other successor in the event of a merger, acquisition, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Estimand’s assets, in which personal information held by Estimand about our websites’ users is among the assets transferred.
- To our subsidiaries, affiliates, agents, contractors, service providers and other third parties we use to support our business or collaborate with and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes of providing services for or with us.
- To comply with court order, law or legal process, including to respond to government or regulatory requests.
- To protect the rights, property or security of Estimand, our employees, our users or others.
Choices about how we use and disclose your information
We strive to provide you with choices regarding the personal information you provide to us. Here are a couple of ways you can have control over your information:
- Promotional offers from the company. If you do not wish to receive promotional e-mail messages from us, you can opt-out by sending us an e-mail at firstname.lastname@example.org asking to be omitted from future e-mail distributions.
Data integrity and proportionality
We only collect and retain as much personal information as needed for specific, identified purposes described in this Privacy and Security Policy and we will not use it in any way that is incompatible with those purposes.
What are your rights and how can you exercise them?
You may have a right to access and to obtain a copy of your personal data as processed by Estimand. If you believe that any information we hold about you is incorrect or incomplete, you may also request the correction of your personal data. You may also have the right to:
- object to the processing of your personal data;
- request the erasure of your personal data;
- request restriction on the processing of your personal data; and/or
- withdraw your consent where Estimand obtained your consent to process personal data (without this withdrawal affecting the lawfulness of any processing that took place prior to the withdrawal).
We will honor such requests, withdrawal or objection as required under applicable data protection rules but these rights are not absolute: they do not always apply and exemptions may be engaged. We will usually, in response to a request, ask you to verify your identity and/or provide information that helps us to better understand your request. If we do not comply with your request, we will explain why.
Exercising your rights
To exercise the above rights, you may send an email to email@example.com. If you are not satisfied with how we process your personal data, please let us know and we will investigate your concern. Please raise any concerns by contacting our Data Protection Officer at firstname.lastname@example.org.
If you are not satisfied with our response, you have the right to make a complaint to the data protection authority in the jurisdiction where you live or work, or in the place where you think an issue in relation to your data has arisen. The contact details of each Data Protection Authority can be found at the following website: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm.
Additional Disclosures for California Residents
This section provides additional information regarding the California Consumer Privacy Act of 2018 (the “CCPA”) as amended by the California Privacy Rights Act of 2020, and supplements the disclosures and information throughout this Privacy and Security Statement. The commitments in this section apply only to individuals covered by CCPA and are subject to certain statutory exceptions laid out in the CCPA.
Notice of collection
The personal information we generally collect, use, and disclose regarding California residents as a Business (as defined under CCPA) is described above in the section, “Notice about how we use and protect personal information” and as follows:
Collection: In the past 12 months, we have collected the following categories of personal information enumerated in the CCPA:
- Identifiers, including name, postal address, email address, and online identifiers (such as IP address).
- Customer records, including company name, phone number, and company address.
- Characteristics of protected classifications under California or federal law, including race, gender, and country of residence.
- Commercial or transactions information, including products or services purchased, obtained or considered, or other purchasing or consumption histories or preferences.
- Internet activity, including browsing history, search history, and your interactions with our websites, emails, applications, and advertisements.
- Employment and education information.
- Inferences drawn from the above information about your predicted characteristics and preferences.
Sources: We collect the information directly from you, from other persons or entities (e.g. if another person or your employer provides your contact information in the course of a booking at one of our events), or third-party providers. In limited circumstances we may collect information from third-party services, where legally permitted to do so. We collect electronic personal information automatically as you interact our websites and advertisements.
Purposes of collection: We collect and use these categories of personal information for the business purposes described in the “Use of Information” section above.
Disclosure: Any disclosures of such information to third parties over the preceding 12 months have been in accordance with the permitted categories in the “Disclosure of Your Information” section above.
Sale: We are a software company and not a data broker, and we do not sell your personal information in the course of providing our services and products to our customers. However, we use third party marketing companies that collect certain information about you through website cookies and similar online technologies which we use for marketing purposes. These third parties may collect information about you that they then aggregate with data collected about you through cookies placed on other websites/mobile apps. Under the CCPA, this type of sharing of information could be deemed a “sale”. We also disclose your information to carefully selected marketing partners, advertising technology vendors and social media platforms. This type of disclosure only occurs in limited markets and California consumers may opt out of the sale of your personal information, where applicable, by us to third parties at any time. You may submit a request to opt-out by emailing us at email@example.com.
California consumer rights: The CCPA creates a right for certain covered individuals to request that a company disclose what, if any, personal information that company collects, uses, discloses, and sells about them specifically, or to request the deletion of personal information the company has collected or maintained about them. If you believe you have such a right under the CCPA and would like to exercise that right with respect to Estimand, please submit an email request to firstname.lastname@example.org with “California request to know” or “California request to delete” in the subject line. For a “Request to know,” please specify what details you would like to know, including any specific pieces of personal information you would like to access. For a “Request to delete,” please specify what information you would like to have deleted (which may be all your information as required by the CCPA). If you submit a request, we may ask for information necessary to verify your identity and eligibility to assert this right, and we will respond to verified requests in accordance with the CCPA. You may also utilize an authorized agent to exercise your CCPA rights on your behalf. You may not be discriminated against because you exercise any of your rights under the CCPA, and Estimand is committed to this principle.
We take your security seriously and take reasonable steps to protect and secure your personal information from unauthorized access, use, and disclosure. We have implemented adequate technical and organizational measures to protect personal data against unauthorized, accidental or unlawful destruction, loss, alteration, misuse, disclosure or access and against all other unlawful forms of processing. These security measures have been implemented taking into account the state of the art of the technology, their cost of implementation, the risks presented by the processing and the nature of the personal data, with particular care for sensitive data.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our websites, products, or services, you are responsible for keeping this password confidential. Please do not share your password with anyone.
Although we take reasonable security measures to protect your personal information, for example, by using Secure Socket Layer encryption when you transmit your password, we cannot guarantee the security of your personal information transmitted to our websites. The transmission of information via the internet is not 100% secure and we cannot ensure or warrant the security of any information you transmit to us. We are not responsible for circumvention of any privacy settings or security measures contained on the websites.
How long do we store your data?
We will only retain personal data for as long as necessary to fulfill the purpose for which it may lawfully be processed or to comply with legal, regulatory or internal policy requirements.
Changes to our privacy and security statement
We may amend this Privacy and Security Statement from time to time. We encourage you to revisit this page periodically to read the current version of this Statement in effect. If you have any concerns or questions about this Statement or if you would like to lodge a complaint, please contact email@example.com.
Children under the age of 13
Our websites are not intended for children under 13 years of age. If you become aware that your child has provided us with personal information without your consent, please contact us at firstname.lastname@example.org and we will work to delete it. We do not knowingly collect personal information from children under 13.
Data Protection Officer
To communicate with our Data Protection Officer, please email email@example.com.
If you have any questions or comments about this Privacy and Security Statement, please contact us by emailing us at firstname.lastname@example.org or by writing to us at:
Attention: Legal Department, Privacy Statement Issues
5540 Centerview Dr, Ste 204
Raleigh, NC 27606
This statement has been designed to be accessible to people with disabilities. If you experience any difficulties accessing the information here, please contact us at email@example.com.