Version 1.3 (September 14, 2021)
At IntelliGRC, Inc. (“IntelliGRC”, “we” or “us”), we place the highest importance on respecting and protecting the privacy of our customers. Our most important asset is our relationship with you. We want you to feel comfortable and confident when using our Web site and our service. We would like to share with you the following principles that govern our information practices and other privacy aspects of our Web site and our service. Throughout this policy, we refer to information that personally identifies you as "Personally Identifiable Information" or “PII”.
To Contact Us
If you have privacy-related questions that are not addressed here, please contact the Privacy Team by email firstname.lastname@example.org, or write us at: Tiber Creek Consulting, Inc. - IntelliGRC , 12015 Lee Jackson Hwy Suite 600, Fairfax VA 22033.
Personal Information We Collect
By using this website or registering for our service, you voluntarily and willingly provide us with certain information, including personally identifiable information, which we collect in order to provide the IntelliGRC website and service. Personal Information refers to information about you that can be used to contact or identify you, and information on your use of and activities at our site and through the IntelliGRC service that may be connected with you. Personal information that we collect may include, but is not limited to, your name, phone number, billing information, email address and postal addresses.
How We Use Personal Information
We may use your Personal Information to communicate with you through email and text messages and notices posted at our website or on your account and to provide you with customer support. If you decide at any time that you no longer wish to receive any such communications, please follow the “unsubscribe” instructions provided in any of the communications sent to you, or update your “account settings” information.
We may use sources outside of IntelliGRC to supplement the information you give us. For example, we may validate your address using other sources. We use this data to help us maintain accuracy and provide you with better service.
How We Share Personal Information
We do not sell or rent your personal information to anyone.
Third Party Service Providers. We have limited relationships with third parties to assist us in providing the IntelliGRC service to you, for example, by fulfilling customer orders or providing customer service. These service providers are contractually required to maintain the confidentiality of the information we provide them. The contracts outline the appropriate use and handling of your information and prohibit third parties from using any of your personal information for purposes unrelated to the product or service for which they’ve been contracted. Vendors are required to maintain the confidentiality of the information we provide to them.
Legal Disclosures. We may disclose or report personal information in limited circumstances where we believe in good faith that disclosure is required to comply with applicable laws, rules or regulations, to enforce or apply our Terms of Service, available at http://www.intelligrc.com/terms and other agreements, or to protect the rights, property, or safety of IntelliGRC, users of our service, or others. For example, we may be required to disclose personal information to cooperate with regulators or law enforcement authorities, to comply with a legal process such as a court order, subpoena, search warrant, or a law enforcement request.
Business Partners. We have business partners that provide services, some of which are co-branded. Partner services and sites are clearly identified. When you request any of these products or services, you are permitting us to provide your personal information to the partner to fulfill your request. This Web site may provide links to third-party sites, such as those of our business partners and online advertisers. Because IntelliGRC does not control the information policies or practices of these third parties, you should review their privacy policies to learn more about how they collect and use personal information.
Business Transfers. Should we sell, merge or transfer any part of our business, part of the sale may include your personal information and you agree that any such third party will have the right to continue to use your Personal Information and other information that you provide to us or which we obtain through your use of the service.
We also may be required to disclose an individual’s personal information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.
If you use an email address provided by your organization, such as your employer or school, to sign into the IntellIGRC service, the owner of the domain associated with your email address may: (i) control and administer your account and (ii) access and process data you share with IntelliGRC. If your organization is administering your use of the IntellIGRC Service, please direct your privacy inquiries to your administrator.
We will provide an individual opt-out or opt-in choice before we share their data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To limit the use and disclosure of your personal information, you can submit a written request to Privacy@IntelliGRC.com.
Cookies, Web Beacons and other Web Technologies
We use a variety of technologies on our Web site. Among these are cookies, which are pieces of information that our Web sites provide to your browser. Cookies allow us to customize your visit to our Web site by recognizing you when you return. You can choose to decline cookies while at our Web site, however, this may limit your ability to access certain areas of the Web site. Most browsers accept and maintain cookies by default. Check the "Help" menu of your browser to learn how to change your cookie preference.
When we track activity on our Web site, we collect information such as your IP address, browser type and version, and pages you view. We also keep track of how you got to our site and any links you click on to leave our site. Once you leave our site, we do not track you. We use your Web site activity to assist us in offering you a personalized Web experience, assist you with technical support and to tailor our offerings to you.
We may access and set cookies using Web beacons, also known as single-pixel GIFs which are invisible graphical images. These Web beacons tell us useful information regarding our site such as which pages users access. When we send you e-mails, we may include a single-pixel GIF to determine the number of people who open our e-mails. When you click on a link in an e-mail, we record this individual response to allow us to customize our offerings to you.
Your Right to Access and Control Your Personal Information
You may access, review, revise, correct, or delete the personal information provided in your registration or account profile by changing your preferences in “My Preferences.” If you update any of your information, we may keep a copy of the information that you originally provided to us in our archives for uses documented in this policy.
Security of Personal Information
We protect the confidentiality and security of your personal information by using industry-recognized security safeguards such as encryption, multi factor authentication and firewalls among others, coupled with carefully developed security procedures to protect your information from loss, misuse or unauthorized alteration. Whenever we ask for sensitive information we encrypt it as it is transmitted to us. Our employees are trained and required to safeguard your information and, using physical, electronic and procedural safeguards, we restrict access to personal information to those employees and agents for business purposes only. Additionally, we use internal and external resources to review the adequacy of our security procedures.
Although IntelliGRC uses industry standard security measures, the Internet is not a 100% secure environment and IntelliGRC cannot, and does not, ensure or warrant the security of any information you transmit or store using the IntelliGRC service. There is no guarantee that your information may not be accessed, disclosed, altered or destroyed by breach of any of IntelliGRC physical, technical or managerial safeguards and we are not responsible for third party circumvention of your privacy settings or IntelliGRC’s security measures. You are responsible for maintaining the secrecy of your unique password and account information and for controlling access to your IntelliGRC account.
Our Retention of Personal Data
We retain personal data only for as long as necessary to provide the services and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements.
Other Places Where We Collect Personal Information
If you use our blog on this Web site, you should be aware that any personally identifiable information you submit there can be read, collected, or used by other users of these forums, and could be used to send you unsolicited messages. We are not responsible for the personally identifiable information you choose to submit in this forum.
When you subscribe to a level of IntelliGRC service requiring a fee, we require that you provide your billing address and your credit card information, including credit card number and expiration date. Credit card information is used solely for the purpose of billing you for IntelliGRC service. Credit card transactions are processed by a third party. IntelliGRC does not ever see your credit card information, nor do we store any part of the number, CVV code, or other tokens.
Your IntelliGRC service is billed to an account. IntelliGRC recognizes the account in which your data lives as the owner of your data. The account is responsible for payment and can transfer ownership of your data. Account owners and administrators should keep in mind that if they grant another individual full administrative rights to their account, that person will have access to the account's billing information.
IntelliGRC Partner Program
If you apply for the IntelliGRC Partner Program, you are required to provide your company's address, contact information, and other demographic information in order for IntelliGRC to contact you regarding the IntelliGRC Developer program.
Tiber Creek Consulting Inc., Attn: IntelliGRC
12015 Lee Jackson Hwy Suite 600, Fairfax VA 22033