Privacy Policy
Effective Date:31st March 2024
Thank you for choosing CRMSanta. We are committed to safeguarding your privacy and ensuring the security of your personal information. This Privacy Policy outlines how CRMSanta and its affiliates collect, use, store, and process your personal data when you interact with our websites, products, and services, as well as any other sites or services linked to this Privacy Policy.
- Collection of Personal Data
We collect personal data when you:
- Interact with us on our websites or through other channels, such as communicating with us or attending our events.
- Use our products and services, including the CRMSanta Subscription Service.
- Use any other websites or services that link to this Privacy Policy, such as our other brands like Hustle, Trends, and Connect.com.
- Use of Personal Data
We process your personal data to provide and improve our products and services, as well as for other lawful purposes. This includes:
- Providing customer support and responding to your inquiries.
- Customizing and personalizing your experience with our products and services.
- Analyzing usage trends and preferences to enhance our offerings.
- Complying with legal obligations and protecting our rights and interests.
- Sharing and Disclosure of Personal Data
We may share your personal data with trusted third parties, including service providers, affiliates, and business partners, for the purposes outlined in this Privacy Policy. We do not sell your personal data to third parties for marketing purposes.
- Data Retention and Security
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with applicable laws and regulations. We implement security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
- Your Rights and Choices
You have certain rights regarding your personal data, including the right to access, correct, or delete your information. You may also have the right to object to or restrict certain processing activities. For inquiries or to exercise your rights, please contact us at [insert contact information].
- Updates to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this Privacy Policy periodically for any updates. We will notify you of any material changes by posting the updated Privacy Policy on our website.
- Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at contact@crmsanta.com.
What Information We Collect and Process
a. Information You Provide to CRMSanta
When you interact with us via our websites or any sites or services that link to this Privacy Policy or use the Subscription Service, we may collect Personal Data and other information from you, as further described below.
- When You Visit Our Websites
We collect Personal Data from you when you submit web forms or interact with our websites, for example by subscribing to a CRMSanta blog, signing up for a webinar, subscribing to one of our services, or requesting customer support. We may ask for your email address, first and last name, job title, and other similar business information. You are free to explore some of our websites without providing any Personal Data about yourself.
- INBOUND and Other Event Information
When you register for INBOUND or a CRMSanta event, we collect information such as name, address, phone number, and email address. We use this information to communicate with you and in some cases facilitate your registration. Additionally, we may share your registration data with service providers of INBOUND in order to provide event information and improve your experience at INBOUND or future CRMSanta events.
- Account and User Information
We collect Personal Data when you sign up for a CRMSanta account, create or modify user information, set preferences, or provide any other related information to access or utilize our Subscription Service.
We collect payment and billing information when you register for paid products or services. For example, we may ask you to provide a billing address or a billing contact for your CRMSanta account. If you give us payment information, we use it solely as authorized by you in accordance with this Privacy Policy.
We post customer testimonials and comments on our websites, which may contain Personal Data. We obtain each customer's consent via email or through other agreements between customers and CRMSanta prior to posting the customer's name and testimonial.
b. Information We Process on Behalf of Customers When They Use the Subscription Service
Our product, or the Subscription Service, allows our customers to create and share marketing, sales, and customer service content. When customers use our product, they may collect Personal Data such as first and last name, email address, physical address, phone number, or other information about you. We call the information that our customers submit or collect via the product 'Customer Data' under our Customer Terms of Service.
We do not control the content of our customers' webpages or the types of Personal Data that our customers may choose to collect or manage using the Subscription Service. We store our customers' information on our service providers' servers but process it as a processor under our customers' instructions and in accordance with our Customer Terms of Service, which prohibit us from using the information except as necessary to provide and improve the Subscription Service and as required by law. Our customers control and are responsible for correcting, deleting, or updating the information they process using the Subscription Service and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to transferring the Personal Data to CRMSanta for processing purposes.
c. Information We Collect and Process When You Use the Subscription Service
We collect usage data when you or your users in your CRMSanta account interact with the Subscription Service. Usage data includes metrics and information regarding your use and interaction with the Subscription Service such as what product features you use the most, when an object (like a ticket) is opened and closed, and how often certain features (like workflows) are triggered in your account.
We engage third-party providers to collect usage data. For more information about how we protect your information with these service providers, please see Section 3 "How We Share Personal Data."
When you access or use the Subscription Service via our mobile applications, we automatically collect information such as your device model and version, operating system, or device identifiers.
You may connect third-party integrations to your CRMSanta account, which may ask for certain permissions to access data or send information to your CRMSanta account. It is your responsibility to review any third-party integrations you authorize. We may collect information about what types of integrations you use in your CRMSanta account.
Any permission(s) granted by you grant these third parties access to your data, which may include (but is not limited to) granting third-party applications access to view, store, and modify your CRMSanta account data. We are not responsible for the practices of third-party integrations, so please carefully review the permissions you grant to third-party applications. For more information on integrations with third-party providers, please see the "Connect apps to CRMSanta" knowledge base article.
If you use the Gmail integration or choose to integrate any other Google Workspace application with CRMSanta, you will be asked to give us access to information from your Gmail or Google account. You can learn more about how we access this data in the "Connect your personal email" knowledge base article or via in-app notice when you connect to Gmail. As a reminder, knowledge
- How We Use Personal Data
We use Personal Data for various purposes, including but not limited to:
- Providing and improving our products and services.
- Communicating with you about your account, updates, and promotions.
- Analyzing usage trends and preferences to enhance user experience.
- Complying with legal obligations and protecting our rights.
- How We Share Personal Data
We may share Personal Data with trusted third parties, including service providers, affiliates, and business partners, for purposes such as:
- Providing services and support.
- Facilitating event registrations and communication.
- Processing payments.
- Conducting marketing activities.
- Complying with legal requirements.
- How We Transfer Personal Data Internationally
We may transfer Personal Data to locations outside of your country of residence for processing and storage, including to countries that may have different data protection laws than your jurisdiction. We ensure that adequate safeguards are in place to protect your Personal Data during such transfers.
- How We Store and Secure Personal Data
We implement security measures to protect Personal Data against unauthorized access, alteration, disclosure, or destruction. We store Personal Data only for as long as necessary to fulfill the purposes for which it was collected and in accordance with applicable laws and regulations.
- Cookies and Similar Technologies
We use cookies and similar technologies to enhance user experience, analyze usage trends, and personalize content and advertisements. You can manage cookie preferences through your browser settings.
- Your Privacy Rights and Choices
You have certain rights regarding your Personal Data, including the right to access, correct, or delete your information. You may also have the right to object to or restrict certain processing activities. Please contact us to exercise your rights or if you have any questions about our data practices.
- California Privacy Rights
If you are a California resident, you may have additional privacy rights under the California Consumer Privacy Act (CCPA). Please refer to our CCPA Privacy Notice for more information on your rights and how to exercise them.
- Data Protection Officer
We have appointed a Data Protection Officer to oversee compliance with this Privacy Policy and applicable data protection laws. If you have any questions or concerns about our data practices, please contact our Data Protection Officer.
- Other Important Privacy Information
a. Information We Collect From Other Sources
We may receive information about you from CRMSanta partners, third-party service providers, and publicly available sources. This information may be combined with Personal Data we collect directly from you to improve our services, personalize content, and enhance user experience.
b. Log Files
We automatically collect and store information about your computer hardware and software when you visit our websites or use our products and services. This information may include your IP address, browser type, domain names, access times, and referring website addresses. We use this information for analytics and to ensure the security and performance of our services.
c. Buttons, Tools, and Content from Other Companies
Our websites may include features and widgets provided by third-party companies, such as social media buttons or interactive mini-programs. These features may collect your IP address and other information to enable their functionality. Your interactions with these features are governed by the privacy policies of the companies providing them.
d. Other CRMSanta Companies
We may receive information about you from other companies owned or operated by CRMSanta to improve our services and provide a seamless user experience across our platforms.
- How We Store and Secure Personal Data
a. Storage and Security Measures We implement robust security measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, firewalls, and regular security assessments. We store Personal Data only for as long as necessary to fulfill the purposes for which it was collected and in accordance with applicable laws and regulations.
b. Confidentiality We treat all Personal Data as confidential and restrict access to authorized personnel only. We have strict confidentiality agreements in place with our employees and third-party service providers to ensure the protection of your Personal Data.
- Cookies and Similar Technologies
a. Use of Cookies We use cookies and similar technologies to enhance user experience, analyze usage trends, and personalize content and advertisements. Cookies are small text files that are stored on your device when you visit our websites. You can manage cookie preferences through your browser settings.
b. Third-Party Cookies We may also allow third-party service providers to place cookies on your device for advertising and analytics purposes. These cookies collect information about your browsing behavior and preferences to deliver targeted advertisements and measure the effectiveness of advertising campaigns.
- Your Privacy Rights and Choices
a. Access and Correction You have the right to access, correct, or delete your Personal Data held by us. You may also request information about the processing of your Personal Data and object to certain processing activities. To exercise your rights or for any inquiries regarding your Personal Data, please contact us at [insert contact information].
b. California Privacy Rights If you are a California resident, you may have additional privacy rights under the California Consumer Privacy Act (CCPA). Please refer to our CCPA Privacy Notice for more information on your rights and how to exercise them.
- Data Protection Officer
We have appointed a Data Protection Officer to oversee compliance with this Privacy Policy and applicable data protection laws. If you have any questions or concerns about our data practices, please contact our Data Protection Officer at [insert contact information].
- Other Important Privacy Information
a. Compliance with Legal Requirements We may disclose your Personal Data if required by law or if we reasonably believe that disclosure is necessary to protect our rights, comply with legal processes, or respond to lawful requests from public authorities.
b. Changes to Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. We encourage you to review this Privacy Policy periodically for any updates or changes.
c. Contact Information If you have any questions or concerns about our Privacy Policy or data practices, please contact us at contact@crmsanta.com
8. Compliance with Data Privacy Framework Principles
a. DPF Principles-related Complaints In compliance with the DPF Principles, crmSanta is committed to resolving DPF Principles-related complaints regarding the collection and use of your Personal Data. We undertake to investigate and resolve any such complaints within 45 days. Individuals from the EU, UK, and Switzerland with inquiries or complaints concerning our handling of Personal Data under the DPF Principles should initially contact crmSanta [here](insert contact link).
b. Alternative Dispute Resolution Should complaints regarding our handling of Personal Data under the Data Privacy Framework remain unresolved, crmSanta pledges to refer them to an alternative dispute resolution provider based in the United States.
c. Binding Arbitration Under certain circumstances, as detailed on the DPF website, you may be entitled to invoke binding arbitration once other dispute resolution procedures have been exhausted. The Federal Trade Commission oversees crmSanta’s compliance with the DPF Principles.
9. Onward Transfers and Public Authorities
In the context of onward transfers, crmSanta assumes responsibility for the processing of Personal Data received under the DPF Principles and subsequently transferred to a third party acting as an agent on our behalf. crmSanta will remain liable under the DPF Principles if our agent processes your Personal Data inconsistently with these principles, except in cases where crmSanta is not responsible for the event leading to the damage.
Please note that under certain circumstances, we may be obliged to disclose your Personal Data in response to lawful requests from public authorities, including those pertaining to national security or law enforcement requirements.
10. Storage, Security, and Retention of Personal Data
a. Data Storage and Security We employ a variety of security technologies and protocols to safeguard your Personal Data from unauthorized access, use, or disclosure. This includes storing Personal Data on secure computer servers in controlled environments, protected against unauthorized access. All Personal Data is secured using appropriate physical, technical, and organizational measures.
b. Retention Period The duration for which we retain collected information depends on its nature and how it was acquired. Once no longer necessary for its original purpose, we either delete or anonymize your information, or if neither is feasible, securely store it while isolating it from further use. Personal Data is retained where there is an ongoing legitimate business need, such as legal compliance, dispute resolution, or enforcing agreements.
11. Cookies, Advertising, and Your Privacy Rights
a. Personal Data Requests You have various rights concerning your Personal Data, including access, correction, deletion, objection, and withdrawal of consent. You may also lodge complaints with data protection authorities. We do not sell personal information. To exercise your rights or for inquiries, please use [this form](insert contact link).
b. Anti-Spam Policy Our Acceptable Use Policy prohibits the use of the Subscription Service for unsolicited commercial email and mandates compliance with applicable laws, including the inclusion of an opt-out mechanism. Violations can result in service suspension or termination.
c. Unsubscribing from Communications You can unsubscribe from our marketing communications by clicking the "unsubscribe" link in our emails or by updating your preferences. For unsubscribing from our customers' communications, please utilize their unsubscribe links or contact them directly.
8. California Privacy Rights
a. Applicability This section pertains solely to California consumers. For the purposes herein, "Personal Information" aligns with the definition outlined in the California Consumer Privacy Act (“CCPA”). It delineates our collection, usage, and sharing practices concerning California consumers' Personal Information in our capacity as a business, along with the rights afforded to such residents. Under the California Consumer Privacy Act ("CCPA"), businesses must disclose whether they engage in the sale of Personal Information. As crmSanta functions as a business entity, we do not engage in the sale of Personal Information. However, we may share Personal Information with authorized service providers or business partners who have agreed to adhere to our contractual restrictions regarding the retention, usage, and disclosure of said Personal Information.
If accessibility to this Privacy Policy is hindered due to a disability or any physical or mental impairment, kindly reach out to us, and we will arrange to provide the necessary information in an alternative format accessible to you.
b. How We Collect, Use, and Share Your Personal Information Over the past twelve (12) months, we have amassed the following statutory categories of Personal Information:
- Identifiers, like name, email address, mailing address, and phone number, sourced either directly from you or from third-party origins.
- Commercial information, such as subscription records, acquired directly from you.
- Internet or network information, encompassing browsing and search history, garnered directly from your device.
- Geolocation data, such as IP address, obtained from your device.
- Financial information, like Payment Information or financial account numbers, acquired during the subscription provisioning process.
- Inferences.
- Other Personal Information, in instances when engaging with us online, via phone or mail, such as seeking assistance through our help desks or other support channels; participating in customer surveys or contests; or in availing the Subscription Service.
The business and commercial purposes for which we collect this information are outlined in Section 2 of this Privacy Policy. Additionally, the categories of third parties to whom we "disclose" this information for a business purpose are elucidated in Section 3, while the retention period for this information is detailed in Section 5.
c. Your California Rights You possess certain rights concerning the Personal Information we collect or maintain about you. It's crucial to note that these rights are not absolute, and there may be instances where we decline your request as permissible by law.
- Right of Access: You reserve the right to request disclosure of the Personal Information we have collected, used, and disclosed about you over the past 12 months.
- Right of Deletion: You hold the right to request the deletion of Personal Information collected or maintained by us, subject to specific exceptions.
- Right of Correction: You maintain the right to request correction of any inaccurate personal information that we hold about you.
- Right to Non-discrimination: You are entitled to non-discriminatory treatment when exercising your privacy rights.
crmSanta neither sells nor shares Personal Information with third parties (in compliance with California Civil Code §§ 1798.100–1798.199, commonly referred to as the California Consumer Privacy Act of 2018).
d. How to Exercise Your California Rights You can exercise your rights personally or designate an authorized agent to act on your behalf. To safeguard your Personal Information, we will verify your identity using an appropriate method. We may also require your authorized agent to furnish written permission from you to make requests on your behalf and verify their identity for your protection.
For inquiries, exercising rights, or designating an authorized agent, please utilize the contact information provided below or refer to Section 7 "Your Privacy Rights and Choices" above.
9. Data Protection Officer
For queries regarding this Privacy Policy, our privacy practices, or if you require this notice in an alternative format due to a disability:
Contact us at contact@crmsanta.com
10. Other Important Privacy Information
a. We Never Sell Personal Data We unequivocally pledge to refrain from selling your Personal Data to any third party.
b. Information About Children Our websites, products, and services are not intended for or directed at children under 16, and we do not knowingly or intentionally collect Personal Data about children under 16. Should you believe that we have inadvertently collected Personal Data about a child under 16, please contact us promptly so that we may expunge the information.