RippleWorx
Privacy Policy

If you area resident of this EU, this section applies to you. The legal bases for which we collect, use, transfer or disclose your personal information include (i)where we have your consent, (ii) where we need to perform the contract we are about to enter into or have entered into with you, (iii) our legitimate interests; and (iv) where we need to comply with a legal obligation.

Please note that if you choose to withdraw your consent, you may not be able to participate in or benefit from our programs, services and initiatives for which you provided consent.

We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data as outlined above. We also may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

Under some legislations we may be allowed to process information until you object to such processing by opting out, without having to rely on consent or any other of the legal bases above.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

All personal information is maintained according to our information security policy. Your personal information will not be stored for longer than necessary for the purposes for which they were collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or to defend against legal claims.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We will take into account the length of time your personal data is required to:

• Continue to develop, tailor, upgrade, and improve our Services;
• Maintain business records for analysis and/or audit purposes;
• Comply with record retention requirements under the law;
• Defend or bring any existing or potential legal claims; or
• Address any complaints regarding the Services.

Please note our current policies regarding retention periods:

• We will retain government data as defined in our customer contract;
• Personal health or HIPAA protected data will be retained for seven years; and
• our current policies require deleting all other customer-provided data within 3 months after contract cancellation.

We may further retain data to defend against legal claims or protect our legal or security interests or those of others, or as permitted by law.  We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally. Once the retention period expires, personal information shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after the expiration of the retention period.

We are committed to maintaining measures to protect the security of your information. Of course, despite these measures, no network or system is ever entirely secure and we cannot guarantee the security of networks and systems that we operate or that are operated on our behalf.

We may share your information with third parties as permitted or required by law or as directed or authorized by you. Our customers collect your information through our Services and may use that information for their own purposes. To learn more about their information use and sharing practices, you should contact them. We may share information about you:

• With service providers and vendors who support our business or provide services to us, including those who help to operate our Services.
• With our professional advisors who provide legal, compliance, accounting, banking, or consulting services.
• In order to comply with our legal obligations or to protect our interests, property or legal rights, or those of our customers or third parties.
• With law enforcement, officials, or other third parties when we are compelled to do so by a subpoena, court order, or similar law enforcement request, or when we believe in good faith that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate violations of this Privacy Notice or other applicable terms.
• With companies or other entities in connection with, or during the negotiation of, any merger, sale of company stock or assets, financing, acquisition, divestiture or dissolution of all or a portion of our business.
• For other legal purposes, such as to enforce our terms and conditions, or to exercise or defend legal claims.
• With your direction or consent.

We currently host our Services in the United States and the European Union for customers located in those jurisdictions and do not transfer personal information between those hosting locations except where it is subject to the standard contractual clauses provided by the European Commission or another permissible method of compliance providing an adequate level of protection.

Please note that our website is hosted in the United States. By interacting with our website and providing personal information to us through it, you are consenting to the transfer of that personal information into the United States.

Update personal information. If you are a business client or employee of our client and you have an account with us, you may update any of your personal information by logging into your account directly.

Marketing communications. You may receive marketing information from Rippleworx, including updates from our blog. You may opt out of receiving marketing emails, by following the unsubscribe link in each email, or by contacting us at support@rippleworx.com. Please note that you may continue to receive non-marketing emails from us after you opt-out.

Cookies. You have a number of choices regarding certain cookies. Most web browsers automatically accept cookies, but you may modify your browser’s setting to notify you of cookie placement or decline cookies. If you choose to decline cookies, certain features of our website may not function properly as a result.

[If Rippleworx has any specific cookie or analytic opt out links to offer (restricting third party data use or collection), those can be provided here.]