Last modified: December 23, 2019
Some Notes On Our Relationship
This Privacy Statement applies to "www.outreach.io" and the customer engagement platform service at accounts.outreach.io ("Outreach Service" or "the Service"), which are owned and operated by Outreach Corporation (Outreach). At Outreach, we are committed to maintaining the confidentiality and security of any personal information about our users. Your privacy is always at the top of our priorities, and we are focused on protecting it from unauthorized access.
Outreach participates in and has certified its compliance with the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks. Outreach is committed to subjecting all personal data received from the Swiss Confederation (Switzerland) and European Union (EU) member countries, in reliance on the respective Privacy Shield Frameworks, to the Frameworks’ applicable Principles. To learn more about the Privacy Shield Frameworks, visit the U.S. Department of Commerce’s Privacy Shield program site.
Outreach is responsible for the processing of personal data it receives, under the Privacy Shield Frameworks, and subsequently transfers to a third party acting as an agent on its behalf. Outreach complies with the Privacy Shield Principles for all onward transfers of personal data from the EU or Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Framework, Outreach is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Outreach may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under certain conditions, more fully described on the Privacy Shield website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
The Information We Collect and Store
We may collect and store the following information when running the Outreach Service:
Information You provide
When you register for an account, we collect some personal information, such as your name, phone number, email address, and home and/or business postal addresses. You may also ask us to import your contacts and email history by giving us access to your third party services (for example, your email account) or to use your social networking information if you give us access to your account on social network connection services. In fact, in order to use our Service, you must link a third party email account to your Outreach account. We then import, create, and update versions of your address book and emails for you to access in Outreach. You will also have the option to import and update versions of your calendar, social media contacts, and mobile phone call history, and you can later choose to upload files to, or provide comments through, Outreach. When you invite others to join Outreach by using the Service, we send them an email for that invitation at the email addresses assigned to them in your address book.
When we configure and customize deals, or manage and perform recurring billing, we may also ask you to provide information such as your bank account number; credit card number; national ID number, insurance number, social security number; taxpayer identification number, tax file number, passport number, and driver's license number.
Collection and Use of 3rd Party Personal Information
You may also provide personal information about other people, such as their email address. This information is only used for the sole purpose of completing your request or for whatever reason it may have been provided.
If you believe that one of your contacts has provided us with your personal information and you would like to request that it be removed from our database, please contact us at email@example.com.
Your Data and Other Information About You
User Data Supplementation
We may receive additional demographic information about you from other sources, including publicly available databases or third parties from whom we have purchased data, and combine this data with information we already have about you. This helps us to update, expand and analyze our records, identify new customers, and provide products and services that may be of interest to you. If you provide us personal information about others, or if others give us your information, we will only use that information for the specific reason for which it was provided to us.
Outreach obtains this business contact and company information from third party sources, such as business intelligence platforms. The information obtained by these third-party sources is from publicly available sources such as news articles. This information is used to support Outreach’s marketing and sales efforts. The Outreach sales team may contact you based on this information to gauge your company’s interest in Outreach’s services and technology solutions. You may opt-out of these communications at any time by clicking the unsubscribe link provided in the email or by sending a request to the Outreach Technical Support team by emailing firstname.lastname@example.org.
When you use the Service, we automatically collect certain information from your Device, its software, and your activity using the Services. This may include, for example (but without limitation), the Device's Internet Protocol ("IP") address, browser type, the web page visited before or after you came to our website, information you search for on our website, locale preferences, identification numbers associated with your Devices, your mobile carrier, date and time stamps associated with transactions, system configuration information, metadata, and interactions with the Service, Internet service provider, referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data to analyze trends in the aggregate and administer the site.
Purpose and Legal Basis for Using Personal Information
In the course of using the Service, we may collect or otherwise obtain information that can be used to contact or identify you ("Personal Information"). Under one or more of the following GDPR lawful bases:
- Data subject has given consent to the processing of his or her personal data for one or more specific purposes
- Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
- Processing is necessary for compliance with a legal obligation to which the controller is subject
- Processing is necessary in order to protect the vital interests of the data subject or of another natural person
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Personal Information is or may be used for the following purposes:
- To provide and improve our Service.
- To administer your use of the Service
- To recommend follow-up reminders, assign tasks, or personalize the service,
- To provide or offer software updates and product announcements.
- To ensure our legal compliance obligations.
If you no longer wish to receive communications from us that are not required for the Service, please follow the "unsubscribe" instructions provided in any of those communications or update your account settings information.
Information Sharing and Disclosure by Us (Do Not Sell My Information)
We do not sell Personal Information to third parties.
If you are a California resident our default cookie settings may constitute a sale of personal information. You can change your cookie settings under the Cookies section above.
Service Providers, Business Partners and Others
Compliance with Laws and Law Enforcement Requests; Protection of Outreach's Rights
Changing or Deleting Your Information
Upon request Outreach will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. If you are a registered user, you may review, update, correct, or delete certain Personal Information provided in your registration or account profile by changing your account settings. If your personal information changes, or if you no longer desire our Service, you may update or delete it by making the change in your account settings, although (in some cases) we may retain copies of your information if required by law, to protect our rights, or if it is not technically reasonably feasible to remove it. You may at any time withdraw any consent that you have provided to us to process your information, or exercise any of the following rights by contacting us as provided below. Please note that we may ask you to verify your identity before taking further action on your request, for security purposes.
- Right of Access - the right to be informed of and request access to the personal data we process about you;
- Right to Rectification - the right to request that we amend or update your personal data where it is inaccurate or incomplete;
- Right to Erasure - the right to request that we delete your personal data;
- Right to Restrict - the right to request that we temporarily or permanently stop processing all or some of your personal data;
- Right to Object - the right, at any time, to object to us processing your personal data on grounds relating to your particular situation;
- the right to object to your personal data being processed for direct marketing purposes;
- Right to Data Portability - the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service; and
- Right not to be subject to Automated Decision-making
- Right to Non-Discrimination – You have a right not to receive discriminatory treatment for exercising your privacy rights as identified in this section of the privacy notice as conferred by the CCPA.
For questions about your Personal Information on our Service, please contact email@example.com or by contacting us by telephone or postal mail at the contact information listed below. We will respond to your inquiry within 30 days.
Outreach will retain personal data we process on behalf of our Clients and our Clients' customer data for as long as needed to provide services to our Client. Our intention is to retain your information for as long as your account is active or as needed to provide you with the Services. If you wish to cancel your account or request that we no longer use your information to provide you Services, you may delete your account. We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements and rights, or if it is not technically reasonably feasible to remove it. Consistent with these requirements, we will try to delete your information quickly upon request. Please note, that Outreach may retain your personal data for longer where there is a legal obligation, contractual, or legitimate interest, unless these interests are overridden by the individual’s fundamental rights; in those cases data will be removed once it is no longer needed for those purposes. In addition, we do not provide access, transfer, change, or delete information from our servers’ files where that right adversely affects the rights of others.
If you wish to subscribe to our newsletter(s), we will use your name and email address to send the newsletter to you. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails, accessing the email preferences in your account settings page, or you can contact us at firstname.lastname@example.org.
Our website offers publicly accessible blogs or community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your personal information from our blog or community forum, contact us at email@example.com. In some cases, we may not be able to remove your personal information. If this is the case, we will let you know and indicate why.
Outreach stresses its privacy and security standards. Although no one can guarantee absolute security, we regularly re-evaluate our privacy and security policies in order to adapt to new challenges. We follow generally accepted standards to protect the information submitted to us, both during transmission and once we receive it. We encrypt the most sensitive data that you store on Outreach using the AES-256 standard, which is the same encryption standard used by banks to secure customer data.
Our Services are not directed to persons under 13. We do not knowingly collect personal information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without the parent's consent, he or she should contact us at firstname.lastname@example.org. If we become aware that a child under 13 has provided us with Personal Information, we will take steps to delete such information from our files.
For European Union data subject, you have the right to lodge a complaint with a supervisory authority concerning Outreach’s data processing activities. For questions, or to exercise your rights as an EU data subject, please contact our EU Representative, Rivacy at: Rivacy GmbH, Hammerbrookstraße 90, 20097 Hamburg, Germany.
Outreach acknowledges that you have the right to access your personal information. We collect information for our clients. If you are a customer of one of our Clients and would no longer like to be contacted by one of our Clients that use our service, please contact the client that you interact with directly.
Service Provider, Sub-Processors/Onward Transfer
Outreach may transfer personal information to companies that help us provide our service. Transfers to subsequent third parties are covered by the provisions in this Policy regarding notice and choice, as well as the service agreements with our Clients. A list of Sub-Processors can be made available upon request.
Access to Data Controlled by our Clients
Outreach has no direct relationship with the individuals whose personal data it processes. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data, should direct his query to the Outreach's Client (the data controller). If the Client requests Outreach to remove the data, we will respond to the request within 30 business days.