InfoPlus - PUBLIC PRIVACY NOTICE


Effective date: March 28, 2024
Last update: March 28, 2024

OVERVIEW

We work hard to earn your trust. A big part of that is telling you what we do with your data. This privacy notice describes the personal data we collect, how it's used, shared, and protected, as well as the data choices available to you.

We care about your personal information that you share with us. The purpose of this Privacy Notice is to inform the representatives of our business customers and other individuals who share personal information with InfoPlus, of how we collect and process personal information and certain rights you may have concerning your personal information that you share with us.

PRINCIPLES AND OPERATING STANDARDS

The following eleven Principles and Operating Standards guide the way we work to meet our Policy Commitment throughout our business activities lifecycle.

  1. Personal Data Classification: Personal data assets must be classified in accordance with the requirements of applicable laws.
  2. Data Processing Management: All processing of personal data must have a legitimate business purpose that is recorded as the processing purpose for that personal data.
  3. Personal Data Minimization: We only collect and use the personal data we need to support specific, defined, and documented business purposes.
  4. Permitted Data Processing and Purpose Limitation: We ensure that personal data is only processed by or on behalf of InfoPlus as permitted by applicable laws.
  5. Data Accuracy, Quality, and Integrity: We evaluate our InfoPlus assets containing personal data to ensure that they are kept sufficiently accurate, complete, relevant, and up to date.
  6. Personal Data Transparency: We are transparent about our personal data practices and processing.
  7. Complaints and Individual Rights: We respect individual concerns about privacy and their privacy and data protection rights.
  8. Personal Data Retention: We keep personal data only as long as needed for documented legitimate business purposes, including as needed to maintain necessary business records based on our legal obligations.
  9. Data Security and Incident Reporting: We maintain appropriate administrative, physical, and technical safeguards to protect personal data from loss, misuse, unavailability, and unauthorized access, disclosure, alteration, or destruction.
  10. Disclosure to Third Parties: We only work with suppliers, other vendors, alliance parties, and acquisition targets that agree to meet our privacy and personal data protection standards and have demonstrated their commitments to us.
  11. Cross-Border Transfer: We only transfer personal data across country borders as permitted by applicable laws.

HOW WE COLLECT DATA

We collect data about you in different ways:

  • Directly from you. For example, when you buy a Software License for one of our products or provide marketing or communications preferences.
  • Automatically. For example, when you interact with our websites, or when you use our mobile applications.
  • From other sources. For example, from companies that we own, our business partners, our vendors, and other third parties. This includes social media companies, financial institutions, credit reporting agencies, and data resellers.
  • From ourselves. We may create data about you. For example, we may infer that you're looking for a new type of wine or identify the types of wines you might like.

DATA WE COLLECT & HOW WE USE IT

Personal data collected on User Preferences

  • We collect data about how you use or access our services, via web or by mobile phone. This may include information about language used and billing preferences.
  • We use this data to provide services based on preferences.

Personal data collected on Account creation & billing

  • We collect your name, contact, and email information when you buy one of our licenses
  • We use this data to manage your account, including to process payments, billings, and requests related to our products and services
  • We do not collect or store in our sites Credit Card data, all credit card transactions are done by the credit card companies or by a third party like PayPal if you use it.

Personal data collected on Advertising & marketing

  • Various personal data described in this section of our privacy notice.
  • We use various personal data to advertise and market products and services from InfoPlus and other companies. Additional details about specific advertising programs and data use can be found elsewhere in this section of our privacy notice.

DATA SUBJECT RIGHTS

The following eleven Principles and Operating Standards guide the way we work to meet our Policy Commitment.

  1. Right to Know: Individual natural persons have the right to know whether InfoPlus processes personal data about them, for what purposes, and other information as required by law. In accordance with our Personal Data Transparency principle
  2. Right of Access: Individual natural persons have the right to access the specific personal data InfoPlus processes about them and other information as required by law. Upon valid request from a verified individual or that individual's authorized representative.
  3. Right of Correction: Individual natural persons have the right to correct, update, amend and/or supplement inaccurate personal data that InfoPlus processes about them. The extent to which data may be corrected, updated, amended, or supplemented shall be determined in accordance with the context, form and state of the specific data elements, the purposes for which they are processed by or on behalf of InfoPlus, and the laws applicable to such personal data. Upon confirmation of a valid request from a verified individual or that individual’s representative, including sufficient evidence regarding the inaccuracy of the relevant data, InfoPlus will determine whether and how to honor the request in accordance with applicable laws, and will inform the requestor of its determination and any actions taken.
  4. Right of Deletion: Where InfoPlus does not have a legitimate business need to process data about an individual natural person, or where the rights or risk of harm to an individual natural person outweigh InfoPlus's business need, such individuals have the right to deletion of the data InfoPlus processes about them in accordance with applicable law. If InfoPlus receives a deletion request while an applicable retention period is in effect, InfoPlus will not honor that request unless, based on the nature of the request, InfoPlus determines that the risk to the individual requestor outweighs InfoPlus's need to retain the data. Where InfoPlus no longer has a legal basis for processing personal data, such as in cases where processing is based on consent and the individual has withdrawn his or her consent, InfoPlus will delete such data in accordance with applicable laws. InfoPlus will not honor deletion requests where deletion would affect the integrity and quality of the solutions and services we provide, the effective and compliant operations of our business, important public interests, or our rights or the rights of others, such as freedom of expression.Where InfoPlus does not honor a deletion request, InfoPlus may consider suppression of data in accordance with the principles of the Right to Object and/or the Right to Restrictions in this Policy or anonymization of the data.
  5. Right to Object: InfoPlus provides direct communications to individuals in accordance with applicable laws. Individual natural persons have the right to object to InfoPlus processing personal data about them and to receiving marketing and certain other commercial communications from InfoPlus. Except where required by law, InfoPlus will honor objection and opt-out requests where doing so would not affect the integrity and quality of the solutions and services we provide, the effective and compliant operations of our business, important public interests, or our rights or the rights of others, such as freedom of expression.
    • Right to Opt-Out of Commercial Communications: : InfoPlus will honor opt-out requests from individual natural persons related to marketing and other forms of promotional, advertising, or commercial communications. InfoPlus will apply such requests to the information in its systems to which it reasonably can associate such a request, such as an opt-out to a specific email address or to the name of a person at a specific address. Except where required by law, InfoPlus will not apply an opt-out to any form of commercial communication that is transactional in nature, that is related to the delivery of its products, solutions, or services, or that InfoPlus has determined is essential for legal or compliance purposes.
    • Right to Opt-Out of Data Sale: Where required by law, InfoPlus will honor specific requests of individual natural persons to opt-out of the sale of personal data about them, including information that identifies them in the products and solutions that InfoPlus licenses to its customers and that is not otherwise publicly available. InfoPlus will honor opt-outs of online data sharing presented through cookie settings, browser settings, and similar technical preference signals in accordance with applicable laws. Except where required by law, InfoPlus will not attempt to link online preference signals to personal data in its commercial systems supporting its products and solutions nor in its internal workforce management systems.
    • Right to Opt-Out of Data Sharing with Third Parties for Online Advertising: If InfoPlus shares data with Third Parties, where permitted by applicable law, for cross-context behavioral advertising or other forms of targeted advertising, InfoPlus will provide and/or utilize readily accessible online mechanisms to enable individuals to opt-out of such data sharing. InfoPlus will honor opt-outs of online data sharing presented through cookie settings, browser settings, and similar technical preference signals in accordance with applicable laws.
    • Right to Withdraw Consent: If InfoPlus processes data about individuals based on their consent, InfoPlus shall provide transparent and accessible mechanisms for withdrawal of consent that are as easy to use as the method for providing consent. InfoPlus will prospectively honor withdrawal of consent to data processing presented through cookie settings, browser settings, and similar technical preference signals in accordance with applicable laws.
  7. Right to Restrictions: Individual natural persons have the right to request that InfoPlus restrict how it processes personal data, including any sensitive data, about them. For purposes of this Policy, sensitive data includes data categorized as sensitive, special categories, or data otherwise subject to special protections or prohibitions under applicable laws. If InfoPlus receives a request for a restriction or limitation on its use of personal data, InfoPlus will honor such restrictions in accordance with applicable laws and otherwise based on an evaluation of the rights or risk of harm to the individual natural person against InfoPlus's legitimate business need for the data.
  8. Right to Data Portability: Individual natural persons have the right to request that data they provide to InfoPlus in connection with their individual use of a InfoPlus automated product or service, such as a direct data upload, be returned or otherwise made available to them in a structured, machine-readable format. Where required by applicable law, InfoPlus also will honor a request from an authorized natural person to transfer such data to a third party designated by that individual. This right does not apply to InfoPlus customer requests for data that they have provided pursuant to a services or licensing agreement with InfoPlus. Such requests shall be handled in accordance with the terms of the applicable services or licensing agreement with InfoPlus. This right does not apply to data about individuals that InfoPlus has obtained from data suppliers or other third-party sources.
  9. Non-Retaliation: Consistent with our Code of Conduct and Ethics, InfoPlus will not retaliate nor discriminate, nor tolerate any retaliation or discrimination, against any individual who exercises rights provided by InfoPlus under this Policy or applicable law. If an individual exercises rights provided by InfoPlus under this Policy or applicable laws, InfoPlus will not deny access to its commercial solutions and services, charge different prices or rates for its commercial solutions or services, or provide a different quality of its commercial services or solutions to that individual unless the difference in price or quality is reasonably related to the value of the data related to that individual and such price or quality difference is permitted by applicable law. If a job applicant, current or former employee, other workforce member, or plan beneficiary exercises rights in good faith provided by InfoPlus under this Policy or applicable laws, InfoPlus will not tolerate any form of reprisal, harassment, intimidation, threats, coercion, discrimination, or retaliation against that individual.
  10. Third Parties: Consistent with our Code of Conduct for Third Parties, InfoPlus expects third parties with which we engage to process data about natural persons to be transparent about their practices and to honor data subject rights consistent with the nature of their engagements with InfoPlus.
  11. Response Timelines: Unless a shorter timeframe is required by law or a regulatory or legal obligation applicable to InfoPlus, or an extension is needed and permitted in accordance with applicable laws, InfoPlus will honor requests received pursuant to this Policy as soon as practicable and within one month of receipt.
  12. Multiple Requests: Except where required by law or a legal or regulatory obligation applicable to InfoPlus, InfoPlus will not honor multiple or repeated requests from the same individual to exercise the same right more than once every three months. If the data InfoPlus holds about an individual has changed or the risks to the individual have changed, however, InfoPlus will honor multiple or repeated requests during the three-month window provided that such requests are not excessive or otherwise unreasonable.