Privacy Policy

‍1. GENERAL DISCLOSURES

Our data centers and Website are hosted in the United States. If you are visiting this Website from outside of the United States, please note that by providing us your information it is being stored or processed in the United States where our data center and servers are located and operated. The laws of the United States may not be as protective as those in your own country. If you are outside the United States and do not wish to allow the collection and storage of your personal information within the United States, you should not use this Website and you should opt-out of the collection of cookies by following the guidelines in our section titled “Manage cookie preferences” in our Cookies Policy.

This Policy sets forth our data policies and practices for the United States. If you are outside of the United States, please also review the provisions of our International Privacy Policy. Depending on your country of residence, applicable privacy laws may provide you with a right to additional disclosures as well as special data subject rights with regards to your personal information.

This Policy applies only to our Website and Services, and not to other companies’ or organizations’ websites, mobile applications and services to which we link. We are not responsible for the privacy practices of other businesses or the content of other websites, including any websites that may indicate a special relationship or partnership with us (such as co-branded pages or “in cooperation with” relationships). To ensure protection of your privacy, always review the privacy policy of the companies with whom you engage.

2. WHAT INFORMATION WE COLLECT AND DISCLOSE AND FOR WHAT PURPOSES

In the course of performing our Services, we collect a variety of different kinds of personal information from a variety of different individuals. What information we collect and the purposes for which it is collected will depend on the context of our activities or the Service that is being performed. Therefore, just because this Policy lists a particular data collection practice does not mean that we have necessarily collected that data from you. Instead, please review the applicable disclosures below to learn about how we may have collected personal information from you depending on how you have interacted with us.

Website Visitors

If you visit our Website:

• We may collect online identifier, geolocation, internet, electronic network activity and device information relating to you. 
• We may use this information to operate our sites and provision them to you, personalize your use of our sites, measure, and to track and analyze trends and usage in connection with your use or the performance of our sites.
• We generally collect this information from you directly, although we may collect information from referring websites or from our information technology, security and site hosting providers.
• We may disclose this information to our service providers, affiliates, and operational vendors.
• We may sell this information to our marketing and analytics vendors for the purposes of online marketing.
• We may share this information with our marketing vendors for the purposes of targeted advertising or cross-contextual behavioral advertising.

See below for more detail about our data practices relating to Website Visitors.

Current or Prospective Customers and Business Partners

If you are an employee of one of our customers, vendors or other entity and who is involved in our relationship with your employer, or if you engage with us in your own capacity or as a proprietor of your own business:

‍

• We may collect identifier, commercial and financial information about you as well as information business account log-in and password, which is considered “sensitive” under California privacy law. 
• We may use this information to facilitate payments, provide our services to you, administer and facilitate our relationship with you or your employer and to secure our networks, systems and databases against external threats 
• We generally collect this information from you directly, although we may collect identifier information from referrals or publicly available databases and financial information from your or our financial institutions.
• We may disclose this information to our service providers, operational vendors, business partners and joint marketing partners.
• We do not sell your information for money, but we may disclose your e-mail addresses and contact information to other businesses, including our joint marketing partners when we host webinars and events with them, in exchange for non-monetary benefits. We do not use your information for targeted advertising or cross-context behavioral advertising.

See below for more detail about our data practices relating to Current or Prospective Customers and Business Partners.

Further, we may collect personal information from you in the form of cookies. For information regarding how we collect, process and disclose personal information in the context of cookies, view our Cookies Policy.

Deidentified and Aggregated Information

We may process your personal information into aggregated, anonymized or de-identified form for any purpose. Aggregated, anonymized or de-identified information is information that can no longer reasonably identify a specific individual and is no longer “personal information.” We will only maintain and use this type of information in deidentified form and we will not attempt to reidentify this information, except for the purposes of validating our deidentification process.

3. PERSONAL INFORMATION RELATING TO CHILDREN

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any personal information to or on our Website. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website or on or through any of its features, use any of the interactive or public comment features of this Website or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us using the information provided under the section titled Contact Us. Please delete all Shipyard related cookies and restrict further collection of cookies using the methods outlined in our Cookies Policy.

‍4. HOW LONG WE RETAIN YOUR INFORMATION

We may retain your personal information for a period of time that is consistent for us to perform our Services, as well as to comply with applicable law, applicable statute of limitations and our data retention practices. We may also retain your personal information as we believe is reasonably necessary to comply with legal process or governmental request, to detect or prevent fraud, to collect fees owed, to resolve disputes, to address problems, to assist with investigations, to enforce other applicable agreements or policies or to take any other actions consistent with applicable law.

5. MARKETING AND PROMOTIONAL COMMUNICATIONS

You may opt-out of receiving marketing and promotional messages from us, if those messages are powered by us, by following the instructions in those messages. If you decide to opt-out, you will still receive non-promotional communications that are necessary in the performance of our Services.

Transparency and Choice

People have different privacy concerns. Our goal is to be clear about what information we collect and how we use it, so that you can make meaningful choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your personal information:

• Privacy Preference Center.  You can visit our Privacy Preference Center at any time by clicking the cookie icon on the bottom left-hand corner of the Website to set your cookie preferences. You can opt-out of non-essential cookie collection by disabling all non-“Strictly Necessary Cookies.”
• Tracking Technologies. You can set your browser to refuse all or some browser cookies (including cookies associated with our services), or to alert you when cookies are being sent. To learn how you can manage your cookies on our Website, please see our Cookies Policy.
• Google Ads. View and edit your preferences about the Google ads shown to you on Google and across the web, such as which categories might interest you, using Ads Settings. You can also visit that page to opt out of certain Google advertising services.
• Profile Information. Take out any of your personal information associated with any Shipyard profile.
• Personalized Advertising. If you do not want us to use personal information that we collect or that you provide to us to deliver advertisements according to our target-audience preferences, you can opt-out by selecting “Reject All” on our cookie notice banner. If you previously accepted cookies on our website and want to opt-out, please clear your cookies and select “Reject All” on our cookie notice banner. For browser-specific cookie settings and instructions, please see our Cookies Policy.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website at optout.networkadvertising.org.

At times, our Website may provide interactive areas. You are not required to provide any personal information when using these areas, but you may choose to do so. We strongly recommend that you DO NOT use your personal information as your user name and DO NOT post any personally identifiable information on line, since such information will be publicly available. We cannot ensure the security of any information you choose to make public in a chat room, forum, or message board. Also, we cannot ensure that parties who have access to such publicly available information will respect your privacy. Please exercise caution when deciding to disclose personal information in these areas.

We use remarketing services to advertise on third party websites to you after you visited the Website. We and our service providers use cookies to inform, optimize and serve ads based on your past visits to our Website. You can opt-out of this marketing by deleting all Shipyard related cookies and restrict further collection of cookies using the methods outlined in our section titled “Manage cookie preferences” in our Cookies Policy.

Do Not Track (“DNT”):  DNT is an optional browser setting that allows you to express your preferences regarding tracking across websites. Most modern web browsers give you the option to send a Do Not Track signal to the websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how a website should respond to this signal, so we do not take any action in response to this signal. We do not have a mechanism in place to respond to DNT signals. Instead, in addition to publicly available third-party tools, we offer you the choices described in this Privacy Policy to manage the collection and use of information about you.

6. LINKS TO OTHER SITES

This Website has links to other websites. Once you link to another site, you are subject to the privacy policy of the new site and its operator. We encourage you to carefully review the privacy policy of each entity to which you provide information.

7. SECURITY

We understand that the safety of your personal information is extremely important to you. Accordingly, we work hard to protect Shipyard and individual’s about whom we collect personal information from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

8. YOUR DATA RIGHTS

There are a number of U.S. states that provide specific data rights to residents of those jurisdictions regarding their personal information. This section of this Policy describes the rights available to those individuals who are entitled to them. If you have questions, or want more information about how to exercise your data rights, please contact us using the information provided under the section titled Contact Us.

If you a resident of California, you have access to special data rights and disclosures that are described in this Policy under a separate section titled Data Rights For California Consumers.

If you are a consumer living in Colorado, Connecticut, Montana, Nevada, Oregon, Texas, Utah or Virginia, you have the following rights with regards to your personal information. These rights are explained in further detail below.

• Right to Confirmation and Access: You have the right to confirm whether or not we are processing your personal information and to access such personal information. The general categories of personal information that we collect, process and disclose are listed in the general Policy under the section: What Information We Collect And Disclose And For What Purposes. If you wish to access the specific pieces of personal information that we process about you, please submit a request as directed in the section titled How To Submit A Request.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
• Right to Delete: You have the right to request that we delete the personal information that we maintain about you.
• Right to Portability: You have the right to request to receive your personal information that you have requested in a portable and readily usable format, to the extent technically feasible.
• Right to Opt-Out of Sale/Targeted Advertising: You have the right to request to opt out of the sale of your personal information or our processing of your personal information for purposes of targeted advertising. “Targeted advertising” generally means displaying advertisements where the advertisement is selected based on personal information obtained from your activities over time and across non-Shipyard websites or online applications to predict your preferences or interests. However, please note that if you opt-out, you may still see our ads because we may advertise through other methods that are not based upon your online behavior.
• Right to Opt-Out of Profiling : You have the right to request to opt out of automated profiling of you that produce legal or similarly significant effects concerning you. Applicable state laws allow you to opt out of the application of automated profiling when it relates to substantive decision making, such as denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services. However, we do not profile individuals in manner that produces legal or similarly significant effects on those individuals. Therefore, we do not offer a way to opt-out of profiling and neither do we look for or process any online browser preference or opt-out signals that purport to opt-out of profiling.
• Right to Information About Third Parties. Oregon residents may have the right to request, at our option, a list of specific third parties, other than natural persons, to which the Shipyard has disclosed either your personal information or any personal information in general.

How We Process Data Rights Requests

‍Once we receive your request to exercise a right, we will confirm receipt and begin to evaluate, and if appropriate, process the request. Please note that:

• We may require that you provide additional information to confirm your identity, including providing us with at least two or more pieces of personal information to match against personal information that we currently maintain about you. We reserve the right to reject your request if we are unable to verify your identity to a sufficiently high level of certainty. The information you provide to verify your identity will only be used for verification purposes, and a record of your request, including certain information contained within it, will be maintained by us for our files.
• To authenticate any request to correct personal information, you may be required to provide authentication information.
• Certain laws or other legal requirements might prevent some personal information from being deleted.

If you fail or refuse to provide the necessary information, we may not be able to process your request.

If we reject a request for any reason, we will inform you of the basis of the rejection. We may not be able to comply with your request for a number of reasons, including:

• you do not live in a state that grants you the specific right that you have requested;
• the information that you’ve requested is not subject to the regulation that grants you the right to make a request in relation to your personal information;
• we are prevented or exempted by law, regulation or rule from complying with your request;
• we do not maintain your personal information in a manner that is connected to your identity;
• we are not able to comply with your request without incurring disproportionate burden or expense; or
• if complying with your request conflicts with the integrity of our Services, the ability to administer our Website, to administer our business and related relationships or to establish, defend or administer legal claims.

If any of the above reasons apply, we will let you know in our response to your request.

‍Submitting A Request Through Browser Controls Or An Authorized Agent

‍We recognize the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the sale of their online browsing personal information or sharing of their personal information for the purposes of targeted advertising. You can opt-out of this sale or share by activating the opt-out preference signal or Global Privacy Control (GPC) on your browser. More information regarding GPC is available here.

Further, you may designate an authorized agent to make a request to “out-opt” of sale, profiling or targeted advertising, as those rights are described above. An authorized agent should make a request through the same mechanisms that are available to individuals as described in this policy. The request should clearly identify that the request is being made by an authorized agent and must include evidence of authorization. If we receive a request from an individual or an entity purporting to making the request on behalf of another individual, we can only comply with the request if we are able to sufficiently authenticate both the identity of the individual as well as the authorized agent’s authority to act on that individual’s behalf. California has special rules regarding submitting requests through agents, so please review the appropriate disclosure in the section titled Data Rights For California Consumers.

Appeals And Complaints

‍If you disagree with our decision to reject your request or to any portion of our request, you have the right to appeal our refusal within a reasonable period of time. If you wish to appeal, please clearly and plainly describe your basis of disagreement with our decision by responding through the same means by which we communicated our refusal or by submitting your appeal through the information provided under Contact Us. We will review your appeal and either change our decision or reject your appeal, and in either case, we will provide a written explanation of the reason for the decision. This decision will be final.

However, if you still disagree with our decision, you have the right to submit a complaint to your attorney general of your state of residence. Your attorney general will have an online portal with details regarding how to submit complaints. For example:

• If you are a resident of Colorado, the Colorado Attorney General can be contacted through the means described here.
• If you are a resident of Connecticut, the Connecticut Attorney General can be contacted through the means described here.
• If you are a resident of Montana, the Montana Attorney General can be contacted through the means described here.
• If you are a resident of Oregon, the Oregon Attorney General can be contacted through the means described here.
• If you are a resident of Texas, the Texas Attorney General can be contacted through the means described here.
• If you are a resident of Virginia, the Virginia Attorney General can be contacted through the means described here.

9. DATA RIGHTS FOR CALIFORNIA CONSUMERS

The California Consumer Privacy Act (“CCPA”) provides the residents of California with the right to request the data rights as described in this section. For more information, or if you have questions, you can contact us using the information provided under Contact Us.

• Right to Know: California residents have the right to know what personal information we have collected about them, including the categories of personal information, the categories of sources from which the personal information is collected in the past 12 months, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
  
  The categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for which we collect personal information and the categories of third parties to whom we disclose personal information are found in the general Policy under the section titled What Information We Collect And Disclose And For What Purposes.
  
  California residents have a right to know if we are “selling” or “sharing” (which is a term used under California law to address the sharing of information for cross context behavioral advertising purposes) their personal information, what categories of personal information are “sold” or “shared,” and to whom.
  
  We do sell and share some personal information, as these terms are defined by California law. Please review the disclosures in the section titled What Information We Collect And Disclose And For What Purposes for more information.

• Right to Delete: California residents have the right to request the deletion of their personal information maintained by us.
• Right to Correct: California residents have the right to request that we correct inaccurate personal information that we maintain about them. However, we reserve the right to delete your inaccurate personal information instead of correcting it, if permitted by the CCPA.
• Right to Non-Discrimination: California residents have the right to not be discriminated against due to the exercise of their CCPA privacy rights. However, note that the exercise of certain privacy rights may make it so that we are no longer able to provide you with certain services or communications. For example, if we delete all of your personal information, we cannot send you e-mails or other communications.
• Right to Opt-Out: California residents have the right to opt-out of the “sale” or “sharing” of their personal information (as those terms are defined above). You can submit a request to opt-out of the “sale” of your personal information as described in the How To Submit A Request section of this Policy. We recognize the Global Privacy Control (GPC) browser setting that allows individuals to automatically signal their opt-out of the sale of their online browsing personal information or sharing of their personal information for the purposes of targeted advertising. You can opt-out of this sale or share by activating the opt-out preference signal or Global Privacy Control (GPC) on your browser. More information regarding GPC is available here.
• Right to Limit Use and Disclosure of Sensitive Personal Information: California residents have the right to direct a business to limit its use and disclosure of their “sensitive” personal information. California residents can request that a business limit its use or disclosure of their “sensitive” personal information to that use or disclosure which is necessary to perform the services or provide the goods reasonably expected by an average consumer, or to those uses or disclosures otherwise authorized by California law.
  
  However, we do not use or disclose your “sensitive” personal information for any purpose other than for the specific purposes described under the CCPA regulation § 7027(m) and always in a manner reasonably necessary and proportionate for these permitted purposes. For information on how we use or disclose your “sensitive” personal information, please see the applicable disclosures in the section titled: What Information We Collect From You And For What Purposes.

• Right to Make Requests Through an Authorized Agent : California residents can designate an authorized agent to make a request under the CCPA on their behalf.
  
  California residents can designate an authorized agent to make requests under the CCPA on their behalf relating to the residents’ personal information. Only you as a California resident, or a person you have designated in writing as your authorized agent, may make a consumer request related to your personal information.
  
  If you wish to have an authorized agent make a verifiable consumer request on your behalf, they will need to provide us with sufficient written proof that you have designated them as your authorized agent, such as a power of attorney pursuant to California Probate Code sections 4000 to 4465. We will still require you to provide sufficient information to allow us to reasonably verify that you are the person about whom we have collected personal information. We can deny any request made by a purported authorized agent who does not submit proof that they has been authorized by the California resident to act on the California resident’s behalf.

10. HOW TO SUBMIT A REQUEST

You can submit your request to exercise your data rights through the below:

• Filling-out the  Privacy Request Form;
• E-mailing us at dataprivacy@shipyardapp.com; or‍
• Calling us toll-free number at 1-(844)-441-9869 PIN: 352410.

11. CHANGES TO THIS PRIVACY POLICY

As we provide more services and/or functionality on our Website and as privacy laws and regulations evolve, it may be necessary to revise or update our Privacy Policy. It is our policy to post any changes we make to our Policy with a notice that the Policy has been updated on the Website home page. If we make material changes to how we treat our users’ Personal Information, we will notify you through a notice on the Website home page. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for periodically visiting our Website and this Privacy Policy to check for any changes. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.

12. CONTACT US

To submit questions or to inquire about or submit a request relating to data rights, you can contact us by:

• E-mailing us directly at dataprivacy@shipyardapp.com