We are impact.com

We are impact.com (U.S.), formerly known as “Impact Radius, Inc.” and “Impact Tech, Inc.,” and the following affiliated companies (“affiliates”): Impact Radius Limited (U.K.), Forensiq Limited (U.K.), Impact Radius SA Pty Ltd (Cape Town, S.A.), Impact and Impact Radius Pty Ltd (AU), Impact Tech Singapore PTE. LTD., and Impact Radius (Shanghai) Co., Ltd. We, and our affiliates, are referred to as “impact.com.”

impact.com (“us,” “we,” or “our”) operates the website www.impact.com (“website”) and provides software as a service (SaaS) products to our business customers (collectively, “services”). This privacy policy informs you of our policies and practices regarding the collection, use, disclosure, retention, and erasure of any information relating to you that identifies you or by which you are identifiable (“personal information”) through the use of our website, our services, or that you otherwise provide to us. We will not use or share your personal information with anyone except as described in this privacy policy. We use your personal information for providing and improving our website and services. By using the website and/or services, or providing personal information to us, you agree to our collection and use of your personal information in accordance with this privacy policy.

Who may use our website and services?

Although certain areas of our website can generally be accessed by visitors, access to our services is not provided to the general public. Only persons or entities that are eligible to enter into further agreement(s) with us (our “clients”) may, with our permission, access nonpublic areas of our website. All such clients are businesses, and only adults may access our services. Your use of our website and/or services will constitute your acknowledgment of and your consent to this privacy policy.

Personal information collection and use

Clients

Our clients that use our services will be asked to provide us with certain personal information that can be used to contact or identify them (“client personal information”). Some examples of when we collect client personal information include when a client browses our website; makes an inquiry on our website; creates a user profile and password for the client’s impact.com account; subscribes to impact.com’s newsletters or other updates; or signs up to attend and/or attends an event such as a webinar or other online or in-person impact.com-hosted or sponsored event. Such client personal information includes, but is not limited to, name, postal address, business email address, phone number, and employer. We collect and use client personal information to:

• Verify your identity
• Administer and support your interaction with our website and services
• Permit access to our services
• Provide services to our clients
• Provide information and otherwise respond to your requests
• Contact you periodically about other services and products we offer, and with information on upcoming impact.com events
• Carry out marketing analysis; enhance, improve, maintain, and debug our website and services
• Prevent fraudulent use of our website and our services, and prevent or take actions against such fraudulent use or violation of our terms of use or applicable law
• Tailor content and other aspects of your experience on and in connection with our website and services, and
• For any other purposes that we may disclose to you at the point at which we request your personal information, and pursuant to your consent

If you submit information through our website to enquire about our services, our organization, or an event or information posted on our website, we will use such personal information to contact you in reply to your specific enquiry. You may be asked at that time whether you would like to be on our mailing list to receive news and updates about our company and services. You may request to be removed from such a mailing list at any time by using the “unsubscribe” link in our electronic communications, or by contacting us as provided in this privacy policy’s section on how to contact us, below..

impact.com does not rent or sell personal information. Other than to your client relationships through our services, impact.com does not disclose personal information about you to other people or companies that are not affiliates, except under the following circumstances:

• In order to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims
• When it is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person; violations of impact.com’s terms of use; any agreement with impact.com or this privacy policy; or as otherwise required by law
• When client personal information has been disclosed through legitimate and public channels, including, without limitation, news and press channels, governmental disclosure channels, etc., and
• If impact.com sells any or all of its assets or its shareholders sell any or all of their shares to a third party, in which case and subject always to compliance with applicable data protection legislation, you authorize that your personal information may be transferred to the buyer

Our clients’ visitors

We may also process personal information of our clients’ visitors and customers, and visitors to our clients’ websites (or our clients’ application downloads) in performance of services on behalf of our clients. In this context, we are a “service provider” or “data processor,” as those terms are defined by applicable laws. This personal information may consist of internet protocol (IP) addresses; account or membership numbers (without a key to personally identify you); and/or email addresses; although if our clients are sending email addresses to us, we request that our clients encrypt email addresses prior to sending. We take security measures to protect all personal information, including by hashing IP addresses and further encrypting email addresses. We do not associate personal information with individuals and are subject to our clients’ instructions regarding collection and use of such personal information. As a vendor of our clients, the basis for our collection and processing of personal information of their customers and visitors may be through consent obtained by our clients, our clients’ legitimate interests, or, in accordance with applicable law, a lawful business purpose.

impact.com does not rent or sell personal information. Other than to our client that is utilizing our services (who is the “business” or “controller”), impact.com does not disclose personal information about you with other people or companies that are not affiliates, except under the following circumstances:

• In order to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims
• When it is necessary to share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person; violations of impact.com’s terms of use, any agreement with impact.com, or this privacy policy; or as otherwise required by law
• If impact.com sells any or all of its assets or its shareholders sell any or all of their shares to a third party, in which case and always subject to compliance with applicable data protection legislation, you authorize that your personal information may be transferred to the buyer, and
• In the course of providing our services, to our other clients that you have relationships with

Accessing and correcting your personal information

Client personal information is accessible through our client online accounts (“client portals”). Clients are able to access their client portal to update and correct their personal information. If you no longer have access to the client portal, you may submit a request to remove the personal information you provided to us by emailing a request to privacy@impact.com, or contacting us by telephone or mail as further specified in  this privacy policy’s section on how to contact us, below. To protect your privacy and security, we will also take reasonable steps to verify your identity before removing your information.

We reserve the right to retain and use client personal information as reasonably necessary to comply with our contractual obligations to you and in order to comply with applicable laws, including privacy and/or data protection legislation.

If you are not a client but have signed up to receive information from us and would like to be removed from our mailing lists, you may use the “unsubscribe” instructions in our newsletters or electronic communications; email such a request to privacy@impact.com; or contact us by telephone or mail as further specified in this privacy policy’s section on how to contact us, below. .

If you are a customer of one of our clients or a visitor to their website (or have downloaded one of our client’s applications), please contact the client to request access to your personal information, or to correct or have such information deleted. If you do contact impact.com, impact.com does not associate the data that we process on behalf of our clients with any particular individual, and impact.com may not be able to verify whether we have personal information that belongs to you. See the section on how to contact us, below, with questions regarding this policy or requests regarding your personal information.

Other information

Log data 
impact.com collects information that your browser or device sends whenever you visit our website or use our services, and we collect browser and device data as part of our services for our clients (“log data”). When we collect log data of our clients, this log data may include information such as your computer’s IP address, browser type, browser version, the pages of our website or services that you visit, the time and date of your visit, the time spent on those pages, your activity on those pages, and other statistics. In addition, we may use third-party services such as Google Analytics that collect, monitor, and analyze this type of information in order to increase our services’ functionality. These third-party service providers have their own privacy policies addressing how they use such information. When you access services by or through a mobile device, we may automatically collect certain information, including, but not limited to, the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile internet browser you use, your location information, and other statistics. Please see the section on location information, below, regarding the use of your location information and your options.

The log data we collect for our clients of visitors to their website or mobile applications includes the visitor’s computer or mobile device IP address, browser type, browser version, and the ads they interact with. If you are referred by one of our clients to another’s website or application from interactions with the ads, we are passed information if you conclude an action there, such as the purchase of goods or services, a newsletter sign-up, or an application download . impact.com does not receive your name, address, credit card, or other personally identifying information.

Location information

In addition to log data, impact.com may use and store information about clients and clients’ visitors’ location, depending on the permissions that have been set on the relevant device. We use this information about our clients to provide features of our services and to improve and customize our services. For our clients’ visitors, impact.com collects location information to attribute actions to particular clients, and for fraud prevention. You can enable or disable location services through your device settings.

Cookies

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and transferred to your device. For visitors to our website and our clients’ visitors, we use cookies to collect information in order to perform and improve our website and services. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. The help feature on most browsers provides information on how to accept cookies, disable cookies, or notify you when receiving a new cookie. If you do not accept cookies, you may not be able to use some features of our website or services (or our clients’ websites), and we recommend that you leave them turned on.

Integrations

For clients: you may enhance services by enabling impact.com integrations with third-party products. If you provide third-party account credentials to us, you understand some content and/or information in those accounts (“third-party account information”) may be transmitted into your account with us, and that third-party account information transmitted to our services is covered by this privacy policy. Further, impact.com software may request permissions to take actions on your behalf using your third-party account credentials.

Service providers

We may employ third-party companies and individuals (our “agents”) to facilitate our services, to provide services on our behalf, to perform service-related services, and/or to assist us in analyzing how our services are used. Examples include processing and storing data, delivering messages, processing credit card payments, analyzing data, providing marketing assistance, supplementing the information you provide us in order to provide you with better service, and providing customer service. These third parties have access to your personal information only to perform specific tasks on our behalf and are under written obligation not to disclose or use your personal information for any purpose other than those disclosed in this privacy policy. We do not transfer data to non-agent third parties, except as indicated above in the section on personal information collection and use.

Notwithstanding any legal and contractual obligations between us and our agents, we remain potentially liable for any misuse of your personal information.

Your options for communications

For clients and our website visitors that sign up to be contacted, impact.com may use your personal information to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the “unsubscribe” link or instructions provided in any email we send.

Security of personal information

The security of your personal information is important to us, and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store in order to protect it from unauthorized access, destruction, use, modification, or disclosure. However, please be aware that no method of transmission over the internet or method of electronic storage is 100 percent secure, and we are unable to guarantee the absolute security of the personal information we have collected from you.

International transfer of personal information

Your personal information may be transferred to—and maintained on— computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction, and, in some cases, be less stringent as compared to those of your own jurisdiction. Our servers are located in data centers within the United States and other jurisdictions where we conduct business. impact.com utilizes the European economic area’s (EEA’s) standard contractual clauses for the purposes of transfers from the EEA to impact.com and its affiliates located outside of the EEA. Regardless of where your information is processed, we apply the same protections described in this policy. Our affiliates process personal information if necessary and appropriate for the business purposes or legal basis for which it was collected. This may include if you have directly contacted the affiliate for assistance or directly provide them with your information. Your consent to this privacy policy and your submission of personal information represents your agreement to those transfers.

Links to other sites

Our website and services may contain links to other websites or online locations that are not operated or controlled by us. If you click on a third-party link, you will be directed to that third party’s website. We strongly advise you to review the privacy policy of every online website or location you visit. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

Children’s privacy

Only persons who are age 18 or older have permission to access our services. Our services are not for access by anyone under the age of 18 (“children”). We do not knowingly collect personal information from children. If you are a parent or guardian and you learn that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we take steps to remove that information from our servers.

California Consumer Privacy Act

If the California Consumer Privacy Act (CCPA) applies to your personal information, we confirm that we are a service provider for our clients and that we do not sell your personal information (which, under the CCPA, includes information about your household). We only share such personal information as described in this privacy policy. impact.com processes your personal information for the purposes described in this policy, which includes the following business purposes under the CCPA:

Security. impact.com uses and may disclose information to detect, prevent, and respond to security incidents, and to protect against other malicious, deceptive, fraudulent, or illegal activity. For example, to protect our services, impact.com may receive or disclose information about IP addresses that malicious actors have compromised.

Analytics and services. impact.com uses information for analytics to understand how our services are used, as well as in the performance of our services. We disclose data to our clients pursuant to our agreements with them and their instructions; this includes personal data of visitors to their websites and applications. If instructed by a client to delete personal data, we delete the data or anonymized it (including automatically after a set period of time).

Maintenance of our services. impact.com uses personal information of our clients to ensure that our services are working as intended, such as tracking outages or troubleshooting bugs and other issues that we observe or that are reported to us.

Research and development. impact.com uses personal information of our clients concerning their use of our services and to develop new products, features, and technologies that benefit our clients. We do not use personal information of our clients’ visitors for these purposes.

Use of service providers. Personal information is processed by our affiliates and third-party service providers to perform services on our behalf, in compliance with our privacy policy and other appropriate confidentiality and security measures. For example, we utilize cloud storage solutions to store data that we process.

Compliance. impact.com also uses information to satisfy applicable laws or regulations, and discloses information in response to legal process or enforceable government requests, including to law enforcement.

If the CCPA is applicable to you and you have additional questions or requests related to your rights under the CCPA, see the section on how to contact us, below.

Retention and deletion

impact.com retains personal data only as long as is reasonably necessary for the performance of its services, and personal data of our clients’ visitors is automatically deleted or anonymized after ninety days. When impact.com is requested to delete personal data prior to such automatic deletion, we follow a process to make sure that genuine requests are honored. This involves verifying that the requestor is the individual that is the data subject, or, if the request comes from a client about its visitors, we delete personal data as instructed by our client. Since we do not collect personally identifiable information of our clients’ visitors, if the information comes directly from a client’s visitor we may not be able to verify that we have any such data or be able to match a request with a particular client.

When deleting data, the personal data is completely removed from our servers or retained only in anonymized form. If we have collected personal data about you from more than one client, we will delete all instances of the personal data that we have at the time of the request (to the extent that we are able to verify and match such data). However, if you subsequently authorize or visit the same client or another client’s website or application, we will have processed your personal data in relation to such authorization or visit.

Privacy policy changes

We reserve the right to update or change our privacy policy at any time and you should periodically check this privacy policy. Your continued use of our website and/or the services after we post any modifications to the privacy policy will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified privacy policy. If we make any material changes to this privacy policy, we will notify you either through the email address you have provided us or by placing a prominent notice on our website.

How to contact us

If you have any questions about this privacy policy or requests concerning your personal information, please contact us at:

privacy@impact.com

impact.com

223 E. De La Guerra Street

Santa Barbara, CA 93101

USA

+1 (805) 324-6021