Privacy Shield Notice

EverCompliant, Inc. (“EverC”, “We” or “Our”) has certified with the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield with respect to the Personal Data (defined below) that (i) We receive from the Customers (defined below) or from EverCompliant Ltd. (“EverC Ltd.”) and/or (ii) We collect and/or Process on behalf of, or, in the benefit of: (a) the Customers through and/or in the context of the Service (defined below) or the contracts executed with Customers; and/or (b) EverC Ltd.

EverC complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data transferred to the United States.  EverC has certified to the Department of Commerce that it adheres to the Privacy Shield Principles and Our Privacy Shield certification will be available here.

If there is any conflict between the terms in this Privacy Shield Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit www.privacyshield.gov.

“Customer(s)” means prospective, current, or former customers, or clients of EverC and/or EverC, Ltd.

“Personal Data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

EverC’s participation in the Privacy Shield applies to the Personal Data subject to EU and Swiss data protection law that (i) EverC receives from Customers or from EverC Ltd. and/or (ii) EverC collects and/or Processes on behalf of (a) Customers (through and/or in the context of the Service or the contracts executed with Customers of EverC Ltd.); or (b) EverC Ltd.

EverC and EverC, Ltd. provide their Customers with a cyber intelligence solution to provide risk, compliance and other data insights. This solution is made available to Customers on a software as a service (SaaS) basis (the “Service”).

EverC will Process the Personal Data it receives from EverC Ltd. and/or Customers, for the purposes of providing the Service to Customers and/or providing internal services to EverC, Ltd. To fulfill these purposes, We may, without limitation, access the Personal Data for the purpose of assisting EverC Ltd. with providing the Service, to provide support and maintenance, to correct and address technical or service problems, to contact Customers, to comply with applicable laws, regulations and orders from public authorities or courts, and/or for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedures.

Subject to Section 6 below, We will not transfer Personal Data originating in the EU and/or Switzerland to third parties unless such third parties have entered into an agreement in writing with us requiring them to provide at least the same level of protection to the Personal Data as required by the Principles of the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. We may transfer Personal Data to processors, service providers, vendors, contractors, partners and agents (collectively “Processors”) who need the information in order to provide services to or perform activities on Our behalf. In cases of onward transfer to third parties of Personal Data received pursuant to the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield, EverC is potentially liable.

The description of the services and/or the activities that the abovementioned Processors perform, are set out below:

Service / Activity

1. Cloud
2. Analytics, pixels and SDKs
3. CRM
4. Email provider and email tools
5. Survey platform
6. Marketing platform
7. Financial app

Data subjects have the right to access Personal Data about them, and in some cases to limit use and disclosure of their Personal Data. If you would like to request access to the Personal Data We have processed on behalf of one of the Customers, please contact privacy@everc.com and provide your name, contact information and observe the required formalities under applicable law.

EverC may be required in certain circumstances to disclose Personal Data in response to lawful requests by courts or public authorities, including to meet national security or law enforcement requirement.

In compliance with the Privacy Shield Principles, EverC commits to resolve complaints about Our collection or use of your Personal Data.  EU and Swiss individuals with inquiries or complaints regarding Our Privacy Shield policy should first contact EverC at: privacy@everc.com or by postal mail sent to:

EverCompliant Inc.
Attn: Privacy Shield Inquiry
33 West 60th Street, Suite 203
New York, NY 10023
USA

EverC has further committed to refer unresolved privacy complaints under the EU-U.S. Privacy Shield Principles and the Swiss-U.S. Privacy Shield Principles to JAMS, a non-profit alternative dispute resolution provider located in the United States to assist with the complaint resolution process. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.jamsadr.com/eu-us-privacy-shield for more information and to file a complaint. The services of JAMS are provided at no cost to you.

Under certain conditions, more fully described on the Privacy Shield website privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may also be able to invoke binding arbitration when other dispute resolution procedures have been exhausted.