Privacy Policy

LAST UPDATED: May 3, 2024

1. INTRODUCTION AND SCOPE

   
   

   This Privacy Policy governs and explains how Unanet Inc. and, except as otherwise noted, its affiliates (“Unanet”, “we”, “us”, “our”) collect, disclose, and use your information as we provide services on our website, www.unanet.com, and our affiliated websites (collectively referred to as, the “Site” or “website”) and the software applications, services, and products offered by Unanet and its affiliates (collectively, together with the Site, the “Services”) in addition to your rights related to such practices. This Privacy Policy does not apply to Distribution Management Company Inc. d/b/a Flowtrac or to information that we handle as a “processor” or “service provider” on behalf of our customers such as when your employer has purchased access rights to our Services, and you use our Services through your employer. Our processing of such information is governed by our agreements with each customer. We do not control what our customers do with the information we process on their behalf. For information that we process on behalf of a customer, please see the customer's privacy policy or contact that customer for more information and to exercise any rights with regard to such information. For information related to Flowtrac’s information practices, you can visit Flowtrac’s privacy policy here.
   
   Please read this Privacy Policy carefully. By accessing or using the Services, you consent to Unanet’s collection and use of your information as set forth in this Privacy Policy. If you do not want us to handle your information as set forth herein, please do not use the Services.
   
   If you are a resident of California, please see the Privacy Notice for California Residents for additional information.

   Unanet has three different types of users: Site Visitors, Customer Account Administrators, and End-Users. Site Visitors and Customer Account Administrators are also referred to as “you.”
   
   

   SITE VISITORS

   Users of the site are “Site Visitors.” Site Visitors may either be individuals who only browse the site or use Services available on the Site (such as Unanet University) or they may be End Users who also visit the Site. Unanet is the data controller of the information collected through the site about Site Visitors.
   
   

   CUSTOMER ACCOUNT ADMINISTRATORS

   “Customer Account Administrators” are individuals that are employees, contractors, consultants, or other authorized representatives of a Customer who administer the Customer’s Unanet account, including to pay for the Customer’s access to the Unanet Services. Unanet is the data controller of the information collected about Customer Account Administrators.
   
   

   END-USERS

   “End Users” use Unanet software applications, services, and products through Unanet’s customers (e.g., your employer or another entity or person, referred to as the “Customer”) pursuant to specific terms agreed to between Unanet and Customer in a separate agreement between Unanet and Customer that governs delivery, access, and use of the Services (the “Customer Agreement”). The Customer controls its instance of the Services and is the data controller of the information provided by or on behalf of a Customer and processed through the Services about End-Users (the “Customer Data”). When processing Customer Data governed by the Customer Agreement, Unanet is a data processor or service provider, meaning that we collect and process such information solely on behalf of the Customer for the purposes set forth in the Customer Agreement.

   However, with respect to End-User email addresses used to access the Unanet Services, Unanet is the data controller.
   
   Customer Data includes all attachments, files, documents, tasks, projects and project names, associated messages, team names, schedules, expenses, and other content submitted by End-Users through the Services. The Customer, and not Unanet, determines its own, internal policies regarding storage, access, modification, deletion, sharing, and retention of Customer Data. A Customer may provide or remove access to the Services, manage permissions and settings, export data, control teams and projects, and enable or disable third party integrations.
   
   
   

   Our Customer Agreement with each Customer, and not this Privacy Policy, governs our treatment of Customer Data we handle as a processor. If you believe one of our Customers processes your data in connection with our Services, and if you have any questions about the Customer’s
   
   

2. INFORMATION WE COLLECT

   We collect information from and about you in the following ways:

   • Directly from you. We collect information you provide directly to us, for example, when you register to use our Services (including registration for trainings (such as through Unanet University), webinars, or events), upload or post to the Services, and when you communicate with us such as by emailing, calling, chatting with us to ask for more information or report a problem, or responding to a survey. This information includes:
     
     
     • Contact information, such as your name, email address, business phone number, and postal address.
     • Business information, such as company name, location, and number of employees.
     • Account information, such as account ID and password.
     • Commercial information, such as the events or webinars for which you register, products or services in which you are interested.
     • Information about your purchases from us. If you use a payment (credit) card, cardholder data (CHD) is collected from you using a third-party payment processor (including Stripe) to process your payment.
     • Any other information you provide, such as when you submit requests or questions to us via forms or email and requests for customer support and technical assistance.

   You are not required to provide us with any information, but if you choose not to provide certain information, you may be unable to access certain options, offers, and Services.

   • From Customer Account Administrators. We collect contact information about Customer Account Administrators, such as your name, email address, and title.
   • From other sources. We also collect information from other sources, including publicly and commercially available sources. Such information may include business contact information; mailing address, job title, email address, phone number, industry, social media profile information that you make available, and business profiles that you make available.
   • Information we collect automatically. We collect certain information automatically when you use the Services, including, but is not limited to:
     • Device information, such as type of device you are using, operating system, and device identifiers.
     • Log files, such as web request, IP address, browser type and settings, referring/exit pages and URLs, number of clicks, date and time stamp information, language preferences, data from cookies and similar technologies, and other such information.
     • Location information, which is general information about the location of the device from which you are accessing the Service (e.g., zip code level information inferred from an IP address).
     • High level information about the way you use the Services such as the features you interact with; the types of files you share (i.e., pdf); and what, if any, third party services and integrations you use.

   We collect some of this information through cookies and similar technologies. A cookie is a piece of data stored on your device. Cookies perform various functions, including to help us improve your access to the Services, identify repeat visitors to our Site, help us understand how the Services are used, enhance your experience on the Services, and advertise our services. Some of these cookies are set by our Site (“first-party cookies”) while others are set by third-party providers (“third-party cookies”). In addition, some cookies are deleted when you close your browser (“session cookies”) while other cookies last longer (“persistent cookies”). We may use first-party and third-party cookies, and we may also use session and persistent cookies.

   We use the following types of cookies on the Sites and/or Services:

   
   

   Type of cookie	Purpose
   Essential Cookies	These cookies are essential to provide you with the Site and Services and to enable you to use some of its features. For example, they allow you to log in to secure areas of our Services and help the content of the Site pages you request load quickly. Without these cookies, the Site and Services cannot be provided.
   Functionality Cookies	These cookies enable certain functions on the Site and Services but are not essential to them. For example, they allow our Site and Services to remember your language preferences, login details, and certain customizable features, providing you with a more convenient and personal experience of the Site and Services.
   Analytics and Performance Cookies	These cookies collect information about traffic to the Site and Services and how the Site and Services are used, such as the number of visitors to various Sites, the referring website, the pages you visited on the Site, the date and time of your visit, and whether you have visited the Site before. This information helps us operate the Site and Services more efficiently and understand how the Site and Services are used.  The analytics cookies we use include Google Analytics cookies. You can find out more information about Google Analytics cookies here: https://developers.google.com/analytics/resources/concepts/gaConceptsCookies. You can find out more about how Google protects your data here: google.com/analytics/learn/privacy.html.  To prevent Google Analytics from collecting your information on the Services, you can install the browser plugin available here: http://tools.google.com/dlpage/gaoptout?hl=en-GB.
   Social Media Cookies	These cookies are used when Site Visitors share information using a social media sharing button or “like” button on Unanet sites and services or you link your account or engage with our content on or through a social networking website such as Facebook, Twitter or Google+. The social network will record that you have done this.
   Advertising Cookies (Site only)	These cookies collect data about your browsing habits on the Site and allow us to serve you relevant advertisements for the Services on other sites. Certain third-party partners may also combine the information they collect and/or hashed email addresses in order to identify your email address or other information about you and share that information with us.

3. HOW WE USE INFORMATION

   We may use the information described above for the following purposes:

   • to operate, maintain, and provide the Services;
   • to prevent or address service or technical problems;
   • to respond to your requests and otherwise manage your account;
   • to fulfill your transactions;
   • to analyze and improve the Services;
   • to communicate with you;
   • to secure the Services and prevent fraud;
   • for marketing purposes about upcoming webinars, conferences, events, or other products and services offered by Unanet, its partners, or its affiliates (subject to any preferences you have communicated to us);
   • to advertise the Services;
   • as we believe necessary or appropriate (a) to comply with applicable laws; (b) to comply with lawful requests and legal process, including to respond to requests from public and government authorities; (c) to enforce our legal terms, including this Privacy Policy; and (c) to protect our rights, privacy, safety or property, and/or that of you or others;
   • for any other lawful purpose, with your consent.

   We may combine the information we collect through the Services with information we collect automatically or receive from other sources and use such combined data in accordance with this Privacy Policy. We may also aggregate and/or de-identify this information in such a way that it cannot reasonably be linked to you or your device. We may use such aggregated and/or de-identified information for any purpose and may disclose such information to any other parties without limitation.
   
   Where required by applicable law, we rely on the following legal bases to process your information:

   • Where use of your information is necessary to perform our obligations under a contract with our Customer;
   • Where use of your information is necessary for our legitimate interests or the legitimate interests of others (for example, to provide security for our Services, operate our Services, and prevent fraud);
   • Where use of your information is necessary to comply with a legal obligation; or

   Where we have your consent to process information in a certain way

4. HOW WE DISCLOSE INFORMATION

    

   We may disclose your information as follows:

   • Service Providers: We may disclose information to providers who provide services on our behalf such as payment processing, information technology and related infrastructure, email delivery, analytics, research and business analysis, and auditing. These third parties are only permitted to use your personal information to the extent necessary to enable them to provide their services to Unanet.
   • Third-party Integrations and Licensees: We may disclose your information to our third-party technology partners if you choose to use or connect to third-party integrations made available through the Services, to enable your use of the third-party integration. Unanet is not responsible for such third-party websites or services and the privacy policies of such third parties.
   • Affiliates: We may disclose your information to our corporate affiliates, and such information will be treated in accordance with this Privacy Policy.
   • Third-Party Ad Networks and Advertising Partners. The Services may integrate third-party advertising technologies that allow us to advertise the Services on other websites. Except for the choices provided by Unanet herein, this Privacy Policy does not govern the use of cookies or other tracking by such third parties. 
   • Legal Compliance: We may disclose your information as required, or in the good faith belief that such disclosure is necessary, to (1) comply with applicable laws, regulations, or legal process; (2) obtain legal advice or representation; or (3) protect or defend the rights or property of Unanet, you, or others.
   • Corporate Restructuring: In connection with any actual or contemplated merger, sale of company assets, financing or acquisition, or diligence related to any such restructuring, or in any similar situation, your information may be disclosed or transferred as one of the business assets of Unanet.

   With Your Consent: We may disclose your information consistent with your consent, including if you direct us to disclose your information to any party, for example co-sponsors of events and partners

5. YOUR RIGHTS AND CHOICES

   Rights regarding your information
   
   Depending on your jurisdiction (such as California, Virginia, Colorado, Connecticut, Utah, Canada, the EU, and the UK), you may have the right to make certain requests of us regarding your information, including but not limited to the right to ask us to:
   • • • • Inform you about the categories of information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your information; and the categories of other parties to whom we disclose your information.
         • Provide you access to and/or a copy of certain information we hold about you.
         • Correct or update certain information we hold about you.
         • Delete certain information we have about you.
         • If applicable, opt you out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

6. RETENTION

   We may retain your information until we determine it is no longer required for the purposes for which you provided it to Unanet unless a longer retention period is required or permitted by law. The different purposes for which we process information may result in different retention periods for the same types of information.

7. SECURITY

   We take precautions to protect your information, such as industry standard encryption and secure environments. Unfortunately, no system can be guaranteed to be 100% secure. Consequently, while we use commercially reasonable efforts to protect your information, we cannot completely guarantee its security of. Any information that you provide to us is done so with an understanding of such risks.

8. THIRD PARTY SITES AND INTEGRATIONS

   Our Services may contain links to or integrations for third party sites and services. The privacy policies of such third parties, and not this Privacy Policy, cover the privacy practices of such third parties. Unanet is not responsible for such third parties or for their websites, services, policies, or treatment of your information. We encourage you to be aware when you leave our site and to read the privacy policy of any other site or service you interact with.

    

9. INTERNATIONAL DATA TRANSFER

   We are based in the United States. By using the Services, you acknowledge that your information may be transferred to, stored in, and processed by us and our vendors outside the country in which you reside, including without limitation the United States, where data protection laws may not offer the same level of protection as in your country of residence. Where applicable, we implement transfer mechanisms for the transfer of data to the United States as required by applicable law.

10. CHILDREN

    Our Services are not directed to or intended for children under the age of 16. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us using the details below. We will delete such information from our files as soon as reasonably practicable.

11. PRIVACY NOTICE FOR CALIFORNIA RESIDENTS

    This Privacy Notice for California Residents supplements the Privacy Policy and applies solely to residents of the State of California (“consumers” or “you”). The California Consumer Privacy Act of 2018 (as amended from time to time, the “CCPA”) requires us to provide California residents with information about the categories of “personal information” and “sensitive personal information” (each as defined in the CCPA) that we have collected about California consumers, the categories of sources from which the information was collected, the business or commercial purposes (as those terms are defined by applicable law) for which the information was collected, and the categories of parties to whom we disclose personal information.

    • Categories, sources, uses, disclosure, and retention of personal information
      We collected the following categories of personal information from consumers within the twelve (12) months prior to the “Last Updated” date of this Privacy Policy.
    
    
    
    
    

    Category	Examples
    A. Identifiers.	A real first name, last name, title, alias, postal address, phone number, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
    B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, address, telephone number, employment, employment history.  Some personal information included in this category may overlap with other categories.
    C. Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website or application, crash logs.
    D. Commercial information	Purchase history in connection with the Services
    E. Geolocation data.	General location.
    F. Professional or employment-related information.	Current employment information.

    We collect the foregoing personal information directly from you, automatically through cookies and similar technology, and from third party sources, as outlined in Section 2 of our Privacy Policy.
    
    In the previous twelve months, we have collected and disclosed the above categories of personal information for the business and commercial purposes set forth in Section 3 above.
    
    We may disclose any of the categories of personal information above as set forth in Section 4 of our Privacy Policy above.
    
    For information retention practices, please see Section 6 of our Privacy Policy above.

    • Your CCPA Rights
      If you are a California resident, you have the right to request that Unanet:
      • Provide you the categories of personal information we have collected or disclosed about you; the categories of sources of such information; the business or commercial purpose for collecting, “selling,” or “sharing” your personal information, as those terms are defined by the CCPA; the categories of parties to whom we disclosed, “sold,” or with whom we “shared” personal information; and the categories of personal information we “sold” or “shared.”
      • Provide access to and/or a copy of certain information we hold about you.
      • Delete certain personal information that we hold about you.
      • Correct inaccurate personal information that we hold about you.

    You may have the right to receive information about the financial incentives that we offer to you, if any. You also have the right to not be discriminated against, as provided for in applicable law, for exercising certain rights. Certain information may be exempt from your requests under applicable law. In addition, we need certain information to provide the Services or for legal or compliance purposes. We may deny your request due to legal exceptions or requirements.
    
    As a reminder, if you are an End-User, please contact your entity’s (our Customer’s) administrator(s) to exercise any rights and choices you might have.
    
    For Site Visitors and Customer Account Administrators, to exercise your rights, please call us at 888-652-9009 or email privacy@unanet.com. Only you or your authorized agent that you authorize to act on your behalf may make a request related to your personal information.
    
    We may take steps to verify your identity. If an authorized agent or entity makes a request on your behalf, we will still need to verify your identity and may request written confirmation that the agent is authorized to make a request on your behalf.
    
    If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response electronically.

    • Right to opt out of “sale” and “sharing” of “personal information”

    Under the CCPA, our use of certain analytics and advertising cookies and similar technologies may be considered to involve a “sale” or "sharing" (i.e., use for targeted advertising) of “personal information,” as such terms are defined under the CCPA. Depending on what Sites and/or Services you use, we may “sell” or “share” the following “personal information”: Contact information, cookies, IP address, and/or browsing behavior and information about your potential interests or characteristics.
    
    You can opt out of our “sale” and “sharing” of your personal information, as described above, by clicking the “Your Privacy Choices” link in the footer of our Site and taking the following steps: turn off “Analytics” and “Advertisement” cookies (they are turned off if the toggle next to them is gray in color and situated left), and click “Save settings.”

    Please note that you will need to repeat these steps on each browser or device where you want these choices to apply.

    We also respond to and abide by opt-out preference signals sent through the Global Privacy Control. Any opt out preferences you have exercised through these methods will only apply to the specific device/browser on which you made them. For more information on how to use the Global Privacy Control, see www.globalprivacycontrol.org.

    • Right to limit use of sensitive personal information.

    California law may allow you to limit the use or disclosure of your “sensitive personal information” for certain purposes. To the extent we process sensitive personal information, we do not process it for purposes for which you can opt out under the CCPA.

    Retention. We keep your information as long as we determine it is necessary to fulfill the purposes described above, unless a longer retention is required or permitted by law. Our retention is based upon the amount, nature and sensitivity of the information, our purposes for which we process the information, applicable legal requirements, and our legitimate interests. The different purposes for which we process information may result in different retention periods for the same types of information.

    • Do Not Track
      Do Not Track (“DNT”) is a privacy preference that is available in certain web browsers which you can learn more about here. We do not currently recognize or respond to browser initiated DNT signals.
    • “Shine the Light” Disclosure
      California’s “Shine the Light” law (Civil Code Section § 1798.83) permits California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. Unanet does not disclose personal information to third parties for their direct marketing purposes.

12. CHANGES TO THIS PRIVACY POLICY

    Unanet reserves the right to amend this Privacy Policy at our discretion and at any time. We will post the updated Privacy Policy on the Site and update the “Last Updated” date. Your continued use of the Services following the posting of changes to this Privacy Policy, or if applicable, following legally required notice, constitutes your acceptance of such changes.

13. CONTACT INFORMATION

    If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
    
    Phone: 888-652-9009
    Email: privacy@unanet.com
    Mail: 22970 Indian Creek Drive, Suite 200, Dulles, VA 20166