Effective as of April 30, 2019
This Privacy Policy (“Policy”) describes how InCountry, Inc. (“InCountry”, “we,” or “us”), our networks and other Services provided by us and our website, https://www.incountry.com, and related websites (the “Service”) use and collect data. This Policy describes the information we gather from you, how we use and disclose such information, and how we protect such information.
InCountry respects your privacy rights and is committed to transparency in how we collect, use and share your personal information.
If you have any questions or concerns about your personal information or this Privacy Policy, email us at privacy@incountry.com.
Client Service Data
Customers of InCountry Service (“Clients”) use the Service to enable storage of Client encrypted data (“Client Service Data”) in the country of the Client’s choice.
Client Service Data may include, without limitation, information about the identity of Client users (such as name, postal address, e-mail address, IP address and phone number), as well as any other personal information the Client may collect and or store about individual persons, including its end users and customers.
This Policy does not apply to Client Service Data. Instead, our Clients are responsible for and have their own policies regarding the collection, use and disclosure of the personal information contained in the Client Service Data. To learn about how a specific Client handles your personal information, we encourage you to read the Client’s privacy statement. Our use of Client Service Data provided by our Clients in connection with our Service is subject to the written agreement between InCountry and the Client, which contain appropriate protections for personal information contained within Client Service Data.
Personal Information We Collect
We collect personal information about users of our Service and our Website in the following ways:
Information you give us
Personal information you may provide through the Service or otherwise communicate with us includes:
Identity information, such as your first name, last name and username or similar identifier;
Contact information, such as your postal address, email address and telephone number;
Profile information, such as your username and password and preferences;
Feedback and correspondence, such as when you respond to surveys, report a problem with the Service, receive customer support or otherwise correspond with us;
Payment information, such as your credit card or other payment card information required for billing purposes;
Transaction and usage information, such as how you use the Service and billing details;
Marketing information, such as your preferences for receiving marketing communications and details about how you engage with such communications.
Information automatically collected
Our systems may automatically record certain information about your use of the Service, such as your Internet Protocol (IP) address, the pages or features of the Service you viewed, the frequency with which you use the Service, the links you click on or use, and other statistics. We collect this information in server logs and by using cookies and similar tracking technologies to analyze trends, administer the website, gather demographic information about our user in aggregate and deliver advertising.
Changes to your personal information
If your personal information changes during your relationship with us you may update your information by updating your account profile or emailing us at privacy@incountry.com.
How We Use Your Personal Information
We use your personal information for the following purposes:
To provide the Service
If you have an InCountry account, we may use your personal information to operate, maintain, administer and improve the Service, to communicate with you regarding your account by sending you Service announcements, security alerts and administrative messages. We may also use your personal information to communicate with you regarding service-related questions and feedback and to better understand your needs and experience with the Service.
For security, compliance, fraud prevention and safety
We may use your personal information as we believe appropriate to (a) investigate or prevent violation of the law or our Terms of Service; (b) secure the Service; (c) protect our, your or others’ rights, privacy, safety or property; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
For compliance with law
We may use your personal information as we believe appropriate to (a) comply with applicable laws, lawful requests and legal processes, such as to respond to subpoenas or requests from government authorities; (b) where permitted by law in connection with a legal investigation; and (c) to prosecute or defend legal claims.
To create anonymous data
We may create anonymous and aggregate data from our Clients’ personal information. We may use this anonymous data and share it with third parties for our business purposes or to enable monitoring of the service to ensure availability and performance measures of the Service are met.
To send you marketing communications
If you request information from us, use the Service or participate in our surveys or events, we may send you InCountry marketing communications but will provide you with the ability to opt-out or unsubscribe from such communications. In some cases, we may ask for your consent to collect, use or share your personal information, such as when you let us post your testimonials or endorsements regarding the Service. If you gave us consent to post a testimonial to our site, but wish to update or delete it, please contact us at privacy@incountry.com.
How We Share your Personal Information
We do not share or sell the personal information you provide us with other organizations without your consent, except as described in this Privacy Policy. We may disclose personal information to third parties under the following circumstances:
Service Providers. We may employ third party companies and individuals to administer and provide the Service on our behalf (such as customer support, hosting, website analytics and email delivery). These third parties are permitted to use your personal information only to perform these tasks in a manner consistent with this Privacy Policy and are obligated not to disclose or use it for any other purpose.
Payment processors. We may share your payment information to process your payments.
Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional Service they render to us.
Compliance with Laws and Law Enforcement; Protection and Safety. We may disclose your personal information as we believe appropriate to government or law enforcement officials or private parties (a) for the security, compliance, fraud prevention and safety purposes described above; (b) as required by law, lawful requests or legal process, such as to respond to subpoenas or requests from government authorities; (c) where permitted by law in connection with any legal investigation; and (d) to prosecute or defend legal claims.
Business Transfers. We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business deal (or potential business deal) such as a merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy, in which case we will make reasonable efforts to require the recipient to honor this Privacy Policy.
Your Choices
Access, Update, Correct or Delete Your Information
All InCountry account owners may review, update, correct or delete the personal information in their registration profile by logging into their account or by contacting privacy@incountry.com
Access to Data Controlled by our Clients
InCountry has no direct relationship with the individuals whose personal information may be contained within the Client Service Data. An individual who seeks to access, correct or delete personal information provided by our Clients should direct their request to the Client.
Marketing communications
You may opt out of marketing-related emails by following the opt-out prompt in the email. You will continue to receive other non-marketing emails such as Service notifications.
Tracking and Targeted Advertising
We may allow service providers and other third parties to use cookies and other tracking technologies to track your browsing activity over time and across the Service and third-party websites. For example, we may partner with third party advertisers to display advertising on the Site or manage our advertising on other sites. These advertisers may also provide you targeted ads based upon your interests on third-party sites.
We do not respond to do not track or similar signals. To find out more about “Do Not Track,” please visit https://www.allaboutdnt.com/.
Social Media Widgets
Our Service may include social media features, such as the Facebook “like” button and widgets, such as the “share this” button. These features may collect your personal information and track your use of the Service. These social media features are either hosted by a third party or hosted directly in the Service. Your interactions with these features are governed by the privacy policy of the company providing such functionality.
Payment Information
Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processor, Stripe, Inc. and we never receive or store your full payment card information. Stripe, Inc. may use your Payment Information in accordance with its own privacy policy here: https://stripe.com/en-US/privacy.
Security
We use certain administrative and technical controls designed to improve the confidentiality, integrity and security of information we collect and maintain. No security measures are perfect or impenetrable and we cannot and do not guarantee that information about you will not be accessed, viewed, disclosed, altered, or destroyed by breach of any of our administrative or technical controls.
Third Party Sites and Service
The Service may contain links to other websites and services operated by third parties, such as social media platforms, advertising services and other websites and applications. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third party websites, applications or services, and are not responsible for their actions. Other websites and services follow different rules regarding their collection, use and disclosure of your personal information. We encourage you to read their privacy policies to learn more.
Children’s Privacy
The InCountry website is a general audience site. InCountry does not knowingly acquire or receive personal information from, children under the age of 16. If we learn any user of the Service is under the age of 16, we will take appropriate steps to delete the individual’s personal information and restrict the individual from future access to the Service.
Changes to this Privacy Policy
We reserve the right to modify this Policy at any time. We encourage you to periodically review this page for the latest information on our privacy practices. If we make changes to this Policy which materially change your rights or obligations, we will make reasonable efforts to notify you of the change. For example, we may send a message to your email address, if we have one on file, or generate a pop-up or similar notification when you access the Service for the first time after such material changes are made.
Any modifications to this Policy will be effective upon our posting of the new terms. Your continued use of the Service after the revised Policy has become effective indicates you have read, understood and agreed to the current version of this Policy.
Your California Privacy Rights
Residents of California have the right to request what types of personal information we have shared with third parties for their direct marketing purposes, and with whom we have shared it, during the preceding calendar year. You may request a copy of this information by contacting us at privacy@incountry.com.
Contact Us
If you have any questions or concerns about our Privacy Policy, please contact us.
InCountry, Inc.
4023 Kennett Pike #50376
Wilmington, DE 19807
Attention: Data Protection Officer
Email: privacy@incountry.com
Additional Information for European Union Users
Personal information
References to “personal information” in this Privacy Policy are equivalent to “personal data” governed by the European General Data Protection Regulation (“GDPR”).
Controller
InCountry, Inc. is the controller of your personal information covered by this Privacy Policy for purposes of the GDPR and you can contact us using the contact details listed above. Our Clients are the controller of personal information contained within the Client Service Data and should be contacted regarding any such personal information.
Lawful Bases
The lawful basis for our processing activities include processing personal information as necessary to comply with our contractual obligations to provide the Service, compliance with our legal obligations, protecting the safety of our employees, and other users, for our legitimate business interests, compliance with legal obligations, and pursuant to your consent. The particular legal basis for the processing of your personal information is based on the purpose for which such information was provided or collected.
Performance of Contract: We use your personal information as necessary for the performance of contracts, to provide the Service, or in order for us to take steps, at your request, prior to entering into a contract, such as requesting information regarding your company and its needs and requirements. For example, we are not able to provide our Service unless you provide us with certain necessary personal information, such as identity information and contact information to set up and communicate with you about your account, and payment information in order to process payments for the Service. This collection and processing of the personal information is based on Art. 6 para. 1 (b) GDPR.
Legitimate Interest: We rely on our legitimate interest to process your personal information for marketing and advertising purposes or to otherwise inform you of our business operations, to improve our products and Service, for security, compliance, fraud prevention and safety, to comply with law or legal process and for business transfers. This collection and processing of the Personal Data based on our legitimate interest is in accordance with Art. 6 para. 1 (f) GDPR. We may also rely on compliance with legal obligation in accordance with Art. 6 para 1(c) for any processing described under “Compliance with Law” above.
Consent: We may also process your personal information if we have received your consent. Please note that if we rely on consent, you may withdraw your consent at any time, but such withdrawal will not affect the lawfulness of the processing prior to the withdrawal. This collection and processing of the Personal Data based on your consent is in accordance with Art. 6 para. 1(a) GDPR.
Data Subjects of the European Union have the following rights:
- Access, Correction and Erasure Requests: You have the right to:
- contact us to confirm whether we are processing your personal information;
- receive information on how your personal information is processed;
- obtain a copy of your personal information;
- request that we update or correct your personal information; and
- request that we delete personal information in certain circumstances.
- Right to Object to Processing: You have the right to request that InCountry cease processing of your personal information:
- for marketing activities, including profiling for statistical purposes where such processing is based on our legitimate business interests, unless we are able to demonstrate a compelling legitimate basis for such processing or we need to process your personal information for the establishment, exercise or defense of a legal claim.
- Right to Restrict Processing: You have the right to request that InCountry limit the processing of your personal information:
- while we are evaluating or in the process of responding to a request by you to update or correct your personal information;
- where such processing is unlawful, and you do not want your personal information to be deleted;
- where we no longer require such data, but you want us to retain the data for the establishment, exercise or defense of a legal claim; and
- where you have submitted an objection to processing based on our legitimate business interests, pending our response to such request.
- Data Portability Requests: You have the right to request that we provide you or a third party that you designate with certain of your personal information in a commonly used, machine readable format. Please note, however, that data portability rights apply only to personal information that we have obtained directly from you and only where our processing is based on consent or the performance of a contract.
Submitting Requests: You can exercise these rights by logging into your account or by contacting privacy@incountry.com. Please note, however, that certain personal information may be exempt from such rights pursuant to applicable data protection laws. In addition, we will not respond to any request unless we are able to appropriately verify the requester’s identity. We may charge you a reasonable fee for subsequent copies of personal information that you request. In addition, if we consider that a request is manifestly unfounded or excessive, we may either request a reasonable fee to deal with the request or refuse to deal with the request.
If you have concerns about our data practices or the exercise of your rights, you may contact us at privacy@incountry.com or the supervisory authority in the Member State of your residence.
Retention
We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
Cross-Border Data Transfer
If we transfer your personal information out of the European Economic Area or Switzerland and are required to apply additional safeguards to your personal information under European data protection legislation, we will do so. Such safeguards may include applying the European Commission Model contracts for the transfer of personal data to third countries described here, or for transfers to third parties in the United States.