This Privacy Policy is effective October 31st, 2019. Keypup, service of Keypup SAS (“Keypup” or the “Company”, a French company registered in La Rochelle, RCS 849 139 027) is committed to protecting the privacy of your information. This Privacy Statement describes Keypup’s Web site and services privacy practices.
A. Website Covered
This Privacy Statement covers the information practices of Keypup.io, Keypup and all other services provided by Keypup SAS.
B. GDPR Compliance
B1. What is the General Data Protection Regulation (GDPR)?
The General Data Protection Regulation or GDPR is a framework implemented by the European Union that came into effect in 2018. Basic guidelines of GDPR require that websites store data in protected documents and software and that data must be given to the business by customers with expressed permission. Additionally, companies must provide a description of how their information will be used and give customers a way to unsubscribe or change their consent to have all data associated with them permanently erased.
B2. Consumer Rights under GDPR
There are eight consumer rights of General Data Protection Compliance:
- 1. Access: The right to access requires businesses to allow individuals to request access to their data, including information about how that data is used and stored. Businesses must provide a free copy of the data upon request and give customers an easy way to request the data.
- 2. Be informed: Website users must be informed about what their data will be used for and how you collect data. Users must give consent before a service can gather their data.
- 3. Data portability: Customers may choose to transfer data from one place to another, depending on the nature of the business. If there is a transfer, it must be processed in a readable format.
- 4. Be forgotten: Website users may choose to ask businesses to delete their data by withdrawing consent. Once consent is withdrawn, businesses can no longer use the customer’s data for anything, including marketing.
- 5. Objection: Website visitors can object to the use of their data and request a service to stop. For example, they can unsubscribe from email lists or call a business to object to further communications.
- 6. Restrict processing: Visitors can ask a service to stop processing their data, allowing the service to use existing data but not tracking the user across a service's website.
- 7. Notification: Customers who have given a service their information have the right to be notified of data breaches within 72 hours.
- 8. Rectification: Customers can ask a business to update or correct personal data.
B3. Keypup's Compliance with GDPR
Keypup has taken numerous steps to ensure GDPR compliance. As part of our measures, we have implemented the following:
- Data Protection by Design: We have implemented policies in the company to ensure all of our employees follow the necessary training and protocols around security. Besides, privacy protection is part of every project during instantiation.
- Data Protection Officer: Our Chief Technology Officer also holds the Data Protection Officer (DPO) role, hence ensuring that any project, innovation, or technology implemented in the company scrupulously abides by the regulation.
- Consent: We are continuously assessing and monitoring that all of our customer communication, both business-related and marketing-related, is opt-in, and no information is shared with us without a customer's consent.
- Enforcement of Enhanced Rights: The GDPR provides rights to individuals, such as the right to portability, right of rectification, and the right to be forgotten. We have made sure we comply with these rights. Nearly all information can be edited through a user's account, accounts can be deleted by the users via the admin interface on the platform. Data associated with deleted accounts are permanently deleted and cannot be retrieved.
- Data Collection and Retention: We have documented information about what data we collect and our retention and protection policy.
C. Information Collected
Keypup offers a variety of services that are collectively referred to as the “Services.” Keypup collects information from individuals who visit the Company’s Web site (“Visitors”) and individuals who register to use the Services (“Customers”).
When expressing an interest in obtaining additional information about the Services or registering to use the Services, Keypup may require you to provide the Company with personal contact information, such as name, company name, address, phone number, and email address (“Required Contact Information”). When purchasing the Services, Keypup may require you to provide the Company with financial qualification and billing information, such as billing name and address, credit card number, and the number of employees within the organization that will be using the Services (“Billing Information”). This is not the case for public offers as presented from time to time on Keypup.io. Keypup may also ask you to provide additional information, such as number of employees, or industry (“Optional Information”). Required Contact Information, Billing Information, and Optional Information are referred to collectively as “Data About Keypup Customers.”
As you navigate the Company’s Web site, Keypup may also collect information through the use of commonly-used information-gathering tools, such as cookies and Web beacons (“Web Site Navigational Information”). Web Site Navigational Information includes standard information from your Web browser (such as browser type and browser language), your Internet Protocol (“IP”) address, and the actions you take on the Company’s Web site (such as the Web pages viewed and the links clicked).
D. Use of Information Collected
The Company uses Data about Keypup Customers to perform the services requested. For example, if you fill out a “Contact Us” Web form, the Company will use the information provided to contact you about your interest in the Services.
The Company may also use Data about Keypup Customers for marketing purposes. For example, the Company may use information you provide to contact you to further discuss your interest in the Services and to send you information regarding the Company and its partners, such as information about promotions or events.
Keypup uses credit card information as required from time to time solely to collect payment for the Services in case of purchase and use of a paying service.
Keypup uses Web Site Navigational Information to operate and improve the Company’s Web site. The Company may also use Web Site Navigational Information alone or in combination with Data about Keypup Customers to provide personalized information about the Company.
F. Public Forums and Customer Testimonials
Keypup may provide bulletin boards, blogs, or chat rooms on the Company’s Web site. Any personal information you choose to submit in such a forum may be read, collected, or used by others who visit these forums, and may be used to send you unsolicited messages. Keypup is not responsible for the personal information you choose to submit in these forums.
Keypup may post a list of Customers and testimonials on the Company’s Website that contain information such as Customer names and titles. Keypup obtains the consent of each Customer prior to posting any information on such a list or posting testimonials.
G. Payment Information
If you sign on to a paid Account with us, we collect your full name, address and credit card information. Please note, Keypup does not process or store your credit card information, but our third-party payment processor does.
Keypup uses the services of Stripe (https://stripe.com) to process and store credit card information.
I. International Transfer of Information Collected
To facilitate Keypup’s global operations, the Company may transfer and access Data about Keypup Customers from around the world, including but not limited to the United States of America, European Countries, the United Kingdom and Australia. This Privacy Statement shall apply even if Keypup transfers Data about Keypup Customers to other countries.
J. Communications Preferences
Keypup offers Customers and Visitors who provide contact information a means to choose how the Company uses the information provided. You may manage your receipt of marketing and non-transactional communications by clicking on the “unsubscribe” link located on the bottom of the Company’s marketing emails. Additionally, you may send a request specifying your communications preferences to support@keypup.io. Customers cannot opt out of receiving transactional emails related to their account with Keypup or the Services.
K. Security, Correcting and Updating Information
Keypup uses appropriate administrative, technical, and physical security measures to protect Data About Keypup Customers. You can read how we handle security in more details on our Security page.
Customers may update or change their registration information by logging in to their accounts at https://keypup.io/. Requests to access, change, or delete your information will be handled within 30 days.
M. Changes to this Privacy Policy
Keypup reserves the right to change this Privacy Statement. Keypup will provide notification of the material changes to this Privacy Statement through the Company’s Web site at least thirty (30) business days prior to the change taking effect.
N. Contacting Us
Questions regarding this Privacy Statement or the information practices of the Company’s Web site should be directed to legal@keypup.io