policy

Privacy

Privacy Policy

We at SweetProcess care about you, our customer, and that means we care about your privacy. To provide our services we do collect some personal information, but we do not disclose that information to others except as outlined below or when we are legally obligated to do so. This privacy policy tells you about the way (and why) we collect information, use it, and if we disclose it, who we disclose it to.

If you have questions about viewing, deleting or correcting your personal information please contact our privacy officer (see section on contacting privacy officer below).
 
SweetProcess, Inc. (“SweetProcess”) operates under the domain, sweetprocess.com. It is SweetProcess’ policy to respect your privacy regarding any information we may collect while operating the service. We do not make any representations as to the privacy policy of any third-party site to which we may link or become linked.

Information We Collect

For visitors to our blog and marketing pages, SweetProcess collects non-personally-identifying information of the sort that web browsers and servers typically make available:

  • such as the browser type;
  • language preference;
  • referring site;
  • and the date and time of each visitor request.
SweetProcess’ purpose in collecting non-personally identifying information is to better understand how SweetProcess’ visitors use its website.

SweetProcess also collects potentially personally-identifying information like Internet Protocol (IP) addresses for all users, logged in or not. This information is collected to maintain the security of the site and to provide general analytics of website use. Generally, SweetProcess only discloses logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally-identifying information as described below. If you choose to comment on our SweetProcess blog, we will collect your email address and IP address. This information is only visible to SweetProcess employees with the role of administrator for the blog.
In all cases, SweetProcess retains your IP address for a period of up to 30 days, after which it is permanently deleted.

We ask visitors who download any of our free resources... ebook, checklist, guide and so on to provide:
  • a name
  • email address
  • phone number
  • job title, company name, company website URL; and company size.

We ask visitors who sign up for an account to provide:
  • a name; and
  • email address.
Those who engage in transactions with SweetProcess – by purchasing a subscription, for example – are asked to provide additional information including:
  • Credit card number - sent directly to our payment processor stripe.com, SweetProcess does not ever receive a copy of this;
  • Card name holder; and
  • Financial information like business address
required to process those transactions. In each case, SweetProcess collects such information only as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with SweetProcess. Visitors can always refuse to supply personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.

When you use SweetProcess’ service, SweetProcess stores, processes and transmits your procedures, processes, policies and related information (like images, documents, and file attachments). You may also store employee information on our servers for you to use. This will make it easy for you to do things like assign tasks and invite others to use SweetProcess. While this information may not necessarily identify you personally, we will secure and maintain it with the utmost care. SweetProcess does not disclose these contents to others except as necessary to comply with legal or government requests, or as directly requested by you (for example if you choose to make a procedure public and share the link with your colleagues or embed on your own website).

This website may include links to third-party sites. We do not guarantee your privacy when you visit those sites and suggest that you consult the privacy policy for each.

Disclosure of Certain Personally-Identifying Information

SweetProcess discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on SweetProcess’ behalf, and (ii) that have agreed not to disclose it to others. SweetProcess binds each potential transferee to a strict confidentiality agreement that prohibits the processor from disclosing your information except as required by law. The processors are explicitly forbidden from sub-contracting the processing of your information and must receive permission from us before transferring your information to a third party. If we permit such a transfer, we will ensure that all data protections imposed on the processor are also imposed on any sub-processors or third parties.
A list of our third parties who receive your personal information, their location and the data we provide them is available at:
sweetprocess.com/third-parties-list/

SweetProcess will not rent or sell potentially personally-identifying and personally-identifying information to anyone. If you are a registered user of SweetProcess and as such have supplied your email address, SweetProcess may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with SweetProcess.

SweetProcess may also disclose potentially personally-identifying and personally-identifying information in response to a subpoena, court order or other governmental requests, or when SweetProcess believes in good faith that disclosure is reasonably necessary to protect the property or rights of SweetProcess, third parties or the public at large. If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish it in order to help us clarify or respond to your request or to help us support other users. If we do so, we will make all reasonable efforts to scrub the request of personally-identifying information such as your name and email address while leaving the body of the request intact. If we need to use your data for a purpose unrelated to providing you the services, we will notify you and explain what we plan on doing with your data.

Your Rights to Your Personally-Identifiable Information

If you would like to revoke your consent for SweetProcess to store and process your personally identifiable information, contact the privacy officer (see contacting data privacy officer section below) and request that we delete it. We will permanently delete your data without any undue delay and reply within 30 days to confirm your request has been completed. Alternately you may close your SweetProcess account and your data will be deleted automatically following our 100 day retention period (see below).

You may also request a machine-readable export of all personally identifiable information SweetProcess has collected about you. SweetProcess will respond to these requests with a zipped file containing your personally identifiable information within 30 days. SweetProcess may ask you to prove your identity before complying with your request to protect the identity of our customers.

By default, SweetProcess' policy is to regularly remove Personally Identifiable Information from SweetProcess' systems. Users who allow their trial to expire or wish to discontinue paying for SweetProcess will have all account data scheduled for deletion following a 100 day period of inactivity. SweetProcess will notify you by email and inside your SweetProcess account when we schedule your data for deletion. 30 days after SweetProcess notifies you the data will be permanently deleted.
You also have the right to object to our processing of your information, and to suspend the processing of your information in cases where you want to establish the information’s accuracy or where you are concerned about our use of your information. You have the right to withdraw your consent to any processing of your data at any time.

Security

SweetProcess takes all measures reasonably necessary to protect against the unauthorized access, use, alteration or destruction of potentially personally-identifying and personally-identifying information. In the event of a breach of your information, SweetProcess will notify the appropriate authorities and you within 72 hours of us becoming aware of that breach. We bind our processors to the same standard and will forward any data breach notifications we receive from them as quickly as possible.
When you use your credit card on the SweetProcess website the credit card information is transmitted using Secure Socket Layer (SSL) protocol, which encrypts your information. SweetProcess does not receive a copy of your credit card details, they are provided directly to our online payment provider (Stripe.com)

Cookies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. SweetProcess uses cookies to identify visitors, their usage of SweetProcess’ website, and their website access preferences. The SweetProcess application will not function properly without those cookies being present. SweetProcess visitors who do not wish to have cookies placed on their computers should set their browsers to refuse cookies before using SweetProcess’ websites, with the drawback that the SweetProcess application will not function without the aid of cookies

Processors

SweetProcess currently uses Google Analytics tools and cookies on its blog and marketing pages. We may use similar services from other providers from time to time which has similar appropriate privacy policies in place, though never within the SweetProcess application. Google Analytics collects a range of information such as the number of visitors on our site per day, which pages they visit, their computer’s internet protocol address and operating systems, times of the visit, browser type and language, referring website addresses and the types of devices using our websites and mobile applications. We use this information to analyze trends, better configure our service and messages, track the performance of our mobile pages and referring websites, administer our website and monitor your interactions with our website. When Google Analytics receives personal information, that information is transferred, processed and stored on Google servers around the world by Google in accordance with Google’s privacy policy available at google.com/privacy.html.

We require all of our data processors to respect the security of your personal information and to treat it in accordance with the law and good data practice. We do not allow our third party processors to use your information for their own purposes, only those purposes set out explicitly in our instructions to them. If you wish to learn more about who may process your data, please contact our data privacy officer (see contacting data privacy officer section below)

In the ordinary course of business, we may need to transfer your data to processors located in a different country. We endeavor to limit our data processors to only those located in countries with privacy rules that we believe protect your privacy as we would ourselves. However, in rare circumstances, we may need to transfer to a country with slightly lower privacy standards. In such a case, we bind our processors to contracts that require them to adhere to our standards for data privacy. We will notify you of any such transfers if they must occur.


Business Transfers

If SweetProcess, or substantially all of its assets, were acquired, or in the unlikely event that SweetProcess goes out of business or enters bankruptcy, user information would be one of the assets that are transferred or acquired by a third party. In that case, any acquirer of SweetProcess or its assets may continue to use your personal information in the same way as set forth in this policy.


Contacting Data Privacy Officer

If you would like more information about our privacy policy or would like to request a copy of your personal data, or for it to be destroyed please contact our Data Privacy Officer.

Data Privacy Officer
privacy@sweetprocess.com
 

Privacy Policy Changes

Although most changes are likely to be minor, SweetProcess may change its Privacy Policy from time to time, and in SweetProcess’ sole discretion. SweetProcess encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

This Privacy Policy was published on May 21, 2018, and replaces all previous SweetProcess privacy policies.