At Carketa®, we are committed to protecting personal information. In this Privacy & Cookie Notice (“Notice”), Carketa, Inc. and its affiliated entities (“Carketa,” “we,” or “us”) set out how we, as data controller, may collect, create, share and use personal information relating to identifiable individuals (“Personal Data”) and provide you with information regarding your Personal Data rights and choices.
This Notice describes Carketa’s privacy practices for Personal Data collected by Carketa websites (“Sites”) as well as other activities, such as if you visit our offices, attend a Carketa event or otherwise interact with Carketa and provide Personal Data, such as corresponding by email, unless such activities are covered by our other notices outlined below. Please read this Notice in full. By using our Sites or participating in other activities with Carketa described below, you consent to the collection, creation, sharing and use of information as described in this Notice, where consent is required by relevant law.
Carketa also operates a public forum on Carketa websites. The purpose of this forum is to discuss our products and services. Please note that any Personal Data you choose to post in Carketa Community may be read or used by other visitors (for example, to send to you unsolicited messages). Carketa Community forum users should not upload sensitive or confidential content on this public forum.
For indirect customers (through a Carketa partner), while Carketa’s collection and processing of your Personal Data is explained below in this Notice, any direct Personal Data sharing by you with a Carketa partner will be governed by that Carketa partner’s policies/your agreement with them.
As a convenience to visitors to our Sites, we may also provide links to other websites that are not governed by this Notice. These linked websites are not under the control of Carketa and we are not responsible for the content on such websites or the protection/privacy of any information which you provide while visiting such websites.
For information about Personal Data and other data we collect with Carketa products see Section 11.
The Personal Data Carketa may collect about you will depend on your interaction/relationship with us. It may include:
Depending on your relationship with Carketa, we may use your Personal Data for different purposes. Where required by applicable law in relation to the particular use, we will obtain your consent to collect and use your Personal Data. Otherwise, we will rely on another legal basis, such as in connection with a contract or for our legitimate interests, as set out below.
We may also combine Personal Data we hold about you. For example, we may combine your B2B contact with your usage data relating to our offerings and our Sites for the purposes above, such as to improve our Sites and our offerings, as well as to create more tailored experiences by providing content that may be of interest to you. We may also use your Personal Data to fulfil any other purposes disclosed to you at the time of collection or as otherwise required/permitted by applicable law.
We accept the following forms of payment:
Carketa may share Personal Data for various purposes, such as:
Carketa will only share Personal Data to the extent needed to perform the relevant use and will take such steps as are necessary to safeguard Personal Data. For example, our vendors, advisors and contractors are required to keep such Personal Data confidential and not to use it other than for the purposes intended. Carketa partners are obliged to comply with the privacy rules set out in their agreement with Carketa. Carketa does not sell or rent Personal Data to third parties.
Carketa may also disclose Personal Data to comply with legal requirements, such as in relation to legal proceedings or investigations by governmental or law enforcement agencies, or to meet tax or other reporting requirements, including to (a) protect and defend the rights or property of Carketa, including the defence and management of legal claims and investigations, (b) act in urgent circumstances to protect the personal safety of users our Sites, our Carketa team members, or the public, (c) as part of a merger or change in corporate ownership or control, and/or (d) as otherwise permitted or required by applicable law.
To operate our business your Personal Data may be transferred from your country (e.g., the UK/European Economic Area) to a destination (e.g., USA) which may not be considered by relevant authorities of your country to have an equivalent level of privacy protection. In such instances, in addition to the other measures outlined in this Notice, Carketa will put in place appropriate safeguards for such transfers, for example, UK/EU standard contractual clauses.
As is true of most websites, when you visit our Sites, cookies will be placed on your device (computer, mobile or tablet). A “cookie” is a small text file that is placed on your device by websites you visit. Some of the cookies we use are strictly necessary to operate our Sites. Others relate to the Site’s performance, functionality and/or to advertising. Information relating to a cookie or similar technology may include identifiers such as IP address, and information like general location, browser type and language, and internet activity such as timestamps. Carketa uses the following types of cookies and similar technologies on our Sites:
Carketa takes appropriate precautions to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction. Such measures may include (i) using security controls such as, passwords, firewalls and/or encryption, (ii) restricting Personal Data to those with a legitimate purpose in receiving/accessing it, (iii) deidentifying Personal Data, or assigning codes or pseudonyms when the personal identifiers are not required for the purpose at hand, (iv) using data retention controls to ensure that Personal Data is not kept for longer than is necessary, (v) providing training and internal policies to team members to embed privacy and security across our organization, and (vi) putting in place relevant procedures (such privacy and security vetting) and contracts relating to the use and protection of Personal Data with third parties.
Carketa will retain and process Personal Data for a period of time consistent with the purpose of collection (see section 3 above) and/or as long as necessary to fulfil our legal obligations. We determine the applicable retention period by taking into account the (i) amount, nature and sensitivity of the Personal Data, (i) relevant use, including whether we can achieve the use through other means (e.g., by instead using deidentified data); (iii) potential risk of harm from unauthorized use or disclosure of the Personal Data, and (iv) applicable legal requirements (e.g., statutes of limitation). After the applicable retention period, we will delete the Personal Data, hold it in a form that no longer identifies you or, if we are unable for technical reasons to delete/deidentify it entirely, will implement appropriate measures to prevent any further use of such Personal Data. For example, checks are made on a regular basis for any contact details that have remained inactive in our sales and marketing databases, and if they are inactive for two years, we delete them.
You may have certain rights relating to your Personal Data, subject to applicable privacy laws. For example, under the UK/EU GDPR and similar laws, you may have the right to:
These rights will depend on which privacy/data protection laws are applicable to your Personal Data (typically, where you are resident), the type of Personal Data involved and the reason it is processed. There may be circumstances when Carketa is unable to accommodate requests, either wholly or in part, for reasons under local law. Depending on applicable law, this may include situations where the information contains Personal Data of other individuals and it is not possible to separate out your Personal Data, if Carketa cannot validate the request, if you ask us to delete Personal Data which we are required by law or have compelling legitimate interests to keep, or where information cannot be disclosed for legal, security, or other reasons based on local law. Carketa will endeavor to advise you of any reason for denying or restricting any Personal Data request. Where legally permitted under relevant law you may designate an authorized agent to submit a privacy request on your behalf. In order to verify this agent request, you/agent will need to complete the Privacy Request form and validate the request through the email validation link sent to email address associated with the request. To make a request complete the Privacy Request form, validate the request through the email validation link and Carketa will respond to any legitimate requests in line with local laws. Further contact details are also available in section 11 below. We will contact you if we need further information, for example to verify your identity to authenticate your request. If your request is to opt-out/unsubscribe from marketing contact from Carketa, please visit https://www.carketa.com/opt-out.
For more information regarding your privacy rights, we encourage you to visit the website of your local privacy/data protection authority, such as that of Brazil, California (USA), EU, Singapore and the UK.
Carketa does not knowingly or intentionally collect information from anyone under the age of 16, and we request that anyone under the age of 16 does not submit Personal Data to us. If you become aware that a child has provided us with Personal Data, please contact us at [email protected]. If we become aware that someone under the age of 16 has submitted Personal Data, we will delete this information from our records.
Carketa’s products are accessed by utilizing a cloud hosted solution provided and managed by Carketa (the “Carketa Cloud”). A mobile application is also available from which to use the application.
(a) Operate Carketa Cloud: We may process your Personal Data to ensure the availability and quality of Carketa Cloud (e.g., authentication) and to monitor consumption (e.g., licences) for customer consumption management purposes. We do this to carry out our contract with you/your organization under the applicable terms.
(b) Carketa Services: We may process your Personal Data to provide you with Carketa services, such as Support and/or Consulting services. We do this to carry out our contract with you/your organization under the applicable terms.
(c) Customer success & adoption: We may process your Personal Data for customer success purposes to assist customers and users in improving their use of Carketa Cloud, for example by making tailored suggestions and delivering insights to customers/users based on their interaction with our offerings. We may also use this data to enhance conversations with existing customers by providing Carketa account teams with greater context and background regarding how customers deploy and use our offerings. We do this to carry out our contract with you/your organization under the applicable terms and for our legitimate business interests in ensuring customers improve/maximize their use of our offerings.
(d) Communication: We may process your Personal Data to contact you, such as in relation to errors, or if you complete a feedback form in the product and ask to be contacted by us. We process Personal Data for this purpose for our legitimate interest in reviewing your submission and to fulfil/respond to your request.
(e) Improve our offerings: We may process your Personal Data to analyze use of our products and services (e.g., reviewing trends and which features are popular) to improve these. We do this for our legitimate interest in improving our offerings.
(f) Security & compliance: We may process user Personal Data for our legitimate interests in ensuring the security of our offerings, for example to monitor for suspicious activity, and for compliance purposes, such as to review compliance with the applicable usage terms (e.g., validate licensed user numbers) and to comply with our legal obligations (e.g., regarding restricted/denied party lists).
While certain uses of Personal Data may require it to be individualized (e.g., for authentication), Personal Data identifiers are typically removed by Carketa where the data is used for other purposes (e.g., when using statistical data to analyze usage trends to improve our offerings).
Sharing of your product usage data
Carketa may share data relating to your use of Carketa offerings in the following ways:
Please note that Content Data provided to Carketa for support or consulting services may leave the customer’s region. As such, support tickets may be dealt with by Carketa team members outside the customer’s region and support Content Data may be stored/accessible outside of the customer’s region.
Carketa uses third party subprocessors in relation to Carketa Cloud and Carketa services Content Data.
Carketa applications for mobile devices
Analytics & Diagnostic Data: Carketa mobile applications for mobile devices available through device stores and other sources (collectively, “Carketa Mobile App(s)”) may collect and send to Carketa analytics data and/or diagnostic data. Analytics data is data about the usage of features within Carketa Mobile Apps and users can deactivate this analytics data collection in the Carketa Mobile App settings. Carketa may collect analytics data so that Carketa can optimize, improve and promote its products.
Sharing of Content Data within Carketa Mobile Apps: Carketa Mobile Apps may download customer Content Data from relevant customer Carketa data sources (e.g., Carketa Cloud) onto their relevant Carketa Mobile App on their device. Authentication and authorization to such data is controlled by customers and their users. Carketa cannot access Content Data within a user’s Carketa Mobile App and Carketa will not receive such content unless explicitly shared by the user with Carketa. Depending on the location of the customer user device and use of certain features, such as push notifications, such Content Data stored in the Carketa Mobile Apps may leave the relevant region of the customer.
International Data Transfers
For Personal Data which Carketa is a Data Controller of, Carketa has in place relevant agreements and protections to protect Personal Data. These may include, for example, data protection agreements supplemented, where necessary, by additional protections such as the UK/EU Standard Contractual Clauses to ensure the lawful transfer of Personal Data by Carketa within our international group of companies and with relevant third parties (e.g., service providers). For our measures in relation to Personal Data for which Carketa is a Data Processor (e.g., subprocessors), please see our customer Data Processing Addendum.
For privacy inquiries or complaints, or to otherwise contact Carketa’s, please email [email protected]).
Changes to this Notice
Carketa reserves the right to modify or update this Notice from time to time to reflect changes in technology, our practices, law and other factors impacting the collection/use of Personal Data. You are encouraged to regularly check this Notice for any updates. We may also collect, use and disclose Personal Data for other purposes otherwise disclosed to you at the time of collection/processing in a supplementary notice.