At Embark, accessible from www.getembark.co, one of our main priorities is the privacy of our visitors. The privacy of your data — and it is your data, not ours! — is a big deal to us. We’ll only ever access your account to help you with a problem or squash a software bug. This Privacy Policy document contains types of information that is collected and recorded by Embark and how we use it.

This Privacy Statement explains:

1. What information we collect and why we collect it
2. How we use that information and when we disclose it to others
3. Your rights regarding that information, including how to access and update your information
4. The steps we take to protect your information

Consent

This Privacy Statement applies to information that we obtain through www.getembark.co (hereafter referred to as “Website”) and our platform at http://www.app.getembark.co (hereafter referred to as “Platform”).

By using our website, you hereby consent to our Privacy Policy and agree to its terms

embark is a Netherlands based company that offers our Platform to domestic and international business clients. We provide information to third-party service providers in Europe, the U.S. and in other countries to the extent necessary to support Embark’s business activities, and we may access personal information collected by our customers to support the Platform that we provide to our customers. As a result, personal information may be transferred to and stored on servers located in the United States and in countries different from the country in which that information was initially collected.

Types of Data We Collect

We collect personal information from users, as described below.

Information You Provide to Us.

• When you sign up, we ask for your name, company name, and email address. That’s just so you can personalize your new account (“Account”), and we can send you invoices, updates, or other essential information. We’ll never sell your personal info to third parties, and we won’t use your name or company in marketing statements without your permission, either.
• When you pay for Embark, we ask for your credit card and billing address. That’s so we can charge you for service, calculate taxes due, and send you invoices. Your credit card is passed directly to our payment processor and doesn’t ever go through our servers. We store a record of the payment transaction, including the last 4 digits of the credit card number, for account history, invoicing, and billing support. We store your billing address to print on your invoices.
• When you write Embark with a question or to ask for help, we’ll keep that correspondence, and the email address, for future reference. When you browse our marketing pages, we’ll track that for statistical purposes (like conversion rates and to test new designs). We also store any information you volunteer, like surveys, for as long as it makes sense.

Information Collected via Technology.

• Log Files. Embark follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.
• Cookies. Like many online services, we use cookies to collect information. “Cookies” are text files containing information that a website stores on your computer while you are viewing the Website. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Platform.
• Traffic Analytics. We use third party service providers, such as Google Analytics, to help analyse how users use the Platform. These service providers use Cookies to collect information such as how often users visit the Platform, what features they use on our Website, and what other sites they used prior to coming to the Website. We use the information we get from these Analytics Companies to improve our Website and Platform. These Analytics Companies collect the IP address assigned to you on the date you visit the Platform, and not any personally identifying information such as your name. We do not combine the information generated through the use of our Analytics Companies with your personal information. Note that Embark has no access to or control over these cookies that are used by third-party advertisers.

Use of Your Personal information

General Use.

In general, personal information you submit to us is used either to respond to requests that you make. We use the information we collect in various ways, including to:

• Provide, operate, and maintain our Website and Platform
• Improve, personalize, and expand our Website and Platform
• Understand and analyze how you use our Website and Platform
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Website and Platform, and for marketing and promotional purposes
• Send you emails
• Find and prevent fraud

Analytics.

We collect some information (ourselves or using third party services) using logging and cookies, such as IP address, which can sometimes be correlated with personal information. We use this information for the above purposes and to monitor and analyse use of the Platform, for the Platform’s technical administration, to increase our Platform’s functionality and user-friendliness, and to verify users have the authorization needed for the Service to process their requests. We use Google Analytics and Segment.io.

Disclosure of Your Personal information.

We disclose your personal information as described below and as described elsewhere in this Privacy Statement.

Third Party Service Providers.

Embark uses third party subprocessors, such as cloud computing providers and payment processing software, to provide our services.

Services providers we use:

• Digital Ocean — Cloud services provider.
• Sendgrid — Email delivery and analytics provider.
• Segment — Analytics provider.
• Stripe — Payments processing provider.

Corporate Restructuring.

If Embark is acquired by or merged with another company — we don’t plan on that, but if it happens — we’ll notify you well before any info about you is transferred and becomes subject to a different privacy policy.

Law Enforcement.

Embark won’t hand your data over to law enforcement unless a court order says we have to. We flat-out reject requests from local and federal law enforcement when they seek data without a court order. And unless we’re legally prevented from it, we’ll always inform you when such requests are made.

Your Choices Regarding Your Information.

You have several choices regarding use of information on our Platform:

Changing or Deleting Your Personal Information.

You may change any of your personal information in your Account by editing your settings within your Account or by sending an email to us at the address listed above. You may request deletion of your personal information by us, and we will use commercially reasonable efforts to honor your request, but please note that we may be required to keep such information and not delete it (or to keep this information for a certain time, in which case we will comply with your deletion request only after we have fulfilled such requirements). When we delete any information, it will be deleted from the active database, but may remain in our archives or backups. We may also retain your information for fraud prevention or similar purposes.

Service Provider Opt Out.

You can opt-out directly from some Advertising Service Providers and providers of Tracking Tools by using their opt-out tools. Some of these service providers, and links to their opt-out tools, are: The Google Analytics service is provided by Google Inc. You can opt-out from Google Analytics service from using your information by installing the Google Analytics Opt-out Browser tool: tools.google.com/dlpage/gaoptout. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: www.google.com/policies/privacy.

Industry Opt Out Tools.

Some Advertising Service Providers or providers of Tracking Tools may participate in the Network Advertising Initiative's (NAI) Opt-Out Tool (http://www.networkadvertising.org/choices/) and/or the Digital Advertising Alliance (DAA) Consumer Choice Page (http://www.aboutads.info/choices/), and you can opt-out of certain services and learn more about your choices by visiting the links included there. Users in the EU can visit http://www.youronlinechoices.eu/ for more information about your choices and to opt out of participating service providers.

Web Browser Controls.

You can prevent the use of certain Tracking Tools, such as cookies, on a device-by-device basis using the controls in your web browser. These controls can be found in the Tools > Internet Options (or similar) menu for your browser, or as otherwise directed by your browser’s support feature. Through your web browser, you may be able to:

• Delete existing Tracking Tools
• Disable future Tracking Tools
• Set your browser to provide you with a warning each time a cookie or certain other Tracking Tools are being set

Do Not Track Signals.

Some web browsers may transmit “do not track” signals to the websites and other online services with which your web browser communicates. There is no standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established, we may revise our policy on responding to these signals.

Your Rights With Respect to Your Information

You may have heard about the General Data Protection Regulation (“GDPR”) in Europe. GDPR gives people under its protection certain rights with respect to their personal information collected by us on the Site. Accordingly, Basecamp recognizes and will comply with GDPR and those rights, except as limited by applicable law. The rights under GDPR include:

Right of Access.

This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.

Right to Correction.

This is your right to request correction of your personal information.

Right to Erasure.

This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession (also known as the “Right to be forgotten”). However, if applicable law requires us to comply with your request to delete your information, fulfillment of your request may prevent you from using Embark services and may result in closing your account.

Right to Complain.

You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.

Right to Restrict Processing.

This is your right to request restriction of how and why your personal information is used or processed.

Right to Object.

This is your right, in certain situations, to object to how or why your personal information is processed.

Right to Portability.

This is your right to receive the personal information we have about you and the right to transmit it to another party.

Right to not be subject to Automated Decision-Making.

This is your right to object and prevent any decision that could have a legal, or similarly significant, effect on you from being made solely based on automated processes. This right is limited, however, if the decision is necessary for performance of any contract between you and us, is allowed by applicable European law, or is based on your explicit consent. Many of these rights can be exercised by signing in and directly updating your account information. If you have questions about exercising these rights or need assistance, please contact us at privacy@getembark.co.

Children’s Information.

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. Embark does not knowingly collect any Personal Identifiable Information from children under the age of 16. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to remove such information from our records.

Changes & questions

Embark may update this policy once in a while — we’ll notify you about significant changes by emailing the account owner or by placing a prominent notice on our site. You can access, change or delete your personal information at any time by contacting our support team. Questions about this privacy policy? Please get in touch and we’ll be happy to answer them!

Adapted from the Basecamp open-source policies.