Humu Privacy Statement

This privacy statement (“Privacy Statement” or "Statement") provides information about how Humu, Inc. (“Humu”, "we", "our", or "us") collects, uses and discloses your personal data and how you can exercise your privacy rights. 

We recommend that you read this Statement in full to ensure you are fully informed.

Processing activities covered

This Statement applies (unless a different statement or notice is displayed) to the processing of personal data collected by us when you:

• Visit our company website www.humu.com;
• Visit our branded social media pages;
• Receive communications from us, including emails, phone calls, text or fax; and
• Register for, attend and/or otherwise take part in one of our industry petitions, events, webinars or contests; or
• Submit a job application with Humu. 

‍

Together, we refer to these activities as the "Processing Activities Covered". 

For the avoidance of doubt, this Statement does not apply:

• To the extent we process personal data in the role of a data processor on behalf of our customers. For detailed privacy information related to where a Humu customer who uses Humu products and services is the controller, please reach out to the respective customer directly. For general privacy information about Humu’s role as a data processor, see Humu Services Privacy Statement. We are not responsible for the privacy or data security practices of our customers, which may differ from those set forth in the Services Privacy Statement.
• To websites, products, or services that display or link to different privacy statements or that are operated by companies other than Humu, or to business activities or practices of third parties, including our business partners.

‍

This Statement applies to all users across the world. Some users, including residents of the European Economic Area and UK, may have additional rights depending on where they are located, which are described in this Statement.

Information about Humu

Humu is the data controller of your personal data as described in this Statement, unless expressly specified otherwise. Humu provides a software-as-a-service application that supports companies, teams and employees to create better workplaces. Humu is headquartered in Mountain View, California, with teams also based in other U.S. states and in the United Kingdom. For more information about Humu, see https://www.humu.com/company. 

Collection & Use of Personal Data

The data we collect depends on the context of your interactions with Humu and the choices you make, the features you use, your location and applicable laws, but can include information you voluntarily provide to us, information we automatically collect from you, and information we obtain from third party sources.

Information You Voluntarily Provide to Us 

The types of personal data you may provide include contact information (such as your name, job title, company name, email address, postal address, phone number, company name, fax number). 

Many of the Processing Activities Covered require us to process some personal data about you. Humu collects information you submit through our website when signing up to receive information about our product, services, and industry, or when registering for an event. If you choose not to provide data necessary for instance to register for an event, you will not be able to register for such event. 

We may also collect other information from or about you, such as information about your interests, demographic information, and photographs and videos that you choose to upload. You may also provide us with additional data.

Information We Collect Automatically 

We may automatically collect certain device and usage information when you use or interact with our website. We collect this information by using cookies. For more information about our use of cookies and the choices available to you, you may access our Cookies Notice by clicking here.

This information may include: information about your computers, devices, applications and networks, including your Internet Protocol (IP) address (or that of the proxy server you use to access the internet), device and application identification numbers, your approximate location, browser type and language, your internet service provider or mobile carrier, the pages, files, and videos you viewed, your searches, your operating system and system configuration information, and date and time stamps associated with your usage of the website. 

We also may automatically collect certain device and usage information when you interact with our emails. We collect this information by using pixel tags, for the purpose of tracking certain activity, such as when an email is opened. 

Information We Obtain from Third Party Sources 

In some instances, Humu engages with third party sources to obtain additional information about you (including third parties from whom we have purchased personal data) and combine that information with the data we collect through other means described above. For example, Humu collects business contact information from Humu partners, industry event providers, or business intelligence providers. Information collected by business intelligence providers is publicly available and used by Humu marketing and sales teams to determine your company’s interest in Humu’s products and services. You may opt out of these communications at any time by clicking the “unsubscribe” link in the email correspondence.

This information may include mailing addresses, job titles, email addresses, phone numbers, intent data (or user behaviour data), IP addresses, social media profiles, LinkedIn URLs and custom profiles, for purposes of targeted advertising, delivering more relevant email content, event promotion and profiling. 

Analytics: Third parties who provide us with analytics services may also automatically collect some of the information described above, including, for example, IP address, access times, browser type and language, device type, device identifiers and Wi-Fi information. Please consult the respective privacy policies and statements of these third parties for more information, including how Google Marketing Platform, Pardot, LinkedIn and Salesforce use this data.

Google Analytics: We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies or other tracking technologies to help us analyze how users interact with our website and services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, click here.

Social Media Features: Our website may include plugins of social media platforms, such as Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA; Twitter Inc., 795 Folsom St., Suite 600, San Francisco CA 94107, USA; YouTube, Inc., 1000 Cherry Avenue San Bruno, CA 94066, USA; and LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. You can identify the plugins by the respective network’s logo. Details about purpose and extent of data collection, as well as processing and use of the data, by the social media networks can be obtained by reading the privacy policies of Facebook, Twitter, YouTube and LinkedIn.

How We Use Personal Data and our Legal Bases (for residents of the EEA and United Kingdom only)

We collect and process personal data about you for a variety of purposes and on the legal bases described in this Statement, unless expressly specified otherwise, including:

• Assessing and improving the website: We may process device and usage data as described in the "Information We Collect Automatically" section above, which in some cases may be associated with your personal data, in order to analyze trends and assess and improve the overall user experience, to the extent it is necessary for our legitimate interests in developing and improving the website, or where we seek your valid consent;
  

• Promoting the security of our website and services: We process your personal data by tracking use of our websites, creating aggregated, non-personal data, verifying accounts and activity, investigating suspicious activity and enforcing our terms and policies, to the extent this is necessary for our legitimate interest in promoting the safety and security of the website, systems and applications and in protecting our rights and the rights of others;
  

• Managing event registrations and attendance: We may process your personal data to plan and host events or webinars for which you have registered or that you attend, including sending related communications to you, to perform our contract with you; 
  

• Handling contact and user support requests: If you fill out a "Contact Me" (or similar) web form or request user support, if you contact us by other means, including via a phone call, we process your personal data to perform our contract with you or to the extent it is necessary for our legitimate interests in fulfilling your requests and communicating with you; 
  

• Displaying personalized advertisements and content: We may process your personal data to conduct marketing research, advertise to you, provide personalized information about us on and off our website and to provide other personalized content based upon your activities and interests to the extent it is necessary for our legitimate interest in advertising our products and services, or where necessary, to the extent you have provided your prior consent (please see the "Your Privacy Rights" section, below, to learn how you can control how the processing of your personal data by Humu for personalized advertising purposes). For these purposes, we may link or combine information about you with other personal data we get from third parties, to help understand your needs and provide you with better and more personalized services or content;
  

• Sending marketing communications: We will process your personal data to send you marketing information, product recommendations and other non-transactional communications (e.g. marketing newsletters, telephone calls, SMS, or push notification) about Humu and our selected partners in accordance with your marketing preferences, including information about our products, promotions or events as necessary for our legitimate interest in conducting direct marketing or to the extent you have provided your prior consent (please see the "Your Privacy Rights" section, below, to learn how you can control the processing of your personal information by Humu for marketing purposes);
  

• Managing contests, promotions and petitions: If you register for a content or promotion or sign one of our petitions, we process your personal data to perform our contract with you (for example, to process and deliver contest entries and rewards) or in the case of petitions, in reliance on our legitimate interests or where required your consent;
  

• Complying with legal obligations: We process your personal information when cooperating with public and government authorities, courts or regulators in accordance with our legal obligations under applicable laws to the extent this requires the processing or disclosure of personal data to protect our rights or is necessary for our legitimate interest in protecting against misuse or abuse of our website, protecting personal property or safety, pursuing remedies available to us and limiting our damages, complying with judicial proceedings, court orders or legal processes or to respond to lawful requests;
  

• Processing your job application: We process your personal data if you apply to a job with Humu to evaluate your application and make hiring decisions; communicate with you and inform you of current and future career opportunities (unless you tell us that you do not want us to keep your details for such purposes); to manage and improve our recruiting and hiring processes; or to conduct reference and background checks where permitted by applicable local law,  for our legitimate interest in assessing the suitability of our candidates and managing our recruiting process or, where required by applicable law, with your consent;
  

• For our business purposes: We may process your personal data for other legitimate business purposes, such as data analysis, audits, to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity, developing new products, enhancing, improving or modifying our services, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.

‍

In carrying out these purposes, we combine data we collect from different contexts or obtain from third parties to give you a more seamless, consistent, and personalized experience, to make informed business decisions, and for other legitimate purposes.

Sharing of Personal Data

We do not share your personal data with third parties, other than as follows:

• with your consent, for example, when you agree to our sharing of your information with other third parties (like our partners) for their own marketing purposes subject to their separate privacy policies;
  

• if you attend an event or webinar organized by us, download or access an asset on our website, or participate in a program that has a sponsor, with sponsors of the event or program. At some in-person events and where required by applicable law, you may consent to such sharing via the registration form or by allowing your attendee badge to be scanned at a sponsor booth. In these circumstances, your information will be subject to the sponsors' privacy statements. If you do not wish for your information to be shared, you may choose to not opt-in via event/webinar registration or elect to not have your badge scanned, or you can opt-out in accordance with "Your Privacy Rights" section below;
  

• with our affiliates within the Humu corporate group and companies that we may acquire in the future when they are made part of the Humu corporate group, to the extent such sharing of data is necessary to fulfil a request you have submitted via our website or for purposes such as support, marketing, technical operations and account management, or job application. 
  

• with our contracted vendors, consultants, and other service providers who provide services us such as IT and system administration and hosting, research and analytics, marketing, customer support and data enrichment for the purposes described above;
  

• to (i) comply with laws or to respond to lawful requests and legal process, (ii) to protect the rights and property of Humu and our agents, customers, and others including to enforce our agreements, policies, and terms of use, or (iii) in an emergency to protect the personal safety of Humu, its customers, or any person;
  

• in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets to another company. In accordance with applicable laws, we will use reasonable efforts to notify you of any transfer of personal data to an unaffiliated third party.

‍

We may also share aggregated or deidentified usage data with our service providers for the purposes of helping Humu in such analysis and improvements. Additionally, Humu may share such anonymous usage data on an aggregate basis in the normal course of operating our business.

For further information on the recipients of your personal data, please contact us by using the information in the "Contact Us" section below.

Transfers of your Personal Data

Personal data we collect may be stored and processed in your region, in the United States or in any other country where we or our affiliates, subsidiaries, partners or service providers maintain facilities. We maintain primary data centers in the United States. We take steps designed to ensure that the data we collect under this Statement is processed in accordance and as described in this Statement and applicable law wherever the data is located.

Therefore, we may transfer personal data from the European Economic Area (EEA), United Kingdom and Switzerland (collectively "Europe") to other countries which may not have the same level of data protection as applies in your jurisdiction and which have not been determined by the European Commission to have an adequate level of data protection. In this event, we use a variety of legal mechanisms to ensure that the recipient of your personal data offers an adequate level of protection, including entering into the standard contractual clauses for the transfer of European data approved by the European Commission or where required, we will ask you for your prior consent to such international data transfers.

Security of your Personal Data

Humu maintains a comprehensive security program with appropriate organizational, physical and technical security practices measures to to help safeguard your personal data against accidental or unlawful destruction, loss, misuse, and unauthorized access, disclosure, alteration, and destruction. We are an ISO 27001:2013 and SOC 2 Type 2 certified provider whose Information Security Management System (ISMS) has received third party accreditation.

However, no security measure or modality of data transmission over the Internet is 100% secure. While we follow generally accepted standards to protect data, no method of storage or transmission is 100% secure. You are solely responsible for protecting your password, limiting access to your devices and signing out of websites after your sessions.

Although we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. If you have any questions about the security of our website, please contact us by using the information in the “Contact us” section below.

Storage and Retention of your Personal Data

We may retain your personal data for as long as necessary for the purposes it was collected, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly. We determine the appropriate retention period for personal data on the basis of the amount, nature and sensitivity of your personal data processed, the potential risk of harm from unauthorized use or disclosure of your personal data and whether we can achieve the purposes of the processing through other means, as well as on the basis of applicable legal requirements (such as applicable statutes of limitation).

After expiry of the applicable retention periods, your personal data will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of such data. For further information on applicable data retention periods, please contact us by using the information in the “Contact us” section below.

Your Privacy Rights

• Where we are acting as a controller, and depending on your location and subject to applicable law, you may have the following rights with regard to the personal data we control about you: You can access, correct, update, delete and deactivate your personal data;
• In addition, if you are a resident of or visitor from the EEA, you can object to processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data;
• You can opt out of receiving marketing emails from us at any time. See the "Your preferences for email marketing" below for further information;
• If we have collected and process your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent;
• You have the right to complain to a data protection authority about our collection and use of your personal data. Contact details for data protection authorities in the EEA are available here.

Your preferences for email marketing

You may opt out from receiving marketing emails by clicking the “unsubscribe” link at the bottom of our communication with you. If you exercise your right to opt out of marketing emails, you will be added to Humu’s opt-out list as required by applicable law. 

If you choose to no longer receive marketing communications, we may still communicate with you regarding such things as security updates, product functionality, responses to service requests, or other transactional, non-marketing purposes.

You can also send requests about changes to your information or your contact preferences, including requests to opt-out of sharing your personal data with third parties. For these purposes, see our "Contact Us" section below.

Collection of Personal Data of Minors 

Humu’s website and services are directed to people who are at least 16 years of age or older. We do not knowingly collect, use, or disclose personal data from children under 16. If you are a parent or guardian and you learn that your children under 16 have provided us with personal data, please contact us using the contact information provided under the “Contact us” section below.

Changes to this Statement

Humu may change this Statement from time to time. If we make any changes to this Statement, we will post an amended version and change the “Last Updated” date above or if we make a material update, we may provide you with notice prior to the update taking effect, such as by posting a conspicuous notice on our website or by contacting you using the email address you provided. Please review this Statement periodically.

Contact us

If you have any questions or comments about this Statement or the practices of this website, or unresolved privacy and data use concerns, or if you wish to lodge a complaint about our privacy practices, please contact Humu by emailing privacy@humu.com, faxing (650) 321-3156, calling (650) 321-3000, or writing Attention: Privacy, Humu, Inc., 548 Market St, PMB 65781, San Francisco, CA 94104