Privacy Policy

This Privacy & Cookies Statement describes how AddBloom (the “Agency”) collects, uses, shares, and otherwise processes Personal Data (defined below) about:

Visitors to our websites, mobile applications, and other online properties (each, a “Site”)
Contact persons for our clients and/or prospective clients
Contact persons for suppliers of goods and services to the Agency
Any other individuals about whom the Agency obtains Personal Data

In this Privacy & Cookies Statement, “Personal Data” means information that (either in isolation or in combination with other information held by the Agency) enables you to be identified as an individual or recognized directly or indirectly.

OverviewUnless we specifically state otherwise, the Agency is the data controller of the Personal Data we process, and is therefore responsible for ensuring that the systems and processes we use are compliant with data protection laws, to the extent applicable to us.

Agency personnel are required to comply with this Privacy & Cookies Statement and associated Agency policies when dealing with Personal Data and must also complete data protection training where appropriate to their role.

Summary of Key PointsWe collect Personal Data from a number of sources in connection with the day-to-day management of our business and our commercial relationships.We use Personal Data to provide our services and respond to inquiries, to manage accounts and maintain business operations, to provide relevant marketing, and to fulfill other business and compliance purposes.We share Personal Data as necessary to provide our services and respond to requests, and to fulfil other business and compliance purposes.You have control on how we use Personal Data for marketing.We use cookies on our Sites, and provide choices on use of cookies, including third party targeting and advertising.You have certain rights to request access, rectification, deletion, objection, or other actions regarding your Personal Data where required by applicable law.We maintain technical and organizational measures to protect Personal Data from loss, misuse, alteration, or unintentional destruction of Personal Data.We provide appropriate protections for cross-border transfers where specified by law.

We provide other information in this Privacy & Cookies Statement about: (i) the possible consequences for not providing Personal Data, (ii) how we do not engage in automated decision-making that has substantial effects on individuals, (iii) how we handle do-not-track (DNT) signals, (iv) data retention, (v) links to third party websites, (vi) employee and contractor issues; and (vii) changes to this Privacy & Cookies Statement.

Please contact us as detailed below with any questions.

Collection of Personal DataWe collect the following categories of Personal Data about Site visitors, clients, prospective clients, suppliers and other third parties:

Basic data: name, gender, title, organization, job responsibilities, phone number, mailing address, email address, contact details and information about family life (excluding special categories of data) including family, children, hobbies and interests.
Special categories of data: In limited circumstances, we might collect from the website visitor data about religious or other beliefs, racial or ethnic origin, sexual orientation, health data and details of trade union membership where judged necessary for a specific service we are providing to You.
Registration data: Newsletter requests, event/seminar registrations, subscriptions, downloads, and username/passwords.
Client service data: Personal Data received from clients in respect of employees, customers or other individuals known to clients, invoicing details and payment history, and client feedback.
Marketing data: Data about individual participation in conferences and in-person seminars, credentials, associations, product interests, and preferences.
Compliance data: Government identifiers, passports or other identification documents, dates of birth, beneficial ownership data, and due diligence data.
Job applicant data: Data provided by job applicants or others on our Sites or offline means in connection with employment opportunities, which also may be subject to an additional relevant local recruitment privacy policy.
Device data: Computer Internet Protocol (IP) address, unique device identifier (UDID), cookies and other data linked to a device, and data about usage of our Sites (Usage Data).

We collect Personal Data from a number of sources, either directly from the data subjects, or from clients, colleagues and publicly available sources. Where the Agency receives data from its clients about employees, customers or other individuals, the client is responsible for ensuring that any such data is transferred to us in compliance with applicable data protection laws.

Use of Personal DataThe purposes for which we use Personal Data, and the legal bases for such processing, are as follows:

To provide advice and respond to inquiries we use basic data, registration data, client service data, and device data. We need to process your information in this way in order to perform our obligations.
To manage our business operations and administer our client relationships we use basic data, special categories of data, registration data, marketing data and client service data.
To make our Sites more intuitive and easy to use we use device data. It is necessary for our legitimate interests to monitor how our Sites are used to help us improve the layout and information available on our Sites and provide a better service to our Site users.
To protect the security and effective functioning of our Sites and information technology systems we use basic data, registration data, transaction data, and device data. It is necessary for our legitimate interests to monitor how our Sites are used to detect and prevent fraud, other crimes and the misuse of our Sites. This helps us to ensure that you can safely use our Sites.
To provide relevant marketing such as providing you with information about events or services that may be of interest to you. We use marketing data, basic data, special categories of data, registration data, client service data, and device data. It is necessary for our legitimate interests to process this information in order to provide you with tailored and relevant marketing, updates and invitations.
To address compliance and legal obligations, such as checking the identity of new clients. we use basic data, registration data, transaction data, and device data.
To consider individuals for employment and contractor opportunities and manage on-boarding procedures we use job applicant data. The processing is necessary for the purposes of recruitment and on-boarding and for complying with Agency processes.

Sharing of Personal Data: We may share Personal Data with the following categories of recipients:

Suppliers and service providers: We share Personal Data with suppliers and service providers to enable such parties to perform functions on our behalf and under our instructions in order to carry out the purposes identified above. These include: infrastructure and IT services providers, for example, the providers of our client intake system, our finance systems and our customer relationship management databases; third party consultants and suppliers who provide us with support in respect of business analytics and marketing campaigns.
Financial institutions: We share Personal Data with financial institutions in connection with invoicing and payments.

If you have questions about the parties with which we share Personal Data, please contact us as specified below.

Marketing ChoicesYou have control regarding our use of Personal Data for direct marketing. In certain markets, you will need to expressly consent before receiving marketing. In all markets, you can choose to not receive such communications at any time. If you no longer wish to receive any marketing communications, remain on a mailing list to which you previously subscribed, or receive any other marketing communication, please follow the unsubscribe link in the relevant communication or contact us as per below. CookiesWe use and allow certain third parties to use cookies, web beacons, and similar tracking technologies (collectively, “cookies“) on our Sites.

What are cookies?Cookies are small amounts of data that are stored on your browser, device, or the page you are viewing. Some cookies are deleted once you close your browser, while other cookies are retained even after you close your browser so that you can be recognized when you return to a websites.

How do we use cookies?We use cookies to provide the Sites and services, gather information about your usage patterns when you navigate these Sites in order to enhance your personalized experience, and to understand usage patterns to improve our Sites, products, and services. We also allow certain third parties to place cookies on our Sites in order to collect information about your online activities on our Sites over time and across different websites you visit. This information is used to provide advertising tailored to your interests on websites you visit, also known as interest based advertising, and to analyze the effectiveness of such advertising.

Cookies on our Sites are generally divided into the following categories:

Strictly Necessary Cookies: These are required for the operation of our Sites. They include, for example, cookies that enable you to log into secure areas. These cookies are session cookies that are erased when you close your browser.
Analytical/Performance Cookies: These allow us to recognize and count the number of users of our Sites and understand how such users navigate through our Sites. This helps to improve how our Sites works, for example, by ensuring that users can find what they are looking for easily. These cookies are session cookies which are erased when you close your browser. We use Google Analytics, and you can see below for how to control the use of cookies by Google Analytics.
Functional Cookies: These improve the functional performance of our Sites and make it easier for you to use. For example, cookies are used to remember that you have previously visited the Sites and asked to remain logged into it. These cookies qualify as persistent cookies, because they remain on your device for us to use during a next visit to our Sites. You can delete these cookies via your browser settings.
Targeting Cookies: These record your visit to our Sites, the pages you have visited and the links you have followed to recognize you as a previous visitor and to track your activity on the Sites and other websites you visit. These cookies qualify as persistent cookies, because they remain on your device for us to use during a next visit to our Sites. You can delete these cookies via your browser settings. See below for further details on how you can control third party targeting cookies.

What are your options if you do not want cookies on your computer?You can review your Internet browser settings, typically under the sections “Help” or “Internet Options,” to exercise choices you have for certain Cookies. If you disable or delete certain Cookies in your Internet browser settings, you might not be able to access or use important functions or features of this Sites, and you may be required to re-enter your log-in details.

To learn more about the use of cookies for Google analytics and to exercise choice regarding such cookies, please visit the Google Analytics Opt-out Browser Add-on. To learn more about certain cookies used for interest based advertising by third parties, including through cross-device tracking, and to exercise certain choices regarding such cookies, please visit the Digital Advertising Alliance, Network Advertising Initiative, Digital Advertising Alliance-Canada, European Interactive Digital Advertising Alliance or your device settings if you have the DAA or other mobile app.

Data Subject RightsIf you are in the European Economic Area (EEA) you have the following rights:

Access. Subject to certain exceptions, you have the right to request a copy of the Personal Data we are processing about you, which we will provide to you in electronic form. At our discretion we may require you to prove your identity before providing the requested information. If you require multiple copies of your Personal Data, we may charge a reasonable administration fee.
Rectification. You have the right to require that any incomplete or inaccurate Personal Data that we process about you is amended.
Deletion. You have the right to request that we delete Personal Data that we process about you, unless we are required to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
Restriction. You have the right to request that we restrict our processing of your Personal Data where: You believe such data to be inaccurate;o Our processing is unlawful; oro We no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.
Portability. You have the right to request that we transmit the Personal Data we hold in respect of you to another data controller, where this is: personal information which you have provided to us; ando we are processing that data on the basis of your consent or in order to perform our obligations under contract to you (such as to provide legal services).
Objection. Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defense of a legal claim.
Withdrawing Consent. If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge This includes cases where you wish to opt out from marketing messages that you receive from us.

If you are in the EEA you also have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws. Access a list of local data protection authorities in EEA countries.

Data SecurityWe have implemented technical and organizational measures in an effort to safeguard the Personal Data in our custody and control. Such measures include:

Restricting access to Personal Data to staff and service providers on a need-to-know basis;

While we endeavor to always protect our systems, sites, operations and information against unauthorized access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others.

You also have an important role in protecting Personal Data. You should not share any username, password or other authentication data provided to you with anyone, and we recommend that you do not re-use passwords across more than one website or application. If you have any reason to believe that your username or password has been compromised, please contact us as detailed below.

Cross-Border Data TransfersWe transfer Personal Data to jurisdictions as necessary for the purposes described above, including to jurisdictions that may not provide the same level of data protection as your home country. In particular, our Sites are hosted on servers in the United States. If you are located in a non-US jurisdiction, the transfer of Personal Data is necessary to provide you with the requested information and/or to perform any requested transaction. To the extent permitted by law, such submission also constitutes your consent for the cross-border transfer.

With respect to transfers originating from the European Economic Area (“EEA”) to the United States and other non-EEA jurisdictions, we implement standard contractual clauses approved by the European Commission, and other appropriate solutions to address cross-border transfers as required or permitted by Articles 46 and 49 of the General Data Protection Regulation. Where required by such laws, you may request a copy of the suitable mechanisms we have in place by contacting us as detailed below. Other Issues

1. What are the consequences of not providing Personal Data?

You are not required to provide all Personal Data identified in this Privacy & Cookies Statement to use our Sites or to interact with us offline, but certain functionality will not be available if you do not provide Personal Data. If you do not provide Personal Data, we may not be able to respond to your request, provide legal services to you, or provide you with marketing that we believe you would find valuable.

2. Do we engage in automated decision-making without human intervention?

We do not use automated decision-making without human intervention, including profiling, in a way that produces legal effects concerning you or otherwise significantly affects you.

3. Do the Sites honor do not track (“DNT”) signals sent via browsers?

Given the divergent practices of organizations that offer browsers and the lack of a standard in the marketplace, we generally do not respond to DNT signals at this time.

4. How long do we retain Personal Data?

We typically retain Personal Data related to marketing activities for as long as you accept marketing communications from us, and we will securely delete such data in accordance with applicable law upon request. For Personal Data that we collect and process for other purposes, we will typically retain such Personal Data for as long as it is necessary to fulfill the purposes outlined in this Privacy & Coolies Statement and as otherwise specified in applicable record retention policies and procedures.

5. Are third party websites governed by this Privacy & Cookies Statement?

The Sites may contain links and references to other websites administered by unaffiliated third parties. This Privacy & Cookies Statement does not apply to such third party sites. When you click a link to visit a third party website, you will be subject to that website’s privacy practices. We encourage you to familiarize yourself with the privacy and security practices of any linked third party websites before providing any Personal Data on that website.

6. How does the Firm handle employee and contractor privacy issues?

Personal Data about our employees and contractors are addressed through internal Firm policies and procedures, and are outside the scope of this Privacy & Cookies Statement.

7. How will we handle any changes to this Privacy & Cookies Statement?

We may update this Privacy & Cookies Statement from time to time as our services and privacy practices change, or as required by law. The effective date of our Privacy & Cookies Statement is posted below, and we encourage you to visit our Sites periodically to stay informed about our privacy practices. We will post the updated version of the Privacy & Cookies Statement on our Sites, and ask for your consent to the changes if legally required.

If you have questions or comments regarding this Privacy & Cookies Statement or our privacy practices, please contact us here:
support@addbloom.com
Effective date: August 26, 2018

By continuing to use this site you consent to our use of cookies in accordance with our Privacy and Cookies Statement.

Make us the extension of your team & Connect today!

Get in Touch