Entitle (“Entitle”, “we”) is committed to maintaining the privacy of its users (“user”, “you”). The following information describes how Entitle collects and processes information about you when you use our Website, Service and Platform (as defined below).
Our Privacy Policy explains:
By using our Website, Platform and Services, you agree to this Privacy Policy.
Entitle provides a cloud based access management platform (“Platform”) which allows organizations (“Customers”) to efficiently manage user permissions and automate provisioning, support auditability and accountability and reduce data security risks (“Services”). The Services are provided via interacting with the Customer’s IT personnel (“IT Personnel”), while enabling it to manage user access permissions, the Customer’s admin (“Admin”), to allow it to control and document access activities, and the Customer’s employees (“Employee”) who requires access permissions to the respective Customer’s systems (IT Personnel, Admin and Employee shall be referred to as “users”). Entitle's Website provides information on Entitle, the Platform and the Services and enables its users to contact Entitle, with respect to the Website, Platform and Services.
Users can access the Website and Platform through various Devices. A “Device” is any digital device used to access the Website and Platform, including without limitation a desktop, laptop, mobile phone, tablet, or other consumer electronic device. This Privacy Policy governs your access to the Platform and Website, regardless of how you access them, and by using our Website, Platform and Services you consent to the collection, transfer, processing, storage, disclosure and other uses described in this Privacy Policy.
Please note that the scope of this Privacy Policy is limited only to information collected by Entitle through your use of its Website, Platform and Services. Some information may be automatically collected, and some is collected when you interact with our Website and Platform. The type of information that may be automatically collected is non-personal information, which includes your session durations, the content you accessed on the Website and Platform, clicked links and pages viewed, standard server log information, the frequency and scope of your use of the Website and Platform and information about your Device and internet connection including the operating system you use and browser type.
Information from which you can be personally identified may also be collected, including but not limited to your name, email address, phone number and the location of the Device through which you used the Website or Platform (hereinafter: “Personal Information”). Personal Information shall be collected only if received voluntarily from you, including, without limitation, via the following ways:
If you are a user and wish to sign up to the Entitle Platform, we will collect your Personal Information such as your full name, email address and phone number, to enable you to use the Platform and Services.
If you wish to book a demo via the Website, we will collect your full name, email address, organization and the content you submitted to provide you with a relevant demo to use our Services.
If you are contracting with Entitle on behalf of a Customer, please note, that the provision of the Services requires Entitle to gain access to Personal Information processed by the Customer’s systems. Such systems may include the Customer’s HR systems or other systems which may include the contact details of Employees and other individuals as well as other sensitive information on individuals. Entitle will not process such information for any purpose unless required for the provision of its Services.
Entitle enables its Customers to manage the access permissions of its Systems. The provision of the Services may require IT Personnel and Admins to provide Entitle with access to the credentials of Employees, Customer’s partners or any other individual who Customer authorizes to access its Systems.
If you wish to contact us for support regarding our Platform Services, Website, this Privacy Policy or any other matter, we will collect your full name, email address, phone number and the content you submitted to facilitate your inquiry.
We use Personal Information we collect from you for a range of different business purposes according to different legal bases of processing. We may use or process your Personal Information for the following purposes. One or more purposes may apply simultaneously.
1. Providing the Requested Services
We process this information for the performance of the contract we have or may have with our Customers.
2. Improvement and Development of the Services
We process this information in light of our legitimate interest in improving the Website, Platform and Services, to allow our users to have the best experience.
3. Maintain a Safe and Secure Environment
We may use your information to detect and prevent fraud, abuse and security incidents in the following ways;
We process this information in light of our legitimate interest in improving our Platform, Website and Services by enabling our users to browse in a secure environment.
4. Personalize Content, Advertising and Marketing
We process this information in light of our legitimate interest to personalize your experience and customize our content.
Please note that certain data protection laws and regulations, such as the GDPR or the CCPA typically distinguish between two main roles for parties processing Personal Information: the “Data Controller” (or under the CCPA, “Business”), who determines the purposes and means of processing; and the “Data Processor” (or under the CCPA, “Service Provider”), who processes the data on behalf of the Data Controller (or Business). Please see the below explanation where we elaborate on how these roles apply to our Services, to the extent that such laws and regulations apply.
Accordingly, Entitle processes the Personal Information of IT Personnel, Admin and Employee strictly in accordance with such Customer’s reasonable instructions and as further stipulated in our Data Processing Addendum (“DPA”) and other commercial agreements with such Customer. The Customer, as the Data Controller of such data, will be responsible for meeting any legal requirements applicable to Data Controllers (such as establishing a legal basis for processing and responding to Data Subject Rights requests concerning the data they control).
For the avoidance of doubt, each Customer is solely responsible for providing adequate notice to the relevant IT Personnel, Admin and Employee whose Personal Information may be processed by Entitle for the provision of the Services. This includes, to the extent required, sufficient reference to the processing of their Personal Information via the Services, and any other information necessary to comply with all applicable privacy and data protection laws, and obtaining all approvals and consents from individuals as required under the applicable laws.
Except as otherwise provided in this Privacy Policy, we reasonably attempt to ensure that we never intentionally disclose any of your Personal Information, to any third party without having received your permission, except as provided for herein or otherwise as permitted or required under law.
In order to perform our contractual and other legal responsibilities or purposes, we may, from time to time, need to share your Personal Information with third parties. We may as well share your Personal Information with our affiliates, subsidiaries or any third party service providers and individuals to facilitate our Website, Platform and Services or any portion thereof, such as storage, data management or maintenance services. We may also share your information with analytics service providers for analytics services. Such analytics service providers set their own cookies or other identifiers on your Device, through which they can collect information about your usage of our Platform and Website. This helps us compile aggregated statistics about the effectiveness of our Platform, Website and Services.
The above mentioned third parties may be located in countries other than your own, and we may send them the information we receive. When such third party service providers process your Personal Information on our behalf, we will assure that they comply with obligations similar to those which are set forth in this Privacy Policy. We will also assure that they will abide by our data privacy and security requirements, and will be allowed to use the Personal Information solely for the purposes we set. We will transfer your Personal Information while using appropriate and suitable safeguards, while using a variety of legal mechanisms, including contracts, to ensure your rights and protections travel with your data.
We may also transfer your information, including Personal Information, in connection with a corporate merger, consolidation, the sale of related assets or corporate division or other fundamental corporate changes. Furthermore, information about you may also be released in order to comply with any valid legal obligation or inquiry or process such as a search warrant, subpoena, statute or court order. We will also release specific information in special cases, such as if you use the Platform, Website or Services to perform an unlawful act or omission or take any act or omission that may damage Entitle, its property and goodwill, or if there is an attempted breach of the security of the Platform, Website or Services or a physical or property threat to you or others. You have the right to file a complaint with any relevant supervisory authority according to the location in which you are situated.
You have the right at any time to request to access or modify your information. To exercise these options, please contact us at contact@entitle.io.
In some jurisdictions, in particular those located within the European Union (the “EU”) or within the European Economic Area (the “EEA”), you may be afforded specific rights regarding your Personal Information. Subject to such eligibility, you may have the following rights to:
If you wish to file a request regarding any of the above, you may contact us at: contact@entitle.io.
If we are a Data Controller with respect to your Personal Information, we will facilitate your request.
If we are a Data Processor with respect to your Personal Information, we will notify the relevant Customer about your request, and make our best efforts to enable them to allow you to exercise your rights.
CalOPPA requires commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require any person or company in the United States (and conceivably the world) that operates websites collecting Personally Identifiable Information from California consumers, to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared. See more at: [http://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf.](http://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf.)
According to CalOPPA, Entitle agrees to the following:
The California Consumer Privacy Act of 2018 (“CCPA”) permits users who are California residents to request to exercise certain rights. If you are a California resident, the CCPA grants you the right to request certain information about our practices with respect to your Personal Information. In particular, you can request to receive information on the following:
You can be assured that we do not sell your Personal Information. If you choose to exercise your rights, we will not charge you different prices or provide different quality of our Services, unless those differences are related to the provision of your Personal Information.
Please note that you must verify your identity and request before further action is taken. As a part of this process, government identification may be required. Moreover, you may designate an authorized agent to make a request on your behalf.
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12 month period preceding your verifiable request's receipt. If, for some reason, we cannot reply within such time frame, our response will include an explanation for our inability to comply. If you wish to exercise your CCPA rights, please contact us at: contact@entitle.io.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
We may use “cookies” and/or other technologies or files and similar technologies to automatically collect information (collectively, “cookies”) and identify how visitors make use of the Website and Platform. This aggregated tracking information may be used to help us improve and enhance the Website and Platform experience for all of our users. In addition, cookies are used for adjusting the Website and Platform to your personal preferences. Cookies contain information such as the pages you visited, the length of time you stayed on the Website and Platform, the location from which you accessed the Website and Platform and more.
If you would prefer not to have cookies stored on your Device, you may modify your browser settings to reject most cookies, or manually remove cookies that have been placed on your Device. There are a number of ways for you to manage cookies and other tracking technologies. You should be aware that you may not be able to use all our interactive features if you choose to decline the use of cookies. Most web browsers allow some control of most cookies through the browser settings. To find out how to manage cookies on popular browsers:
You are always in control of your data, and if you choose to receive information from us, or others, you can change your mind later. If, at any time, you would like to stop receiving such information or opt out of a feature, you may notify us by writing to contact@entitle.io. You should be aware, however, that it is not always possible to completely remove or modify information in our databases and servers, although we will always make reasonable efforts to do so upon your request.
The Website and Platform may provide links to other websites. Please be aware that these other websites are not covered by our Privacy Policy. This Privacy Policy does not cover the information practices exercised by other providers of products or services, advertisers or other websites, companies or individuals, which are not owned or controlled by Entitle. We suggest that when linking to another website, you always read that website’s privacy policy before volunteering any personally identifiable information.
We deploy industry standard measures to ensure the security, confidentiality, integrity and availability of the Personal Information we process. We maintain physical, technical and administrative safeguards, and test and update these periodically. We endeavor to restrict access to Personal Information on a ’need to know’ basis for the provision of our Services to you. No such measures are perfect or impenetrable. In the event of a security breach, we will take all reasonable action to minimize any harm. Although we will do our best to protect Personal Information, we cannot guarantee the security of data transmitted to our Website and Platform and transmission is at the users own risk.
Generally, Entitle does not retain information longer than necessary to provide its Website and Services and for its reasonable business and lawful needs. If you withdraw your consent to us processing your Personal Information, we will erase your Personal Information from our systems, unless the Personal Information is required for Entitle to establish, exercise or defend against legal claims or it is necessary for the performance of the requested Services.
The Website and Platform are not intended for children under the age of 16. We do not, knowingly or intentionally, collect information about children who are under 16 years of age.
IF YOU ARE UNDER THE AGE OF 16 YOU MAY NOT USE THE WEBSITE AND PLATFORM, UNLESS PARENTAL CONSENT IS PROVIDED ACCORDINGLY
If you have any questions regarding this Privacy Policy or the practices described above, you are always welcome to contact us at contact@entitle.io.
We reserve the right to revise, amend, or modify this Privacy Policy at any time. When changing the policy, we will update this posting accordingly. Please review this Privacy Policy often so that you will remain updated regarding our current policies.
This page was updated on Jan 2023.
