Privacy Policy
At Behaviour Matters we collect and manage user data according to the following Privacy Policy, with the goal of incorporating our company values: excellence, safety, innovation, connection, inclusivity and growth. By using behaviourmatters.ca (the “Website”), you agree to the terms of this Privacy Policy.
(a) Data Collected
We collect anonymous data from every visitor of the Website to monitor traffic and fix bugs. For example, we collect information like web requests, the data sent in response to such requests, the Internet Protocol address, the browser type, the browser language, and a timestamp for the request.
We may ask you to log in and provide certain personal information (such as your name and email address) in order to be able to save your profile and the documents and comments associated with it. In order to enable these or any other login based features, we use cookies to store session information for your convenience. You can block or delete cookies and still be able to use Behaviour Matters although if you do you will then be asked for your username and password every time you log in to the website. In order to take advantage of certain features of the Website, you may also choose to provide us with other personal information, but your decision to utilize these features and provide such data will always be voluntary.
You are able to view, change and remove your data associated with your profile. Should you choose to unsubscribe please do so by hitting unsubscribe on any email sent from us.
By using the website, you represent that you have the legal capacity to do so.
(b) Use of the Data
We only use your personal information to provide you the Behaviour Matters services or to communicate with you about the services or the Website.
With respect to any documents you may choose to upload to Behaviour Matters we take the privacy and confidentiality of such documents seriously. We encrypt all documents, and keep information secure and safe.We employ industry standard techniques to protect against unauthorized access of data about you that we store, including personal information.We do not share personal information you have provided to us without your consent, unless:
– doing so is appropriate to carry out your own request;
– It is legally required;
– we believe it’s needed to detect, prevent or address fraud, security or technical issues;
– otherwise protect our property, legal rights, or that of others.
Behaviour Matters is operated from Canada. If you are visiting the Website from outside of Canada., you agree to any processing of any personal information you provide us according to this policy.
Behaviour Matters may contact you, by email or other means. For example, Behaviour Matters may send you promotional emails relating to Behaviour Matters or other third parties Behaviour Matters feels you would be interested in, or communicate with you about your use of the Behaviour Matters website. Behaviour Matters may also use technology to alert us via a confirmation email when you open an email from us. You can modify your email notification preferences by clicking the appropriate link included in the footer of email notifications. If you do not want to receive email from Behaviour Matters please opt out of receiving emails at the bottom or top of any Behaviour Matters emails.
(c) Sharing of Data
We don’t share your personal information with third parties. Only aggregated, anonymized data is periodically transmitted to external services to help us improve the Behaviour Matters Website and service. We currently use Google Analytics (traffic analysis, SEO optimization), Mailchimp (mailing list management), Jane (booking and tele-therapy support). We listed below what data these third parties extract exactly. Feel free to check out their own Privacy Policies to find out more.
– Google Analytics: anonymous (ad serving domains, browser type, demographics, language settings, page views, time/date), pseudonymous (IP address)
We also use social buttons provided by services like Twitter, Google+, LinkedIn and Facebook. Your use of these third party services is entirely optional. We are not responsible for the privacy policies and/or practices of these third party services, and you are responsible for reading and understanding those third party services’ privacy policies.
We employ and contract with people and other entities that perform certain tasks on our behalf and who are under our control (our “Agents”). We may need to share personal information with our Agents in order to provide products or services to you. Unless we tell you differently, our Agents do not have any right to use Personal Information or other information we share with them beyond what is necessary to assist us. You hereby consent to our sharing of Personal Information with our Agents.
We may choose to buy or sell assets. In these types of transactions, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your personal information as set forth in this policy.
Behaviour Matters GDPR Privacy Notice
If you are located in the European Union (“EU”), United Kingdom, Lichtenstein, Norway, or Iceland, you may have additional rights under the EU General Data Protection Regulation (the “GDPR”) with respect to your Personal Data, as outlined below.
For this GDPR Privacy Notice, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data, such as collection, use, storage and disclosure. Behaviour Matters, Inc. (“Behaviour Matters”) will be the controller of your Personal Data processed in connection with the Services, except that we may also process Personal Data of our customers’ end users or employees in connection with our provision of services to such customers, in which case we are the processor of Personal Data and the customer is the controller. For more information about your data rights and processing activities where we are the controller, please contact us at info@behaviourmatters.ca. For more information about your data rights and processing activities where we are the processor, please contact the controller party in the first instance.
Where applicable, this GDPR Privacy Notice is intended to supplement, and not replace, our existing privacy policy). If there are any conflicts between this GDPR Privacy Notice and our Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this notice or whether any of the following applies to you, please contact us at info@behaviourmatters.ca.
How We Process Personal Data:
We will only process your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below. In some cases, we process Personal Data based on the consent you expressly grant to us at the time we collect such Personal Data. When we process Personal Data based on your consent, it will be expressly indicated to you at the point and time of collection. From time to time, we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.
What Personal Data Do We Collect From You and How Do We Use Your Personal Data?
We collect Personal Data about you when you provide such Personal Data directly to us, when third parties such as our business partners or service providers provide us with Personal Data about you, or when Personal Data about you is automatically collected in connection with your use of our Services.
Information we collect directly from you:
We receive certain Personal Data directly from you when you provide us with such Personal Data, including without limitation the following:
– First name
– Last name
– Email address
– Mailing address
– Telephone number
– Country
-Therapy details
We collect and process these categories of Personal Data as a matter of contractual necessity so that we can provide Services. For example, we cannot open a profile for you if you do not provide us with your first and last name. When we process Personal Data due to contractual necessity, failure to provide such Personal Data will result in your inability to use some or all portions of the Services that require such Personal Data.
We also use the Personal Data we collect directly from you to operate, improve, understand and personalize our Services based on our legitimate business interest in operating our Services in a way that benefits us and our users. For example, we use the Personal Data to:
– Create and manage user profiles
– Communicate with you about the Services
– Contact you about Service announcements, updates or offers
– Provide support and assistance for the Services
– Personalize website content and communications based on your preferences
– Meet contract or legal obligations
– Respond to user inquiries
– Fulfill user requests
– Comply with our legal or contractual obligations
– Resolve disputes
– Protect against or deter fraudulent, illegal or harmful actions
– Enforce our Policies and Procedures
Information we receive from third party sources: Some third parties provide us with Personal Data about you, such as the following:
– Account information for third party services: If you interact with a third party service when using our Services, such as if you use a third party service to log-in to our Services (e.g., Facebook Connect), or if you share content from our Services through such third party service, the applicable third party service will send us certain Personal Data (specifically your first name, ID, token and profile picture URL) if the third party service and your account settings allow such sharing. Specifically, this Personal Data permits us to create and manage user profiles and sync your progress when you connect to Facebook through the Services. The Personal Data we receive will depend on the policies and your account settings with the applicable third party service. We process this Personal Data based on our legitimate business interest of personalizing and optimizing the Services to improve user experience.
– Information from our advertising partners: We receive information about you from some of our service providers (e.g., LinkedIn) who assist us with marketing or promotional services related to how you interact with our websites, applications, products, services, advertisements or communications. We process this Personal Data based on our legitimate business interest in providing direct marketing about our products and services.
Information we automatically collect when you use our Services: Some Personal Data is automatically collected when you use our Services, such as the following:
– IP address
– Device identifiers
– Web browser information
– Page view statistics
– Browsing history
– Usage information
– Cookies and other tracking technologies (e.g. web beacons, pixel tags, SDKs, etc.)
– Location information (e.g. IP address, zip code)
– Log data (e.g. access times, hardware and software information)
We process this Personal Data based on the following legitimate business interests:
– Network security
– Personalization of web content
– Evaluation of quality of writing to consider engagement
– Web analytics
– Provision of rewards
– Administrative matters
In collecting the Personal Data, we sometimes use “cookies” and other tracking technologies (e.g., web beacons and pixel tags). Cookies allow us to recognize your browser or device and “remember” your browser during subsequent visits for purposes of functionality, preferences, and website performance, and they also tell us how and when pages and features in our Services are visited and by how many people. The Services use the following cookies:
– Essential Cookies. Essential cookies are required for providing you features or services that you have requested. For example, certain cookies enable you to log into secure areas of our Site. Disabling these cookies may make certain features and services unavailable.
– Functionality Cookies. Functional cookies are used to record your choices and settings regarding our Services, maintain your preferences over time, and recognize you when you return to our Services. These cookies help us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
– Performance/Analytical Cookies. Performance/analytical cookies allow us to understand how visitors use our Site and Services such as by collecting information about the number of visitors to the Site, what pages visitors view on our Site, and how long visitors are viewing pages on the Site. Performance/analytical cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising.
– Retargeting/Advertising Cookies. Retargeting/advertising cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you.
Most browsers automatically accept cookies but have an option for blocking or deleting cookies, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new cookie in a variety of ways. You can usually access these options through the “Settings” or similar menu in your browser. For more information about cookies, including how to see what cookies have been set and how to manage and delete cookies, visit www.aboutcookies.org or www.allaboutcookies.org. Please note that if you block or delete cookies, some portions of the Services may not work properly. In some cases, cookies may enable us to aggregate certain information with other Personal Data we collect and hold about you.
Other uses of Personal Data: In addition to the uses set forth above, we may also process the Personal Data we collect on the basis of the following legitimate business interests.
– Operation and improvement of our business, products and services
– Marketing of our products and services
– Provision of customer support
– Protection from fraud or security threats
– Compliance with legal obligations
– Completion of corporate transactions
How and With Whom Do We Share Your Data?
We share Personal Data with Jane (third-party secure booking and tele-therapy app and mail chimp), third party service providers and agents who work on our behalf and provide us with services related to the purposes described in this Privacy Policy or help us provide service. These parties include:
– Analytics service providers
– Staff augmentation and contract personnel
– Hosting service providers
We also share Personal Data when necessary to complete a transaction initiated or authorized by you or provide you with a product or service you have requested. In addition to those set forth above, these parties also include:
– Other users (where you post information publicly or as otherwise necessary to effect a transaction initiated or authorized by you through the Services)
– Social media services (if you interact with them through your use of the Services)
– Third party business partners who you access through the Services
– Other parties authorized by you
We also share Personal Data when we believe it is necessary to:
– Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies
– Protect us, our business or our users, for example to enforce our terms of service, prevent spam or other unwanted communications and investigate or protect against fraud
– Maintain the security of our products and services
We also share Personal Data with third parties when you give us consent to do so.
Furthermore, if we choose to buy or sell assets, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party, and we would share Personal Data with the party that is acquiring our assets based on our legitimate business interest of being able to provide you with continued services. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this policy.
How Long Do We Retain Your Personal Data?
We retain Personal Data about you for as long as you have an open account with us or as otherwise necessary to provide the Services to you and improve the Services for all users generally. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. Afterwards, we retain some information in a depersonalized or aggregated form but not in a way that would identify you personally.
What Security Measures Do We Use?
We seek to protect Personal Data using appropriate technical and organizational measures based on the type of Personal Data and applicable processing activity.
Personal Data of Children:
We do not knowingly collect or solicit Personal Data from anyone in the EU, United Kingdom, Lichtenstein, Norway, or Iceland under the age of 16. If you are under 16, please do not attempt to register for the Services without your parents consent or send any Personal Data about yourself to us. If we learn that we have collected Personal Data from a child under age 16 without consent, we will delete that information as quickly as possible.
You have certain rights with respect to your Personal Data, including those set forth below. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need to you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.
– Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data. You can also access certain of your Personal Data by logging into your account on Jane.
Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement Personal Data by emailing us at info@behaviourmatters.ca or logging on and changing it yourself.
– Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Services.
– Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
– Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes, such as for direct marketing purposes.
– Restriction of Processing: You can ask us to restrict further processing of your Personal Data.
– Right to File Complaint: You have the right to lodge a complaint about our practices with respect to your Personal Data with the supervisory authority of your country or EU Member State.
What if You Have Questions Regarding your Personal Data?
If you have any questions about this GDPR Privacy Notice or our data practices generally, please contact us using the following information: