Privacy Policy

Last Updated: April 25, 2024

As transparency and privacy are among PRIVO’s core values, we regularly review our privacy notices to make sure we keep you up to date with our practices, what information we collect, how we use it and how we might share it. The ‘What’s New’ section summarizes the changes made to the latest version. To review previous versions of this policy please contact us at privacy@privo.com.

Content

Who is PRIVO and What Do We Do

What's New

Changes to this Privacy Policy

Information We Collect From You

What We Do With The Information You Provide

Service Providers

Passively Collected Data

Security

How to Update or Remove Your Information

Notice to California Residents

A Note to EU and UK Citizens

EU – US Data Privacy Framework

Who is PRIVO and What Do We Do?

PRIVO.com (the Site) is owned and operated by Privacy Vaults Online, Inc. d/b/a PRIVO (“PRIVO”).  PRIVO is a leader in online privacy protection and the privacy solutions offered by PRIVO include an FTC approved COPPA Safe Harbor Program, as well as GDPRkids™ Privacy Assured and the Children's Code Privacy Programs. PRIVO also has the PRIVO iD Platform (The Platform), an identity and consent management platform, also known as PRIVO-Lock™.  In addition, PRIVO has a discovery platform at my.PRIVO.com where a user can find online services in PRIVO’s Kids Privacy Assured program and manage a PRIVO iD account. To review the Platform privacy policy click here.

This Privacy Policy is part of the Terms of Service for PRIVO.com. When you use the Site, you agree to the Terms of Service, including this Privacy Policy. Please read them before using the Site. They can be found here. If you disagree with any part of the Terms of Service or Privacy Policy, please do not use the Site. This policy covers the use of www.privo.com. We do not own or operate mobile applications.

PRIVO is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC). PRIVO complies with the principles of the Privacy Shield. It has also been approved by the United States Federal Trade Commission to create and administer a Safe Harbor program to assist online businesses to comply with the Children's Online Privacy Protection Act ("COPPA"). This Act requires many websites, game platforms, social networks, and mobile apps (each an "Online Service") to secure parental consent before the Online Service can collect information from the child through the Online Service.

When an Online Service becomes a member of the Safe Harbor, it makes legally binding commitments to PRIVO that it will follow the high standards set out by PRIVO for compliance with COPPA, as well as similar laws that may be implemented in other countries, and best practices developed by the privacy community. You may see a PRIVO Seal on various Online Services. This Seal shows that the Online Service is a member of the PRIVO Safe Harbor program, but the Online Service is not operated by PRIVO and has its' own Privacy Policy and Terms of Service, which you should review and approve before using the Online Service.

PRIVO's GDPRkids™ Privacy Assured Privacy program requirements ensure that Informational Society Services (website and apps) comply with the General Data Protection Regulation in relation to the processing of the personal data of children.

What's New

This policy was updated on April 25, 2024, to include an update to the service providers used.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time, in which case, we will post the new policy. Such revisions will be effective immediately, so please check the latest update effective date and review the Privacy Policy regularly. We will not make any material changes to this privacy policy before notifying you by email, if we have it and obtaining your consent.

If you would like to see a past version of this policy please contact us at privacy@privo.com.

Information We Collect From You

When you visit PRIVO.com, you are given the opportunity to sign up and receive PRIVO's industry eNewsletter which contains information about developments in the world of online privacy, data security and digital kids industry trends. Anyone can sign up for our industry newsletters. However, this Site is not intended for children, students or teachers. You have the option to opt-out of these activities at any time. If you request additional information or seek support when using the Site, we collect your name and contact information to assist us in responding to you. Users cannot upload any content to the Site and it does not include any community or social features. There is no account creation or registration on www.privo.com. No user personal information can be displayed publicly. No personal information is collected from children or students.

We collect the following information from you when you opt in to our eNewsletter:

• First and Last Name
• Company Name
• Job Title
• Email Address

We collect the following information from you when you make an inquiry about our services using the Contact Us form:

• First and Last Name
• Email Address
• Company Name
• Job Title
• Country
• Phone Number
• Services You are Interested In
• Optional Box to Fill Out a Message
• Website

When a company or organization signs up to be a Privacy Patron for PRIVO PROTECT we collect the following information with their consent:

• Work Email
• First Name
• Last Name
• Organization
• Job Title
• Organization Website
• Organization Type, for example the sector you work in
• Organization logo

When an individual signs up to be a Privacy Patron for PRIVO PROTECT we collect the following information with their consent:

• Email
• First Name
• Last Name
• Job Title
• Organization
• Organization Website
• Profile Photo

When an individual or company registers for a PRIVO event:

• Email
• First Name
• Last Name
• Job Title
• Company Name
• Business URL (optional)

When registering for an event individuals will also receive our Newsletters.

PRIVO retains this data for as long as required to provide the service to you. You can request to have your data deleted by contacting us at: privacy@privo.com.

PRIVO does not collect precise geo location information or biometric data. Only the information listed above is collected.

PRIVO only uses information collected directly from you for the purposes stated. We will also use your information to update you about changes to our policies and to give you information about additional products and services we, or one of our clients, may offer. PRIVO will disclose information about you, in a manner that is not aggregated or anonymous, if we believe it is legally necessary to do so, for example, in response to a court order or civil subpoena, or to law enforcement or other government officials in connection with an investigation of fraud, intellectual property infringement, or other activity that is illegal or may expose PRIVO to legal liability.

In addition, in the event of a merger, acquisition, reorganization, bankruptcy or other similar event, PRIVO customer information may be transferred to our successor or assigned but will remain governed by and protected in strict accordance with this Privacy Policy and no further use of customer information will be made without explicit consent.

Service Providers

PRIVO works with a number of service providers solely to support our services. Information shared with these third parties is not used for any other purposes. For more information on these providers please click here.

PRIVO does not sell or rent your personal information. Nor do we serve interest based advertising or track you and build a profile of you.

Passively Collected Data

In order to manage, maintain, and improve the Site, we will sometimes passively collect non-personally identifiable information about visitors using the data transfer logs of the Site or “cookies”.  The information we may collect through passive collection technologies, such as “cookies”, includes IP address and browser type, as well as time spent on the Site or areas visited.  Our logs do not normally contain any personally identifiable information and are used only to improve the design, functionality, and content of the Site and to enable us to personalize your experience with the Site. PRIVO utilizes HubSpot to assist in these efforts by providing general analytical data on use and functionality of the Site for internal purposes. Data is collected, processed, and stored securely and is not shared with other parties. For more information, visit HubSpot's Privacy Policy. PRIVO does not track you, that is, it does not collect personally identifiable information about your online activities over time and across third-party Web sites or online services.

The Site does not employ technology that responds to browser signals that permit users to limit tracking.

Security

PRIVO is SOC 2 Type 2 certified. We use generally accepted security measures and safeguards and require that the third parties it works with agree to do the same. The measures and safeguards include limiting access to the data to those persons who need it to complete their work for PRIVO.

We have put in place industry standard physical, electronic, and managerial procedures to safeguard and help prevent unauthorized access, maintain data security, and correctly use the information we collect online.

How to Update or Remove Your Information

PRIVO keeps your information for as long as necessary in providing the services listed in this policy. Personal information is not used for any other purpose. If you want to opt out of services, review your information, or delete your information, please contact us at privacy@privo.com.

If you opt out of receiving our newsletters, PRIVO will cease sending them immediately. If you request we remove your personal information from our records we will delete it within ten working days of receiving your request unless we have a legal requirement to retain it.

Privacy Vaults Online, Inc., d/b/a PRIVO
17949 Main St., Unit 1025
Dumfries, VA 22026-8043
703–569–0504 (telephone)
866–588–8452 (fax within the US)
703–531–8424 (fax outside of the US)
privacy@privo.com (email)

Attn: Privacy Officer

Notice to California Residents

PRIVO does not disclose personal information to third parties for marketing purposes.

For further information about our privacy practices, or to review and request to have deleted any personal information you have shared with us, please contact us at: privacy@privo.com.

A Note to EU and UK Citizens

PRIVO complies with the rights given to EU and UK Citizens under the General Data Protection Regulation (GDPR) and the UK GDPR. These rights are as follows:

• to correct the personal data we have about you;
• to withdraw your consent to the processing of your personal data;
• to obtain a copy of the personal data we hold about you;
• to have your personal data deleted;
• to transfer your personal data to another controller to provide you with services;
• to restrict the personal data we have;
• to request we stop processing your personal data.

You can action any of these rights by contacting us at: privacy@privo.com.

If you are an EU or UK citizen and would like to make a complaint about the way we process your personal data, you can contact the relevant Data Protection Authority (DPA). Please contact us at privacy@privo.com to find out more.

EU – US Data Privacy Framework

PRIVO complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  PRIVO has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

In the context of an onward transfer, a participating organization has responsibility for the processing of personal information it receives under the EU-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf.  The participating organization shall remain liable under the Principles if its agent processes such personal information in a manner inconsistent with the Principles, unless the organization proves that it is not responsible for the event giving rise to the damage.

In compliance with the EU-U.S. DPF Principles, PRIVO commits to resolve complaints about our collection or use of your personal information.  If you have any inquiries or complaints regarding our EU-U.S. Data Privacy Framework policy you should first contact PRIVO at: 

17949 Main St., #1025
Dumfries, VA 22026
703–569–0504 (telephone)
866–588–8452 (fax within the US)
703–531–8424 (fax outside of the US)
privacy@privo.com(email)
Attn: Privacy Officer

Dispute Resolution
If a privacy complaint or dispute relating to Personal Data received by Privacy Vaults Online, Inc in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/

If a complaint or dispute cannot be resolved through our internal process, we have also agreed to cooperate with the EU and UK data protection authorities and the Swiss Federal Data Protection and Information Commissioner and to participate in the dispute resolution procedures of the panel established by such data protection authorities.

Binding Arbitration
If your dispute or complaint related to your Personal Data that we received in reliance on the Data Privacy Framework cannot be resolved by us, nor through the dispute resolution mechanism mentioned above, you may have the right to require that we enter into binding arbitration with you under the Data Privacy Framework “Recourse, Enforcement and Liability” Principle and Annex I of the Data Privacy Framework.

PRIVO uses AWS servers in the United States to store data. For more information on this please contact us at privacy@privo.com.