Effective Date: July 1, 2020
CivicPlus provides the software solutions directly to our public sector clients (“Clients”) to enable them to serve and perform their own governmental and business functions. As such, most of the Personal Information we collect and store is in connection with the software and services we provide to our Clients pursuant to our contractual arrangements with them. In these cases, CivicPlus is acting as a “data custodian” only.
When CivicPlus makes the Solutions available for use by a Client, we do so under a contractual arrangement with our Client pursuant to which the Client, not CivicPlus, makes the decisions about what Personal Information is collected and how it is processed in the Solutions. Our Clients may electronically submit Personal Information to a Solution, or solicit from you Personal Information within a Solution, for processing and storage purposes (“Client Data”), including, for example, information required to set up admin rights for a Client’s employees, or Personal Information collected from a Client’s constituent who is using the Solution to pay for recreational programming. In these interactions, the Client’s employees or constituents are “End Users”. We function as a service provider and may store or process Client Data only for the purpose of providing the Solutions, improving the Solutions, preventing or addressing service or technical problems, or as may be required by law. If your Personal Information has been submitted to us by one of our Clients and you wish to exercise any rights you may have to access, rectify, or delete such data, please inquire with the relevant Client directly. Since CivicPlus is the data custodian to our Clients, who are the “data owners”, CivicPlus cannot modify or delete any data owned by our Clients without such Clients specific request and approval.
We may collect Personal Information from Users in a variety of ways, including, but not limited to, when Users visit the Site, use a Solution, register an account on any Solution, fill out a form, and in connection with other activities, services, features or resources we make available on our Solutions. Users may register for an account within the Solutions and be asked for Personal Information, as appropriate, including name, email address, physical address, and phone number. Users may, however, visit the Solutions anonymously. Users can always refuse to supply Personal Information, except that it may prevent them from engaging in certain Solution related activities, like registering for or obtaining the full benefit of the services provided by the Solution or receiving subscription emails.
At the request and direction of Clients, CivicPlus may collect the following categories of Personal Information:
With the exception of the Website Visitor Information, the categories of data above are collected only when certain features and uses of the Solution are procured by the CivicPlus Client, and data collected may vary for each User depending on our Client’s use of the Solution. All data fields are voluntary for the User to fill in, unless our Client requires certain data to be input by the User.
We collect most of this Personal Information directly from Users willingly inputting such information, whether by webform, text, email, submission of documentation, or telephone call to our Client. However, we may also collect information from cookies on our Site or Solutions. We may receive Personal Information from third parties that integrate with our Solutions, at the request of our Clients. We will retain Personal Information as requested and required by our Client, with whom you share your Personal Information. We retain Personal Information indefinitely, retention depends on the type of data and the purpose for which we process the data, our Client’s subscription term for the Solution, open records laws, and direction for the retention or deletion of such data. We may retain Personal Information beyond the Client relation if required by law, contract, or if it is in our legitimate business interests and not prohibited by law.
If you have created a user portal account (“Account”) within a Solution which has been closed, we may take steps to mask Personal Information and other information, but we reserve our ability to retain and access the de-identified data for so long as required to comply with applicable laws.
We use User information, including Personal Information, for the following business purposes.
We use and process information as needed and requested by our Clients that procure the Solution in order to fulfill our Client’s need; deliver the services requested, including software updates; manage our Client and User relationship; provide our Clients and Users with customer support, and comply with laws or regulations that apply to us and our Clients.
We may use information in the aggregate to understand how our Users as a group use the Solution, resources, and services provided on the Solution and the Site. We may use information to perform research and analysis about Users’ use of, or interest in, our Solutions, services, or content.
We continually strive to improve our Solution and Site offerings based on the information and feedback we receive from Users. We may use information to improve our internal operations, systems, Solutions, and services including benchmarking system performance and developing our products and services.
User information helps us to more effectively respond to a User’s customer service requests and support needs. We use information to respond to comments and questions and provide customer service, communicate with Users and Clients about products and/or services that may be of interest.
The email address Users provide to a site will be used to respond to their inquiries, and/or other requests or questions, or to send service announcements regarding changes, notifications, or marketing information. If User decides to opt-in to our mailing list, on any Solution or the Site, they will receive emails that may include company news, updates, related product or service information, etc. If at any time the User would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email or User may contact us via the contact information below.
We only use Personal Information for the purposes and uses described above, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original uses and purposes.
Except as described here or in any other applicable policy, we do not sell, trade, or rent User’s Personal Information to any third parties. We may share generic aggregated demographic information not linked to any Personal Information regarding visitors and users with our business partners, trusted affiliates, and advertisers for the purposes outlined above.
For our payment processing Solution, we work with a third-party payment processor in order to successfully complete transactions. We have preferred partner processors, with whom we have direct communication regarding the services and you contract directly with. We also work with other payment processors that are not contracted partners, at our Client’s request; we use such processor’s technical documentation and instructions for creating an integration with the services.
We may share your Personal Information or other information about you with other parties to transactions when you use the Solution. In most cases, this is your local municipality with whom you are procuring services and their chosen merchant account processor and financial institutions (if making a purchase). The information is limited to Personal Information and account information necessary to facilitate the transaction.
We may share information with our agents, vendors, service providers, and subcontractors who perform functions on our behalf, such as our customer relationship management service provider, marketing automation and analytics provider, sales development tools provider, and other similar service providers.
We may also share information with other third parties for our business purposes or as permitted or required by law, including:
We store all our information, including Personal Information, using industry-standard techniques. We use appropriate data collection, storage and processing practices, and security measures to protect against unauthorized access, alteration, disclosure or destruction of your Personal Information, username, password, transaction information, and information stored on the site, if applicable, to your use of the Site and Solution.
Sensitive and private data exchange between the Solution or Site and its Users happens over an SSL secured communication channel and is encrypted and protected with digital signatures.
Users may have certain data privacy rights depending on their state of residence. If you would like to exercise any of your data privacy rights, you will need to send your request directly to the data owning CivicPlus Client with whom you shared your data. Please note that verification will be required to prove your identity. CivicPlus may not disclose or delete data if an exemption or exception to deletion exists. Please note, CivicPlus is a data custodian to its data owning Clients, the majority of our Clients are government municipalities and may be exempt from certain laws requiring compliance with data subject rights. CivicPlus is required to have Client approval regarding every access, rectifying, disclosing, and deletion request submitted by Users of any Solution.
If you have an Account with any Solution, you can review and edit Personal Information in the Account by logging in and updating the information directly. If you wish to edit Personal Information and are unable to do so in the Account, you may contact us, using the contact information below, and we can help you with this request, verification of identity will be required, and Client approval may be sought in circumstances where the Personal Information is owned by the Client.
For Residents of California, the California Consumer Privacy Act (CCPA) provides privacy protections to California consumers as follows:
CivicPlus does not sell your Personal Information so does not provide an opt-out page. If you are a California resident, you have the rights listed below under data protection law, to access any of the following rights you must submit a request to the data owning Client with whom you submitted your Personal Information. If your request is regarding data that you submitted independent of a specific data owning client, or if the request is with regard to our Site, please submit such a request to email@example.com.
California residents are limited to two Personal Information requests per year. There is no charge to access your Personal Information; however, if you submit requests that are clearly baseless, repetitive, or excessive, CivicPlus may charge a reasonable fee for such requests; alternatively, CivicPlus reserves the right to refuse to comply with such requests. Upon receiving a valid and verified request for Personal Information, that was submitted by and approved for fulfillment by our Client Data owner, we will respond to such a request within 45 days unless there are any extenuating circumstances, for which we will let our Client know.
Disclosures provided under CCPA will identify the Personal Information collected in the previous 12 months.
Or, by writing to:
302 S. 4th Street, STE 500
Manhattan, KS 66502