Last updated on: 3/23/2020
This Policy describes the types of information we may collect from you when you access or use the Battleship website located at battleshipsecurity.com (the “Site”), or when you use or interact with any other products, applications, or features provided by us (collectively, the “Service”), as well as our practices for collecting, using, maintaining, protecting, and disclosing that information. Any capitalized terms used but not defined in this Policy shall be given the meaning set forth in our Terms of Service.
If you do not agree with this Policy, or our other policies and practices, you should not use the Service. This Policy may change from time to time. We will notify you of material changes, but it is your responsibility to check this Policy periodically for updates.
TYPES OF INFORMATION WE COLLECT & HOW WE COLLECT IT
We, along with any third-party companies or individuals with whom we work, may collect information directly and voluntarily from you when you use the Service or contact us directly. We may collect personal information and non-personal information, depending on how you use the Service and what information you provide to us.
Personal Information. Personal Information is generally any information that can be used to identify you individually, either by itself or in conjunction with other information.
Personal Information we collect may include, without limitation:
- Contact Information, such as your name, phone number, email address, postal address;
- Account credentials, such as username, password, and similar security information used for authentication and account access;
- If you are an Expert, skills, qualifications, education history, work history, and items of this nature may be collected;
- Payment data and history, financial information, and billing preferences;
- Payment data may be stored by third-party payment processors that integrate with the service, and Battleship will made known the use of such service, and you should review the privacy policies and contact the applicable third party directly to respond to your questions.
- Online identifiers, such as your Internet Protocol (“IP address”), or other device information, when that information is linked to other personal Information or non-personal Information that allows that individual to be identified;
- Demographic or location information, when that information is linked to other personal information or non-personal Information that allows an individual to be identified;
How We Collect Personal Information. We collect personal information described above when you register to use the Service and create an account; provide it to us in connection with any transaction related to your use of the Service; email us or send a message through the electronic forms provided on the Site; enter a promotion sponsored by us; report a problem with our Service; respond to polls or surveys distributed for research purposes; or in any other interactions between you and the Service or us in which you voluntarily provide your personal information.
Non-Personal Information. Non-Personal Information includes information that is about you or about your use of the Service but does not identify you personally, such as:
- IP addresses
- Anonymous usage data;
- Referring/exit pages and URLs;
- Browser or platform type;
- Internet connection;
- Equipment used to access the Service;
- Mobile device ID, model, and manufacturer;
- Language preference, referring site;
- Additional websites requested;
- Preferences you submit and preferences that are generated based on data you submit; and
- The date and time of user requests.
*The preceding lists of personal information and non-personal Information we may collect are illustrative, not exhaustive. All information we collect from you depends on how you use and interact with us and the Service.
How We Collect Non-Personal Information. We generally collect non-personal information through automatic data collection technologies, which are described in more detail below.
Automatic Data Collection and How We Use It
We may use automatic data collection technologies and analytics tools (such as Google Analytics, MixPanel, and Firebase Analytics) to collect information from your device or browser about your equipment, browsing actions, and patterns when you access, use, and interact with the Service. The information we collect automatically is statistical data, and generally does not include personal information. We use this information to maintain the security and operation of the Service, and to gain insights about the functionality and use of the Service in order to improve the Service.
The technologies we use for the automatic data collection described above may include:
Web Beacons. Components of the Service and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).
Location Information & Information From Other Sources
Location Information We may, from time to time, track use location through IP logging for security and fraud prevention purposes. Use location may also be tracked in connection with our use of automatic data collection technologies, such as Google Analytics.
Do Not Track Disclosure You may set your web browser to transmit a “Do Not Track” signal to websites and online services you visit. At this time, we do not respond to or alter our practices when our systems receive a Do Not Track signal from a user’s web browser. For more information on Do Not Track, please visit www.allaboutdnt.com.
Information collected from other sources. We may obtain information about you from other sources, such as public databases, joint marketing partners, as well as from other third parties. We also use Google Analytics, and Google Analytics Advertising Features, which enables Google Analytics to collect data about your website traffic via Google advertising cookies. You can learn more and opt out of tracking by Google at this link: https://tools.google.com/dlpage/gaoptout/
WE DO NOT COLLECT INFORMATION FROM MINORS
We do not knowingly solicit data from or market to children under 18 years of age. By using the Service, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Site. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we have collected from children under age 18, please contact us at firstname.lastname@example.org.
HOW WE USE YOUR INFORMATION
We use personal information collected via the Site for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests ("Business Purposes"), in order to enter into or perform a contract with you ("Contractual"), with your consent ("Consent"), and/or for compliance with our legal obligations ("Legal Reasons"). We indicate the specific processing grounds we rely on next to each purpose listed below.
We use the information we collect or receive:
To facilitate account creation and logon process with your Consent. We use the information you provide us, such as your contact information, to facilitate account creation and logon.
To assess potential Experts, for their ability to deliver Expert Services
To enable the Service to connect Experts to Clients so that Experts and Clients can evaluate each other in consideration entering into agreements, contracts, transactions, and arrangements.
To confirm and facilitate the processing of transactions between Clients and Experts for Business and/or Contractual Purposes. We use the information provided to us by Users, such as your contact information to enable transactions between Clients and Experts, such as agreements for Expert Services.
To send you marketing and promotional communications for Business Purposes. We and/or our third party marketing partners may use the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can optout of our marketing emails at any time by clicking the unsubscribe button at the bottom of the email.
To send administrative information to you for Business Purposes and/or possibly for Contractual Purposes. We may use your personal information to send you product, service and new feature information and/or information about changes to our terms, conditions, and policies.
To post testimonials with your Consent. We post testimonials on our Site that may contain personal information. Prior to posting a testimonial, we will obtain your Consent to use your name and testimonial. If you wish to update, or delete your testimonial, please contact us at email@example.com and be sure to include your name, testimonial location, and contact information.
Request Feedback for our Business Purposes. We may use your information to request feedback and to contact you about your use of the Service as well as your interactions with other Users.
To protect our Site for Business Purposes and/or for Legal Reasons. We may use your information as part of our efforts to keep our Site safe and secure (for example, for fraud monitoring and prevention).
To enforce our terms, conditions and policies for Business Purposes, Legal Reasons and/or possibly Contractual.
To respond to legal requests and prevent harm for Legal Reasons. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
For other Business Purposes. We may use your information for other Business Purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Sites, products, services, marketing and your experience.
HOW WE SHARE INFORMATION WITH OTHERS
We share and disclose your information in the following situations:
Disclosure to Clients. If you are an Expert and you use the features available through the Service, then information, including your skills/qualifications, work history, education history, and other information related to your ability to perform Expert Services, may be viewed by Clients. We provide this information to Clients so that they may evaluate Experts to make determinations regarding further contact that might lead to a business arrangement, agreement, contract, or transaction between Client(s) and Expert(s).
Disclosure to Experts. If you are a Client that has expressed a need for cybersecurity services, the details of your need may be shared with Experts who are believed to be qualified to provide the necessary Expert Services.
Compliance with Laws. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena (including in response to public authorities to meet national security or law enforcement requirements).
Vital Interests and Legal Rights. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person and illegal activities, or as evidence in litigation in which we are involved.
Vendors, Consultants and Other ThirdParty Service Providers. We may share your data with third party vendors, service providers, contractors or agents who perform services for us or on our behalf, or otherwise integrate with our Site to help facilitate the Service, and require access to such information to do that work. This applies whether you use the Service as a Client or Expert. Examples include: payment processing, telecommunications services, data analysis, email delivery, hosting services, customer service and marketing efforts. We may allow selected third parties to use tracking technology on the Site, which will enable them to collect data about how you interact with the Site over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content and better understand online activity. Unless described in this Policy, we do not share, sell, rent or trade any of your information with third parties for their promotional purposes. This list is an example of some of our technology providers, but is not exhaustive and is subject to change from time to time. Please contact us if you would like more information.
Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
With your Consent. We may disclose your personal information for any other purpose with your Consent.
OUR DATA RETENTION PRACTICES
In general, we will only retain personal information for as long as you are using the Service or as otherwise needed to provide you the Service or complete other purposes described in this Policy. We may also retain and use your Personal Information as necessary to satisfy any legal requirements, including enforcing our rights and agreements and resolving disputes. We will try to delete your information promptly consistent with these data retention practices. However, there might be some technical delay involved in deleting information from our servers, and backed-up versions might still exist after deletion. In addition, we do not delete any data that has been rendered completely anonymous or maintained in de-identified, aggregated form with data of other users (such as usage trend reports).
To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
OUR DATA SECURITY PRACTICES
We implement security measures designed to protect your information from unauthorized access, use, or disclosure. We protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks, and you agree that Battleship shall not be responsible for the circumvention of any of the Service’s privacy settings or security measures. If you have an account, we urge you to take steps to keep your account information (username and password) protected from unauthorized use by others. You should only access the services within a secure environment.
YOUR PRIVACY RIGHTS
Battleship aims to provide transparency, security, and accessibility when it comes to your personal data.
You may request a copy of your personal data from us at any time. If you request a copy of your data, we will provide you a copy in a structured, electronic format.
You may also request that your personal data be corrected if you believe it is incorrect or incomplete, or that it be deleted entirely. We will delete your personal data upon your request if you send us a request with a description of the basis for your request; however, we may first restrict processing of your data as permitted under applicable law in order to assess your request prior to any deletion of data.
Finally, you may object to our processing of your personal data, or request that we restrict the processing of your personal data. If you request that we restrict processing of your data, we will stop processing your data, but we may still store your data as permitted under applicable law pending an assessment of your request.
We may not be able to delete your personal data except by also deleting your account, if applicable. We may not be able to accommodate a request to change or delete information if the change would violate any law or legal requirement, or if such change would cause the information to be incorrect. We may not be able to delete the personal data of a User that was retained by another User. If a Client and an Expert disclose personal data or information in the course of dealings, Battleship has no obligation to monitor the use of such information nor does Battleship have an obligation to encourage the deletion of information from either Client or Expert’s possession.
You may revoke consent to our processing activities that are based on your consent, if and when applicable. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
If you are a resident of the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm
If you fail to provide personal information when it is required by law or necessary for us to perform our obligations under a contract with you, we may not be able to perform the contract. For example, if you fail to provide us with your billing information to pay for an order through your account, we may not be able to process the order.
How to Make Changes to Your Account and Personal Data
If you would at any time like to request, review or change the information in your account, or terminate your account, you can: log into your account settings and update your user account or send us an email. Please direct all requests related to your information to firstname.lastname@example.org.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Service and/or comply with legal requirements.
Please note that the termination of your account does not release you of all restrictions and obligations related to your use of the Service.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Site To opt out of interestbased advertising by advertisers on our Site visit http://www.aboutads.info/choices/.
Opting out of email marketing: You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list – however, we may still need to send you service emails that are necessary for the administration and use of your account. To otherwise optout, you may email us at email@example.com.
CALIFORNIA RESIDENTS PRIVACY RIGHTS
California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.
If you are under 18 years of age, reside in California, and have a registered account with the Service, you have the right to request removal of unwanted data that you publicly post on the Service. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Site, but please be aware that the data may not be completely or comprehensively removed from our systems.
LINKS TO OTHER WEBSITES AND SERVICES
You have the right to make a complaint at any time to your local data protection authority if you have concerns regarding your rights under applicable law. We would, however, appreciate the chance to address your concerns so please contact us first so that we can discuss a resolution with you directly.
If you have questions or comments about the Service, this Policy, or any of our other policies, you may email us or contact us by mail to the address below.
Our full details are:
Legal entity: Battleship, Inc.
555 Fayetteville Street
Raleigh NC, 27601