Upland respects your privacy and is committed to protecting your Personal Information. This Privacy Notice explains how Upland and its subsidiaries, including Char Software, Inc. (collectively referred to hereinafter as “Upland”, “we” or “our”) collect, store, use, disclose and otherwise process information we collect when you visit our websites (“Sites”), including uplandsoftware.com or otherwise interact with us online and through other means such as sales and marketing activities and events.
Upland’s enterprise work management cloud software enables every team in your organization to do their best work.
Whether it’s team collaboration, managing projects and costs, automating workflows or engaging prospects and customers, our enterprise work management cloud solutions address specific work needs and deliver powerful results. Our products are cloud-based and architected for performance, scalability, and security.
We provide the Service to you, our Customer, under an agreement with you and solely for your benefit and the benefit of your customers (End User).
Upland is the data Controller when we collect, store and use your Personal Information to communicate and market directly to you, our Customers.
Upland is the data Processor, when engaged by you, the Customer, to process End User Personal Information on your behalf. Your agreement with Upland governs our use of and processing of End User Personal Information.
During the normal course of business with Upland or our third-party partners, we may collect Personal Information such as your name, email address, postal address, phone number and other Personal Information you provide via the Sites when, for example, you request information about our Services, provide feedback about our Services or register for sales events or marketing activities. We may collect additional Personal Information, such as billing, banking or payment information, when you register for our Service and in order to establish an account with us. For self-service, credit card information may be collected and subsequently shared with a third-party service provider for purpose of billing and collecting payment.
We automatically collect certain information when you visit or use the Sites to help analyze and make improvements to the service configuration, performance and consumption. This may include information about the specific computer or device you are using, such as your computer’s operating system, Internet Protocol (IP) address and general geolocation. We also automatically collect and store information about your activities on our Sites, such as information about how you came to and used our Sites, event information (like access times, browser type and language) and data collected through Cookies and other similar technologies that uniquely identify your browser, computer and/or other device.
Upland may collect End User personal information under the instructions provided as part of the Service, which we will process as a Processor (or sub-processor) on your behalf. Upland has no direct relationship with individual End Users whose Personal Information it processes.
We may use Personal Information collected via the Sites and our Service to:
We may disclose your Personal Information with third parties only in the ways that are described in this Privacy Notice. We do not sell your Personal Information to third parties.
We may provide your Personal Information to third parties who are acting on our behalf or assist us in providing Services to you, such as data storage, maintenance services, hosting services, database management, web analytics and payment processing providers. We do not allow these third parties to use your Personal Information for their own purposes and only permit them to process your Personal Information for specified purposes and in accordance with our instructions. Such third parties are subject to this Privacy Notice in addition to certain contractual obligations with respect to the use of your Personal Information.
A list of those third-party processors can be found here.
We may also disclose your Personal Information as required by law such as to comply with a subpoena or similar legal process; when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request, including to meet national security or law enforcement requirements.
If one of the Upland affiliates or group companies is involved in a merger, acquisition or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Sites of any change in ownership or use of your Personal Information, as well as any choices you may have regarding your Personal Information.
We post customer reviews on our Sites, which may contain Personal Information. We will obtain your consent via email prior to posting your name and review. If you wish to change or delete your review, you may contact us at firstname.lastname@example.org.
Our Sites offer publicly accessible blogs or community forums. You should be aware that any information you provide via a blog or community forum, including posting comments, may be read, collected, and used by others who access them. To request removal of your Personal Information from our blog or community forum, contact us at email@example.com
Organization: Google Analytics
Organization: Microsoft Dynamics
We use your Personal Information to communicate with you, primarily via email, on a variety of service-related topics.
You may choose to stop receiving communications from us, including, for example, email correspondence to confirm your purchase, remind you of upcoming subscription expiration, respond to your comments, questions and requests, provide customer support, inform of security alerts, account updates, and other administrative announcements. These communications are fundamental elements of our Service and in most cases, by opting out of these communications, you may be unable to effectively receive Service. To opt-out, contact us at firstname.lastname@example.org.
You may also choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in the email.
If you are a Customer and would like to update your account, please contact your sales or customer service representative.
If you need assistance in amending or deleting an End User’s Personal Information, we will respond to your request without undue delay but may require additional forms of identification by the End User to confirm their identify before taking action to alter or remove any Personal Information.
We will retain your Personal Information and the End User Personal Information that we process on your behalf for as long as the account is active or as needed to provide Service. If you discontinue Service with Upland, your Personal Information may be stored for one year after the Service expiration or termination; after which time, the Personal Information will be archived. We will retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
The security of your Personal Information is important to us. We follow generally accepted industry standards to prevent unlawful destruction, loss, alteration, unauthorized disclosure of or access to your Personal Information. We use appropriate technical and organizational measures to protect your Personal Information which may include physical access controls, encryption, internet firewalls, intrusion detection and network monitoring. Our team members who may have access to your Personal Information are required to keep that information confidential and are provided with security awareness training. To learn more, please visit [Upland Security] (https://uplandsoftware.com/security/).
Your Personal Information and the Personal Information of the End User may be transferred to and processed in countries other than the country in which you or the End User is a resident. We may transfer Personal Information to companies that help us provide our Platforms or Services. Transfers to subsequent third parties are covered by the terms of the service agreement we have in place with you. In addition, please refer to Upland’s Privacy Shield Statement for more information.
Upland has self-certified and complies with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework, as set forth by the US Department of Commerce, regarding the collection, use, and retention of Personal Information transferred from the European Union and Switzerland to the United States in reliance on Privacy Shield. Upland has certified that it adheres to the Privacy Shield Principles with respect to such data.
Where Personal Information is transferred, under the Privacy Shield Framework, Upland is subject to the investigatory and enforcement powers of the US Federal Trade Commission (FTC).
In accordance with the Privacy Shield Principles, individuals in the EU and Switzerland have the right to access, amend or delete their Personal Information transferred to the United States. To access or make changes to your Personal Information or to request removal of your Personal Information, please contact us at email@example.com.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your Personal Information, please submit a written request to firstname.lastname@example.org.
Upland uses third-party sub-processors to provide Service to our Customers. Upland remains responsible and liable under the Privacy Shield Principles for our third-party sub-processors, unless Upland proves that it is not responsible for the event giving rise to the damage.
Upland is committed to resolve complaints in accordance with the Privacy Shield Framework. Individuals in the EU and Switzerland may submit a complaint by contacting us at email@example.com.
Upland has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, BBB EU PRIVACY SHIELD. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/privacy-shield-complaints/ for more information and to file a complaint. This service is provided free of charge to you.
If your complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration. Additional information is available [here] (http://go.adr.org/privacyshieldfiling.html) for EU residents and [here] (https://go.adr.org/SwissAnnexIFiling.html) for Swiss residents.
If you are an individual in the European Economic Area (EEA), collection, processing and transfer of your Personal Information is governed by the General Data Protection Regulation (GDPR).
We collect and process Personal Information about you only where we have a legal basis for doing so under applicable data protection law. Legal basis, in accordance with GDPR is defined as one or more of the following criteria:
You have the right to access, correct, update or request removal of your Personal Information by contacting us at firstname.lastname@example.org. You have the right to restrict processing of your Personal Information or request transfer of your Personal Information by contacting us at email@example.com. You may also withdraw your consent to collecting and processing your Personal Information. However, removal of your Personal Information may result in your inability to use some or all features and functionality of the Platform.
Where you believe that we have not complied with our obligation under this Privacy Notice or data protection law, you have the right to submit a complaint to your [local DPA] (https://edpb.europa.eu/about-edpb/board/members_en).
These data protection rights do not apply to Upland where we process End User Personal Information as a data Processor on your behalf. Where this is the case, any request to exercise data protection rights will be directed to you (Controller).
The California Consumer Privacy Act (CCPA) places limitations on businesses which collect or sell the Personal Information of California consumers and provides these consumers rights with respect to their Personal Information. Those rights include:
The CCPA distinguishes between the organization collecting consumer Personal Information for its own purposes (Controller) and an organization designated by the Controller to process that Personal Information (Processor). The CCPA imposes obligations only upon “businesses” and not upon “service providers”. CCPA defines a “business” and a “service ‘provider”, which are similar to Controller and Processor, as defined in this Privacy Notice.
Upland has prepared an Addendum to its Services Agreement which sets forth the additional contractual provisions Upland will adhere to in order to meet the definition of a “service provider” under the CCPA, and to ensure our Customers’ compliance.
Please read Upland’s Privacy Notice in its entirety for details on the categories of Personal Information collected, as well as our collection, use and disclosure practices.
You may request a copy of Personal Information we collected or disclosed within the past 12 months. You may also request deletion of your Personal Information. Please submit your request to firstname.lastname@example.org.
We may periodically update this Privacy Notice. When we do, we will also revise the “effective date” of the Privacy Notice. If we make any material changes, additional notification will be provided, such as a statement on the Site, posting a notice in the Upland Community portal, or providing email notification.
We encourage you to review this Privacy Notice periodically to stay informed of our privacy practices.
For questions about this Privacy Notice, how your Personal Information is used, or to access, correct, or remove your Personal Information, please contact us at: email@example.com or
Upland Software, Inc. 401 Congress Avenue, Suite 1850 Austin, Texas 78701
Controller – the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data Cookies – a small file that is stored on a Site user’s computer for record-keeping purposes (session cookies make it easier to navigate within a site and expires when the browser is closed; persistent cookies remain on the hard drive for an extended period of time and can be used when the user returns to the site for identification and log in) Customer – party to which Upland directly provides Service, as prescribed in the Service Agreement End User – any person whose Personal Information is being collected, stored or processed on behalf of the Customer Personal Information – information that can be used, individually or in aggregate, to distinguish or trace the identity of an individual, including but not limited to:
Under the CCPA, Personal Information also includes family or household data Platform – environment in which a piece of software is executed Processor – the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller Service – the executed performance of the Service Agreement, signed by Upland and the Customer
Please note that this policy applies only to our website and not to the web sites of other organisations to which we may provide links. We are not responsible for the privacy policies or practices of such third party sites and you should make your own enquiries in respect of them.
The types of Personal Data that this Website collects, by itself or through third parties, includes: name; email address; IP address; Usage Data; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example);
Users are responsible for any third-party Personal Data obtained, published or shared through this Website and confirm that they have the third party's consent to provide us with the Data.
The Data is processed at our operating offices and in any other places where the parties involved in the processing are located.
Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. In certain circumstances, we may transfer your personal information to countries outside the European Economic Area. This may include circumstances where we use service providers who are based outside the EEA or who use “cloud” infrastructure which means that their servers are based all over the world. Where we transfer your information to companies outside the EEA, we will make sure it’s protected in a manner that is consistent with how your information will be protected by us. This can be done in a number of different ways for instance:
In other circumstances the law may permit us to otherwise transfer your information outside the EEA. In all cases however, we will ensure that any transfer of your information is compliant with the Data Protection Legislation.
Your Personal Data is collected to allow us to provide Services, as well as for the following purposes: User database management, Analytics, Advertising, Remarketing and behavioural targeting, Contacting the User, Content commenting, Displaying content from external platforms, Handling payments, Hosting and backend infrastructure, Access to third-party accounts, Tag Management and Productivity.
We may also process your Personal Data:
We may share your personal information with third parties but only in the circumstances set out below. We may supply your personal information to third parties (such as our internet service providers) who help us administer our website. These third parties must at all times provide the same levels of security for your personal information as heysummit.com and, where required, are bound by a legal agreement to keep your personal information private, secure and to process it only on the specific instructions of heysummit.com. Other third parties whom we may share your personal information with and the purposes this is for are listed below. Please refer to these third parties’ own privacy policies to find out more about how they might process your personal information.
FACEBOOK AUDIENCE NETWORK (FACEBOOK, INC.) Facebook Audience Network is an advertising service provided by Facebook, Inc. In order to understand Facebook's use of Data, consult Facebook's data policy.
This Website may use identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS, respectively) and technologies similar to cookies to run the Facebook Audience Network service. One of the ways Audience Network shows ads is by using the User's ad preferences. The User can control this in the Facebook ad settings.
Users may opt-out of certain Audience Network targeting through applicable device settings, such as the device advertising settings for mobile phones.
The services contained in this section enable the Owner to monitor and analyse web traffic and can be used to keep track of User behaviour.
FACEBOOK ADS CONVERSION TRACKING (FACEBOOK PIXEL) (FACEBOOK, INC.) Facebook Ads conversion tracking (Facebook pixel) is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Website. The Facebook pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Audience Network.
TWITTER ADS CONVERSION TRACKING (TWITTER, INC.) Twitter Ads conversion tracking is an analytics service provided by Twitter, Inc. that connects data from the Twitter advertising network with actions performed on this Website.
LINKEDIN CONVERSION TRACKING (LINKEDIN CORPORATION) LinkedIn conversion tracking is an analytics service provided by LinkedIn Corporation that connects data from the LinkedIn advertising network with actions performed on this Website.
GOOGLE ANALYTICS (GOOGLE LLC) Google Analytics is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
GOOGLE ADS CONVERSION TRACKING (GOOGLE LLC) Google Ads conversion tracking is an analytics service provided by Google LLC that connects data from the Google Ads advertising network with actions performed on this Website.
HEAP ANALYTICS (HEAP INC.) Heap Analytics is an analytics service provided by Heap Inc.
HUBSPOT (HUBSPOT, INC) HubSpot is a live chat, analytics, and marketing service provided by HubSpot Inc.
Content commenting services allow Users to make and publish their comments on the contents of this Website. Depending on the settings chosen by the Owner, Users may also leave anonymous comments. If there is an email address among the Personal Data provided by the User, it may be used to send notifications of comments on the same content. Users are responsible for the content of their own comments.
If a content commenting service provided by third parties is installed, it may still collect web traffic data for the pages where the comment service is installed, even when Users do not use the content commenting service.
DISQUS (DISQUS) Disqus is a content commenting service provided by Big Heads Labs Inc.
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.
FONT AWESOME (FONTICONS, INC. ) Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows this Website to incorporate content of this kind on its pages.
FONTS.COM WEB FONTS (MONOTYPE IMAGING INC.) Fonts.com Web Fonts is a typeface visualization service provided by Monotype Imaging Inc. that allows this Website to incorporate content of this kind on its pages.
GOOGLE FONTS (GOOGLE LLC) Google Fonts is a typeface visualisation service provided by Google LLC that allows this Website to incorporate content of this kind on its pages.
Payment processing services enable this Website to process payments by credit card, bank transfer or other means. To ensure greater security, this Website shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction. Some of these services may also enable the sending of timed messages to the User, such as emails containing invoices or notifications concerning the payment.
STRIPE (STRIPE INC) Stripe is a payment service provided by Stripe Inc.
CHARGEBEE Chargebee is a payment management provider that is provided by Chargebee Ltd.
PAYPAL Paypal is a payment service provided by Paypal Holdings Inc.
This type of service has the purpose of hosting Data and files that enable this Website to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of this Website. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data is stored.
AMAZON WEB SERVICES (AWS) (AMAZON WEB SERVICES, INC.) Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Services, Inc.
This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User.
This activity is performed by tracking Usage Data and by using Cookies, information that is transferred to the partners that manage the remarketing and behavioral targeting activity.
Some services offer a remarketing option based on email address lists.
FACEBOOK REMARKETING (FACEBOOK, INC.) Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.
TWITTER REMARKETING (TWITTER, INC.) Twitter Remarketing is a remarketing and behavioral targeting service provided by Twitter, Inc. that connects the activity of this Website with the Twitter advertising network.
TWITTER TAILORED AUDIENCES (TWITTER, INC.) Twitter Tailored Audiences is a remarketing and behavioral targeting service provided by Twitter, Inc. that connects the activity of this Website with the Twitter advertising network. Users can opt out from interest-based ads by going to: Personalization and Data.
LINKEDIN WEBSITE RETARGETING (LINKEDIN CORPORATION) LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation that connects the activity of this Website with the LinkedIn advertising network. Remarketing and behavioural targeting
ZOOM.US Zoom.us is a webinar provider and is one of the available options for delivering summit content within HeySummit.
BIG MARKER Big Marker is a webinar provider and is one of the available options for delivering summit content within HeySummit. It is provided by BigMarker.com LLC
LiveWebinar is a webinar provider and is one of the available options for delivering summit content within HeySummit. It is provided by RTCLab Sp. z o.o. with its registered address at Al. Grunwaldzka 212, 80-266 Gdańsk, Poland
This type of service helps the Owner to manage the tags or scripts needed on this Website in a centralized fashion.
This results in the Users' Data flowing through these services, potentially resulting in the retention of this Data.
GOOGLE TAG MANAGER (GOOGLE LLC) Google Tag Manager is a tag management service provided by Google LLC.
This type of service allows the Owner to build user profiles by starting from an email address, a personal name, or other information that the User provides to this Website, as well as to track User activities through analytics features. This Personal Data may also be matched with publicly available information about the User (such as social networks' profiles) and used to build private profiles that the Owner can display and use for improving this Website.
Some of these services may also enable the sending of timed messages to the User, such as emails based on specific actions performed on this Website.
HELPSCOUT Help Scout PBC is a help desk software company headquartered in Boston, Massachusetts. It is used to facilitate customer support via email.
WIX ANSWERS Wix Answers is a help desk software from Wix.com company headquartered at 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. It is used to facilitate customer support via email.
We may also supply your personal information to government bodies and law enforcement agencies but only: if we are required to do so by the requirements of any applicable law; if in our good faith judgement, such action is reasonably necessary to comply with legal process; to respond to any legal claims or actions; or to protect the rights heysummit.com , its customers and the public.
We may process Personal Data relating to Users if one of the following applies:
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
We may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, we may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
We are committed to protecting the privacy of your Personal Data. We use appropriate standards of technology and operational security to protect personal information including a secure server and network firewall connection. Operationally, access to Personal Data is restricted to authorised personnel who are under a duty to maintain the confidentiality and security of such information. Internet and Data Storage
The Internet is inherently insecure. Personal Data submitted by means of the Internet may be vulnerable to unauthorised access by third parties. Submission of personal information using the Internet is at your own risk. We will take reasonable and appropriate technical measures to ensure that your Personal Data is stored in a secure manner. However, we shall have no liability for disclosure of data due to errors in transmission or the fraudulent, negligent or other illegal acts of a third party, such as ‘Hacking’. Any transmission of Personal Data on or through the use of our website is at your own risk.
Users may exercise certain rights regarding their Data which we process. In particular, Users have the right to do the following:
Where the Personal Data in question has been disclosed to a third party, we will inform them about the restriction on processing of the data, unless it is impossible or involves disproportionate effort to do so.
We may use the User's Personal Data may be used for legal purposes in Court or in the stages leading to possible legal action arising from improper use of this Website or the related Services.
The User declares to be aware that we may be required to reveal personal data upon request of public authorities.
Additional information about User's Personal Data
Information not contained in this policy
More details concerning the collection or processing of Personal Data may be requested from us at any time. Please see the contact information at the end of this document.
This Website does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honour the “Do Not Track” requests, please read their privacy policies.
Should the changes affect processing activities performed on the basis of the User’s consent, we shall collect new consent from the User, where required.
Hey Summit Ltd 71–75 Shelton Street Covent Garden London WC2H 9JQ