LAST UPDATED: 18^th April 2018

CASSA respects each individual’s right to personal privacy. This Privacy Policy is designed to assist you in understanding how CASSA will collect, use and safeguard any personal information you provide.
We collect your information only with your consent; we only collect personal information that is necessary to fulfil the purpose of your interaction with us; we don’t sell it to third parties; and we only use it as this Privacy Statement describes.

We collect your email addresses when signing up to CASSA, and ask for information such as your email address, name and company details when you sign up for a cloud based account with CASSA.
The information we collect is not distributed or sold to a 3rd party. It will only be used to communicate with you about your CASSA account, and where needed as part of certain CASSA features. You may update your account information at any time.

Your information may also be shared with other CASSA users as part of the services and features of CASSA. An example of this is where your employer links their account to another company, so that the other company can verify the status of your Qualification information, or if in case of an emergency, can access your Emergency Information. We have Privacy Settings in your Profile area to show or hide this information to other CASSA users
CASSA will never use its license to Your User Content for any purpose but to enable the Software to perform its function. CASSA will always ask Your permission should CASSA desire to use Your User Content beyond a nominal/inadvertent manner for promotional purposes.

To reiterate above, Your information and data will be shared across the CASSA Software with other licensed users to streamline and assist with any legal or business compliance requirements. This includes the sharing of Your “Company Profile” and/or “My Profile” Information with other licensed CASSA users. This includes but is not limited to General Information, Emergency Information and Qualification Details. Additionally, You have the ability to restrict access to this information in the “Privacy Settings” area on your dashboard. Please also refer to the CASSA Privacy Policy. Please also refer to our CASSA Academy Training where we address configuring your Privacy settings.

As part of CASSA’s services, we store the forms and registers you build and any data that was collected from those forms and registers. We respect the privacy of all users, and consider all data that is collected to be private. Your information is used strictly for internal purposes, and CASSA will not distribute or sell your information to a 3rd party, except as disclosed in this statement.

Any information collected by CASSA may be shared if it is necessary to investigate, prevent or prosecute illegal activities, suspected fraud, violations to the Terms and Conditions, or as otherwise required by law or a valid governmental request (including, but not limited to, search warrants, subpoenas or court orders). CASSA may also share information if it is acquired by or merged with another company. In this event, CASSA will notify you before information is transferred and becomes subject to a different privacy policy. CASSA reserves the right to use and disclose any information collected that is not in personally identifiable form.

Although CASSA owns the data storage, databases and the CASSA Site, you retain all rights to your data. Please refer to the Terms and Conditions for more information pertaining to your data, including upon termination.

Security
CASSA has implemented processes intended to protect user information and maintain security of data. Each account holder is assigned a unique username and password, which is required to access their account. It is your responsibility to protect the security of this login information. We have attempted to protect CASSA’s servers by locating them in areas with security procedures, use of firewalls and implementing other generally available security technologies. These safeguards help prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of data, but no guarantee can be made that your information and data will be secure from intrusions and unauthorized release to 3rd parties.

Application Data
As part of CASSA’s services, we store the forms and registers, and any data that was collected. We respect the privacy of all users, and consider all data that is collected to be private. Your information is used strictly for internal purposes, and CASSA will not distribute or sell your information to a 3rd party, except as disclosed in this statement. When you submit information, you are transferring such information, and you hereby consent to such transfer.

Account Information
We collect email addresses from those who contact us via email, and ask for information such as your email address and name when you sign up for an account with CASSA. The information we collect is not distributed or sold to a 3rd party. It will only be used to communicate with you about your CASSA account, and where needed as part of certain CASSA features and promotions. You may update your account information at any time.

Web Server Logs
For statistical purposes, CASSA will gather certain information automatically and store it in log files. These log files contain standard information collected by web servers, such as client IP addresses, device type, browser type, internet service provider (ISP), operating system, etc. This information is only used internally, and is not distributed or sold to a 3rd party.

Disclaimer
However, any information collected by CASSA may be shared if it is necessary to investigate, prevent or prosecute illegal activities, suspected fraud, violations to the Terms and Conditions, or as otherwise required by law or a valid governmental request (including, but not limited to, search warrants, subpoenas or court orders). CASSA may also share information if it is acquired by or merged with another company. In this event, CASSA will notify you before information is transferred and becomes subject to a different privacy policy. CASSA reserves the right to use and disclose any information collected that is not in personally identifiable form.

Cookies
A “cookie” is a small text file containing a unique identifier that our web server sends to a user’s browser, and may be stored on a user’s hard drive. Cookies are required to use CASSA services. If you have your browser set to reject cookies, your use of the CASSA services is likely to be interrupted. The cookies we use are not permanent.

Third-Party Service Integration
Our Service allows you to integrate with various online third-party services (“Third-Party Services”). In order to take advantage of this feature, you may need to authenticate, register for or log into Third-Party Services through the Service or on the websites of their respective providers. When you enable integration between or log in to Third-Party Services through the Service, we will collect relevant information necessary to enable the Service to access that Third-Party Service (“Login Credentials”). We store your Login Credentials long enough to enable integration to the Third-Party Service.
Please remember that the manner in which Third-Party Services use, store and disclose your information is governed by the policies of such Third-Party Services, and CASSA shall have no liability or responsibility for the privacy practices or other actions of any Third-Party Services that may be enabled within the Service.

We may retain certain personally non-identifiable information related to integration between Third-Party Services (for example, date sent, link configuration, names of the Third-Party Services), for the purpose of improving our Services.

Online Advertising
CASSA participates in online advertising, including remarketing. Third party vendors, including Google, show CASSA ads on other sites on the internet. The vendors use cookies to serve CASSA ads based on a user’s prior visits to the CASSA website. Users may opt out of a third party vendor’s use of cookies by visiting the Network Advertising Initiative opt out page.

Third-party Websites
CASSA is not responsible for the practices employed by websites linked to or from the CASSA website, nor the information or content contained therein. When you use a link from the CASSA website to another website, our Privacy Policy is no longer in effect. Browsing and interaction on any other website, including websites which have a link to the CASSA website, is subject to that website’s own rules and policies.

Changes
CASSA reserves the right to modify its’ privacy policy or terms and conditions at any time, so please review it frequently. If material changes are made to this policy, we will notify you here, by email, or by means of a prominent notice on the CASSA website home page.

CASSA’s Global Privacy
Information that we collect will be stored and processed in Australia in accordance with this Privacy Statement. However, we understand that we have users from different countries and regions with different privacy expectations, and we try to meet those needs.

We provide the same standard of privacy protection to all our users around the world, regardless of their country of origin or location, and we are proud of the levels of notice, choice, accountability, security, data integrity, access, and recourse we provide. Additionally, we require that if our vendors or affiliates have access to User Personal Information, they must comply with our privacy policies and Terms of Use.

We collect only the minimum amount of personal data necessary, unless you choose to provide more. We encourage you to only give us the amount of data you are comfortable sharing. We offer you simple methods of accessing, correcting, or deleting the data we have collected. We also offer Privacy Settings in your Profile area to show or hide the relevant information to other CASSA users which is required as part of CASSA’s services.
Resolving Complaints

If you have concerns about the way CASSA is handling your User Personal Information, please let us know immediately via our help desk (http://cassa.io/links/support.php) with the subject line “Privacy Concerns.” We will respond within 45 days at the latest.

CASSA Privacy Policy 2.0 rev 140418