Last Update: Thursday September 26, 2024

1. Introduction

This Privacy Notice applies to all the assessments and reports offered by The BluePrint Toolset Inc., except where otherwise noted. We refer to those collectively as the “services” in this notice. References to "data" in this Privacy Notice will refer to assessment data you use our services to collect which subsequently generates reports for you personally or for the organization you are a member of. Reference to personal information or just information, means information about you personally that we collect or for which we act as custodian.

We collect data using our platform and once that data is collected it is processed in our system.

2. Information we collect

2.1 Who are “you”?

We refer to “you” a lot in this Privacy Notice. To better understand what information is most relevant to you, see the following useful definitions.

Creators: You hold an account within The BluePrint Toolset Inc. platform and you either directly create surveys, or you are collaborating on, commenting on, or reviewing surveys, reports, images within an account.

Respondents: You have received a survey or assessment powered by BluePrint Toolset inc. service.

2.2 Information we collect about you.

• Contact Information (for example name or email address).

We have either received your email from your employer or you may have individually provided us with your contact information, whether through use of our services, a form on our website, an interaction with our sales or customer support team, or a response to one of BluePrint’s own surveys or forms.

• Device and browser data.

We collect information from the device and application you use to access our services. Device data mainly means your IP address, operating system version, device type, device ID/MAC address, system and performance information, and browser type. If you are on a mobile device we also collect the UUID for that device.

• Log Data.

Like most websites today, our web servers keep log files that record data each time a device accesses those servers. The log files contain data about the nature of each access, including originating IP addresses, internet service providers, the files viewed on our site (e.g. HTML pages, graphics, etc.), operating system versions, device type and timestamps.

3.2 Respondent

We process your personal information in the following categories of data for legitimate interests pursued by us, which are described in detail in this Privacy Notice. We have undertaken to ensure that we place clear limitations on each of these uses so that your privacy is respected and only the information necessary to achieve these legitimate aims is used. Our primary goal is to improve upon and make sure our services and messaging are relevant for all our users, while also ensuring that personal information of all users is respected and protected.

Cookies (to include page tags).

We collect information using cookies when you take a survey. These cookies are used to ensure that the full functionality of our survey service is operational, to ensure the survey operates appropriately and optimally. After completion of a survey, in most cases, you will be re-directed to our website and treated as a website visitor where other cookies may be used.

Contact Information.

We only use contact information to respond to an inquiry which you, as a Respondent, submit to us.

Examples

Our customer support team uses your email address to communicate with you if you have contacted us about a survey, form, application, or questionnaire you received

Device and browser data.

We use device data both to troubleshoot problems with our service and to make improvements to it. We also infer your geographic location based on your IP address.

Log data.

We use log data for many different business purposes including the following:

o To monitor abuse and troubleshoot;

o To create new services, features, content or make recommendations;

o To fix bugs and troubleshoot product functionality.

Examples

Your IP address is used to ensure that you do not complete the same survey, form, application or questionnaire twice if the creator has included settings to avoid this (ballot stuffing), for abuse monitoring purposes (so we can identify a Respondent who abused the survey taking experience in a manner contrary to our usage policies or to facilitate the Creator in complying with their own legal obligations). We also collect log data to collate aggregated data and metrics on activity at a non-identifying level and so that we can identify trends in survey taking over time.

Machine learning.

We will use machine learning techniques on response data, metadata (as described above) and cookie data, in order to provide Creators with useful and relevant insights from the data they have collected using our services, to build features, improve our services, for fraud detection and to develop aggregated data products.

To manage our services we will also internally use your information and data, for the following limited purposes:

o To enforce our agreements where applicable; i.e. providing whether a survey was complete or not, but not the results

o Legal uses.

To respond to legal requests or prevent fraud, we may need to disclose any information or data we hold about you. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

Use of survey data

BluePrint uses data in the ways described below, for our legitimate interests as described in this section:

The data impacted by this section includes:

o Survey type, question type and responses (at an aggregated and anonymized level only)

o Device data

o Log data

BluePrint will use automated processes and machine learning, to analyze survey responses, which in turn helps us to:

1. Aggregate response data and activity:

We will do this so that we can identify trends, build product features that optimize responses, make product recommendations and provide guidance on which products and services work best in different scenarios.

2. Extract and analyze usage patterns:

By understanding response data and Respondent interaction in different types of surveys we can:

o identify insightful data trends (which never identify any individuals).

3.3 Visitor

We process personal data about you where:

o You have consented or;

o We have a legitimate interest to:

 improve the service experience; and

 develop new products and service features.

In each of the instances where we describe how we use your data in this Privacy Notice, we have identified which of these grounds for processing we are relying upon.

When you have consented or we have a legitimate basis for doing so, we collect and use the following information about you:

Contact Information.

We use contact information to respond to your inquiries or send you information about our services, either where you have agreed to this at the point of providing your information or where you operate in a business which may be interested in our services and for as long as you do not opt-out.

Cookies and similar technology.

We or third party data and advertising platforms that we work with may use or combine multiple technologies, such as cookies, page tags, mobile identifiers and IP addresses to infer users’ common identities across different services and multiple devices such as tablets, browsers, and mobile phones.

Machine learning.

We process your personal information in the following categories of data for legitimate interests pursued by us, which are described in detail in this Privacy Notice. We have undertaken to ensure that we place clear limitations on each of these uses so that your privacy is respected and only the information necessary to achieve these legitimate aims is used. Our primary goal is to improve upon and make sure our services and messaging are relevant for all our users, while also ensuring that personal information of all users is respected and protected.

Device data.

We use device data both to troubleshoot problems with our service and to make improvements to it. We also infer your geographic location based on your IP address. Some examples relevant to you:

Examples

We collect device and browser information from you to troubleshoot website functionality issues and to fix bugs.

How you use our services.

We use information about how you have interacted with our websites to improve our website services for you and all users. Some examples relevant to you:

Examples

We collect information about the webpages you have visited and your activity on our sites at an aggregate level. We collect this information so that we can track the most visited and most useful parts of our website to identify what are our most popular services.

Log data.

We use log data for many different business purposes including the following:

o To fix bugs and troubleshoot product functionality.

Examples

Your browser type to determine how we can present our website best within that browser environment.

To respond to legal requests or prevent fraud, we may need to disclose any information or data we hold about you. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

In some cases, as a former website visitor, we may not have any personal information about you (for example if you have not interacted with our site or have cleared your cookies).

5. Information we share

We do not share your information or data with third parties outside BluePrint except in the following limited circumstances:

• If you are a Creator that is part of a BluePrint team plan, your account information and data will be shared with the primary administrator(s) and your survey data may also be visible to other members in your team with whom you share your surveys or with whom you collaborate. Your administrator(s) will be able to view your account data, change your passwords, suspend, transfer or terminate your account or restrict your settings. Please refer to your organization’s internal policies if you have questions about this.

• To help us provide certain aspects of our services we use our affiliates and trusted key partners – in particular, we engage third parties to:

o to detect fraud (to include, for example, performing identify checks or verify malicious IPs).

o manage our sales and customer support services to you, including for resolving any disputes.

We enter into confidentiality and data processing terms with partners to ensure they comply with high levels of confidentiality and best practices in privacy and security standards and we regularly review these standards and practices.

• On your instructions, we share your information or data if you choose to use an integration in conjunction with BluePrint services, to the extent necessary to facilitate that use.

• We also may have to share information or data for the following purposes:

o To meet any applicable law, regulation, legal process or enforceable governmental request;

o To enforce applicable policies, including investigation of potential violations;

o To detect, prevent, or otherwise address fraud, security or technical issues;

o To protect against harm to the rights, property or safety of our users, the public or to BluePrint and/or as required or permitted by law; and

o To facilitate a sale, merger or change in control of all or any part of our company or business or in preparation for any of these events.

Where we use any third parties (subprocessor) to assist us in service delivery for you (the Creator), and they process your data as part of that service.

6. Cookies

We and our partners use cookies and similar technologies on our websites. We use certain cookies, as described here in our Privacy Notice, that you agree to when you use our sites and, in the case of some cookies, for legitimate interests of delivering and optimizing our services (where the cookie delivers essential functionality). Cookies are small bits of data we store on the device you use to access our services so we can recognize repeat users. Each cookie expires after a certain period of time, depending on what we use it for. We use cookies and similar technologies for several reasons:

For security reasons.

We use cookies to authenticate your identity and confirm whether you are currently logged into our site or determine if an incident impacts you.

8. Data Retention

If you are a Creator, we generally do not delete the data in your account as long as your account is active – you are responsible for and control the time periods for which you retain this data.

9. Safety of Minors

Our services are not intended for and may not be used by minors. “Minors” are individuals under the age of 13 (or under a higher age if permitted by the laws of their residence). BluePrint does not knowingly collect personal data from Minors or allow them to register. If it comes to our attention that we have collected personal data from a Minor, we may delete this information without notice. If you have reason to believe that this has occurred, please contact customer support.

10. Data Transfers and Privacy Shield Certification

Your information and data may be processed in and transferred or disclosed in the United States and countries in which our affiliates are located and in which our service providers are located or have servers. We ensure that the recipient of your Personal Data offers an adequate level of protection, for instance by entering into the appropriate back-to-back agreements. We apply our standard Data Processing Agreement to all our customer agreements and we use standard contractual clauses for the transfer of data as approved by the European Commission.

EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield.

The BluePrint Toolset Inc.. participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield. BluePrint is committed to subjecting all personal information received from the European Union (EU) member countries, the United Kingdom, and Switzerland, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List see https://www.privacyshield.gov/.

BluePrint also complies with the onward transfer liability provisions of the Privacy Shield Principles.

11. Changes to our Privacy Notice

We can make changes to the Privacy Basics and this Privacy Notice from time to time. We will identify the changes we have made on this page. In circumstances where a change will materially change the way in which we collect or use your personal information or data, we will send a notice of this change to all of our account holders, as well as update our terms of reference

13. Who is my data controller?

As mentioned above – all response data at an individual level is controlled by the Creator.

For BluePrint account holders, your organization controls some basic account level information which you input when setting up your account (like name and email address). You can reach out to the primary administrator(s) of the account if you wish to delete, receive a copy, change or update that information.

14. Your rights

You may wish to exercise a right to obtain information about yourself or to correct, update or delete that information. Please note your rights and choices vary depending upon your location. We will take reasonable steps to verify your identity and we will respond to your request to exercise these rights within a reasonable time (and in all cases within 30 days of receiving a request) subject to the below for specific categories of person.

This section describes the rights you may have generally as a customer of any BluePrint service.

Creator

Where you hold an account with any BluePrint service, you are entitled to a copy of all personal data which we hold in relation to you. You also may be entitled to request that we restrict how we use your data or object to some aspect of our treatment of your data. You can access a lot of your data in your own account when you log in.

Respondent

Where you have responded to a survey sent to you by a Creator using a BluePrint service, you will need to reach out directly to that individual or organization to discuss managing, deleting, accessing, restricting access to or otherwise withdrawing consent for use of the information which you provided to them in your responses. BluePrint does not control your response data and, accordingly, is not in a position to directly handle these requests in relation to that data. If you are having difficulties finding this Creator or if you have any other questions after reading this Privacy Notice, you can contact us through our support team and we will try our best to help you.

15. Exercising your rights

Except as explicitly provided herein, please use the following contact information for privacy inquiries

Ali El-Ayoubi - [email protected]