Wooboard

WooBoard Privacy Policy

Welcome to the WooBoard Privacy Policy (“Privacy Policy”). This Privacy Policy applies to all websites (“Website(s)”) and applications (“App and/or Website(s)”) offering services to users in the European Union owned or operated by

WooBoard Pty Ltd (ABN 67 152 557 081) (a Wooboard Technologies Limited company)
Level 57, MLC Centre
19-29 Martin Place, Sydney NSW 2000
E-Mail: support@wooboard.com
Website: https://wooboard.com/

(in the following: “WooBoard” or “We” or “Us”). This Privacy Policy explains how We collect, store, protect, and share Your information as defined below (“Personal Data”), and with whom We share it. WooBoard is the controller of Your Personal Data in the meaning of Art. 4 no. 7 of the EU General Data Protection Regulation (“GDPR”). We suggest You read this Privacy Policy in conjunction with our General Terms and Conditions of Use.

1. Collection of Personal Data

Personal Data means information concerning the personal or material circumstances of an identified or identifiable individual (data subject – You). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.1. Registration Information

When You download the App and/or create an account (“Account”), We may collect certain information (“Registration Information”) about You, such as:
• Name;
• Username;
• Email address;
• Date of birth;
• Profile Photographs;
• Location and timezone;
• Job Title; and
• Job start date

You will also be required to create a username and password in connection with the registration of Your Account. Once You register, You will be able to review and change this information at any time.
This information helps to enhance the App and/or Website and verify our users. Registration Information such as Your name and username may be visible to the public on Your profile page.
The collection and processing of the Personal Data mentioned in the previous paragraph is based on Art. 6 para. 1 (b) GDPR (necessary for the performance of a contract with You).

1.2. Data collection, processing and use in the context of WooBoard Services

For the purpose of providing our services, We process the categories of personal data mentioned in paragraph 1.1 above. The personal data is only used for authentication purposes (i.e. username authentication) and for personalizing the user’s page.
The processing of such data is necessary for the purpose of fulfilling Our agreement with You (Art. 6 para. 1 (b) GDPR).

1.3. Payments

For the purposes of payment processing, We process the personal data required for this purpose and pass them on to payment service providers commissioned by Us.
Depending on your selected payment method, the data required for payment processing will be transferred to the selected payment service provider. You will find more detailed information on the payment methods and providers offered below. Regardless of the payment method, all data is transmitted in encrypted form.
You have the possibility to choose any payment method We offer. The legal basis for the processing of your data for the purpose of payment processing, regardless of the payment method, is Art. 6 para. 1 (b) GDPR. In addition, we have a legitimate interest to offer an effective and secure payment method (Art. 6 para. 1 (f) GDPR).
1.3.1. We offer You the following payment methods:
• Credit Card
• Debit Card
1.3.2. Data required for payment processing may be transferred to Xero Integration for billing and Stripe Integration for charges.
1.3.3. If you choose to pay via Our offered payment methods, We process personal data required for this purpose and may pass the following personal data on to payment service provider:
• First and last name;
• Date of birth;
• Phone number;
• e-mail;
• IP address;
• Billing and delivery address;
• Country;
• Order date;
• Paid amount;
• Browser, used device.

1.4. Email Communications

1.4.1. Newsletter
We may send You our Newsletter and other marketing emails for direct advertising subject to Your prior double opt-in consent. Once You have subscribed, You will receive a link by email which You can use to activate the newsletter service. In other words, We will send an email to the address given when You subscribed in which we ask for confirmation that you want to receive the newsletter. If You do not confirm Your subscription, Your data will not be saved in our email dispatch tool. You have the right to opt-out of receiving such emails at any time with future effect. Please click on the “unsubscribe” link in the email and follow the instructions.
1.4.2. Direct marketing
Email addresses collected when registering for an Account are used for direct marketing of our own and similar products and services. If you no longer wish to receive direct marketing, you can refuse to allow the use of your email address at any time. The unsubscribe link can be found in the masthead of every email or in your profile settings.
The collection and processing of the Personal Data mentioned in the previous paragraph is based on Your consent in accordance with Art. 6 para. 1 (a), 7 GDPR.


1.5. Simple Notification Service (SNS)

We receive and store the information You provide, including Your mobile telephone number, when You opt in to have SNS notifications/text messages sent directly to Your mobile phone. If available, these messages notify You of specials or other matters. You can adjust the types of notifications You receive and when You receive them by editing Your SNS notification settings. You have the right to opt-out of receiving such messages at any time with future effect. If You no longer wish to receive SNS text messages from Us, please log in to Your Account and change Your settings or click on the “opt out” link contained in an SNS message received by You.
The collection and processing of the Personal Data mentioned in the previous paragraph is based on Your consent in accordance with Art. 6 para. 1 (a), 7 GDPR.


1.6. Log and Usage Data

Our servers automatically record information (“Log and Usage Data”) created by Your use of the Website or App and/or Website, which again helps Us to improve our service. Log and Usage Data may include information such as Your IP address, browser type, the referring domain, pages visited, access times, Your mobile carrier, and search terms. Other actions, such as interactions with WooBoard and advertisements, may also be included in Log and Usage Data. An IP address is a number associated with the service through which You access the Internet, like Your ISP (Internet service provider), Your company or Your university.
The collection and processing of the Personal Data mentioned in the previous paragraph is based on Art. 6 para. 1 (f) GDPR. According to Art. 6 para. 1 (f) GDPR the processing of Personal Data is lawful if it is necessary for the purpose of the legitimate interests of the data controller (WooBoard) except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (You). Our legitimate interest is to administer the App and/or Website, improve our services and to detect and avoid hacker attacks.

1.7. Information We Receive or Collect When You Access Our App and/or Website on Mobile Devices

If You access our App and/or Website on Your mobile telephone or other mobile device, including iPads and other tablets, We collect Your mobile device identifier and IP Address. We may create and assign to Your device an identifier that is similar to an account number. We may collect the name You have associated with Your device, device type, telephone number, country and any other information You choose to provide, such as user name, character name, geo-location or e-mail address.
If You turn these features on, We may collect Your device’s geolocation data and save Your device’s coordinates to offer certain features to You. We may also use Your device’s geolocation information to personalize the App and/or Website and make it easier for You to interact with other Users. You can control Your location information settings in Your Account settings and switch them off if You really want to. Even if You have disabled location services, We may still determine Your city, state, and country location based on Your IP address (but not Your exact location).
The collection and processing of the Personal Data mentioned in the previous paragraph is based on Art. 6 para. 1 (f) GDPR. According to Art. 6 para. 1 (f) GDPR the processing of Personal Data is lawful if it is necessary for the purpose of the legitimate interests of the data controller (WooBoard) except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (You). Our legitimate interest is to administer the App and/or Website, improve our services and to detect and avoid hacker attacks.

1.8. Customer Support

If You contact our Customer Support team, We will receive Your email address, and may track Your IP address as well as the information You send to Us to help resolve Your query. We will keep records of our communications with You, including any complaints that We receive from You about other Users (and from other Users about You).
The collection and processing of the Personal Data mentioned in the previous paragraph is based on Art. 6 para. 1 (b) GDPR (necessary for the performance of a contract with You).

2. Use of Personal Data

As applicable, We may use the Personal Data about You to:
• create Your Account;
• identify how You use our App and/or Website and improve its stability, user flow and graphical interface,
• identify and suggest connections with other users of the App and/or Website;
• enable user to user communications;
• contact You about the Website, technical support, Your Account or other inquiries;
• provide You with services or information You have requested or products or services You have ordered;
• prevent fraud or potentially illegal activities and monitor and enforce Our App and/or Website Terms, Conditions and Notices;
• notify You of App and/or Website updates;
• monitor or improve the use of the App and/or Website or solicit input and feedback;
• deliver, customize and target the advertising and content You see (see Section 7 on Cookies);
• send promotional material or special offers on behalf of us and
• disclosure of Your Personal Data in limited circumstances.

3. Disclosure of Your Personal Data

Our policy is to not disclose Your Personal Data except in the limited circumstances described in the following:
Service Providers- We may transfer Your Personal Data to our service providers. Our service providers may be located in countries, other than the country in which the data was originally collected, including destinations outside the European Economic Area (“EEA”). Those countries may not have the same data protection laws as the country in which You provided the data. When We transfer Your data to other countries, We will protect and comply with applicable legal requirements providing adequate protection for the transfer of data to countries outside the EEA.
Law enforcement – We will cooperate with law enforcement enquiries if and to the extent in compliance with applicable data protection laws. This may include preserving or disclosing any of Your Personal Data, including Your Registration Information, if We believe in good faith that it is necessary to comply with a law or regulation, or when We believe that disclosure is necessary to comply with a judicial proceeding, court order, or legal request; to address fraud, security or technical issues; or to protect our rights or property.
As the case may be, the collection and processing of the Personal Data mentioned in the previous paragraph is based on Art. 6 para. 1 (f) GDPR (according to Art. 6 para. 1 (f) GDPR the processing of Personal Data is lawful if it is necessary for the purpose of the legitimate interests of the data controller (WooBoard) except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (You)) – our legitimate interest is to enforce and protection our rights or on Art. 6 para. 1 (c) (necessary in order to comply with a legal obligation of the data controller (WooBoard)).
Business transfers – In the event that WooBoard or any of our affiliates are involved in a bankruptcy, merger, acquisition, reorganization or sale of assets, Your information may be transferred as part of that transaction if and to the extent in compliance with applicable data protection laws.
The collection and processing of the Personal Data mentioned in the previous paragraph is based on Art. 6 para. 1 (f) GDPR. According to Art. 6 para. 1 (f) GDPR the processing of Personal Data is lawful if it is necessary for the purpose of the legitimate interests of the data controller (WooBoard) except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (You). Our legitimate interest is to be able to meet our obligations in connection with any such transaction.
Non-personal information – We may share or disclose Your aggregated or otherwise non-personal information with third parties for industry analysis and demographic profiling.

4. Data Storage and Retention

We store your data using third party storage providers such as AWS Oregon. The personal information provided is collected upon signup and collected via an S3 Bucket hosted on Amazon AWS, with the WooBoard bucket being located in Oregon. Avatar images, which are non-photographic pictures that identify you in the online world, are also stored via an S3 Bucket hosted on Amazon AWS.
Your Personal Data will be stored in a location outside the European Economic Area (EEA) where the level of data protection is considered lower than the level of data protection within the EEA. We will take appropriate measures to ensure that Your Personal Data is processed and stored in accordance with the requirements of the GDPR to ensure an adequate level of data protection. We will retain Your Personal Data for as long as Your Account is active or as needed to provide You with products or services. We will retain and use Your information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. We retain your personal data for no longer than is necessary for the purposes stated in this Privacy Policy.

5. Third Party Accounts

If You have registered with WooBoard using a third party social media platform, such as Facebook or Google, Your WooBoard profile will be available to all users of WooBoard whether via our App and/or Website or our partners’ websites. Remember that when You register with a third party, You are also giving them personal information (such as name, email address, IP address), so We recommend that You read their privacy policies as WooBoard does not control how they use their information. If You have registered on one of these third party websites, such as Facebook or Google, or You have verified Your Account via a third party website, We may connect Your WooBoard profile with Your profile on such website. We may do this by way of new products and applications, which We introduce from time to time. If You have created a WooBoard profile through a third party website and You do not want to link Your WooBoard profile to Your profile on the third party website, WooBoard cannot amend these settings. Please visit the application settings on Your third party website profile and follow the instructions to remove the WooBoard access permissions. We only receive the limited information that each Social Media Account permits to be transferred.
You can also register and log in using the “Apple Login” function from your Apple account. When You log in with Your Apple ID for the first time, the app will prompt You to enter Your name and Your email address so that an account can be set up for You. We store Your email information in-house and will send You information using this address as needed. You will not be tracked by Apple and a profile of You will not be created while You are using the “Register with Apple ID” function. Apple only collects information required for You to log in and manage your account.
You will stay logged into our App and/or Website automatically as long as You stay logged in on Your device. Here you can find more information on the Apple login.

6. Cookies

Cookies are small data files that are transferred to Your computer’s hard disk. Like many websites, We use “cookie” technology to collect additional website usage data and to improve WooBoard, but We do not require cookies for many parts of our App and/or Website such as searching and looking at public User profiles or lists.
The cookies We collect enable Us to learn how people interact with WooBoard. Cookies store information about Your website visits and can recognize You and Your preferences each time You visit WooBoard. They help Us to provide a better service to You.
If for any reason You decide that You do not want all of Your WooBoard activities to be stored You may set Your browser and mobile settings to block cookies and local storage devices, but please remember that if You do so, You may not be able to access all of the features WooBoard offers.

6.1. Required and functional cookies

Some cookies are required for the site to function and cannot be disabled. Without these Cookies, you will not be able to view our site properly. We also use functional cookies, which help us to improve our website performance.
The collection and processing of the Personal Data mentioned in this section is based on Art. 6 para. 1 (f) GDPR. Our legitimate interest is to analyze the use of the App and/or Website and to improve our services. Required cookies are stored for the length of your browser session.

6.2. Performance Cookies and Advertising Cookies

These cookies allow us to analyze site usage so we can measure and improve performance. They are also used by advertising companies to serve ads that are relevant to your interests. These Cookies contain a unique key to distinguish individual users’ browsing habits.
If you want to prevent performance cookies and advertising cookies from being saved, you can change your cookie preferences at any time by changing your cookie settings above.
The legal basis for performance cookies and advertising cookies is consent in accordance with Art. 6 para. 1 (a) GDPR. Obviously, you can withdraw your declarations of consent for the future at any time. If you no longer agree to us providing your data to the service providers mentioned in our privacy policy, you can opt-out in the cookie settings on our website.

6.3. We use the following types of cookies:

Analytics and researchThe Website uses Google Analytics, a third-party web analysis service provided by Google Inc. (“Google”). Google Analytics uses “performance cookies” to analyze how You use the Website and Services. The information generated by the cookie about Your use of the Website and Services (including Your IP address) will be transmitted to and stored by Google on servers in the United States. This Website uses Google Analytics with the expansion ‘anonymizeIp ()’; therefore, only abbreviated IP addresses will be further processed, so that a direct connection to the individual user is eliminated. Your IP address will be shortened beforehand by Google (i.e. the last octet of the IP address will be anonymized) within member states of the European Union or in other signatory states of the Treaty on the European Economic Area. Only in exceptional cases, will the full IP address be transmitted to a Google Server in the USA and shortened there. Google will use this information on behalf of the Website operator for the purpose of evaluating Your use of the Website and Services, compiling reports on Website activity, and providing other services to Website operators relating to Website activity and Internet usage. Google will not associate the IP address transmitted under Google Analytics by Your browser with other data held by Google. You may prevent the use of Google Analytics by disabling cookies in the browser’s set up screen. You may prevent the storage of cookies by selecting the appropriate settings on Your browser software; however, We must advise You that in this case, You might not be able to use all functions of this Website to the full extent. You may prevent Google from recording the data generated by the cookie and pertaining to Your use of the Website and Services (including Your IP address), or processing these data by downloading and installing the following browser plug-in available through Google at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
The legal basis for the use of Google Analytics is Article 6 para. 1 (a) GDPR.
For more information about Google analytic cookies, please see Google’s help pages and privacy policy:
• Google’s Privacy Policy
• Google Analytics Help pages
Analysis and feedbackWe use the Firebase service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) in order to derive application behavioral analytics. We use that information to see how users interact with our Website and App.
Firebase is part of the Google Cloud Platform and offers numerous services for developers. Some Firebase services process personal data. In most cases, the personal data is limited to so-called “instance IDs”, which are provided with a time stamp. These “Instance IDs” assigned by Firebase are unique and thus allow the linking of different events or processes. This data does not represent personally identifiable information for us, nor do we make any efforts to personalize it subsequently. We process these aggregated data to analyze and optimize usage behavior, for example by evaluating crash reports.
Currently, we use the following Firebase services:
Google Analytics for Firebase: Google Analytics uses the data to provide analytics and attribution information. The precise information collected can vary by the device and environment. Google Analytics retains ID-associated data for 60 days, and retains aggregate reporting and campaign data without automatic expiration, unless the Firebase customer changes their retention preference in their Analytics settings or deletes their project. For Analytics for Firebase, Google uses not only the “Instance ID” described above, but also the advertising ID of the end device. You can restrict the use of the advertising ID in the device settings of your mobile device. For Android: Settings > Google > Ads > Reset Ad ID For iOS: Settings > Privacy > Advertising > No ad tracking
Firebase Remote Config: Remote Config uses Instance IDs to select configuration values to return to end-user devices. Firebase retains Instance IDs until the Firebase customer makes an API call to delete the ID. After the call, data is removed from live and backup systems within 180 days.
Firebase Dynamic Links: Dynamic Links uses device specs on iOS to open newly-installed apps to a specific page or context. Dynamic Links only stores device specs temporarily, to provide the service.
Firebase Cloud Messaging: Firebase Cloud Messaging is used to transmit push messages or so-called in-app messages (messages that are only displayed within the respective app). A pseudonymized push reference is assigned to the mobile device, which serves as a target for the push messages or in-app messages. The push messages can be deactivated and reactivated at any time in the settings of the mobile device. Firebase Cloud Messaging uses Instance IDs to determine which devices to deliver messages to. Firebase retains Instance IDs until the Firebase customer makes an API call to delete the ID. After the call, data is removed from live and backup systems within 180 days.
Firebase will use this information on our behalf for the above mentioned reasons.
We may use UXCam, which is an analytics solution. UXCam may record: Screens visited, Interaction patterns (such as screen actions, gestures: taps, scrolls) and Device details (Type, Version, Model, Operating System). We are using the information collected by UXCam to improve our App and/or Website.
UXCam does not collect personally identifiable information and does not track your browsing habits across apps. For more information see Privacy Policy of the UXCam Service.
AuthenticationThese cookies help Us identify our Users so that when You are logged in You can enjoy our offerings, experiences and various features, such as uploading photographs and chatting. You can even localize Your experience, such as when You have requested to view the App and/or Website in Your local language or when You ask WooBoard to ‘remember me’. These cookies also help Us to remember who invited You to join WooBoard. We also use cookies and other web technologies, such as CAPTCHAs, to help keep WooBoard and our members safe and secure.
Security and site integrityWe may use persistent cookies, which will help Us to ensure We have identified the same device is logging into the correct account. These cookies help Us with our anti-spam measures and may help Us to prevent phishers, scammers, unauthorized login attempts to Your Account and accessing any hacked accounts.
Site features and services

These cookies and local storage devices provide functionality such as uploading photographs, chat, instant messaging, and using Your Account settings. They also help provide experiences, such as links to other social media sites, social plugins and video content, including making it easier for You to share content between WooBoard and Your other favorite social networks. In some cases, We may allow a third party to place cookies or save data to Your local storage devices on Your mobile device – this is where WooBoard’s Privacy Policy ends and theirs begin. The third party who places cookies on Your device is responsible for how they process their data so You should read their privacy policies and make sure You are okay with them before You start sharing. Examples of such policies are available at the following links:

Twitter: https://twitter.com/privacy
Facebook: https://www.facebook.com/policy.php
YouTube: http://www.google.co.uk/intl/en/policies/privacy/

PerformanceWe need to use certain cookies and save data to Your local storage devices to ensure our members have the best possible experience. They assist with Your navigation of our App and/or Website, ensuring pages load quickly and respond promptly to Your requests.

Our use of cookies and local storage devices, including the specific cookie names, may change over time, but will generally fall into the above categories. Please visit this page regularly so that You are aware of any changes.

7. Children

Our App and/or Website is not intended for children under the age of 16 and We do not knowingly collect any Personal Data from children under the age of 16. Children that are at least 16 years old may use the App and/or Website subject to the prior opt-in to the collection and processing of their Personal Data as described in this Privacy Policy.

8. Security

Here at WooBoard We pride ourselves on taking commercially reasonable security measures to help protect Your Personal Data against loss, modification, misuse and unauthorized access, or disclosure. We use reasonable security measures to safeguard the confidentiality of Your personal information such as secured servers using firewalls. We use access control mechanisms to ensure that only authorized personnel can access your personal data. Unfortunately, no internet transmission is ever completely 100% secure and even We cannot guarantee that unauthorized access, hacking, data loss or other breaches will never occur, but here are some handy tips to help keep Your data secure. Please make sure You log out of Your Account after use. Please do not share Your password with anyone else.

9. Changes to this Policy

As WooBoard evolves, We may revise this Privacy Policy from time to time. The most current version of the policy will govern our use of Your Personal Data and will always be at https://wooboard.com/GDPRpolicy If We make a change to this Privacy Policy that, in our sole discretion, is material, We may notify You, for example, via an email to the email associated with Your Account or by posting a notice within WooBoard. By continuing to access or use the App and/or Website after those changes become effective, You agree to be bound by the revised Privacy Policy.
Will add in a GDPR link also

10. Your Rights

You have certain rights over Your Personal Data and We as data controller are responsible for fulfilling these rights as follows:
• You may access and review Your Personal Data held by Us as a data controller at any time free of charge.
• You may request the correction and/or deletion and/or blocking of Your Personal Data as the case may be.
• You may request the restriction of data processing.
• Where personal data is processed based on Your consent, You may withdraw Your consent at any time by contacting Us.
• You have the right to receive the Personal Data We retain about You in a structured, commonly used and machine-readable format. Upon Your request, we will transfer Your Personal Data to another data controller.
In order to exercise any of the rights mentioned in this section or should You have any questions, comments or inquiries concerning our collection, processing and use of Your Personal Data, please contact Us at
support@wooboard.com.
You also have the right to lodge a complaint with the competent data protection authority.