Privacy Policy
Introduction
LeaveLab strives to provide employers and their employees who use LeaveLab's service to manage their employee organization needs (collectively, Users, or you), a user-friendly platform that handles employee leave tracking – from logging and communicating requests, to forecasting future employee leave on a calendar. To do this, we recognize you must trust us with your personal information. Maintaining your trust is one of LeaveLab's top priorities, and as a result, we abide by the following principles to protect your privacy:We protect your personal information and use it only in connection with your use of our website and Services as set forth in our Terms of Use Agreement and described in this Privacy Policy.Because privacy and security go hand-in-hand, we have implemented industry standard administrative, technical and physical security safeguards designed to protect your and your employees’ information.This Privacy Policy applies to all the data, including previously-collected data, from visitors of LeaveLab.com as well as to users of the online services, mobile services, software, and other services that we provide or otherwise make available on LeaveLab.com (collectively, “the Service”). We may, in our sole discretion, modify or update this Privacy Policy from time to time, and if we make material changes to it, we will notify you through the Service, or by other means so that you may review the changes before you continue to use the Service. Your continued use of the Service after we publish or communicate a notice about any changes to this Privacy Policy means that you consent to the changes.
1. INFORMATION COLLECTION
The amount of information we collect depends on which features of the Service you use. LeaveLab needs personal information about you, your employees, and your company organization as applicable to provide the Service, and your providing the information to us constitutes your consent to our processing of this information. Additionally, because we provide employee leave management features, we may collect information about you from your employer, rather than directly from you.More specifically, we may collect the following categories of personal information about you:
Registration Information: Your email address and password (your login credentials), and other information necessary to set up your account on the Service, which will depend on the features you use or your employer chooses to use.
Identity information: Your name, physical address, phone number, an avatar of your choice, and other identifiers used to manage and track human your account.
Demographic information: If you voluntarily submit information regarding your race in response to Equal Employment Opportunity Commission questionnaires to your employer through LeaveLab.
Information from Third-Party Sites and Services: If you use LeaveLab to manage third party services that integrate with the Service, we may have access to your information on such third-party services. We may, for example, have information about your use of a third-party payroll service provider.
Device and IP Information: When you access the Service, we automatically receive the internet protocol (“IP”) address of your computer or the proxy server that you use to access the internet, in addition to other technical information such as your computer operating system details, your type of web browser, your mobile device (including your mobile device identifier provided by your mobile device operating system), your mobile operating system, and the name of your ISP or mobile carrier. LeaveLab may log this information and analyze it to determine anomalous behavior, detect threats and generally improve the Service.
From your interaction with Customer Support: When you contact our customer support team, we may review your LeaveLab user profile. Customer support will collect the information necessary to categorize your questions, respond to them, and, if applicable, investigate and resolve any issue you bring to our attention or that we discover independently. We may also use this information to track potential problems and trends, improve the Service, and customize our support responses to better serve you.
Cookies, Beacons, Mobile SDKs, and similar technologies: We use cookies and similar technologies, including beacons in email messages, and application developer platforms that use mobile Software Development Kits ("SDKs") to collect information about your use of any mobile application that we make available to you, and other information related to how browsers and mobile devices interact with the Service. These technologies help us recognize your browser or mobile device when you log in to our website and use our mobile applications and help us improve your experience with the Service, increase LeaveLab's security, and measure and improve the use and effectiveness of our Service.
Submitted leave requests, out-of-office history, reasons, and approvals: Our core offering is tracking all employee leave in an organization, and any submitted leave requests, reasons, notes, and patterns will be used for company managers and other users which have been approved to see.
LeaveLab also uses these technologies to serve advertising to you on other sites using third party advertising services. You can control the cookies set in your browser and even block them entirely by configuring your browser settings. If you block cookies, however, you may not be able to use the Services. Additional options for controlling how or whether LeaveLab can target you with advertising is detailed in Section 2 (advertising and marketing) of this policy. By visiting LeaveLab's website or using our mobile applications, you consent to the placement of cookies and beacons on your browser, and our use of mobile SDKs in accordance with this Privacy Policy.
2. USES AND DISCLOSURES OF YOUR INFORMATION
LeaveLab uses the information it collects about you as set forth below:
To improve and customize the Service: LeaveLab seeks to improve your experience with the Service. As a result, we will analyze data we collect about your use of the Service to inform how we can improve our products, including our software, infrastructure, user interfaces, and integrations with our partners.
To integrate with Third Parties: To support our Users and streamline the HR experience, LeaveLab may integrate our system with third parties. For example, LeaveLab may integrate the Service to support your preferred payroll service. If you have an independent direct relationship with a third party integrated into the Service, any permissions you may have granted to that third party will govern their use of your data. Otherwise, any third party used by LeaveLab to help provide the Services will not have any independent right to access or use your personal information.
To communicate with you: LeaveLab wants to help you know how to best take advantage of the Service, especially as we improve and develop new features. We may send messages relating to your use of the Service – for example, we may send you a note that an upcoming vacation blackout has been set by your manager. We may also send you messages about Service-related matters through our dashboard or by email. Also, because we want to improve the Service, we may occasionally send promotional materials out via email so that you are able to take advantage of new or unused features. More details about our advertising and marketing activities are provided below. You can control whether you receive future non-Service-related messages by unsubscribing in the message itself.
To advertise and market to you: As noted above, LeaveLab relies on cookies, beacons, and mobile SDKs to recognize your browser or mobile device in order to serve you ads. These same technologies are used by LeaveLab to analyze the effectiveness of our advertising and email marketing campaigns. LeaveLab may use third party services, data, and software tools to target advertising to you, perform campaign effectiveness analysis, help us identify and reach potential Users, and track the performance of our site and advertising generally. LeaveLab's third party advertising vendors do not have any independent right to use LeaveLab's data or that of its Users. LeaveLab will not use PHI in connection with any advertisement or marketing for you.To learn more about advertising technologies and how to opt-out of online behavioral advertising, please visit http://www.allaboutcookies.org or the Network Advertising Initiative’s online resources, at http://www.networkadvertising.org, or the Digital Advertising Alliance at http://www.aboutads.info/choices/. You may also opt out of tracking and receiving online behavioral advertising on your mobile device by some mobile advertising companies and other similar entities by downloading the App Choices app at http://wwwaboutads.com/info/appchoices. These sites are not controlled by LeaveLab, but provide an opt-out from advertising exchanges. Depending on your mobile device, you also can control tracking technologies through your settings by resetting your advertising ID. Please note that the only way to completely “opt out” of the tracking that cookies and other technologies enable is to actively manage the settings on your browser or mobile device, which may negatively impact your ability to use the Service.The reasons that a Business Associate like LeaveLab may use and disclose PHI is to help carry out insurance payments, health care, and other benefits-related services in connection with providing the Service (or as otherwise permitted under applicable law). Other, related reasons that LeaveLab may use or disclose PHI include:
To facilitate your access: It’s your information, and you should be able to get to it. We may use and transfer your PHI to the Service so you can access your enrollment and billing information for your selected benefit(s) plans (such as your selected group health plan).
To facilitate payment: If you’ve used your insurance benefits, we may use and disclose your PHI to help your insurance pay for covered health care services. For example, payment for services by doctors, hospitals, pharmacies and others covered by your insurance may require the use or disclosure of PHI. LeaveLab might also use your information to help your insurance carrier determine your eligibility for benefits, to coordinate benefits, to examine medical necessity, to obtain premiums, and to issue explanations of benefits.
To facilitate Health Care Operations: We may use and disclose your PHI for the operational aspects of health care, for example, transferring medical records to specialists or pharmacists, or to facilitate your treatment at dedicated facilities.
To work with our vendors and service providers: LeaveLab uses third party vendors and service providers to provide the Service to you. For example, we use Amazon Web Services (AWS) to host the Service in the secure AWS cloud, and, as mentioned above, we also use third parties to help us advertise and market to you. We also use a third party to help facilitate aspects of our Pay Your People payroll feature. We may also provide some of your information (your email address, for example) to a service provider in order to reach you with an email campaign about new LeaveLab features, however, our service providers and vendors have no independent right to use your data. Similarly, LeaveLab's instance in AWS is not accessible to any Amazon employee except at our request and to carry out our instructions. In other words, all our vendors are limited to their use of your data in the same way that we are limited in our use of your data by this Privacy Policy.Additionally, certain LeaveLab vendors and service providers may perform services which involve access to PHI. Any LeaveLab vendor or service provider that processes PHI will agree in writing to contract terms designed to safeguard your information under HIPAA.
To comply with valid legal process and similar disclosures: LeaveLab may disclose your information as permitted by law or as reasonably necessary to:Comply with a legal requirement or process, for example, civil and criminal subpoenas, court orders or other compulsory disclosures;Enforce this Privacy Policy or our Terms of Use Agreement; or,To protect the rights, property, or safety of LeaveLab, our employees, or our Customers and Users.
To disclose to a third party as the result of a sale or change in control of LeaveLab: LeaveLab may disclose your personal information to a third party as part of a sale of the assets of LeaveLab, or an affiliate, or as a result of a change in control of LeaveLab or an affiliate, or in preparation for any of these events. Any third party to which we transfer control or sell our assets will have the right to continue to use the personal and other information that you provide to us in the manner set out in this Privacy Policy.
3. YOUR CHOICES
Right to access, correct, and delete your personal information: Users have a right to access, modify, correct, or delete personal information controlled by LeaveLab as necessary. In some cases, information deletion must be coordinated with the employer to ensure alternative HR systems are able to provide the User a legally compliant HR record-keeping system.
Retention: LeaveLab retains the personal information you provide while your account is in existence or as needed to provide you the Service, including customer support-related reporting and trend analysis. We may retain Customer or User information if retention is reasonably necessary to comply with our legal obligations, meet regulatory requirements, resolve disputes between Customer, Users, or related parties, prevent fraud and abuse, or enforce this Privacy Policy or our Terms of Use Agreement. We may retain personal information, for a limited period of time, if requested by law enforcement.
4. IMPORTANT INFORMATION
Security: LeaveLab has implemented industry standard administrative, technical, and physical security safeguards designed to protect the personal information that you provide. Access to your data on our Service is password-protected, and data is protected by SSL encryption when it is exchanged between your web browser and the Service. We also support secure https access to the LeaveLab.com website. To protect any data you store on our servers, we also regularly monitor our system for possible vulnerabilities and attacks.As you know, however, the Internet is not a 100% secure environment, and as a result, we cannot ensure or warrant the security of any information that you transmit to us. There is no guarantee that information may not be accessed, disclosed, altered, or destroyed by breach of any of our administrative, technical, or physical safeguards. It is your responsibility to protect the security of your login information. Please help keep your account safe by using a strong password.
Storage and Processing: Your information collected through the Service may be stored and processed in the United States or any other country in which LeaveLab or its subsidiaries, affiliates or service providers maintain facilities. If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction, and you consent to the transfer of information to the U.S. or any other country in which LeaveLab or its affiliates or service providers maintain facilities as well as to the use and disclosure of information about you in connection with the foregoing as described in this Privacy Policy.
Changes to this Privacy Policy: LeaveLab may change this Privacy Policy from time to time. If we make material changes to the Privacy Policy, we will provide notice to you though the Service or by some other means, such as email. Please review this Privacy Policy frequently, and any notice we provide about material changes carefully. If you agree to the changes, simply continue to use our Service. If you object to any of the changes to our terms and you no longer wish to use our Service, please let us know. Users may not be able to close their accounts without first finding an alternative arrangement to handle their HR records with their employer. This Privacy Policy applies to all information that we have about you and your account. Using our Service after a notice of changes has been communicated to you or published on the Service shall constitute consent to the changed terms or practices.
California’s Shine the Light Law: California Civil Code Section 1798.83, known as the “Shine The Light” law, permits Users who are California residents to request and obtain from us a list of what personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once a year and are free of charge. Under Section 1798.83, we currently do not share any personal information with third parties for their own direct marketing purposes.
California’s Do-Not-Track Disclosure: As required by the California Online Privacy Protection Act (California Business and Professions Code Sections 22575-22579), LeaveLab notes that although we do our best to honor the privacy preferences of our Users, and have implemented industry standard safeguards as described above, we do not respond to Do-Not-Track signals from your browser at this time due to the lack of a neutral and consistent industry standard. LeaveLab does not collect personal information about your online activities over time and across third party websites or services. However, when LeaveLab uses third-party services, data, and software tools to target advertising to you, these third parties may collect personal information about your online activities over time and across third party websites or services.
Users under the age of 13: The Service is a general audience site not directed at children under the age of 13. Unless listed as a dependent under an adult’s insurance policy or other insurance benefits, LeaveLab does not knowingly collect or solicit any information from anyone under the age of 13 or knowingly allow such persons to register as Users. In the event that we learn that we have collected personal information from a child under the age of 13, we will delete that information as quickly as possible. If you believe that we might have any information from a child under 13 that is not a dependent of one of our Users, please contact us as set out in Section 5 below.
Effective date: February 19th, 2019.
hello@LeaveLab.com