Privacy notice for VisualCV users and affiliates
Last Updated on: May 24, 2018
At Workstory Inc. (“Workstory”, “we”, “us”, “our”) we recognize that you are concerned about your personal information and how it is collected, stored, used, and disclosed. We respect your concerns and this Privacy Notice gives you the information you need about how your personal information is collected, managed, and disclosed by Workstory as you interact with the VisualCV.com and Workstory.com websites (the “Websites”) so you can make informed decisions as you provide it to us. We urge you to read it carefully and ask us if you do not understand something.
By registering on this Website, by submitting your resume information or any other information through the use of this Website, or by otherwise accessing this Website or using any of our services, you agree to the terms of this Privacy Notice and consent to the policies and practices described for the collection, use, storage, or disclosure of your personal information.
Our Website is not intended for the use by children under the age of 16. If you are under the age of 16 stop now and do not provide us with any information. We will delete any information we believe is related to a child under the age of 16.
Workstory reserves the right to modify or supplement this Privacy Notice at any time. If we make any material change to this Privacy Notice, we will update this Website to include such changes and post a notice on our home page, for a period of 30 days, with a link to the updated Privacy Notice. Please read any such notice and the new Privacy Notice. If you return to this site after a period of more than 30 days, please check this Privacy Notice to confirm that you are aware of the details of the most recent update. Please look at the top of this Privacy Notice to check the date that it was last updated and to confirm that you are familiar with the terms of the most recent update. Except as described in paragraph 2 below, your continued use of this Website after we post such notice will constitute your acceptance of the new terms and their application to your use of this Website and the personal information disclosed for such use, including personal information previously furnished us, as if they were the initial terms, and your consent to the use of your personal information as described in this privacy policy and elsewhere on our Website.
If we are making a change to this Privacy Notice related to the disclosure of your personal information to additional third parties or to allow for additional uses by us of your personal information we will ask you for your explicit consent for such change.
Just as different individuals have different views over their personal information, what they are concerned about, how they protect it, and who they share it with, so have different governments enacted a variety of laws that touch on personal information and how it should be managed by entities other than yourself. Naturally these laws are different, inconsistent, and have varying degrees of applicability to your use of our Website. They also do not easily adapt to the reality of a global internet where you may live in any country in the world, Workstory is based in Canada, and we may host our actual application and store your personal information in Canada, the United States, a member of the European Union, or some other country using third parties to provide various services to us to provide the Website and its functionality.
To make easier for both of us to understand our obligations and rights, by agreeing to this Privacy Notice you are agreeing that we both are adopting the Canadian laws in the Province of British Columbia that are applicable to Workstory to govern this Privacy Notice and your rights related to the policies and practices that are described in it, regardless of what country you live in or what country Workstory, or any third party providing services to Workstory, uses to store, process, gather, host, or any of the other actions taken related to your personal information Workstory obtains as a result of your use of the Website. If you are a resident in the EU then you also have additional rights under EU law, which are set out in more detail below.
By using our service you are explicitly agreeing to the transfer of your personal information from your home country to a third country or countries which may include the United States and Canada.
By using our service you are agreeing that Workstory may process your information using third party sub-processors located in any country so long as Workstory ensures that those third party sub-processors abide by our commitment to you and Workstory is responsible to you if they break their obligations in this Privacy Notice.
You should be aware that when your information is located or stored in a particular jurisdiction (for example the United States), the laws of that jurisdiction will apply to the ability of that government and law enforcement to access your personal information without your consent. The laws of that jurisdiction and the protections related to your personal information may not be as rigorous as the laws in the country you live in.
Canadian law governs the collection, use and disclosure of personal information in a manner that recognizes a individuals' right of privacy with respect to their personal information.
Canada has two levels of government, Federal and Provincial. Federal privacy law applies unless a Province has enacted equivalent privacy law. Workstory is based in British Columbia which has enacted the Personal Information Privacy Act (“PIPA”) which sets out rules and principles for the management of personal information by commercial organizations. Because Workstory is based in British Columbia, PIPA will apply to this Privacy Notice.
PIPA provides certain fundamental principles that apply to the collection, use and disclosure of personal information. One of the most significant, is that your personal information generally cannot be collected, used or disclosed without your consent. It also allows you to find out why your personal information is being collected, how it is being used, where it's being stored and to whom it's disclosed. It requires the use of appropriate safeguards to secure your personal information. It also grants you access to your personal information and provides mechanisms for ensuring compliance. It also provides for the circumstances where your information may be disclosed without your consent (things like law enforcement, to complete a contractual request, or to protect life).
Workstory does not collect, use or disclose your personal information without your consent except where required or allowed by law.
D. What Information Does Workstory Collect?
We collect two types of information when you interact with the Website: personal information (“Personal Information”) and everything else. Personal Information is information that relates to an indentifiable person and includes information which can be used by itself or in combination with other information to identify you. Some Personal Information is obvious such as your government identification number, however other information that is Personal Information is somewhat subtle. As you add information together you can create a package of information that will identify someone and so together would be considered Personal Information. For example the following information: Law Degree, 2001, Yale, employed at Seyfarth Shaw, born in Cleveland, and works in Chicago, may not individually be Personal Information, but certainly taken as a whole would identify someone and therefore would be Personal Information. Because of this we treat all of your resume information as Personal Information.
The information that is not Personal Information (everything else) is information that is not associated with any individual and mostly consists of aggregated usage information, anonymized data about web site pages visited, technical information like the internet browser used, os version used, screen resolution etc. that we use to operate and improve the Website.
If you are paying us for use of certain features of the Website, we will use a third party payment processor (“Payment Service”) to collect the payments. When making a payment you will be directed to a web page hosted and controlled by the Payment Service. Any Personal Information you provide the Payment Service is being provided to the Payment Service and not Workstory and would be subject to the Privacy Notice of the Payment Service alone.
You can visit this site without telling us who you are and without providing us with any information about yourself. However, certain anonymous information may be collected automatically as you navigate through the site or use our services, including usage details, sites visited prior to visiting our site, IP addresses and information collected through cookies Pixel Tags, and other tracking technologies. Some of this information would become your Personal Information were you to subsequently register with us.
We and our service providers may use “cookies” on the Site. Cookies are small files that a web server transfers to an individual’s computer for identification purposes. Cookies are an industry standard used by most web sites and can facilitate users’ ongoing access to and use of a particular web site; cookies do not cause damage to your computer systems or files. We use cookies to improve your experience interacting with our Website or in it’s operation. If you would like more information on cookies we suggest you go to the website allaboutcookies.org.
If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies, or to be given the choice of declining or accepting the transfer of a particular cookie, or cookies from a particular web site, to your computer, or erasing cookies from your computer. Our Website will operate if you decline to receive “third party” cookies from us, however we require “first party” cookies to be accepted for the website to work if you are (or plan to be) a registered user of our services.
We and our service providers may also use so-called “pixel tags,” “web beacons,” “clear GIFs” or similar means (collectively, “Pixel Tags“) in connection with some Website pages and HTML-formatted email messages to, among other things, compile aggregate statistics about Website usage and response rates and to facilitate our advertising of our services at other websites you may visit. A Pixel Tag is an electronic image, often a single pixel (1×1), that is ordinarily not visible to a Website visitor and may be associated with Cookies on the visitor’s computer. Pixel Tags allow us to count users who have visited certain pages of the Site, to deliver branded services, to help determine the effectiveness of promotional or advertising campaigns, and to show you targeted advertising related to our services when you visit other websites. When used in HTML-formatted email messages, Pixel Tags can tell the sender whether and when the email has been opened.
1.1 Fulfill the purpose for which you provided the information to us. For example: to complete your purchase, build your profile, have your credentials certified, have your resume reviewed by a career management professional, or publish your resume online. This type of use also covers your instructions to us to provide your information to a third party you identify to us. 1.2. We may select your public resume (which you have chosen to make public) as an example resume to show to other users of our Website for educational purposes. 1.3. To facilitate our communications either through the Website or by email to the email address you provide us. Note that (unless you are an EU Resident) by providing us with your email address you have explicitly consented to the receipt of email messages from us, related to your use of the Website and marketing offers we may make to you. While you can unsubscribe to marketing emails, you cannot opt out of receiving emails related to your use of the Website. 1.4. If you choose to do so, you may receive messages from other Website users relating to areas of interest that you select. We do not provide your Personal Information to such other users—rather, the message from the user is sent to a group of people, including you, based on demographic information and the areas of interest you and the others in the group have selected, and you can decide whether to respond to the message or delete it. 1.5. To send targeted advertising to you related to our services when you visit other websites. Note that we may not know who you are when we advertise as you may have only visited our website and not registered on it. 1.6. To operate our business. This means such items as data analysis, audits, order fulfillment tracking, enhancing our web site, improving our services and identifying usage trends.
We Don’t Commercialize your Information. We do not sell, trade, rent, or license the personal information you provide us, whether to marketing list makers, advertisers, or anyone else.
To Our Third Party Service Providers. We work with third parties to provide the various services and features of the Website and the other services that we provide. This includes: hosting, data processing, data analysis, order fulfillment, career management, and other services of an administrative nature. We provide your Personal Information with such third parties in order to provide the Website and services. As mentioned above, those third parties may exist or provide the services in any country and we have no restriction on what country we transfer your information to for the processing, recognizing that we are responsible for our third party service providers we transfer information to comply with this Privacy Notice.
To Third Parties on Your Request. You can instruct us to transfer your information to a third party or make it available to third parties because of the settings you have chosen in your use of the Website, for example publishing your resume as a webpage, either public or private where you selectively share the URL. Note that the default account settings maintain your information as a private webpage. If you publish your resume freely on the web we cannot restrict what third parties will have access to it. It also may be cached in various online services even if you change or delete it. We have no control over how third parties (i) you instruct us to transfer information to, or (ii) who access your information because of your account settings, deal with your information. Once the information in in the hands of such third parties this Privacy Notice no longer applies and we are not responsible for the actions of such third parties.
To Third Parties Related to Our Business. We can transfer your information to any third party in the event of a reorganization, merger, sales, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock. The third party that we transfer the information to will be responsible to you to process your information in accordance with this Privacy Notice once that transfer is made. We can also disclose your information to any third party advisors (accountants, auditors, lawyers, investment bankers, lenders, etc.) related to such actions or who are engaged to assist us in the usual operation of our business. We are responsible to ensure that third party advisors act consistently with this Privacy Notice.
To Third Parties in Accordance with Laws and Rights. We can transfer your information to a third party (a) as authorized in applicable law; (b) to comply with legal process; (c) to respond to a government or regulatory request; (d) to enforce the Terms of Service of our Website; (e) to protect our operations; (f) to protect the rights, privacy, safety, or property of us, you, or others; and (g) to permit us to pursue legal remedies or limit the damages we may sustain.
1.1. How we design our Website for security; 1.2. How we test our Website to discover security flaws; 1.3. How we host our product to limit vulnerabilities including: processes and procedures, server hardening, and operating system patching; 1.4. How we hire and train our staff, contractually impose confidentiality obligations on them, and restrict their access to your information to only what is necessary as part of their job; 1.5. How we interact with third parties who are providing services to us including the terms of the contracts we have with them; 1.6. How our administrative processes are set up for such things as password resets and verifying who we are communicating with; 1.7. How we respond to suspicious events and manage an incident should one happen; and 1.8. How we plan for disasters and how we continue to operate should one occur.
Unfortunately, no information security program can absolutely guarantee that an unauthorized person will not obtain access to your information. Our sole obligation to you is to perform our information security program and update it in accordance with good industry practice. v3. Remember that the main way that unauthorized third parties obtain access to personal information is by obtaining access credentials. So please use a unique, strong password for your account on the Website. Also, be aware that phishing emails often install software to enable the obtaining of your user name and passwords to the various sites you use, including our Website. You need to be aware when you use the internet. We will never ask you to confirm your user id and password by email or send you an embedded link to our Website. If you receive such an email, we ask that you contact our Privacy Officer so we are informed and we can take appropriate actions to inform all of our users.
Emails should not be considered secure so keep this in consideration when sending us email.
Should we discover an unauthorized third party obtain access to any of your personal information we will inform you once we confirm that this has occurred.
We will take reasonable steps to ensure that your Personal Information is as accurate, complete and up-to-date as is appropriate for its purposes.
You have full control over accessing and changing most of your Personal Information directly through the Website. For your Personal Information that is not directly accessible by you (mostly related to your account administration) you may contact us by contacting our Privacy Officer as described below. Upon request made in writing, we will inform you of the existence, use and disclosure of your Personal Information, at minimal or no cost to you, in accordance with processes and procedures that we have put in place for such requests. If you are unsure whether we have a record containing your information and would like to confirm what Information we have, please contact our Privacy Officer as set forth below, identifying all email addresses which you may have given us. If there is a cost involved at all, we will inform you at that time. We will provide access to the executor of your estate should you die upon proof of both your death and the appointment (and identity) of the executor which is reasonable to us.
We may require additional information from you in order to verify your identity following an access request. Such personal information will only be used for the purpose of identity verification and will itself be subject to protection under the terms of this Privacy Notice. We will respond to all requests for access within 30 days of receipt or as otherwise required or permitted by law.
In some circumstances, we may not be able to provide access to all of the Information that we hold about you. We may not provide access to Information if doing so would likely reveal Information about a third party, could be expected to threaten the life or security of an individual, reveal confidential commercial information, if the Information is protected by a legally recognized privilege, if it was created as part of a settlement or dispute resolution process, or if it was collected in relation to the investigation of a breach of an agreement or a contravention of law. We will provide reasons to you if it refuses an access request.
You may choose to delete your information from your account at any time. When you do this we will retain your information solely to enable you to change your mind and restore your account. None of your information will be accessible by you or the public. Deleting your information will not remove information we use to administer your account which we will retain until we delete it in accordance with our internal record keeping policy. We will also delete your information in accordance with our policies related to inactive accounts.
When we delete your information we will do so in a secure manner in accordance with good industry practices.
1.Under certain circumstances, you have rights under data protection laws in relation to your personal information. You may have the right to:
2.Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
3.If you wish to exercise any of the rights set out above, please contact us using the details set out below.
4.You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
5.We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
6.We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
If you have a question or concern about this Privacy Notice or how your personal information is being handled by Workstory please contact us using the details below. Please make any communication to the attention of “Privacy Officer” and we will acknowledge, record, investigate, and respond to you in accordance with applicable law and this Privacy Notice.
Remember that email is not secure so you should be thoughtful about including any Personal Information in your emails to us.
Our Privacy Officer’s address is:
Privacy Officer Workstory Inc. #200 - 13799 Commerce Parkway Vancouver, BC V6V 2N9 Canada Email: team+privacy@workstory.com
Copyright ©2024 Workstory Inc.