© 2024 BigHand. All Rights Reserved. Various trademarks held by their respective owners.
This Privacy Policy describes the personal information BigHand Inc and our family of solutions and related business units (collectively, “Big Hand Group,” “we,” or “us”) collects or processes, including through its website, tools, solutions, and services (“Products”). This Privacy Policy describes our information management practices, such as the types of information we collect and how we may use or share that information.
PLEASE READ THIS PRIVACY POLICY CAREFULLY. YOUR USE OF OUR PRODUCTS CONSTITUTES YOUR CONSENT TO THIS PRIVACY POLICY. DO NOT USE OUR PRODUCTS IF YOU ARE UNWILLING OR UNABLE TO CONSENT TO THIS PRIVACY POLICY.
In this Privacy Policy we refer to our customers (current and prospective), our customer’s employees or workforce members who have access to or use our Products, and visitors to our website as “you” or “Customers.”
We are BigHand Inc, of 125 S Wacker Drive, Suite 300, Chicago, Illinois 60606, USA . We provide productivity products including workflow, dictation, business intelligence, and pricing tools to our Customers, who are organizations using our Products to support their own operations.
We are part of a group of related companies, the Big Hand Group, which support our delivery of services to our Customers. In this policy we refer to BigHand Inc and Big Hand Group as “we” and “our.”
We collect information from or about our Customers when they use our Products as necessary to provide our Customers with those Products. We only collect or process Personal Information in these circumstances as requested, consented, or directed by our Customers, or as part of the provision of our Products, or as otherwise described in this Privacy Policy.
We also collect Personal Information from individuals as part of our marketing and client relationship management activities. More information about our use of Personal Information for marketing is described in Our use of data for marketing section below.
The following terms will have the definitions provided when used in this Privacy Policy
Personal Information is information that can identify you or from which your identity may reasonably be determined. This includes information such as your name, address, telephone numbers, email addresses, other contact details, job title, qualifications, or any other information that may be provided by you to access or take advantage of any of our Products. It does not include information publicly available, such as information appearing in federal, state, or local records, information that has been de-identified and cannot reasonably be linked back to you. It does not include Business Information (as defined below).
Business Information means any information directly relating to a business, partnership, corporation, or other commercial or non-commercial venture, including, but not limited to, financial account information, addresses, business records, or other information that does not identify a natural person.
Sensitive Personal Information means Personal Information including your Social Security number, state identification number, financial account number, debit card or credit card number, account log-in information in combination with any required security or access code, password, or other credentials required to gain access to your account, geolocation data, racial or ethnic origins, religious or philosophical beliefs, or union membership, contents of your email, mail, or text messages, unless we are the intended recipient of such communication, genetic data, identifying biometric data, information concerning your sex life or sexual orientation, criminal records and information regarding criminal offences or proceedings.
We collect Personal Information when an organization asks us for a proposal for the use of Products, when our Products are used by Customers, when enquiries about our business or Products are made, and when we receive requests for support and assistance from Customers for our Products.
We collect or process Personal Information to provide you with functionality of our Products and for other Business Purposes.
We collect or process the following types of Personal Information:
| Data description |
Examples |
Why we collect this data |
|
Account data |
Usernames and contact information, such as email addresses and telephone numbers
|
To provide our Products to you
|
|
Professional details such as job titles and qualifications |
Other Business Purposes, such as marketing and developing or servicing our Products |
|
|
Service data |
Online identifiers, log-in details, and other identifiers for our Products
|
To provide our Products to you
|
|
Tracking data about which of our Products you use, such as the time and date of sessions and the tools used
|
For other Business Purposes, such as marketing and the development or servicing of our Products
|
|
|
Cookies as described in our Cookie Policy |
To collect overall website analytics, to make improvements to our websites, and to improve your experience browsing our websites |
|
|
Customer data |
The data that you input during the use of our Products. Depending on your use, this may contain data about your clients, customers, or other individuals that you choose to upload or save to our Products, including Personal Information or Sensitive Personal Information. |
To provide our Products to you only
|
|
Candidate data |
Personal Details: Your name, gender, nationality, civil/marital status, date of birth, age, personal contact details (e.g. address, telephone or mobile number, e mail), national ID number, immigration and eligibility to work information, driving license, languages spoken; emergency contact information, details of any disability and any reasonable adjustments required as a result.
Recruitment and selection data: skills and experience, qualifications, references, CV and application, interview and assessment data, vetting and verification information (e.g. results of credit reference check, financial sanction check and a basic disclosure criminal record check relating to unspent convictions were carried out and permitted by applicable law), right to work verification, information related to the outcome of your application, details of any offer made to you.
Other Personal Data: Any other personal data which you choose to disclose to us during the recruitment exercise whether verbally or in written form (for example in work emails). |
Recruitment and Selection
Pre-employment verification and screening
Offers of employment and on-boarding
Future job opportunities Recruitment feedback and complaints
Complaints, claims and litigation
Legal or regulatory disclosures To comply with lawful requests by public authorities (including without limitation to meet national security or law enforcement requirements), discovery requests, or where otherwise required or permitted by applicable laws, court orders, government regulations, or regulatory authorities (including without limitation data protection, tax and employment), whether within or outside your country |
We also collect non-personal information derived from these data types, such as usage information, aggregate user statistics, and other such data to ensure the security of our systems and infrastructure, and to develop and support our Products.
The Customer Data that we collect may include Sensitive Personal Information. We only process this information at the direction of our Customers when they upload it to our Products. We do not use it other than to provide our Products to our Customers.
The Candidate Data that we collect may include Sensitive Personal Information. We only process such information as justified for the purposes as outlined above and/or where justified by one of the following conditions:
Personal data relating to criminal convictions and offences will only be processed where authorised by applicable laws.
When we use Personal Information for our business purposes outside the provision of our Products to our Customers, we consider the rights and interests of individuals in relation to our interests and do our best to protect the interests of individuals.
Usually, we collect and record your personal data from you. You will provide this information directly to the individual the recruitment exercise or enter it into our systems (for example, through your participation in recruitment and selection processes, emails and instant messages you send or through verbal information which is recorded electronically or manually).
We also obtain some information from third parties: for example, references from a previous employer, medical reports from external professionals, information from recruitment consultants or where we employ a third party to carry out a background check (where permitted by applicable law). Some data may be obtained from publicly accessible sources.
If particular information is required by contract or statute this will be indicated at the time of collection. We will also let you know where there are consequences of you not providing the information requested. Failure to provide some information will mean that we cannot continue with the recruitment exercise as we will not have the personal data we believe to be necessary for the effective and efficient administration of the recruitment exercise. It should be noted however that it is not a condition or requirement of your recruitment to agree to any request for consent from us.
The website is targeted for use only by adults. Accordingly, we do not knowingly collect any Personal Information from children under the age of 13. In the event we discover that a child has provided information to us, we will delete that information to the extent technologically possible. If you believe we have received information about a child, please contact us as described in How to contact us below.
We only share Personal Information with other organizations where necessary to deliver Products and related services.
These organizations are:
We reserve the right to use or disclose any Customer Data (including Personal Information) as needed to comply with any law, regulation or legal request, to protect the integrity of our Products, to fulfil your requests, for recruitment purposes, to cooperate in any law enforcement investigation or an investigation on a public safety matter, to protect and defend the legal rights or property of BigHand Limited or Big Hand Group members, our Customers, or any other party, or in an emergency, to protect the health and safety of our Customers or the general public (collectively, “Business Purposes”). In these cases, we will limit the use or disclosure of Customer Data to that necessary to undertake the Business Purposes objective, including the de-identification or anonymization of the Customer data, as practicable.
We will only transfer Personal Information outside the United States for the reasons described in What Personal Information We Collect Or Process And Why above.
We only use Personal Information for marketing our Products by electronic communications methods where you have given us your consent to do so.
We do not engage in “targeted advertising” or “cross context behavioral advertising” as defined by the CCPA and other data protection laws. If we were to do so in the future, we will update this Privacy Policy and give you the opportunity to opt-out of such advertising.
If you have consented to receive marketing communications, you may opt out at any time. You have a right at any time to stop us from contacting you about Products and for other marketing purposes.
If you no longer wish to be contacted for marketing purposes, please email us at [email protected].
We have implemented a formal Information Security Management System (ISMS). The ISMS is formally managed, controlled, independently audited, and certified to ISO27001(the global information security standard) and Cyber Essentials Plus.
The Big Hand Group is GDPR compliant (registered with ICO), HIPAA compliant, DCB0129 compliant (NHS Clinical Risk Management), and meets the requirements of the Data Security and Protection (DSP) toolkit.
We regularly review, test, and assess our information and organizational security measures, and we ensure that:
For more information, please see our Information Security whitepaper.
We do not use Personal Information to profile or enable automated decision making about individuals.
We carry out a small amount of profiling from time to time related to assessment of performance and potential as part of our appraisal process or other career development programmes. This is used for development and may be considered for promotion or succession planning but is not used as the sole basis for any decision
Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, our website does not alter its practices when it receives a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” please visit All About Do Not Track (DNT).
We only keep Personal Information for as long as necessary for the purposes for which we use it as set out in this policy.
We are required to keep certain information for certain periods of time to comply with legal and regulatory obligations. We minimise the amount of data we retain and de-identify it to protect individuals from being identified.
You can ask us about the specific periods for which we retain Personal Information by contacting us as described in How To Contact Us below.
You may have the certain legal rights in relation to our use of your Personal Information.
Some jurisdictions (state, federal, national and international), provide individuals with certain rights regarding their personal information. Examples of these laws, (without limitation) are: California (California Consumer Protection Act (“CCPA”) or the California Privacy Rights Act (“CPRA”)), and the Canada Personal Information Protection and Electronic Documents Act (“PIPEDA”). To exercise any rights your jurisdiction may provide, contact us by using the information at the bottom of this section. Your rights will depend on the location in which you reside when your Personal Information is collected or otherwise processed. The following illustrates the rights that may be afforded under the CCPA, PIPEDA, or your jurisdiction collectively:
Some states require specific information regarding our practices and that your rights be provided to you in the form of a privacy notice. These notices are provided in the State Specific Privacy Notices section below.
You can exercise these rights by contacting us as described in the How To Contact Us section below to request that we do not sell or share your Personal Information or to request that we limit the use of your Sensitive Personal Information.
We may require that you verify your identity before exercising your individual rights. In most circumstances, individual rights are not absolute and where applicable law permits or requires, we may choose to limit or deny a request. If we limit or deny a request, we will provide an explanation in writing.
The Big Hand Group accepts the following forms of ID when information on your Personal Information is requested: Passport, driving license, birth certificate, or utility bill (from last 3 months).
Depending on the level of Personal Information you are requesting, more than one form of ID may be requested. Please see our Privacy Policy for more information.
The Big Hand Group will respond to your request within thirty (30) days of receipt. The period of response may be extended to forty-five (45) or sixty (60) days if more time is required. In that event, we will inform you of the reason and extension period in writing.
Under California’s Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) California residents have certain rights around the Big Hand Group’s collection , use, and sharing of their Personal Information and the use of their Sensitive Personal Information.
We do not currently sell any Personal Information we collect to any third parties. We also do not engage in “cross context behavioral advertising” as the term is defined by the CPRA. If we were to do so in the future, we will update this Privacy Policy, and provide California residents with the opportunity to opt-out of such advertising or the sale of their Personal Information. We also do not engage in profiling in the furtherance of decisions that produce legal or similar significant effects.
We collect various categories of Personal Information depending on how you choose to engage with us as described in the sections How And When We Collect Personal Information and What Personal Information We Collect Or Process And Why. Do We Share Personal Information With Anyone Else describes how and under what circumstances Personal Information may be shared with third parties.
If you are a resident of California you have the rights as described in the Your Rights In Relation To Personal Information section above.
Additionally, you may have the right to request, twice in a twelve (12) month period, the following information about the Personal Information we have collected about you during the past twelve (12) months.
If you have any questions or comments, or would like to exercise any of your rights, please contact us using the information in the How to Contact Us section below.
Under Colorado’s Consumer Privacy Act (CPA), which goes into effect July 1, 2023, Colorado residents have certain rights around the Big Hand Group’s collection, use, and sharing of their Personal Information.
We do not currently sell any Personal Information we collect to any third parties. We also do not engage in “targeted advertising” as the term is defined in the CPA. If we were to do so in the future, we will update this Privacy Policy, and provide Colorado residents with the opportunity to opt-out of any targeted advertising or the sale of their Personal Information. We also do not engage in profiling in furtherance of decisions that produce legal or similar significant effects.
We collect various categories of Personal Information depending on how you choose to engage with us as described in the sections How And When We Collect Personal Information and What Personal Information We Collect Or Process And Why. Do We Share Personal Information With Anyone Else describes how and under what circumstances Personal Information may be shared with third parties.
If you are a resident of Colorado, starting July 1, 2023, you have the right to (1) request to know what Personal Information has been collected about you, and to access that information; (2) request to correct inaccuracies in your Personal Information; (3) request deletion of your Personal Information (exceptions under the CPA and other laws may allow the Big Hand Group to retain and use your Personal Information notwithstanding your deletion request); and (4) obtain a copy of your Personal Information.
If you have any questions or comments, or would like to exercise any of your rights, please contact us using the information in the How to Contact Us section below.
Under the Connecticut Data Privacy Act (CTDPA), which goes into effect July 1, 2023, Connecticut residents have certain rights around the Big Hand Group’s collection, use, and sharing of their Personal Information.
We do not currently sell any Personal Information we collect to any third parties. We also do not engage in “targeted advertising” as the term is defined in the CTDPA. If we were to do so in the future, we will update this Privacy Policy, and provide Connecticut residents with the opportunity to opt-out of any targeted advertising or the sale of their Personal Information. We also do not engage in profiling in furtherance of decisions that produce legal or similar significant effects.
If you are a resident of Connecticut, starting July 1, 2023, you have the right to (1) request to know what Personal Information has been collected about you, and to access that information; (2) request to correct inaccuracies in your Personal Information; (3) request deletion of your Personal Information (exceptions under CTDPA and other laws may allow the Big Hand Group to retain and use certain Personal Information notwithstanding your deletion request); and (4) obtain a copy of your Personal Information.
If you have any questions or comments, or would like to exercise any of your rights, please contact us using the information in the How to Contact Us section below.
Nevada law (SB 220) requires website operators to provide a way for Nevada consumers to opt-out of the sale of certain information that the website operators may collect about them.
We do not presently sell any personal information we collect to any third parties. If we were to do so in the future, we will update this Policy, and provide Nevada residents with the opportunity to opt-out of the sale of their personal information
Under Utah’s Consumer Privacy Act (UCPA), which goes into effect December 31, 2023, Utah residents have certain rights around the Big Hand Group’s collection, use, and sharing of their Personal Information.
We do not presently sell any personal information we collect to any third parties. We also do not engage in “targeted advertising” as the term is defined in the UCPA. If we were to do so in the future, we will update this Policy, and provide Utah residents with the opportunity to opt-out of any targeted advertising or the sale of their Personal Information.
If you are a resident of Utah, starting December 31, 2023, you have the right to (1) request to know what Personal Information has been collected about you, and to access that information; (2) request deletion of your Personal Information (exceptions under UCPA and other laws may allow the Big Hand Group to retain and use certain Personal Information notwithstanding your deletion request); and (3) obtain a copy of your Personal Information.
If you have any questions or comments, or would like to exercise any of your rights, please contact us using the information in the How to Contact Us section below.
Under Virginia’s Consumer Data Protection Act (CDPA), which goes into effect January 1, 2023, Virginia residents have certain rights around the Big Hand Group’s collection, use, and sharing of their Personal Information.
We do not currently sell any Personal Information we collect to any third parties. We also do not engage in “targeted advertising” as the term is defined in the CDPA. If we were to do so in the future, we will update this Policy, and provide Virginia residents with the opportunity to opt-out of any targeted advertising or the sale of their Personal Information. We also do not engage in profiling in furtherance of decisions that produce legal or similar significant effects.
We collect various categories of Personal Information depending on how you choose to engage with us as described in the sections How And When We Collect Personal Information and What Personal Information We Collect Or Process And Why. Do We Share Personal Information With Anyone Else describes how and under what circumstances Personal Information may be shared with third parties.
If you are a resident of Virginia, starting January 1, 2023, you have the right to (1) request to know what Personal Information has been collected about you, and to access that information; (2) request to correct inaccuracies in your Personal Information; (3) request deletion of your Personal Information (exceptions under CDPA and other laws may allow the Big Hand Group to retain and use certain Personal Information notwithstanding your deletion request); and (4) obtain a copy of your Personal Information.
If you have any questions or comments, or would like to exercise any of your rights, please contact us using the information in the How to Contact Us section below.
From time to time, BigHand Limited or the Big Hand Group may change this Privacy Policy and will notify you of material changes by posting the revised Privacy Policy on our website, https://www.bighand.com/en-us/. Any changes will be effective immediately upon the posting of the revised Privacy Policy unless otherwise specified. Your continued use of the Products after the effective date of the revised Privacy Policy (or such other act as specified in the revised Privacy Policy) will constitute consent to the revised Privacy Policy and any revisions will not alter how we handle Personal Information collected before the revised policy effective date.
If you click on links within our website (such as social media) that take you to third-party websites, you will be subject to the third parties’ privacy policies, practices and statements. We are not responsible for the actions or inactions of any third-party websites, the accessibility of any third-party website or the policies or practices of any third-party website.
The Big Hand Group website does not constitute an offer or contract. Information on our website may contain inaccuracies or typographical errors. Information may be changed or updated without notice.
Please contact us if you have any questions about this Privacy Policy or the information we hold about you:
By email at [email protected] or write to us at: BigHand Inc, Attention: Data Protection Manager, 27 Union Street, London SE1 1SD, United Kingdom.
Registered office: 125 S Wacker Drive, Suite 300, Chicago, Illinois 60606, USA .
Registered in Delaware
Data Protection Manager: Joseph Birkby
This Privacy Policy is effective as of 21 March 2023
© 2024 BigHand. All Rights Reserved. Various trademarks held by their respective owners.