PPM Express Privacy Policy

PPM Express Corporation (“PPM Express” or “we” or “us” or “our”) is committed to protecting your privacy. This Privacy Policy (the “Policy”) applies to information obtained by PPM Express when you visit or use a PPM Express owned or operated website (including ppm.express, the “Sites”). This Policy also describes how we may share information we obtain about you, your choices regarding our use of your information, the ways in which we safeguard such information, and how you may contact us regarding our privacy practices. Such information may include personally identifiable information that may be used to readily identify or contact you as an individual person, such as: name, address, email address, or phone number (“Personal Information”). Personal Information does not include information that has been anonymized such that it does not allow for the ready identification of specific individuals.

In addition to obtaining information from the visitors and commercial users of the Sites, PPM Express obtains, processes and hosts personal information through its commercial hosted or cloud platforms and software applications (collectively, “Services”) provided to its business customers who subscribe to such services pursuant to a Master Services Agreement, Subscription Agreement or other contracts with us (“Subscribers”). When providing Services, PPM Express is a “data processor” or “sub-processor” and only processes personal information on behalf of and in accordance with the instructions of its Subscribers, which are “data controllers” and/or “data processors,” depending on the context. Many of our Services contain automated processes and workflows and other software that generally allow Subscribers to control how they process the data they choose to input into Services and we do not typically control these processes or store such data on our servers other than as may be necessary to provide Services. The agreements between PPM Express and its Subscribers define specific roles and responsibilities of the parties for the processing of data in the context of Services. For more information on these activities please refer to the privacy policy of our Subscriber who submitted your Personal Information to our Services.

Information We Collect

Information You Provide to Us

We collect information you provide directly to us. The types of information we collect may include Personal Information. For example, we collect information when you complete our online forms or if you register and create a profile on the Sites.

We also collect information when we process Subscriber’s data which may contain Personal Information of various individuals under direction of our Subscribers to provide Services to such Subscribers. In providing Services, we have no direct relationship with the individuals (“End Users”) whose Personal Information is included in the data we process for Subscribers and typically do not control how data is processed. End Users may transmit or make available their Personal Information to our Subscribers in a number of different contexts, such as Subscribers’ employees, customers, potential customers or in some other capacity. If you are an individual whose Personal Information was collected by a Subscriber using our Services (such as End User of a Service or an employee of a Subscriber whose data we process) and would like to correct your Personal Information, please contact that Subscriber directly.

Information You Provide to Us

In addition to the information you submit to us, we and our service providers and sub-contractors automatically collect certain information about your use of the Sites. This information may include unique device identifiers, Internet Protocol (“IP”) addresses, browser characteristics, language preferences, operating system details, referring URLs, length of visits, and pages viewed. We may use tools such as cookies, web beacons, embedded scripts, web server logs, or other similar technologies to collect details about the services and devices you use to access the Sites.

Cookies. A cookie is a unique identifier that is placed and stored on a computer when it is used to visit a website. Cookies may be used for various purposes, including to track user preferences or web pages visited while using a website, to identify the number of unique visitors to a website, and to verify whether or not a visitor is a repeat visitor.

Web Beacons. (“Tracking Pixels”) Web beacons are small graphic images, also known as “Internet tags” or “clear gifs” that may be embedded in web pages and email messages. Web beacons may be used to monitor the number of visitors to a website, to track how users navigate a website, or to count how many emails were actually opened or specific pages or links were actually viewed.

Embedded Scripts. An embedded script is programming code designed to collect information about a user’s interactions with a website. Typically, the script is temporarily downloaded onto a computer from the host website’s server (or the server of a third party service provider), and is active only while the visitor is connected to the website, then deleted or deactivated thereafter.

Data Analytics

The Sites may use third-party web analytics services, such as Google Analytics, to help us analyze how visitors use the Sites. These services track information about visitors including IP addresses, browser types, referring pages, pages visited, and time spent on particular pages, which we use to improve our products and tailor the user experience on our Sites. To learn more about how Google may use information collected through the Sites, click here. For information on how to opt out of data collection through Google Analytics, click here.

Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, the Sites are not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, you may wish to visit http://www.allaboutdnt.com/.

Third parties may collect personally identifiable information about your online activities over time and across different websites when you visit the Sites.

Information We Collect

We may use information we obtain through the Sites for a number of purposes, including:

To improve the Sites and to personalize our visitors’ experiences on the Sites;
To respond to emails or other requests, comments, or questions;
To provide customer support;
To provide you with information that we believe may be useful to you, such as information about products or services we offer;
To comply with applicable laws, regulations, or legal process as well as industry standards and our company policies;
To prevent fraud or other misuse, including by protecting our rights and the rights of affiliates or related third parties;
To maintain records of our transactions and communications;
To monitor and analyze trends, usage, and activities of visitors to the Sites; or
For any other purpose, with your consent.

In addition, we may use the information we obtain about you in other ways for which we provide notice at the time of collection.

Our Services include migration, governance, administration and integration software platforms and applications which automate various business processes and are intended for business customers and not individuals. Depending on the specific Service, we process different types of data uploaded to our online platforms and hosted software applications by Subscribers. The exact data elements to be transferred and data retention are controlled and defined by each Subscriber or the owner of the domain associated with your email address if the Service is used by your organization, employer or the company which originally collected your data. Consequently, while we process the data the End Users originally transferred to our Subscriber that can include Personal Information about such End Users and/or employees and independent contractors of your organization, we cannot take responsibility for the information or content you transferred to the Subscriber. PPM Express has no direct relationship with the individuals whose Personal Information it processes as part of Subscriber’s Data. Each Subscriber is responsible for providing notice to its End Users, employees and third persons concerning the purpose for which a Subscriber collects their Personal Information and how this Personal Information is processed in or through the Service as part of Subscriber’s data.

Legal Basis for Processing (EEA only). If you are an individual from the EEA, our legal basis for collecting and using the Personal Information will depend on the Personal Information concerned and the specific context in which we collect and use it. Generally, we will collect Personal Information from you where we need to provide Services to a Subscriber under an agreement with such Subscriber. If you have any questions about the legal basis on which we collect and use your Personal Information, please contact us at info@ppm.express.

Information We Collect

We may share the information we collect with our agents, vendors, sub-contractors, consultants, and other third parties performing services on our behalf, for example, to help us develop, operate, maintain, improve, and protect our products and services. These third parties may only use your information to carry out the services for which they have been engaged and in accordance with this Policy.

We may also disclose your information (1) if we reasonably believe that we are required to do so to comply with applicable law, regulation, or legal process (such as in response to a court order or subpoena); (2) to fulfill requests by government agencies, such as law enforcement authorities; (3) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual illegal activity; or (4) to enforce our site policies, or protect ours or others’ rights, property, or safety.

We reserve the right to transfer any data we obtain through the Sites in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, reorganization, or liquidation).

We share information with third party companies working on our behalf for the purposes described in this Policy. We may transfer information to our vendors, service providers and partners who help us provide and maintain our Services, such as providing technical infrastructure services, providing servers for our email communications and customer service. Our vendors are contractually obligated to use your Personal Information only at our direction and in accordance with our Privacy Policy. Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent.

Data Storage and Processing

We currently use the Microsoft Azure infrastructure to store, process, and transfer your information collected through the Sites and Services. You can read more about Microsoft data privacy here. We primarily store Personal Information about the visitors to and users of the Sites, End Users and our Subscribers in the United States, often with a backup to a data center in another region.

By providing your Personal Information to us or to a Subscriber who uses our Services, you consent to any transfer and processing in accordance with this Policy.

Data Retention

We will retain your Personal Information while you or a Subscriber to whom you transferred your Personal Information remain an active customer of ours and for as long as necessary to provide Services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Since there are different data types in the context of different Services provided, the retention periods can vary. Providing and maintaining Services according to our Subscribers, complying with our subscription, data processing and other agreements, keeping our systems secure, maintaining relevant business and financial records serve as the baseline for most data retention periods.

Security

We are committed to protecting the security of your information. We maintain appropriate physical, electronic, and administrative safeguards designed to protect Personal Information that we obtain in accordance with this Policy from unauthorized access, disclosure or destruction. Although we use reasonable efforts to secure such information, transmission via the Internet is not completely secure, and we cannot guarantee the confidentiality of information transmitted to us over the Internet.

Your Site account is protected by your account password and we urge you to take steps to keep your Personal Information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including only authorized access, role-based access control models, two-factor authentication for server access, encryption, firewalls and transport layer security technology.

Although we maintain physical, administrative, and technological safeguards to preserve the integrity and security of all information collected through our Services, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. In the event of a data breach we will use commercially reasonable efforts to report to any and all relevant persons and authorities promptly following our discovery of the breach if it is apparent that Personal Information stored in an identifiable manner has been stolen or otherwise compromised.

Links to Other Websites

The Sites may contain hyperlinks to other websites or online locations for your convenience and information. Those linked websites may be operated by unaffiliated entities, such as our Subscribers, and may have their own privacy policies, statements or notices. This Policy does not apply to those websites, so please review the privacy policies posted on those sites to understand how they may collect and use your personal information. We are not responsible for the content or privacy practices of the websites that we do not control.

The Sites may include features that are designed to permit interactions that you initiate between the Sites and third party websites or services, including third party social networks (“Social Features”). Examples of Social Features include enabling you to “like” or “share” our content on other websites or services; or to transmit content to our Sites from your account on a third party website or service.

If you choose to use Social Features on the Sites, both PPM Express and the third party website or services may have access to certain information about you and your use of both the Sites and the third party site or service. In addition, we may receive information about you if other users of a third party website allow us to access their profiles and you are one of their “connections,” or if information about you is otherwise accessible through those individuals’ profiles or pages on a social networking or other third party website or interactive service.

The information we collect in connection with Social Features is subject to this Policy. The information collected and stored by the third parties remains subject to those third parties’ privacy practices, including whether the third parties continue to share information with us, the types of information shared, and your choices with regard to what is visible to others on those third party websites or services.

Children’s Privacy

The Sites are not intended for children, nor is it targeted to children under the age of thirteen. We do not knowingly collect personal information from children under the age of 13 through the Sites, and if we learn that we have received information from a visitor under the age of 13, we will delete such information in accordance with applicable law.

California Privacy Rights

California law permits customers in California to request certain details about how their information is shared with third parties and, in some cases, affiliates for direct marketing purposes. Under the law, a business must either provide this information or permit California customers to opt in to, or opt out of, this type of sharing. We do not share personal information with third parties or affiliates for those third parties’ or affiliates’ own direct marketing purposes. California customers may request information about our compliance with this law by contacting us at info@ppm.express, or by postal mail at PO Box 1971 North Bend, WA, 98045. Any such inquiry must include “California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through this email address.

Any California residents under the age of eighteen (18) who have registered to use the Sites, and who have posted content or information on the Community Site, can request that such information be removed from the site by contacting us at info@ppm.express, stating that they personally posted such content or information and detailing where the content or information is posted. We will make reasonable good faith efforts to remove the post from prospective public view or anonymize it so the minor cannot be individually identified. This removal process cannot ensure complete or comprehensive removal.

Information for Persons Outside the United States

We are based in the United States and the information we collect is governed by U.S. law. If you are visiting the Sites from outside the United States, please be aware that information we collect through the Sites will be transferred to, and processed in, the United States. By using the Sites, you acknowledge and consent to the transfer and processing of your Personal Information in the United States as described in this Policy. The data protection laws and regulations applicable to your Personal Information transferred to the United States may be different from the laws in your country of residence.

Your Choices

You may request that we update, correct, or delete your information collected through the Sites by emailing info@ppm.express. To help protect your privacy and security, we may take reasonable steps to verify your identity prior to honoring any such requests.

For the information collected by our Subscriber and processed by us as part of Services, your request should be addressed to such Subscriber.

Many web browsers provide options to allow you to stop accepting new cookies, or to disable existing cookies. Go to the HELP function of your browser to learn how. You can also go to www.aboutcookies.org for information about how to disable and control cookies on most browsers. Please be aware that if you disable the cookies on your computer you may not be able to use certain features of this Sites or other websites, and disabling cookies may invalidate opt outs that rely on cookies to function. Also, these options may not be effective in all cases, or may be effective with respect to one type of browser or service, but not another.

You may unsubscribe from receiving promotional emails from us by following the instructions provided in those email communications. Please note that even if you opt out of receiving promotional communications from us, we may continue to send you non-promotional emails, such as emails concerning our ongoing business relationship with you.

English Language Controls

This policy is executed in English and may be translated into other languages. In the event of any conflict or discrepancy between the English language and a translated version, the English language version shall control to the fullest extent permitted by applicable law.

Changes to this Policy

We may change this Policy from time to time. If we make changes, we will notify you by revising the date at the top of this Policy. We encourage you to review this Policy whenever you visit the Sites to stay informed about our information practices.

Contact Us

To contact us regarding this Policy or with questions about our privacy practices, you may email us at privacy@ppm.express (please include “Privacy Inquiry” in the subject line of your email), call us at (833) 776-9777, or send postal mail to:

PPM Express Corporation

Attn: ONLINE PRIVACY INQUIRY,

1275 12th Ave NW, Suite 2, Issaquah, WA 98027, USA

If you need more information about our security policy, guarantees, and infrastructure, welcome to contact us for detailed documentation.