Privacy Policy

Introduction

This policy describes the information Carolina Software Engineering ("CSE," "we," or "us") may collect through the use of the services we offer — including this website and Industrial Safety IQ ("ISIQ") — how we collect it, and how it is used. This policy also addresses precautions we take to protect your privacy and how to contact us with data privacy questions or requests.

Policy Topics:

Section A — Personal Information
Section B — Children Under the Age of 18
Section C — Passive Information Collected
Section D — Cookies & Internet Tags
Section E — Mobile Applications
Section F — Active Information Volunteered
Section G — Duration of the Processing
Section H — Your Rights
Section I — Safety & Confidentiality
Section J — Compliance and Cooperation with Regulatory Authorities
Section K — Changes
Section L — Contact Information and Enforcement

Section A: Personal Information

Personal information is information about a natural person that is readily identifiable to that individual. Personal information includes such things as an individual's name, address, email address, and/or phone number, and may include the Internet Protocol (IP) address of your computer.

We will actively collect your personal information through contact you make with us and through your organization's use of ISIQ and related services (for example account and directory details, site and role assignments, and operational content such as procedures and training records). You may always choose not to contact us by email, participate in a survey, or provide optional personal information on our website. Your choice not to participate in optional activities online will not impair your ability to browse public pages of our website, or to read or download information offered on the site. Access to licensed product features requires an authorized account.

We will passively collect certain technical information from you simply from your visit to our website. For more information, see Sections C and D below.

We may also obtain personal information from your organization (as the account administrator) or from service providers that help us operate authentication, hosting, email delivery, and payment processing, where those parties have a lawful basis to provide information needed to deliver the service.

Section B: Children Under the Age of 18

This Site and our products are not directed to children under the age of eighteen (18) and do not knowingly collect personally identifiable information from children. Our websites and products are intended for business and workplace use by adults.

Section C: Passive Information Collected

This is information passively collected during your visit to our website or use of our services. This information is used to help us understand how our site and services are being used so that we may continually improve content, performance, suitability, usefulness, reliability, and security. We collect two types of passive data: navigational data and device information.

Navigational data: Navigational data includes log files and similar usage data. Navigational data can identify a user's Web browser and operating system, when and for how long a user visits a website or app, what pages or features a user views, and the address of the website that the user was visiting previously (where available). We collect this information and use it to administer the service, improve content, diagnose issues, and compile aggregated statistics for product and site improvement.

Device information: Device information may include your IP address, hardware model, operating system version, unique device identifiers, and network information. We collect this information to secure accounts, support the service, and, where applicable, associate device identifiers with your Account.

Section D: Cookies & Internet Tags

To serve our online users, we use "cookies" and similar technologies to operate the Site and customize your browsing and sign-in experience. Cookies are small data files transferred to your computer, mobile phone, or other device by your web browser at the request of a website. Cookies fall into two broad categories:

Session cookies — these cookies allow websites to link the actions of a user during a browsing session. Session cookies are temporary and once you close your browser, session cookies are typically deleted. Session cookies aid in website navigation, authentication, and collecting statistical or operational information.

Persistent cookies — these cookies remain on your computer or device for the time period specified in the cookie. They are activated each time you visit the website that created the particular cookie. Persistent cookies may aid in website navigation, remembering preferences, and maintaining authenticated sessions so users do not have to re-enter credentials each time they visit.

Functional cookies: These cookies allow our website and applications to remember information you provide and choices you make (such as authentication status, language or display preferences, and organization/tenant context) so we can provide the service.

Performance cookies: These cookies or similar technologies may collect information about how visitors use our website, such as referring domain, frequency of visits to certain pages, and time spent during each visit. We use this information to monitor services and make improvements.

We do not use advertising, retargeting, or behavioral advertising cookies to sell or share your personal information with third parties for their own marketing purposes. Where third-party technologies are used solely to operate the service (for example authentication or payment), those providers process information under contractual confidentiality and security obligations and only as needed to provide their function.

Cookies by service (selection):

Carolina Software Engineering / ISIQ websites — Functional: site preferences and, where applicable, authenticated session context.
Firebase Authentication — Functional: sign-in, session, and account security for ISIQ.
Stripe — Functional (purchase flows): payment processing on hosted checkout; we do not store raw card numbers.
Cloud hosting (AWS) — Functional / Performance: deliver content, secure traffic, and operate application infrastructure.

How to control and delete cookies: Disabling cookies could cause certain features and functionalities of our website or applications not to work for you. The Help menu of most browsers explains how to prevent new cookies, prompt when you receive a cookie, or disable cookies altogether. Consult your browser manufacturer's documentation for details.

Internet tags: Internet tags (also known as single-pixel GIFs, clear GIFs, or similar) are smaller than cookies and may be used to collect limited data such as IP address and browser type. We may use this information to monitor activity for security and future improvement of our website.

Section E: Mobile Applications

ISIQ offers mobile applications to make it easier to use our Lockout / Tagout and related workplace safety tools in the field. We obtain information through your use of applications that you download and run on your mobile device. We may obtain information from, or access data stored on, your mobile device to provide services related to the mobile application. For example, a mobile application may: access a camera on your mobile device allowing you to upload photographs for Rapid Design or procedure documentation; access device storage needed to support offline use and sync; or access other device capabilities you affirmatively enable for the intended feature.

Our mobile applications may collect information related to your use of the application and information regarding your mobile device to support and improve the application and associated services. For example, actions taken in a mobile application or errors generated may be logged, along with associated device information.

You can configure our mobile applications, and limit the information accessed or obtained by the mobile application on your device, through your device settings, but doing so may cause the application not to work as intended. Information accessed or obtained by the mobile application may be accessible to you and your organization, depending on the intended functionality (for example procedure content, photos, or review activity associated with your account).

We regularly update our mobile applications. If your mobile device's settings permit and you choose to install updates, those updates may be downloaded and installed on your mobile device.

Section F: Active Information Volunteered

In addition to the passive information collected as described above, we actively collect information as you volunteer it when making certain requests or using our services. Some of the information collected is personal or unique to you (see Section A). Visitors to public marketing pages are not required to provide personal information to browse.

If during your visit you complete a form, send an email, purchase a license, accept an invitation, or perform another transaction, we may collect your name, company name, business email address, business phone number, job title, organization and site information, role, and/or payment-related information.

To protect payment card numbers for ISIQ purchases, we use a certified payment processor (Stripe) via hosted checkout in accordance with applicable card industry practices. The provider returns payment confirmation tokens. We do not see, process, or store customers' raw credit card information in our systems or databases.

CSE is a business-to-business (B2B) provider of software and professional services. Processing of personal information is based on providing contracted services to customer organizations. Any data we collect that can identify an individual will be protected and treated as applicable local laws dictate.

Personal information may be actively collected when volunteered through activities such as: contacting support; registering or accepting an account invitation; administering users, sites, and roles; creating or uploading procedures, training records, logos, and documents; requesting a demo, quote, or purchase; or completing feedback forms. We use this information to reply, deliver the service, notify you of service changes, and improve our offerings.

When you contact us, we may keep a record of your communication to help resolve issues. We may use your email address to send service-related messages (including invitations, password resets, billing notices, and product updates). We will ask for your consent before using information for a purpose other than those set out in this Privacy Policy, except where another lawful basis applies.

We reserve the right to disclose or transfer personal information collected through the Site: to protect the security of the Site; to protect ourselves against liability; to respond to subpoenas or other judicial processes; if we believe in good faith that the law requires it; or in connection with any sale, assignment, or other transfer of all or a part of our business.

Service providers (external processing): Like many companies, we may employ other companies and individuals to perform specific functions on our behalf (for example cloud hosting, authentication, email delivery, and payment processing). These providers have access to the information they require to perform their functions and are contractually restricted from using it for other purposes. We do not sell personal information, and we do not share customer data with third parties for their own marketing, advertising, analytics, or other independent purposes.

Third-party service integrations: Our websites and services may allow limited integration with online third-party services necessary to operate ISIQ (for example authentication or payment). When you enable such a feature, we collect only the information necessary for that integration. The privacy practices of those third parties are governed by their own policies.

Disclosure or processing of personal information as contemplated in this Policy may involve parties outside your jurisdiction (for example cloud infrastructure located in the United States). By using our services, you understand that information may be transferred to those locations as needed to provide the service.

Section G: Duration of the Processing

We will store and process your personal information for the period necessary depending on the purposes of the processing, the contractual relationship between us and your organization, and to comply with record retention laws and regulations.

Section H: Your Rights

People have different privacy concerns. Our goal is to be clear about what information we collect so that you can make meaningful choices about how it is used. Depending on applicable law, you may have the following rights with respect to your personal information:

Right of access and right to obtain a copy: You may request access to your personal information, as well as information about the purpose of the processing by us.

Right to rectification, erasure, or restriction: You may request that we rectify or erase your personal information as far as this does not interfere with contractual obligations or applicable legal retention requirements. You acknowledge that a refusal to share data or a request to erase data may make delivery of certain services impossible. You may also request that processing be restricted.

Right to object: Where applicable, you may object to certain uses of your personal information, including direct marketing.

Right to data portability: Where applicable, you may obtain personal information processed by us in a structured, commonly used, machine-readable format and/or request transfer to another controller.

Right to withdraw consent: When processing is based on your consent, you may withdraw consent.

Exercising your rights: For product accounts, organization administrators control directory membership and roles; we may need to work with your organization to fulfill certain requests. You may also contact us at support@carolinase.com or support@isiq.net.

Right to file a complaint: You may have the right to file a complaint with your local privacy authority. This does not affect proceedings before a civil court. If you have suffered damages caused by processing of your personal information, you may have a claim under applicable law.

Section I: Safety & Confidentiality

We have adopted safety measures suited on both a technical and an organizational level to help avoid destruction, loss, forgery, alteration, unauthorized access, or accidental disclosure of personal data to a third party, as well as unauthorized processing of these data.

In particular: we encrypt many of our services using SSL/TLS; we use authentication and access controls for accounts; and for multi-tenant products such as ISIQ, each customer organization's data is logically isolated from other tenants. Data belonging to one organization is not made available to other customers or used to serve other organizations. We do not sell, rent, or share customer data with third parties for their own marketing, advertising, analytics, or other independent purposes.

We shall not be liable in any way for direct or indirect damages caused by wrongful or improper use of personal data by a third party, except where liability cannot be limited by law. At all times you shall comply with safety standards, for instance by avoiding unauthorized access to your login credentials. You are responsible for use of the Site on your devices and for the confidentiality of your identification data.

Section J: Compliance and Cooperation with Regulatory Authorities

We regularly review our compliance with this Privacy Policy. When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with appropriate regulatory authorities, including local data protection authorities where applicable, to resolve complaints regarding personal information that we cannot resolve with our users directly.

Section K: Changes

From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage with a new "Last updated" date. If we make material changes, we may also notify you by other means, such as adding a statement to our website homepage or sending a notification. If required by applicable data protection laws, we will obtain your consent to material changes. Please review this Privacy Policy periodically.

Section L: Contact Information and Enforcement

Contact Information: If you have questions or concerns about our privacy policy, you may contact us at support@carolinase.com or support@isiq.net. Carolina Software Engineering, Charleston, SC.

Enforcement: We use a self-assessment approach to help assure compliance with this privacy policy and periodically verify that the policy remains accurate and accessible. We encourage interested persons to raise any complaints or concerns using the contact information provided in this section, and we will investigate and attempt to resolve concerns regarding the use and disclosure of personal information.