How we handle your personal data

Our privacy program

CFCOR takes privacy seriously, and we work together to handle your data responsibly. Our Privacy Program is tailored to meet both legal requirements as well as your needs, through a foundation of:

Detailed analysis: we commit to carrying out Data Protection Impact Assessments to ensure proper treatment of data, in consultation with regulators where appropriate

Privacy by design: we integrate privacy by design into our products

Regular training: CFCOR staff that access and process customer personal data are trained on how to handle it, and are bound to maintain its confidentiality and security

News and updates: we share updates on developments to global privacy laws on our Privacy Policy page

Read more about how we handle your data below.

Security and certifications

Protecting our customers’ information and their user’s privacy is extremely important to us. We’re entrusted with some of our customer’s most valuable data, which is why we have built security into every layer of the CFCOR Cloud architecture. Visit the CFCOR Our Security page to learn more about our approach to security.

We’ve also devoted significant resources towards ensuring our Cloud products are built and designed in accordance with widely accepted standards and certifications. These standards mirror data privacy law requirements and give our customers a transparent framework by which to measure our software development and data management practices. To learn more about our Risk Management Program, current certifications, and commitments for our Cloud products, please ask a representative.

Though rare, data incidents may happen. We will assist with notifying regulators of breaches and promptly communicating any breaches to clients and users.

Does CFCOR Share My Personal Information?

Information about our users is an important part of our business and we are not in the business of selling our users’ personal information to others.  CFCOR shares users’ personal information only as described below and with the subsidiaries or affiliates of CFCOR that are either subject to this Privacy Notice or follow practices at least as protective as those described in this Privacy Notice.

Third party service providers: We employ other companies and individuals to perform functions on our behalf.  Examples include analysing data, providing marketing assistance, processing payments, transmitting content, and assessing and managing credit risk.  These third-party service providers only have access to personal information needed to perform their functions, but may not use it for other purposes. Further, they must process the personal information in accordance with our contractual agreements and only as permitted by applicable data protection laws.

Business transfers: As we continue to develop our business, we might sell or buy other businesses or services. In such transactions, user information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Policy (unless, of course, the user consents otherwise). Also, in the unlikely event that CFCOR or substantially all of its assets are acquired, user information will be one of the transferred assets.

Protection of CFCOR and others: We release account and other personal information when we believe release is appropriate to comply with the law or with our regulatory obligations; enforce or apply our Terms of Use and other agreements; or protect the rights, property or safety of CFCOR, our users or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.

International transfers of personal data

CFCOR may transfer your data outside of the European Economic Area (“EEA”). CFCOR puts in place suitable technical, organizational and contractual safeguards (including Standard Contractual Clauses), to ensure that such transfer is carried out in compliance with applicable data protection rules, except where the country to which the data is transferred has already been determined by the European Commission to provide an adequate level of protection.

How Secure is My Information?

We design our systems with your security and privacy in mind.  We work to protect the security of your personal information during transmission by using encryption protocols and software.

We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of your personal information. Our security procedures mean that we may ask you to verify your identity to protect you against unauthorised access to your account password. We recommend using a unique password for your CFCOR account that is not utilized for other online accounts and to sign off when you finish using a shared computer.

What Rights Do I Have?

If you have any questions or objection as to how we collect and process your personal information, please contact [email protected]. When you consent to our processing your personal information for a specified purpose, you may withdraw your consent at any time.

In addition, subject to applicable law, you have the right to request access to, correct, and delete your personal data, and to ask for data portability. You may also object to our processing of your personal data or ask that we restrict the processing of your personal data in certain instances, by contacting [email protected].