Effective 01 May 2021
What ‘Personal Information’ do we collect?
To provide you the Services, we must collect Personal Information relating to an identified or identifiable natural person (“Personal Information”). We collect Personal Information you provide us, from your use of the Services, and from other sources. Here are the types of Personal Information we collect about you:
Information you provide us. When you register for our Services, use any of our Services; and/or when you contact us directly by any communication channel (e.g., support tickets, emails), you may provide us Personal Information, such as name, email address, phone number, payment information (for Users with Paid Services), information you include in your communications with us and with other users on our platform, and Personal Information contained in scanned identification documents (such as an ID card, driver’s license, passport, or official company registration documents).
Information we collect when you use the Services. When you visit, download, and/or use any of our Services, we may collect aggregated usage Personal Information, such as Visitors’ and Users’ browsing and ‘click-stream’ activity on the Services, session heatmaps and scrolls, non-identifying Personal Information regarding the Visitor’s or User’s device, operating system, internet browser, screen resolution, language and keyboard settings, internet service provider, referring/exit pages, date/time stamps, etc. While using our Mobile apps (ZebiHR app), we collect your location information as part of "Trips" service with your prior permission to track your trip route.
Information we collect from other sources. We may receive Personal Information about you from third-party sources, such as i) security providers , fraud detection and prevention providers for example to help us screen out users associated with fraud, ii) social media platforms, when you log-in or sign-up using your social media account, we may receive Personal Information from that service (e.g., your username, basic profile Personal Information) and in some cases, we may collect Personal Information from lead enhancement companies which help us to improve our service offering; iii) advertising and marketing partners in order to monitor, manage and measure our ad campaigns.
Users of users ‘Personal Information’
We may also collect Personal Information pertaining to visitors and users of our User’s platform or services (“Users-of-Users”), solely for and on our Users’ behalf
Why do we collect such ‘Personal Information’
We use your Personal Information for the following purposes:
To provide and operate the Services; for instance your location data is used to track your trip route as part for trips service
.To further develop, customize, expand, and improve our Services, based on Users’ common or personal preferences, experiences and difficulties;
To provide our Users with ongoing customer assistance and technical support;
To be able to contact our Users with general or personalised service-related notices and promotional messages (as further detailed in section below);
To help us to update, expand and analyze our records to identify new customers;
To facilitate, sponsor, and offer certain contests, events, and promotions, determine participants’ eligibility, monitor performance, contact winners, and grant prizes and benefits;
To analyze our performance and marketing activities;
To create aggregated statistical data and other aggregated and/or inferred information, which we or our business partners may use to provide and improve our respective services;
To provide you with professional assistance , only upon your request;
To enhance our data security and fraud prevention capabilities; and
To comply with any applicable laws and regulations.
We use your Personal Information for the purposes set out where:
Our use of your Personal Information is necessary to perform a contract or to take steps to enter into a contract with you (e.g. to provide you with our platform, to provide you with our customer assistance and technical support);
Our use of your Personal Information is necessary to comply with a relevant legal or regulatory obligation that we have; or
Our use of your Personal Information is necessary to support legitimate interests and business purposes (for example, to maintain and improve our Services and the effectiveness of ZebiHR by identifying technical issues), provided it is conducted in a way that is proportionate and that respects your privacy rights.
How we share your ‘Personal Information’
We may share your Personal Information with service providers and others (or otherwise allow them access to it) in the following manners and instances:
Third Party Service Providers: ZebiHR has partnered with a number of selected service providers, whose services and solutions complement, facilitate and enhance our own. These include hosting and server co-location services, communications and content delivery networks (CDNs), data and cyber security services, billing and payment processing services, fraud detection and prevention services, web analytics, e-mail distribution and monitoring services, session recording and remote access services, performance measurement, data optimization and marketing services, content providers, and our legal and financial advisors (collectively, “Third Party Service Provider(s)”).
We may share the following categories of Personal Information with Third Party Service Providers for a business purpose:
identifiers, including name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers
commercial information, for example information regarding products or services purchased, obtained, or considered
Law Enforcement, Legal Requests and Duties: We may disclose or otherwise allow access to your Personal Information pursuant to a legal request, such as a subpoena, legal proceedings, search warrant or court order, or in compliance with applicable laws, if we have a good faith belief that the law requires us to do so, with or without notice to you.
Social Media Features and Framed Pages: Our Services include certain Social Media features, widgets, and single sign on features or other interactive mini-programs (“Social Media Features”). These Social Media Features may collect certain Personal Information such as your IP address or which page you are visiting on our Website and may set a cookie to enable them to function properly. Social Media Features are either hosted by a third party or hosted directly on our Services. Your interactions with these third parties’ Social Media Features are governed by their policies and not ours.
In addition, our Services may enable you to share your Personal Information with third parties directly, such as via page framing techniques to serve content to or from Third-Party Service Providers or other parties, while preserving the look and feel of our Website and Services (“Frames”). Please be aware that if you choose to interact or share any Personal Information via such Frames, you are in fact providing it to these third parties and not to us, and such interactions and sharing are governed by those third parties’ policies and not ours.
Reseller Partners: As part of our Channel Partner Market program, we allow third party system integrators (“Third Party System Integrator(s)”) to offer our own applications.
Each Third Party System Integrator is bound by the ZebiHR Channel Partner – Program Agreement, which among others, contains restrictions on how they may access, store, share, and use the Personal Information you and/or your Users-of-Users provide them or us.
You are solely responsible for notifying your Users-of-Users of the collection, processing and use of their Information and informing them that their Information will be transferred to and processed by ZebiHR on your behalf.
Sharing Personal Information from ZebiHR subsidiaries and affiliated companies in the European Union and Switzerland to United States will be only when the relevant Model Standard Contractual Clauses are in place .
Connection With a Change in Corporate Control: In addition, should ZebiHR or any of its affiliates undergo any change in control, including by means of merger, acquisition or purchase of substantially all of its assets, your Personal Information may be shared with the parties involved in such event.
Upon Your Further Direction: ZebiHR may also share your Personal Information with third parties for other purposes upon your further direction or with your explicit approval.
Where do we store your ‘Personal Information’?
Users’ and Users-of-Users’ Personal Information may be stored in data centers located in India, United States of America, Ireland and Japan. We may use other jurisdictions as necessary for the proper delivery of our Services and/or as may be required by law.
ZebiHR Ltd. is based in India, which is considered by the European Commission to be offering an adequate level of protection for the Personal Information of EU Member State residents.
ZebiHR affiliates and Third-Party Service Providers that store or process your Personal Information on ZebiHR’s behalf are contractually committed to keep it protected and secured, in accordance with industry standards and regardless of any lesser legal requirements which may apply in their jurisdiction.
Transfer of EU Personal data: If you are located in Europe, when we will transfer your Personal Information to the United States or anywhere outside Europe, we will make sure that (i) there is a level of protection deemed adequate by the European Commission or (ii) that the relevant Model Standard Contractual Clauses are in place.
Users of users' ‘Personal Information’
ZebiHR may collect, store and process certain Personal Information of Users-of-Users (“Users-of-Users Information”), solely on our Users’ behalf and at their direction.
For such purposes, ZebiHR serves and shall be considered as a “Processor” and not as the “Controller” (as both such capitalized terms are defined in the European Union General Data Protection Regulation (“GDPR”)) of such Users-of-Users Information.
The Users controlling and operating such User Platform shall be considered as the “Controllers” of such Users-of-Users Information, and are responsible for complying with all laws and regulations that may apply to the collection and control of such Users-of-Users Information, including all privacy and data protection laws of all relevant jurisdictions.
The Processing of the Users-of-users’ Personal Information shall take place within the territory of the European Union, India or a third country, territory or one or more specified sectors within that third country of which the European Commission has decided that it ensures an adequate level of protection and such processing and transfer will be in accordance to the Data Processing Agreement – Users (“DPA"). Any transfer to and Processing in a third country outside the European Union that does not ensure an adequate level of protection according to the European Commission, shall be undertaken in accordance with the the Standard Contractual Clauses (2010/87/EU) set out in Annex 1of the DPA. For the sake of clarity, “Processing” should be understood as per the definition provided in the DPA.
You are responsible for the security, integrity and authorized usage of Personal Information about Users-of-Users’, and for obtaining consents, permissions and providing any required data subject rights and fair processing notices required for the collection and usage of such Personal Information.
ZebiHR cannot provide legal advice to Users or their Users-of-Users, however we do recommend that all Users publish and maintain clear and comprehensive privacy policies on their User Websites in accordance with any applicable laws and regulations, and that all Users-of-Users carefully read those policies and make sure that they understand and, to the extent required by applicable law, consent to them.
If you are a visitor, user or customer of any of our Users, please read the following: ZebiHR has no direct relationship with Users-of-Users whose Personal Information it processes. If you are a visitor, user or customer of any of our Users, and would like to make any requests or queries regarding your Personal Information, please contact such User(s) directly. If ZebiHR is requested by our Users to remove any Users-of-Users’ Personal Information, we will respond to such requests in a timely manner upon verification and in accordance with applicable law (for example, thirty (30) days under the GDPR). Unless otherwise instructed by our User, we will retain their Users-of-Users’ Personal Information for the period set forth in Section below.
Communications from ZebiHR
We may use your Personal Information to send you promotional content and messages by e-mail, text messages, notifications within our platform, marketing calls and similar forms of communication from ZebiHR or our partners (acting on ZebiHR's behalf) through such means.
If you do not wish to receive such promotional messages or calls, you may notify ZebiHR at any time or follow the “unsubscribe” or STOP instructions contained in the promotional communications you receive.
Service and billing messages
ZebiHR may also contact you with important information regarding our Services, or your use thereof. For example, we may send you a notice (through any of the means available to us) if a certain Service is temporarily suspended for maintenance; reply to your support ticket or e-mail; send you reminders or warnings regarding upcoming or late payments for your current or upcoming subscriptions; forward abuse complaints regarding your User Website; or notify you of material changes in our Services.
It is important that you are always able to receive such messages. For this reason, you are not be able to opt-out of receiving such Service and Billing Messages unless you are no longer a ZebiHR User (which can be done by deactivating your account).
Your rights in relation to your 'Personal Information'
ZebiHR agrees that it is imperative that you have control over your Personal Information. Pursuant to privacy regulations worldwide, ZebiHR is taking steps to enable you to request access to, receive a copy of, update, amend, delete, or limit the use of your Personal Information.
Before fulfilling your request, we may ask you for additional information in order to confirm your identity and for security purposes. We reserve the right to charge a fee where permitted by law (e.g. if your request is unfounded or excessive).
You have the right to file a complaint with your local supervisory authority for data protection (but we still recommend that you contact us first).
If you are a ZebiHR User, and you wish to receive a copy, access and/or request us to make corrections to the Personal Information that you have stored with us (either yours or your Users-of-Users’), or wish to request a list of what Personal Information (if any) pertaining to you we disclosed to third parties for direct marketing purposes, please contact us via the email privacy@zebiHR.com. You can also mail your request to Zebience Solutions LLP, C305, Eastern Business District, Metro Mall, LBS Rd, Bhandup W, Mumbai - 400078, India. We will make reasonable efforts to honor your request promptly (unless we require further information from you in order to fulfil your request), subject to legal and other permissible considerations.
Please note that permanently deleting your ZebiHR account erases all of your Personal Information from ZebiHR's databases. After completing this process, you can no longer use any of your ZebiHR Services, your account and all its data will be removed permanently, and ZebiHR will not be able to restore your account or retrieve your data in the future. If you contact our support channels in the future, the system will not recognize your account and support agents will not be able to locate the deleted account.
Questions and Complaints
Our Data Protection Officer team will investigate the complaint and determine whether a breach has occurred and what action, if any, to take. We take every privacy complaint seriously and will make all reasonable efforts to resolve your complaint promptly and in accordance with applicable law.
You can file a complaint with your local supervisory authority for data protection at any time, however we recommend that you contact us first so we can try to resolve it.
We may continue to retain your Personal Information after you deactivate your User Account and/or cease to use any particular Services, as reasonably necessary to comply with our legal obligations, to resolve disputes regarding our Users or their Users-of-Users, prevent fraud and abuse, enforce our agreements and/or protect our legitimate interests.
We maintain a data retention policy which we apply to Personal Information in our care.
ZebiHR has implemented security measures designed to protect the Personal Information you share with us, including physical, electronic and procedural measures. Among other things, we offer HTTPS secure access to most areas on our Services; the transmission of sensitive payment information (such as a credit card number) through our designated purchase forms is protected by an industry standard SSL/TLS encrypted connection; and we regularly maintain a PCI DSS (Payment Card Industry Data Security Standards) certification. We also regularly monitor our systems for possible vulnerabilities and attacks, and regularly seek new ways and Third Party Services for further enhancing the security of our Services and protection of our Visitors’ and Users’ privacy.
Regardless of the measures and efforts taken by ZebiHR, we cannot and do not guarantee the absolute protection and security of your Personal Information, your Users-of-Users’ Personal Information or any other information you upload, publish or otherwise share with ZebiHR or anyone else. We encourage you to set strong passwords for your User Account and avoid providing us or anyone with any sensitive Personal Information of which you believe its disclosure could cause you substantial or irreparable harm.
Furthermore, because certain areas on our Services are less secure than others (for example, if you set your Support ticket to be “Public” instead of “Private”, or if you browse to a non-SSL page), and since e-mail and instant messaging are not recognized as secure forms of communications, we request and encourage you not to share any Personal Information on any of these areas or via any of these methods.
If you have any questions regarding the security of our Services, you are welcome to contact us at privacy@zebiHR.com.
Public forums and user content
Our Services offer publicly accessible blogs, communities and support forums. Please be aware that any Personal Information you provide in any such areas may be read, collected, and used by others who access them. To request removal of your Personal Information from our blogs, communities or forums, feel free to contact us at: privacy@zebiHR.com. In some cases, we may not be able to remove your Personal Information from such areas. For example, if you use a third party application to post a comment (e.g., the Facebook social plugin application) while logged in to your related profile with such third party, you must login into such application or contact its provider if you want to remove the Personal Information you posted on that platform.
In any event, we advise against posting any Personal Information (via any means) you don’t wish to publicize.
If you upload any user content to your User Account or post it on your User Website and provide it in any other way as part of the use of any Service, you do so at your own risk.
We have put adequate security measures in place to protect your Personal Information. However, we cannot control the actions of other Users or members of the public who may access your User Content, and are not responsible for the circumvention of any privacy settings or security measures you or we may have placed on your User Website (including, for instance, password-protected areas on your Website). You understand and acknowledge that, even after its removal by you or us, copies of User Content may remain viewable in cached and archived pages or if any third parties (including any of your Users-of-Users) have copied or stored such User Content. To clarify, we advise against uploading or posting any information you do not wish to be public.
Updates and Interpretation
You may also contact us by mail at:
C305, Eastern Business District, Metro Mall, LBS Rd, Bhandup W, Mumbai - 400078, India