Privacy Policy

Effective date: January 31, 2024

Welcome to the website of Wizer, Inc (respectively, “Wizer”, “us”, “we”, or “our”: https://www.wizer-training.com/ (the “Website”). This privacy policy (“Privacy Policy”) informs you (“User”, “you”) of our policies regarding the collection, use and disclosure of Personal Data in our usual course of business, including when you use our Services (as defined below).

Please read this Privacy Policy carefully so you can fully understand our Personal Data practices. Please note that by using the Services, you agree with the practices set forth in this Privacy Policy. If you do not agree with such practices, you should not use the Services provided by us.

For the avoidance of doubt, if you are or the organization on whose behalf you use the Services is already our customer and have executed a Data Protection Agreement with Wizer, the terms of such agreement will supersede any contradiction in this Privacy Policy, unless otherwise specifically stated therein.

Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy shall have the same meanings as in our Terms and Conditions, accessible from www.wizer-training.com.

Definitions.
1. “Account Admin”: means the person(s) which licenses and/or delivers the Services to the End Users.
2. “End User”: means any individual who has access to and/or uses the Wizer’s Platform either as: (i) a member of an organization which is a customer of Wizer, or (ii) a direct customer.
3. “Personal Data”: Any information that can be used, alone or together with other data, to uniquely identify any living human being.
4. “Platform”: Wizer’s platforms, products and/or services.
5. “Services”: The Website and the Platform.
Personal Data We Collect and Its Sources.
1. Personal Data That You or Your Organization Provide to Us:
  1. When you browse or visit the Website:
    - Cookies.
    - Analytics tools.
    - Log files.
    - IP address.
  2. When you make use of the Website, including when you: (i) request/schedule a demo, (ii) ask us to contact you, (iii) subscribe to email updates, and (iv) request to become a partner; (v) Register or attend community events, live streams, podcasts or games and challenges available to visitors of the Website:
    - Full name.
    - Email address.
    - Company name.
    - Phone number.
    - Position.
    - Country.
    - Industry of operation.
    - Messages content.
    - Cookies.
    - IP address.
    - Any other information that you decide to provide/supply us.
  3. When you use the Platform, including when you: (i) become our customer, (ii) sign up for an account, log in, and/or purchase access to our Platform, (iii) create an Account Admin for your use of the Platform, or (iv) your Account Admin creates a user for your use of the Platform:
    - Full name.
    - Business email address.
    - Company name.
    - Phone number.
    - Position.
    - Country.
    - Industry of operation.
    - Password.
    - Usage Data.
    - Cookies.
    - IP address.
    - Contact information.
    - Any other information that the user may keep as part of the login process, to the extent that it includes Personal Data.
  4. When you interact with us on our social media profiles:
    - Full name.
    - Email address.
    - Company name.
    - Social media profile.
    - Any other information that the user may keep as part of the login process, to the extent that it includes Personal Data.
2. Personal Data about you Collected indirectly:
  - We may obtain Personal Data about you from the following sources (unless otherwise specified herein, the type of Personal Data we obtain from such sources is similar to that specified in Sections ‎2.1.1 to ‎2.1.4):
  1. Personal Data from Third-Party Services:
    - We may receive information about you from other sources, including through third-party services through which you may connect to Wizer (such as API integrations) and organizations that supplement information directly provided by you. Information collected through integrations and other connected third-party services may include your name, email address, logging information, etc. This information allows us to provide you with the Services and to enhance our ability to furnish information about our business and products.
  2. Personal Data from our Partners.
  3. Personal Data from third parties that have indicated that they have your consent or are otherwise legally permitted or required to disclose your Personal Data to Wizer.
  4. Personal Data from other individuals at your organization, or individuals who may refer Wizer to you, for the purpose of learning more about our Services.
  5. Personal Data from publicly available sources such as data in the public domain.
3. Information Collected Automatically:
  - We automatically receive technical information that may contain Personal Data when you use our Services. We use cookies or similar technologies to analyze trends, administer the Website, and track users’ activity related to the Services. This technical information may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Services that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data (collectively “Usage Data”).
  - The technology used to automatically collect such information from you may include cookies, log files, web beacons, tags, and embedded scripts. We use this information to analyze how people use the Service, to improve how our Services functionality, save your log-in information for future sessions, and to provide you with advertisements that may interest you. In addition, we and our marketing partners, affiliates, analytics, and service providers may use a variety of other technologies (such as tags) that collect similar information for security and fraud detection purposes, and we may use third parties to perform these Services on our behalf. For further information on cookies and how they are used for the Service, please visit our Cookie Policy at https://www.wizer-training.com/cookies-policy.
  - Please note that Certain web browsers may transmit “Do Not Track” signals to websites with which the browser communicates. However, due to differences in how web browsers interpret this feature and send those signals, and lack of standardization, we do not change our practices in response to such “Do Not Track” signals.
Account Admin(s).
- As an Account Admin, your Personal Data will be used to communicate with you for support purposes or to follow up on requests made by you or another End User in your organization. By uploading information as an Account Admin into our Services (such as phone number or email address), you hereby represent that it has been done at the discretion of the organization that you represent.
- The Account Admin’s organization is the 'controller' of the Personal Data, and Wizer acts as a 'processor' of the Personal Data. Wizer is legally bound by the applicable terms of the Services purchased, such as the Wizer Terms and Conditions, and/or other applicable agreements for services between Wizer and your organization, to only process data as authorized by the agreement(s) and/or upon the instruction of your organization.
Information We Process on Behalf of Our Customers.
- Our Services are primarily intended for business customers. Therefore, for much of the Personal Data we process through the Services, we act as a processor or service provider on behalf of our business customers. If you are an End User using our Services as a member of an organization, your organization has control (in accordance with the terms of its engagement with Wizer) regarding what Personal Data we collect through the Services and how we use it. If you are such an End User and have privacy related questions or concerns about the privacy choices that your organization has made relating to the processing of your information via the Services, you should contact your organization directly. Alternatively, if you wish to make your request directly via Wizer, please provide the name of the organization on whose behalf Wizer processes your Personal Data. We will refer your request to the organization and support them to the extent required by applicable law in responding to your request.
- For the avoidance of doubt, we are not responsible for our business customers’ privacy or data security practices, which may differ from this Privacy Policy.

Our Use of Data and the Legal Basis for Processing Personal Data.

	Purpose of the Use of the Personal Data	*Legal basis (GDPR and Data Protection Act only)**
1.	Enable your use and access of the Services.	Performance of a contract with you or with your organization. Legitimate interest (e.g. to provide you with Wizer Services).
2.	Manage payments to complete a transaction with you.	Performance of a contract with you or with your organization.
3.	Marketing purposes, such as news, special offers and general information about other Wizer goods, services, products and events.	Consent. Legitimate interest.
4.	Marketing, analytics, market research, to improve our Services.	Consent. Legitimate interest.
5.	Follow-up on an inquiry for our products and services (where you have requested)	Consent.
6.	Contact and communicate with you, whether through email, phone, and/or messages within the Services.	Performance of a contract with you or with your organization. Consent.
7.	To provide customer support.	Performance of a contract with you or with your organization.
8.	Maintain and improve your experience on the Website, (including trough cookies).	Consent. Legitimate interest.
9.	Improve and optimize our Services (including trough cookies).	Consent. Legitimate interest.
10.	Debugging to identify and repair errors with our Services.	Performance of a contract with you or with your organization. Legitimate interest.
11.	Security purposes such as investigations of suspicious activity (such as investigating fraud or misuse of our Website) or for compliance purposes.	Consent. Legitimate interest.
12.	Monitor the usage of our Services, including to prevent abuse or improper use of our Services.	Consent. Legitimate interest.
13.	Comply with legal obligations (for example in connection with anti-money laundering and counter terrorism legislation).	to comply with a legal obligation to which we are subject.

* The legal basis applies to you, only if you are from the European Economic Area (EEA) or the UK.

Retention of Data.
- Unless you request that we delete certain information (see Section ‎‎10 below), we will retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected. This includes satisfying any legal, regulatory, accounting, or reporting requirements, as well as ongoing fraud prevention, backup, and business continuity purposes. We have an internal data retention policy to ensure that we do not retain your Personal Data perpetually.
- We take reasonable steps to ensure that your Personal Data is accurate, complete, current, and otherwise reliable for its intended use. We will not process Personal Data in a way that is incompatible with the purposes for which it was collected. If we become aware that you provide Personal Data in violation of applicable privacy laws, we reserve the right to delete it.
Transfer of Data.
- Your Personal Data will be collected, transferred to, stored, and processed by us in the United States or any other country where we or our service providers maintain facilities. Therefore, we may transfer Personal Data from the European Economic Area (EEA), UK and Switzerland (collectively, “Europe”) to other countries that may not have the same level of data protection as applies in your jurisdiction. In these cases, we will take all the reasonably necessary steps to ensure that your Personal Data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place unless adequate data protection measures are in place. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to such transfer of data.
Security of Data.
- We have implemented appropriate technical, organizational, and security measures designed to protect your Personal Data. However, please note that we cannot guarantee that the information will not be compromised due to unauthorized penetration into our servers. The security of information depends in part on the security of the computer, device, or network you use to communicate with us, and the security measures you use to protect your user IDs and passwords, therefore, please ensure you take appropriate measures to protect this information.
Disclosure of Data.
- Wizer is not in the business of selling your Personal Data for monetary consideration. We view your information as a vital part of our relationship with you and only share it when reasonably necessary to provide our Services to you or enhance our relationship. There are, however, certain circumstances in which we may share your Personal Data with certain third parties without further notice to you. These circumstances include:
  1. Third Party Service Providers. We may engage third-party companies and individuals (“Service Providers”) to facilitate part or all of our Services, perform services in connection with the Services, or assist us in analyzing how our Services are used. We may use third-party service providers (such as Google Analytics) to monitor and analyze your use of our Service. We use the analytical information produced to improve and optimize the use of our Service.
  2. Partners. We may share your Personal Data with our business partners (including Channel Partners, such as referral partners, resellers, and managed service providers), for the purpose of assisting with sales, marketing and supporting their activities.
  3. Business Transaction. We may share all categories of your information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
  4. Disclosure for Law Enforcement. Under certain circumstances, Wizer, Inc may be required by law to disclose your Personal Data in response to valid requests by public authorities (e.g. a court or a government agency), or in the good faith belief that such actions are necessary to: (a) comply with a legal obligation, (b) protect and defend the rights or property of Wizer, (c) prevent or investigate possible wrongdoing in connection with the Services, (d) protect the personal safety of users of the Services or the public, and/or (e) protect against legal liability.
  5. Consent. Instances in which you have consented to us sharing Personal Data.
Your Data Protection Choices and Rights.
- Under the applicable data protection laws, you may have certain rights associated with your Personal Data. You or your organization (as applicable) may request Wizer to honor these rights by contacting us as outlined in the “Contact Us” section below.
- Please note that we may ask you to verify your identity before responding to such requests. Verifying your request will require you to provide sufficient information for us to reasonably verify that you are the person about whom we collected Personal Data. We will only use the Personal Data that you have provided in a verifiable request to verify your request. We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority. Please note that we may charge a reasonable fee or refuse to act on a request if such request is excessive, repetitive, or manifestly unfounded.
For Individuals Located in the European Economic Area (EEA), United Kingdom (UK) or Switzerland:
- If you are a resident of the European Economic Area (EEA), UK or Switzerland you may have certain rights under applicable data protection laws in relation to your Personal Data. Under certain circumstances, you may have the following rights:
  - The right to access the Personal Data held about you.
  - The right to request that we rectify any Personal Data we hold that is inaccurate or misleading.
  - The right to request the erasure/deletion of your Personal Data from our records. Please note that there may be circumstances in which we are required to retain your Personal Data, for example for the establishment, exercise, or defense of legal claims.
  - The right to object to or to request restriction of the processing of your Personal Data.
  - The right to data portability. This means that you may have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
  - The right to not being subject to a decision based solely on automated processing, including profiling, which produces adverse legal effects.
  - The right to withdraw your consent at any time. Please note that there may be circumstances in which we are entitled to continue processing your data, in particular if the processing is required to meet our legal and regulatory obligations. Also, please note that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  - The right to request certain details of the basis on which your Personal Data is transferred outside the European Economic Area, but data transfer agreements and/or other details may need to be partially redacted for reasons of commercial confidentiality.
  - The right to lodge a complaint with your local data protection supervisory authority (i.e., your place of habitual residence, place or work or place of alleged infringement) at any time or before the relevant institutions in your place of residence. We ask that you please attempt to resolve any issues with us before you contact your local supervisory authority and/or relevant institution.
For California Residence Individuals:
- If you are a resident of the State of California, you may have certain rights under applicable data protection laws in relation to your Personal Data:
  1. “Shine the Light” and “Eraser” Laws. You may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties’ direct marketing purposes. If you are a minor permitted to register as a user of our Services, you may request to remove or obtain the removal of content or information that you posted on our Services.
  2. California Consumer Privacy Act (“CCPA”)/California Privacy Rights Act (“CPRA”). The CCPA, as amended by the CPRA, provides California residents and/or their authorized agents with specific rights regarding the collection and processing of their personal information. Under certain circumstances, you as a California resident may have the following rights:
    1. The Right to Know. You may have the right to request that we disclose the following information to you about our collection and use of your Personal Data over the past twelve (12) months. Upon verification of your identity, we may disclose to you:
      - The categories of Personal Data we have collected about you.
      - The categories of sources for the Personal Data we have collected about you.
      - The specific pieces of Personal Data we have collected about you.
      - Our business or commercial purpose for collecting or “selling” your Personal Data as defined by the CCPA.
      - The categories of third parties to whom we have sold or shared your Personal Data, if any, and the categories of Personal Data that we have shared with each third-party recipient.
    2. The Right to Opt-Out of “Sale” or “Sharing” of Personal Data. California residents may have the right to opt-out of the “sale” or “sharing” of their Personal Data as defined by the CCPA by contacting us via the information in the “Contact Us” section below.
    3. The Right to Limit Use of Sensitive Personal Information. California residents may have the right to request that businesses limit the use of any sensitive Personal Data to those uses which are necessary to perform the Services or for other specifically enumerated business purposes under the CCPA, as amended by the CPRA. Please note that we do not use sensitive personal information other than as necessary to perform the Services (if necessary) or as specifically permitted under the CCPA.
    4. The Right to Delete. California residents may have the right to request that we delete any of the Personal Data collected from you and retained by us, subject to certain exceptions. Your request to delete Personal Data that we have collected may be denied if we conclude it is necessary for us to retain such Personal Data under one or more of the exceptions listed in the CCPA.
    5. The Right to Correct. Under the CCPA, as amended by the CPRA, California residents may have the right to request that we correct any inaccurate Personal Data we maintain about them, considering the nature of the Personal Data and the purposes for which we are processing such personal information. We will use commercially reasonable efforts to correct such inaccurate Personal Data about you.
    6. The Right to Non-Discrimination. You will not receive any discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.
Payments.
- We use third-party services for payment processing (e.g. payment processors). We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your payment related Personal Data is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.
- The payment processors we work with are:
- Stripe: Their Privacy Policy can be viewed at https://stripe.com/us/privacy.
Links to Other Sites.
- Our Services may contain links to other websites that are not owned and/or operated by us (“Third Party Websites”). We are not responsible for the privacy practices or content of such Third-Party Websites. Please be aware that Third Party Websites can collect Personal Data from you. Accordingly, we encourage you to read the terms and conditions and privacy policies of each Third-Party Service.
Wizer’s Report Phishing Extension.
- Certain Users of the Services may download the Wizer Report Phishing button extension for Google Workspace. Wizer’s Report Phishing button extension for Google Workspace use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Children's Privacy.
- Our Services are not intended for persons under the age of 18. Thus, we do not intentionally gather Personal Data from visitors who are under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us at privacy@wizer-training.com. If we become aware that we have collected Personal Data from persons under the age of 18, we may take steps to delete it.
Changes to This Privacy Policy.
- We may update our Privacy Policy from time to time. We will notify you of any changes by posting the updated Privacy Policy on this page. We will let you know via email or a prominent notice on our Website or Platform, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page. Your continued use of the Services after we amend the Privacy Policy is deemed acceptance of those changes.
Contact Us.
- Please direct any inquiries, requests, or complaints regarding our compliance with this Privacy Policy and/or data protection laws, or if you wish to exercise your rights to privacy@wizer-training.com. If you are an End User using our Services via your organization’s account, we recommend you reach out to your Account Admin to exercise your rights. You may also email privacy@wizer-training.com and we will (if applicable) reach out to the relevant officer in your organization.