Privacy Policy

July 2015

Broadleaf Commerce, LLC, its affiliates and subsidiaries (collectively "Broadleaf") respect the privacy of our customers, business partners, and other visitors to our websites who may choose to provide Personal Information. We recognize the need for appropriate protections and management of Personal Information that you provide to us. This Privacy Policy will assist you to understand what types of information we may collect, how that information may be used, and with whom the information may be shared when you provide information within the broadleafcommerce.com domain of websites.

Scope

This Privacy Policy applies to data collected by Broadleaf.

What Personal Information does Broadleaf Collect?

On the Broadleaf web site you can request information, subscribe to marketing, create and manage your account, or view other materials. Broadleaf will collect Personal Information from you for these purposes. "Personal Information" for purposes of this Privacy Policy is information that identifies or can identify a specific individual including, but not limited to an individual’s name, address, telephone number, email address and/or contact preferences. Broadleaf does not collect Personal Information when you visit Broadleaf´s web sites unless you choose to provide it to Broadleaf.

Broadleaf does not intend to collect "Sensitive Information" which includes such items as: Personal Information specifying medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or information specifying the sex life of the individual. However to the extent this information is collected by Broadleaf the person providing such information will be given an affirmative or explicit (opt in) choice if such information is to be disclosed to a third party or used for a purpose other than those for which it was originally collected or subsequently authorized by the individual through the exercise of opt in choice.

How does Broadleaf use Personal Information?

Broadleaf will use Personal Information to provide current and potential customers and business partners with information and services and to help us better understand your needs and interests. Specifically, we use your information to welcome you and to provide ongoing service and support.

In accordance with applicable law, Personal Information collected may be transferred to, stored and processed in the United States or any other country in which Broadleaf, Broadleaf subsidiaries and affiliates, or service providers maintain facilities, even if the level of data privacy required is less than that required by applicable law of the originating country. By entering your personal data, you consent to the worldwide processing of your Personal Information by Broadleaf for these uses.

In addition, we may use aggregate demographic information to improve our websites, but that information is not personally identifiable.

With whom does Broadleaf Share Personal Information?

Broadleaf contracts with its affiliates and subsidiaries and with third party service providers and suppliers (including distributors and resellers) to deliver certain products, services and customer solutions and support. Examples of such services provided on our behalf include the delivery of mailings, hosting websites, processing transactions, planning events, and the provision of support and other services to enable the use of Broadleaf products. Broadleaf uses a recruitment partner to collect and process career applications. Broadleaf may share Personal Information with its service providers and suppliers to the extent needed to deliver the service, or to respond to requests for information on products or services, or to otherwise support the customers' business needs. In these instances, you will not have the opportunity to opt out of having your information shared with third party providers and suppliers, and they may contact you directly regarding such products or services.

Third party service providers and suppliers receiving Personal Information are expected to apply the same level of privacy protection as contained in this Privacy Policy. They are required to keep confidential and secure the Personal Information received from Broadleaf and they may not use it for any purpose other than as originally intended. However, unless otherwise dictated by law or agreement, Broadleaf is not responsible for any improper use by such parties.

We may also disclose Personal Information and the content of communications in order to: (a) comply with the law or respond to lawful requests, such as to comply with a subpoena or similar legal process; or (b) act in good faith to protect the rights or property of our business, employees, suppliers or customers, investigate fraud, or respond to a government request; or (c) to any other party with your prior consent to do so. If Broadleaf is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our web site of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information. Unless permitted by relevant laws or you have provided consent, Broadleaf will not share, sell, trade or lease your Personal Information to others, except as provided in this Privacy Policy.

Choice and Access

Broadleaf does not require that customers, business partners or non-employee visitors to Broadleaf websites provide Broadleaf with Personal Information. The decision to provide Personal Information is voluntary. If you do not provide the Personal Information requested, however, you may not be able to proceed with the activity or receive the benefit for which the Personal Information is being requested.

Broadleaf will send you service-related announcements on occasions when it is necessary to do so. For instance, if our service is temporarily suspended for maintenance, we might send you an email. Generally, you may not opt-out of these service-related communications. If you do not wish to receive them, you have the option to deactivate your account.

With respect to the sending of promotional materials, Broadleaf will offer you the opportunity to opt out before such materials are sent to you. You can always unsubscribe or choose not to receive promotional information from us by following the specific instructions in the email you receive or by notifying us via the appropriate method below. It may take a reasonable period of time to process your request, no longer than 30 days. This will not apply to the receipt of mandatory service communications that are considered part of certain Broadleaf services, which you may receive periodically unless you cancel the service.

You have the right to access to your Personal Information and to modification or deletion thereof in the event your Personal Information as stored by us is incorrect or otherwise unlawful. Broadleaf strives to keep your Personal Information accurate. We will provide you with access to your information when reasonable, or in accordance with relevant laws, including making reasonable effort to provide you with online access and the opportunity to change your information. To protect your privacy and security, we will take steps to verify your identity before granting access or making changes to your data. You have the right to withdraw any consent you've given with respect to our use of your Personal Information. Requests to delete Personal Information are subject to any applicable legal and ethical reporting or document retention obligations. To access and/or correct information, you can do so online or notify us via the appropriate method below depending on which site is at issue. Contact Broadleaf at  [email protected] or via mail at Broadleaf Commerce, 5700 Tennyson Parkway Suite #300, Plano, TX 75024, USA.

Broadleaf will retain your information for as long as your account is active or as needed to provide you services. Broadleaf will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Security of Personal Information

Broadleaf is committed to taking reasonable efforts to secure the personal data you choose to provide us. To protect the privacy of any Personal Information you may have provided, Broadleaf employs industry-standard physical and logical access controls that change in response to the changing regulatory and threat environments including Internet firewalls, intrusion detection, anti-virus protection, and network monitoring. If a password is used to help protect your accounts and Personal Information, it is your responsibility to keep your password confidential. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our web site, you can contact us at [email protected].

Web Beacons, Cookies and Display of Advertising

As is true of most web sites, Broadleaf and/or a third party service provider collects and/or logs Internet Protocol addresses, Internet domain names, the web browser and operating system used to access the Broadleaf web site, the files visited, the time spent in each file, and the time and date of each visit. Broadleaf collects these through the use of log files and web beacons. Web beacons are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of web users. In contrast to cookies, which are stored on a user’s computer hard drive, web beacons are embedded invisibly on web pages and are about the size of the period at the end of this sentence. Broadleaf does not tie the information gathered by web beacons to our customers’ personally identifiable information. Broadleaf uses this information, which does not identify individual users, to analyze trends, to administer the site, to track users’ movements around the site and to gather demographic information about our user base as a whole.

Broadleaf may also use cookies. Cookies are identifiers that can be sent from a web site via your browser to be placed on your computer's hard drive. Thereafter when you visit a web site, a message is sent back to the web server by the browser accessing the web site. You may elect not to accept cookies by changing the designated settings on your web browser. However, not utilizing cookies may prevent you from using certain functions and features of web sites. The information collected from the use of cookies is used and analyzed to improve Broadleaf´s web sites, such as by gaining a better understanding of your interests and requirements regarding our website. Cookies are linked to your Personal Information, such as your email address or password. You can set your browser to notify you when you are sent a cookie, giving you the chance to decide whether or not to accept it. The information we collect and analyze is used to improve our service to you and personalize your web-browsing experience.

For the Broadleaf website we may use the services of a third party vendor to help us measure the effectiveness of our advertising and how visitors use the site by using web beacons or cookies as described above. The type of information we collect includes the pages visited, navigation patterns, etc. This information helps us learn things such as what product information is of most interest to our customers and what kinds of offers our customers like to see. These third party tracking devices only collect data in the aggregate. Broadly speaking the cookies on the Broadleaf web sites fall into three categories:

Strictly Necessary: These are always enabled cookies required for site functionality. These include cookies that allow you to be remembered as you explore the site within a single session or, if you request, from session to session. They help make the search and account process run smoothly as well as assist in security issues and conforming to regulations.

Functional and Performance: These analytics cookies allow us to improve the site's functionality by anonymously tracking usage. They also help us identify Broadleaf products that we may recommend to you. In some cases these cookies improve the speed with which we can process your request, allow us to remember site preferences you've selected and help connect you to your social networks. De-selecting these cookies may result in poorly-tailored recommendations and slow site performance. You also may not be able to share effectively with Facebook, Twitter or other social networks.

Advertising: These cookies collect information to help better tailor advertising to your interests, both within and beyond Broadleaf web sites. The data collected is anonymous; it is not connected with any personal information you may have shared about yourself with Broadleaf. De-selecting these cookies may result in seeing advertising that is not as relevant to you.

Please note that the use of third party cookies and web beacons by any advertising partners are not covered by the Privacy Policy as we do not have access or control over these third party web beacons or cookies and those are covered by such third parties policies.

Broadleafcommerce.com may utilize framing techniques to make it appear that the user is still on the site when the user is actually on a third party web site. Widgets support functions that require that you disclose certain personally identifiable information given the user's choice of participation.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Managing contacts and sending messages: This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User. These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

Mailjet is an email address management and message sending service provided by SAS Mailjet. Personal Data processed: company name; email address; first name; last name. Place of processing: France – Privacy Policy.

Tag Management: This type of service helps the Owner to manage the tags or scripts needed on this Application in a centralized fashion. This results in the Users' Data flowing through these services, potentially resulting in the retention of this Data.

Google Tag Manager is a tag management service provided by Google LLC. Personal Data processed: Trackers; Usage Data. Place of processing: United States – Privacy Policy.

HubSpot Lead Management: This type of service provide various analytics techniques to track user behavior. Place of processing: Privacy Policy.

The Broadleaf web sites may provide links to third-party web sites for your convenience and information. If you access those links, you will leave the Broadleaf web site. Broadleaf does not control those sites or their privacy practices, which may differ from Broadleaf's. We do not endorse or make any representations about third party web sites and shall bear no liability for your use thereof. The personal data you choose to give to unrelated third parties is not covered by the Broadleaf Privacy Policy. We encourage you to review the privacy policy of any company before submitting your Personal Information.

Social Media and Sharing Options

Broadleaf’s web site may include social media features, such as the Facebook Like button and widgets, such as the Share this button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Site. Your interactions with these features are governed by the privacy policy of the company providing it.

Personal Information of our Customers' Clients

When we provide services to our customers, in some instances we process Personal Information about their clients ("Client Information") on their behalf. In these situations it is our customers rather than we who decide the reasons for which the Client Information will be processed. For details of how the Client Information will be used and protected, and details of how to access or correct the information, please refer to the privacy policy of the Broadleaf customer to whom you submitted your Personal Information. Relevant laws may oblige customers to require that we comply with the same security rules that they are subject to under such laws.

Children and Privacy

Our websites do not target and are not intended to attract children under the age of 13. Broadleaf does not knowingly solicit Personal Information from children under the age of 13 or send them requests for Personal Information.

Enforcement of this Privacy Policy

If you have questions regarding our compliance with this Privacy Policy you should first contact us by making a written submission to Broadleaf's Office of the General Counsel, at [email protected] or via mail at Broadleaf Commerce, 5700 Tennyson Parkway Suite #300, Plano, TX 75024, USA.

Changes to this Policy

Broadleaf will review and update this Policy periodically, and will note the date of its most recent revision above. If we make material changes to this Policy, we will notify you either by prominently posting a notice of such changes prior to implementing the changes or by directly sending you a notification. Should we undergo any sort of corporate reorganization in the future, you agree that we may provide your information to the resulting entity in which case we will follow these Change procedures. We encourage you to review this Privacy Policy frequently to be informed of how Broadleaf is protecting your information.