Privacy Policy

Scope

This policy pertains to the privacy of individuals whose data is collected by Crewhu while delivering services. This policy explains how we collect, process, and store such data.

Collection

Crewhu obtains your data from companies, employees, and customers with which Crewhu has a legal or business relationship.

Crewhu does not intentionally request or require sensitive personal data, such as health, biometric, financial account, government identification, or other special category data, to provide the Services. Customers are responsible for the data they choose to submit to the Services and should not submit sensitive personal data unless they are authorized to do so and have determined that such submission is appropriate under applicable law.

Registration Data: When registering for our services, companies will provide us with information (such as, company name, individual name, company address, work phone number, mobile phone number and email address).

Employee Data: For our customers’ authorized personnel to use our program, they are required to provide their first name, last name and email. Optional information collected includes employee birthday (month/day) and hire date.

Customer Data: When using our Customer Satisfaction module, we collect customer company name, customer contact name, phone number, email, and customer feedback either through integration or through manual input.

Cookies: Our servers may retain information in cookies about your session when you enter and use our service.

Server Logs: Our server logs record system information when our service is used.

Uses

Data collected will be processed in accordance with applicable law and regulations regarding data privacy. Personal data will be processed, stored and disclosed only for business purposes as described below.

We may use data for the following purposes:

• to provide the highest possible level of service;

• to notify users about our products and services;

• for other administrative purposes and for internal analysis; and

• to participate as part of a survey or to get feedback.

Cookies: To make Crewhu work even better for users, we also use 'cookies' to collect information about use of the website. Cookies are a feature of web browser software that allows web servers to temporarily store information within a user’s browser, which in turn allows us to recognize the computer used to access Crewhu. Most browsers automatically accept cookies, however, users can delete existing cookies.

Aggregate Non-Identifiable Information: We use aggregate non-identifiable information to improve our service and to benchmark data. We use marketing tools to log when users view specific pages or take specific actions when using our service. This allows us to provide targeted marketing in the future.

Email Marketing: You may receive marketing emails from us. You can always 'unsubscribe' or 'opt-out' of those emails within the body of the email.

Disclosure and Sharing

Legal Requirements: We may be required by law to disclose your information, and we will try to take reasonable steps to limit any such disclosure when legally possible.

Service Providers: We will not disclose your data to any third parties except where necessary for the purposes of providing our service. We may disclose your information if required by any applicable law, subpoena, or regulation. We may also disclose your data to third-party credit card processors and professional advisors acting on our behalf who are obliged to keep that data confidential. We may also use external service providers and data processors to provide, host, maintain, support, bill for, communicate about, and improve the service. Additional information regarding external data processors and general data processing locations is available in Crewhu’s GDPR Policy.

Data Processing Locations: Your data may be processed in the United States and other locations where Crewhu or its service providers operate, subject to applicable law and reasonable safeguards designed to protect personal data.

Change of Ownership: If we are acquired or otherwise sell our business, we will transfer all of your information to the successor entity.

Data Retention

We only retain the data collected for as long as an account is active or otherwise for a limited period of time as long as we need it to fulfill the purposes for which we have initially collected it, unless otherwise required by law. We will retain and use information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Upon applicable request and subject to legal, operational, and service retention requirements, Crewhu will delete or anonymize applicable Personal Data within a reasonable time. Crewhu may provide standard confirmation of completion but does not provide customized deletion reports or individualized audit documentation for standard subscriptions.

Data Security

We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical, and physical safeguards to protect data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the data in our possession. These safeguards may include access controls, secure authentication practices, encryption in transit, backup practices, and restricted access based on business need.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store on the service, and users do so at their own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.

If we learn of a security system breach, we will inform users and the authorities of the occurrence of the breach in accordance with applicable law. If Crewhu becomes aware of a security incident affecting personal data, Crewhu will review and respond to the incident in accordance with applicable law.

Access to Data and Data Subject Rights

We respect our users’ privacy rights and provide reasonable access to the data that users may have provided while using our services. If users wish to access or amend any data we hold about them or to request that we delete information about them that we have obtained, users may contact us as set forth in the “Privacy Concerns or Questions” section. At our customer’s request, we will have any reference to specific users deleted or anonymized.

Where applicable, users may request to exercise privacy rights available under applicable law, including correction, deletion, access, restriction, or other rights under GDPR and UK data protection laws. Because Crewhu provides the service on behalf of its customers, requests relating to data controlled by an active customer account may need to be directed to that customer or handled in coordination with that customer. Requests may be subject to verification, legal limitations, and Crewhu’s role as a service provider or processor.

Users may decline to share certain data with us, in which case we may not be able to provide some of the features and functionality of our service.

Other Terms

Application of this Policy: By registering for our service, users agree to comply with the terms of this Privacy Policy and grant Crewhu the right to process their data as set forth in the“Uses”section.

Standard Subscriptions and Public Documentation: For standard subscriptions, customers agree to Crewhu’s public Terms of Use at signup, and Crewhu does not provide separately signed agreements. Crewhu provides privacy and security information through its standardized public documentation, including this Privacy Policy, the GDPR Policy, Terms and Conditions, and related public support resources. Crewhu does not complete customer-specific security questionnaires, perform customized privacy or security assessments, or execute customized or customer-provided privacy, security, data processing, or vendor compliance documents for standard subscriptions.

Confidential Security Materials: Crewhu does not provide confidential security materials, penetration test reports, vulnerability scan results, infrastructure diagrams, employee records, insurance certificates, or other non-public security documentation for standard subscriptions.

No Under Age 13: We do not intentionally gather information about users who are under the age of 13.

Links to Third Party Sites/Services: Our service may contain links to other websites and services, which are owned and controlled by others. These websites and services have their own policies regarding privacy. Crewhu does not ensure or warrant third-party site/services privacy practices and encourages users to review those policies.

Revisions to this Policy: We may change this policy at any time, but we will notify you of any material changes to this policy.

Privacy Concerns or Questions

If you have any questions or concerns regarding this policy or Crewhu’s data privacy practices, please direct them first to privacy@crewhu.com