Privacy Policy
Last updated on 20th May 2024
PeopleStrong provides a Human Resource Management System (HRMS) application utilized by customers for managing HR activities. We are compliant with key legal frameworks such as the General Data Protection Regulation (GDPR, Europe), Service Organization Control (SOC), International Organization for Standardization (ISO), Personal Data Protection Act (PDPA, Thailand), and Digital Personal Data Protection Act (DPDP, India).
This privacy policy applies to all PeopleStrong employees, prospective employees, customer’ s employees, as well as website visitors. This Privacy Statement outlines the information we collect, how we utilize the provided information, and with whom we share it. Additionally, the statement elaborates on the choices and rights of data subjects/principals regarding the information provided to or collected by PeopleStrong.
How PeopleStrong Collect Information
From customers and their employees
As a service provider, PeopleStrong collects information solely based on the customer requirements. A contractual agreement between the customer and PeopleStrong governs the delivery, access, and usage of services, including the processing of personal information and data submitted through service accounts. The customer retains control over their employees PII (Personally Identifiable Information) data. If you have inquiries regarding the processing of personal information within the platform, or its privacy practices, please reach out to your organization’s SPOC.
PeopleStrong does not share or distribute such customer data except as outlined in the contractual agreement between PeopleStrong and the customer, or as required by law.
By agreeing to these terms, you irrevocable agree to the above and confirm that you have given the relevant approvals to your employer regarding usage of your PII and explicitly allow PeopleStrong to process or use the data including your PII, in a manner as agreed in the contractual agreement signed between PeopleStrong and your employer. In addition to this, PeopleStrong keeps doing some survey, analysis, etc. by using PII of PeopleStrong platform/services users, by signing into the application, you provide your explicit consent to use your PII for same.
From PeopleStrong employees
The categories of information, including Personal Data that PeopleStrong will collect from you (PeopleStrong Employees) to provide certain services are listed below: (Please note that the following list is not exhaustive in nature).
From Website visitors
PeopleStrong collects your personal data when you contact us to register for an event, request information (whitepapers, reports etc.), or register for a free trial/demo. This information is used to set up the account and for service-related communications.
PeopleStrong uses cookies, and website tracking technologies like Google Analytics, these cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site. For more information about cookies, please refer to the cookie policy.
From Minors
PeopleStrong’s services are not intended for or directed to children under the age of eighteen. The company does not knowingly collect personal information directly from children under the age of eighteen without parental consent. If the company is made aware that a child under the age of eighteen has provided their personal information, PeopleStrong will delete the information from its records.
The personal data of a child/minor is retained only when received by virtue of their parent being an employee or prospective employee of PeopleStrong or its customers. The retention period and nature of processing and handling for this type of data is the same as other personal data received.
When you choose to use a PeopleStrong mobile app we will collect information from your device, such as your contacts, or precise geolocation data, to enable some functions in accordance with your device settings. For more information about our mobile app, please see the section below on Mobile Applications
How PeopleStrong uses information
A detailed account of how PeopleStrong uses your personal data is provided below:
For Website Visitors:
PeopleStrong uses the data collected to contact the users/ visitors and other relevant individuals to provide services, and support. For example, if you provide data through the “Contact Us” form, your data will be used to respond to the request.
For Planning and Managing Events:
PeopleStrong uses your data for event planning and management, including registration, billing, and connecting with other event attendees or to contact you further about relevant products and services.
For Improvement Purposes:
PeopleStrong uses the data collected to understand how the websites and services are being used and to make improvements. For example, the company will solicit your feedback about your experience using our services, and ways to improve those services.
For Security and Investigations:
PeopleStrong will use your information to diagnose website technical problems, as well as to prevent, detect, mitigate, and investigate potential security issues, as well as fraudulent or illegal activity.
For Personalizing Experience:
PeopleStrong also use your data to personalize your experience on our websites. PeopleStrong or our service providers use website tracking technologies like, Google Analytics to display products, features, or content that are tailored to your interests and to present advertising on other sites.
For Market Research:
PeopleStrong will use your data for market research purposes. This is done via functionality reporting on the data collected from you.
Disclosure
PeopleStrong shares the information with its affiliates and third-party service providers or vendors that have been contracted to offer services on behalf of the Organization. These service providers or vendors are only permitted to use the disclosed data in accordance with the instructions provided by the Organization via binding contracts enforceable by the law.
PeopleStrong will not disclose customer data unless it is required to do so to comply with the statutory law or a binding order of a governmental body or a judicial authority. If a governmental body issues a notice or a directive to PeopleStrong to share the customer data, PeopleStrong will attempt to redirect the same to the Customer which shall be at the sole discretion of such authority. If compelled to disclose customer data to a government body, PeopleStrong will give customers reasonable notice of the demand to allow the customer to seek a protective order or other appropriate remedy unless PeopleStrong is legally prohibited from doing so.
PeopleStrong does not sell personal data that is collected or processed under this Privacy Statement.
Mobile Applications
When you are using our mobile application, PeopleStrong may access some features like camera, music, audio & video on your device, to provide desired services. For example, when you are using a PeopleStrong mobile application, we access your camera to allow you to upload photographs to the mobile service; access your calendar, social media, and contact information to allow you to interact with other event attendees; or access the geographic location of your device to enable you to identify nearby contacts.
Rights for Individuals
PeopleStrong honours your statutory rights when it comes to the processing of your personal data. To the extent provided by applicable data protection laws, you have the:
PeopleStrong will not discriminate against you for exercising your rights. You, or an authorized individual that we can verify is acting on your behalf, can exercise the applicable rights by contacting us using the contact details at the bottom of this Privacy Statement.
If your personal data has been submitted by or on behalf of a PeopleStrong’s customer and you wish to exercise any rights you have under applicable data protection laws, please inquire with the organization’s SPOC.
If the local regulations require certain categories of personal data to be retained for legal and regulatory purposes, a data subject’s right to erasure will not be fulfilled. In such situations, PeopleStrong shall provide the data subject with a notification explaining the reasons for unfulfillment of the request
Security
PeopleStrong employs reasonable and appropriate physical and logical security measures to protect personal information from loss, theft, misuse, unauthorized access, and unintentional disclosure, alteration, or destruction. However, the security of information transmitted through the internet can never be guaranteed. You are responsible for maintaining the security of your password or other form of authentication involved in accessing password-protected or secured resources. To protect you and your information, PeopleStrong will suspend your use of a website without notice, pending an investigation, if any security breach is suspected.
To ensure that the organization is following the principles of data protection and the mechanisms in place are effective, internal reviews are conducted on a defined frequency. External audits are also conducted periodically by our audit partners.
Data Retention
For customers and their employees
With respect to the data of employees of the customers, we retain the data as per terms and conditions mentioned as a part of contractual agreement. The customer shall define the data retention period for their data, taking into account the purpose for which the data was collected and processed, the applicable legal requirements, and the customer’s own data retention policies. For PeopleStrong employees
PeopleStrong in the capacity of controller stores your Personal Information for different time periods depending on the category of Personal Information and the nature of relationship that you have with the company. The PII is stored as per the internal policies & applicable legal requirements.
For an elaborate insight on the retention periods of individual categories of data collected by PeopleStrong please contact us at privacy@peoplestrong.com
Changes to This Privacy Statement
We reserve the right to change or update this Privacy Statement at any time. Changes to the Privacy Statement will be posted on this website. We encourage you to periodically review this Privacy Statement for any changes.
Global Privacy Considerations
Personal information collected by PeopleStrong is stored and processed in the India or in any other country where PeopleStrong or its affiliates, subsidiaries, or third-party service providers maintain facilities. We follow applicable data protection laws when transferring personal information.
Contacting PeopleStrong
Updating Your Choices
If you have any questions regarding our Privacy Statement, or if at any time after providing your personal information to PeopleStrong you want to update, change, unsubscribe, or request removal or deletion of your information, or if you would like to assert any of the rights listed above, please direct your request to privacy@peoplestrong.com / dpo@peoplestrong.com PeopleStrong will respond to your request within a reasonable timeframe
