Privacy Policy

Last Updated: September 24, 2020

Introduction

At Lullabot Inc. we take your privacy rights and your expectation of privacy very seriously. Our Privacy Policy has changed significantly, and we strongly encourage you to read the policy and to let us know if you have any questions

This Privacy Policy describes Lullabot's policies and procedures regarding the collection, use and disclosure of information which you provide when you access the lullabot.com website (the “Website”) when you use the related services and features offered on the Website, and when you register to receive Lullabot's emails and related communications (the Website, the related services, features and emails, any other products and/or services offered by Lullabot are collectively referred to as the “Lullabot Communications”).

Lullabot will not use or share your information, which it obtains through your use of the Lullabot Communications for any purpose or with anyone except as described in this Privacy Policy. However, please note that this Privacy Policy does not apply to information we collect by other means or from other sources.

How we collect your information

Information You Provide. When you access the Website, subscribe to or use any Lullabot Communications, or at other times, we may collect and store personally identifiable information (generally defined to mean information that can be used on its own or with other information to identify, contact or locate a single person, or identify an individual in context) about you that may include, your name, e-mail addresses, information regarding your computer system, and other information.

Cookies. For each visitor to our Website, our web server may automatically attempt to identify the user through a cookie placed within the user’s web browser (a cookie is a message given to a web browser by a web server; the browser stores the message in a text file; the message is then sent back to the server each time the browser requests a page from the server). This is done to provide users with more relevant access to the Website. From time to time we may also track information, in the aggregate, on pages and features that users access or view. The activity is collected and stored in our server’s log files.

We may log Internet Protocol (IP) addresses, or the location of your computer on the Internet, for systems administration and troubleshooting purposes. We use this information in an aggregate fashion to track access to the Website. Our email newsletters utilize tracking technology that allows us to see how many newsletter e-mails are opened and the e-mail address of users who have clicked on a given feature. We use this information for internal purposes, to measure the aggregate number of people who view a given newsletter item.

Third-Party Vendors and Service Providers. We may use third-party vendors and service providers to assist in providing the Lullabot Communications. These vendors may use cookies, web beacons, or similar technologies to provide services to us. In doing so, these vendors may collect non-personal information such as your browser type, your operating system, Web pages visited, time of visits, content viewed, ads viewed, and other clickstream data. You may have additional rights regarding opt-out of services offered by our third-party vendors if you reside in a jurisdiction such as the European Economic Area which provides for enhanced user rights.

How we process your personal information

The following sets forth the ways we process your personal information. For residents of the European Economic Area, this disclosure is required by GDPR Articles 13 and 14. GDPR also requires us to inform you that the legal basis for processing this information is, as applicable, your consent, our legitimate interest, or a contract we have entered into with you.

(a) We may process information about your use of the Lullabot Communications ("usage data"). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency, and pattern of your use of the Lullabot Communications. We use this usage data for the purposes of analyzing your use of the Lullabot Communications.  

(b) We may process information that you post on our Website or through our services ("publication data"). We use this publication data to enable the posts and to administer the Lullabot Communications.

(c) We may process information contained in any inquiry you submit to us regarding the Lullabot Communications ("inquiry data"). We use this inquiry data for the purposes of offering, marketing, and selling relevant goods and/or services to you.

(d) We may process information that you provide to us for the purpose of subscribing to our email notifications and/or newsletters and downloading Lullabot or third-party white papers ("notification data"). We use this notification data for the purposes of sending you relevant notifications, newsletters, and/or white papers.

(e) We may process information contained in or relating to any communication that you send to us ("correspondence data"). The correspondence data may include the communication content and metadata associated with the communication. Our Website will generate the metadata associated with communications made using the website contact forms. We use this correspondence data for the purposes of communicating with you and record-keeping.

(f) We may process any of your personal information where necessary for the establishment, exercise, or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure and where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks or obtaining professional advice.

(g) In addition to the specific purposes for which we may process your personal information set forth in this Privacy Policy, we may also process any of your personal information where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Providing your personal information to others

The following sets forth the ways we may disclose your personal information to others.

(a) We may disclose personal information to our suppliers or subcontractors insofar as reasonably necessary to maintain the Lullabot Communications. We may use service providers in connection with operating and improving the Website to assist with certain functions, such as email transmission, data hosting, and some aspects of our technical and customer support. Among them are:

• Google - We use Google Analytics to track site statistics and user demographics, interests, and behavior on the Website. Google's Privacy and Terms explain how it uses information from the Website.
• MailChimp - We use MailChimp to manage our email subscriber lists and send emails to our subscribers.  MailChimp's Privacy Policy explains how it uses information from the Website.
• Disqus - We use Disqus to enable visitors to post comments on our Website.  If you register with and use Disqus, Disqus may collect and use other information from and about you. You should review Disqus' Privacy Policy to learn more about its privacy practices.
• Leadfeeder - We use Leadfeeder as a third party tracking service for campaign performance, lead generation activities, and account-based marketing purposes. For more information about the data Leadfeeder collects, including how it's stored and used, see their article on GDPR, Privacy, and security practices.

We take measures to ensure that these service providers access, process, and store information about you only for the purposes we authorize, subject to confidentiality obligations.

(b) We may disclose your personal information to our insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice or the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

(c) We may transfer part or all of your information in the case of a merger, acquisition, bankruptcy or other sale of all or a portion of Lullabot’s assets or stock. In addition, we may disclose your personal information where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal information where such disclosure is necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

Other disclosures of your information

We may store personal information in locations outside the direct control of Lullabot (for instance, on servers or databases co-located with hosting providers).

As we develop our business, we may buy or sell assets or business offerings. Customer, email and visitor information is generally one of the transferred business assets in these types of transactions. We may also transfer or assign such information in the course of corporate divestitures, mergers or dissolution.  In such cases, we cannot control acquiring parties’ use of your information.

We may disclose your personal information if required to do so by law or subpoena or if we believe that it is reasonably necessary to comply with a law, regulation or legal request; to protect the safety of any person; to address fraud, security or technical issues; or to protect Lullabot’s rights or property.

Additional use of your personal information that is not described in this Privacy Policy will only take place as required by statute or when we have obtained your consent.

Links to other websites

Lullabot Communications may contain links to other websites or services that may be subject to less stringent privacy standards. Lullabot cannot assume any responsibility for the privacy practices, policies or actions of the third parties that operate these websites or services. We are not responsible for how such third parties collect, use or disclose your personal information. You should review their privacy policies before providing them with personal information.

Your right to opt out

We are committed to providing users of Lullabot Communications with the choice to receive or not receive e-mails, promotional materials and/or other communications from Lullabot. We only send commercial emails to users who have requested or consented to receive emails about our services and products. We do not send unsolicited commercial emails (“spam”), buy or sell email lists, or use purchased or harvested email lists. We offer commercial email recipients the opportunity to opt-out of further communications in every email. If you want to stop receiving commercial emails, promotional or other marketing materials, you can do so at any time by contacting Lullabot at marketing@lullabot.com.

Non-US users

The Lullabot Communications are operated in and provided from the United States. If you are located in Canada, the European Union or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to the United States. By using the Lullabot Communications, participating in any of our services and/or providing us with your information, you consent to this transfer.

California and Canadian users

Under the California “Shine The Light” law, California residents may opt-out of the disclosure of personal information to third parties for the third parties’ direct marketing purposes. Canadian residents also have certain rights to know how their information may be shared with third parties for direct marketing purposes. As detailed above, you may contact us for such information or to opt-out of the sharing of your personal information with third parties for marketing purposes at any time by sending an e-mail stating this preference and including your full name and e-mail address to marketing@lullabot.com. Please note that this opt-out does not prohibit disclosure for non-marketing purposes.

European economic area users - your data protection rights under General Data Protection Regulation (GDPR)

The General Data Protection Regulation, effective May 25, 2018, requires that certain information and certain rights be provided to residents of the European Union, as follows.

Transferring personal information from the EU to the US. Lullabot has its headquarters in the United States. Information we collect from you will be processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. Lullabot relies on derogations for specific situations as set forth in Article 49 of the GDPR. In particular, Lullabot collects and transfers to the U.S. personal information only (a) with your consent, (b) to perform a contract with you, or (c) to fulfill a compelling legitimate interest of Lullabot in a manner that does not outweigh your rights and freedoms. Lullabot endeavors to apply suitable safeguards to protect the privacy and security of your personal information and to use it only consistent with your relationship with Lullabot and the practices described in this Privacy Policy.

You may elect not to provide personal information. You may choose not to provide Lullabot with your personal information. However, if you choose not to provide your personal information, you may not be able to enjoy the full range of services that Lullabot offers.

How to exercise your rights. If you reside in the European Economic Area, you have certain rights to the personal information that we have collected about you. To exercise your rights to your personal information, please contact us at marketing@lullabot.com. We will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law. You have the following rights:

(a) Right Of Access To Your Personal Information: You have the right to ask us for confirmation on whether we are processing your personal information, and access to the personal information and related information on that processing (for example, the purposes of the processing, or the categories of personal information involved).

(b) Right to Correction: You have the right to have your personal information corrected.

(c) Right to Erasure: You have the right to ask us to delete your personal information. This right may be exercised, among other times: when your personal information is no longer necessary for the purposes for which it was collected or otherwise processed; when you withdraw consent on which processing is based and where there is no other legal ground for processing; when you object to processing and there are no overriding legitimate grounds for the processing; or when your personal information has been unlawfully processed.

(d) Right To Restriction Of Processing: You have the right to request the limiting of our processing under limited circumstances, including: when the accuracy of your personal information is contested; when the processing is unlawful and you oppose the erasure of your personal information and request the restriction of the use of your personal information instead; or when you have objected to processing pending the verification whether the legitimate grounds of Lullabot override your grounds.

(e) Right To Data Portability: You have the right to receive the personal information that you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that information to another controller, including to have it transmitted directly, where technically feasible.

(f) Right To Object: You have the right to object to our processing of your personal information, as permitted by law. This right is limited to processing based on GDPR Art. 6(1)(e) or (f), and includes profiling based on those provisions, and processing for direct marketing purposes, after which we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise or defense of legal claims.

Right to lodge a complaint before the data protection authority. We encourage you to contact us directly and allow us to work with you to address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work or the place of the alleged infringement. You have the right to do so if you consider that the processing of personal information relating to you infringes applicable data protection laws.

Security

The security of the Lullabot Communications and your information is of great importance to Lullabot. Lullabot has reasonable security measures in place to protect the loss, misuse, and alteration of your information under Lullabot’s control, but we make no assurances about our ability to prevent any such loss, misuse or alteration, and we shall have no liability to you or any third party from any loss, misuse or alteration. We do not warrant that your access to the Lullabot Communications is completely secure.

Lullabot shall notify any user whose information is suspected of being accessed, disclosed, altered or deleted by an unauthorized person so that the user can take appropriate measures to minimize the adverse effect of such a data security breach (a "Breach Notification"). Lullabot will make such Breach Notification soon after it learns of a breach, unless it deems, at its sole discretion, that such Notification might hinder and prevent ongoing efforts to detect the source of the breach. For the avoidance of doubt, a Breach Notification does NOT constitute an admission by Lullabot that the breach occurred as a result of malpractice, failure, bad faith or negligence on behalf of Lullabot or that the breach even occurred in Lullabot's systems.

Children's privacy

Protecting the privacy of children is especially important. Lullabot does not knowingly collect or solicit personal information from anyone under the age of 13 or knowingly allow such persons to use the Lullabot Communications. If we become aware that we have collected personal information from a child under age 13 without verification of parental consent, we take steps to remove that information.

Governing law and jurisdiction

This Privacy Policy shall be governed by the laws of the State of Rhode Island, without regard to its conflict of laws provisions. Any dispute arising under or in relation to this Policy shall be resolved exclusively in the State of Rhode Island in accordance with the terms and procedures set forth in the Terms of Use.

Changes to our privacy policy

If we change our privacy policies and procedures, we will post those changes on this page to keep you aware of what information we collect, how we use it and under what circumstances we may disclose it. Changes to this Privacy Policy are effective when they are posted on this page. Please check this page on a consistent basis.

Contacting Lullabot

Please contact Lullabot if you have any questions about this Privacy Policy, the practices of Lullabot, or your dealings with the Website. You can contact us by email at marketing@lullabot.com or by postal mail to Lullabot at 525 Kellogg Ave #803, Ames, IA 50010 (this is a mail drop; Lullabot does not have a business office in Iowa).