Privacy Policy
Last updated June 2024
State of California Privacy Notice – As Prescribed by the California Consumer Privacy Act (“CCPA”) of 2018 and as amended by the California Privacy Rights and Enforcement Act (“CPRA”) of 2020, also known as Proposition 24, which appliessolely to consumers who are California residents.
We recognize the importance of protecting your privacy and your rights with regards to data protection. The Internet is a very powerful medium when it comes totransmitting personal information; for that reason, we undertake the serioustask of respecting the current laws regarding the protection of personal dataand the security of the same, with the aim of guaranteeing secure, controlledand confidential navigation for its users and customers who visit and/or usethe Website and/or use our mobile app (you as a "User") or thenpurchase or register on our services, download our app and/or give us theirconsent for a specific purpose (you as a "Customer").
This Privacy Policy describeshow we collect, use, process, and disclose your personal data in conjunctionwith your access to and use of our services and, specifically:
1. Who is the controllerof your data?
2. What categories of data do we collect and use?
3. Why and how do we collect your data?
4. Who sees, receives, and uses your data and where?
5. How long do we retain your data?
6. What are your data protection rights and how can you exercise them?
7. Update and old versions of this privacy policy
It also informs you of howyou can exercise your rights (including the right to object to some of the datahandling we carry out). More information about your rights and how you canexercise them is set out in the section below.
If you see an undefined term in this Privacy Policy (such as “Service”), it has the same definition as in our Company Terms and Conditions of Use.
1. Who is the controller of your personal data?
As indicated in the Terms and Conditions, the services offered are provided BidWorkers LLC(referred to herein as "Company", "we", "us", "our" or "Data Controller").
2. What categories of data do we collect and use?
For California residents, “personal information” has the same meaning as under the CPRA Section 1798.140(v): information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information or lawfully obtained, truthful information that is a matter of public concern or information that has been de-identified or aggregated. “Sensitive personal information” has the same meaning as under the CPRA Section 1798.140(ae).Sensitive personal information does not include information that is publicly available.
When you visit our website and use our Services (you as a "User") or then purchase or register to our services (you as a "Customer”) we collect the categories of personal data as follows:
2.1. Personal Information provided by you
The Personal Information that you share with us including when you register for an account, subscribe to marketing communications and which you provide to us when using our services, downloading our app. More specifically:
Personal information such as contact details, payment details (i.e. credit data, billing address, account information), information about your purchases, if any, or after the conclusion of the booking for the management of your refund or post-sale request. Please note that, only where it is strictly necessary to fulfill your request and with your prior explicit consent, we may be required to send the above categories of personal data to the relevant third parties, but only as strictly necessary to fulfill your request. Where we need to process this data, we will only do it if we have your explicit consent, in accordance with the CPRA, or if permitted by other applicable regulations. Therefore, please note that if you do not authorize us to do this processing, we will not be able to manage your requests since we need your explicit consent to collect these special categories of Personal Information. Therefore, please note that if you don’t authorize us to complete this processing, we will not be able to manage your requests since, in the event that the CPRA and GDPR apply, we need your explicit consent to collect these special categories of personal data.
When you contact us or we contact you via email, post and/or phone or through social media we may collect: Personal Information you provide when you connect with us, including your name, username, phone number, email.
When you take part in surveys or questionnaires about our services you may provide us with your contact details, your feedback and contributions to customer surveys and questionnaires.
When you download and use our app: We do not collect directly personal details from you. By installing our App you declare that you have read and accept the Privacy Policy and Company’s Terms and Conditions.
Personal data about children: Please note that we may collect and use the information of children only as provided by their parent or guardian or with their consent. If we become aware that we have processed information of a child without the valid consent of a parent or guardian, we reserve the right to delete it.
The provision of the above personal data, where requested, is necessary for the adequate performance of the contract between you and us and to allow us to comply with our legal obligations except when we rely on consent as legitimate basis for processing and or our legitimate interest. Without it, we may not be able to provide you with all the requested services.
It is important that all the personal data you give us is correct and accurate. This includes, by way of example only, ensuring that we have your correct contact (including email)details at all times.
2.2. Personal data collected automatically from our website or app, on the phone, from communication we send, and/or from third parties
We may collect information about your visits to and use of our website or app, such as information about the device and browser you are using, your IP address or domain names of the computers connected to the Websites, uniform resource identifiers for requests made, the time of request, the method used to submit the request to the server, the size of the archive obtained as a response, the numerical code indicating the status of the response given by the server(correct, error, etc.) and other parameters relative to the operating system and the computer environment used, the date and time that you visited, the duration of your visit, the referral source and website navigation paths of your visit and your interactions on the website including the Services you are interested in. Please note that we may associate this information with your account. Please note that your Personal Information may also be linked to cookies.
We may record or monitor calls to and from our Customer Care Team for contractual reasons, quality control purposes, analytics, for staff training and/or to protect us in the event of a legal dispute. Any personal data obtained from you during the call will be treated in accordance with this Privacy Policy.
We may use this information to also understand how you engage with communication material that we send to you, such as emails, including the action you take such as any links in them that you click on, your duration and frequency of your engagement with the email.
To the extent permitted by the applicable law wherein we receive additional information about you, such as fraud detection information and warnings from third party service providers and/or partners for our fraud prevention activities.
2.3We do not knowingly collect online information from children under the age of13. Our services are marketed towards adults. If we are notified that we have collected personal information, as defined by the Children’s Online Privacy Protection Act (“COPPA”), of a child under the age of 13, we will delete the information as expeditiously as possible.
We never sell or share the personal information of minors under 16 years of age and would not do so in the future without affirmative authorization of the consumer if between 13 to16 years of age, or the parent or guardian of a consumer less than 13 years of age.
We do not sell or share SMS opt-in information or phone numbers for the purpose of SMS.
3. Why do we collect your data?
In general terms, we use your personal data to provide you with the services you request, process payment, provide customer services, send you marketing and promotional communications, notify you about important changes to our website and to deliver our content which we think may be of interest to you. Morespecifically:
A. To create and maintain the contractual relation established for the provision of the product and/or Services requested by you in all its phases and by way of any possible integration and modification or to take steps at your request in relation to pre-contractual measures (e.g. facilitating your bookings and taking payments; responding to your questions and concerns; administering your account).Information concerning our provision of the Service and/or to provide you with any clarification or assistance may be sent to you via email, phone, SMS, recorded calls or other similar technologies.
Please note that if your call to us is not connected, or if it is disconnected mid-call, you authorize us to use your phone number to call you back, in order to respond to your request.
On which legal basis?
To fulfill a contract, or take steps linked to a contract (i.e. to provide the products and/or the Services you request and/or to provide you with any clarification). In case the fulfillment of the contract implies the processing of sensitive data, we will rely also on your explicit consent.
B. To meet the legal, regulatory and compliance requirements and to respond to requests by government or law enforcement authorities conducting an investigation.
On which legal basis?
To comply with the law(i.e. to share personal data with regulatory authorities)
Why?
C. To carry out aggregative statistical analyses on anonymized groups or to analyze identifiable individuals behavior so that we can see how our Website, products and services are being used and how our business is performing.
On which legal basis?
To pursue our legitimate interest (i.e. improving our website and app, the features and our products and Services)
D. To verify compliance with our terms and conditions and for the establishment, exercise or defense of legal claims.
On which legal basis?
To pursue our legitimate interest (i.e. compliance with our terms and conditions, protection of our rights in the event of any dispute or claim)
E. To tailor and personalize online marketing notifications and advertising for you based on the information on your use of our Website, products and services and other sites collected through cookies (please see the Cookies section of this Privacy Policy for further information)
On which legal basis?
Where you give your consent (i.e. through the Cookie banner or by your browser's settings)
F. Where permitted by applicable law and, where required by law, only with your prior explicit consent, we may record or monitor calls to and from our Customer Care Team for quality control purposes, analytics and for staff training, as well as for contractual purposes (including to document changes or requests for changes to the contract). Please also note that - only for quality control purposes - we may analyze the call recordings through artificial intelligence-based systems.
In case of telephone contact with our Customer Care Team, before being put in contact with one of our agents, you will be asked to give us your explicit consent to the call recording according to the instructions given to you during the same phone call. If you do not provide such consent to the call recording, you will still receive assistance from our agents, but the call will not be recorded.
On which legal basis?
When you give your consent during the phone call.
Where we rely on legitimate interest as a basis for processing your personal information, we carry out an assessment to ensure that our interest in the use of your data is legitimate and that your fundamental rights of privacy are not outweighed by our legitimate interests.
4. Who sees, receives and uses your data and where? Categories of recipients of your data:
We may share your personal data, for the purposes described in this Privacy Policy, to the following categories of recipients:
Our authorized employees that assist and advise us on administration, products, legal affairs, customer care, and information systems, as well as those in charge of maintaining our network and hardware/software equipment;
Our third-party service providers, which process your personal data on our behalf and under our instructions for the purposes described hereinabove acting as data processors, such as those providing us with IT and hosting services call center and customer support, analytics and administration services etc.
Payment providers and financial institutions (e.g. for chargeback, fraud detection and preventionpurposes) acting as autonomous data controllers.
Competent authoritieswhen we are required to do so by the current law.
Competent authoritiesand Law and enforcement third parties when this is necessary so that we canenforce our terms of use and protect and defend our rights or property or therights or property of any third party.
Third parties thatreceive the data (e.g. business consultants, professionals for delivering duediligence services or assess value and capabilities of the business) when it isnecessary in connection with any sale of our business or its assets (in whichcase your details will be disclosed to our advisers and any prospectivepurchaser’s advisers and will be passed to the new owners).
5. How long do we retain your data?
We retain your personal data for as long as is required to achieve the purposes and fulfil the activities as set out in this Privacy Policy, otherwise communicated to you or for as long as is permitted by applicable law and in accordance with the table below:
Type of Data
Description
Retention Period
Customer Account Data
Data relating to the insurance marketing, quoting, sale, service of Company customers. Relates to underwriting and placement.
5 years
Client Contracts and Agreements
Contracts between and among Bidders and clients.
Generally 3 years
Electronic mail maintained on Company servers, on Company-owned equipment and sent from or to an e-mail address domain maintained by the Company.
5 Years
Texts and Instant Messaging
Electronic communications by text or instant messaging that are sent or received via Company servers or Company-owned equipment
0 (no retention period)
Network Data
Electronic data maintained on Company servers and drives.
3 years
Data Backups
Medium shall be maintained in accordance with current Information Technology Guidelines
6 months
6. What are your dataprotection rights and how can you exercise them?
You can exercise the followingrights, including but not limited to those provided by the CPRA:
A. Right of access;
B. Toreceive confirmation of the existence of your personal data, access its contentand obtain a copy;
C. Toupdate, rectify and/or correct your personal data;
D. Right to erasure/right to be forgotten and right to restriction;
E. To request the erasure of your data or restriction of your data which has been processed in violation of the law, including whose storage is not necessary in relation to the purposes for which the data was collected or otherwise processed; where we have made your personal data public, you have also the right to request the erasure of your personal data and to take reasonablesteps, including technical measures, to inform other data controllers which areprocessing the personal data that you have requested the erasure by suchcontrollers of any links to, or copy or replication of, those personal data;
F. To receive a copy of your personal data you provided to us for a contract or with your consent in a structured, commonly used and machine-readable format (e.g. data relating to your purchases) and to ask us to transfer that personal data to another data controller;
G. Right to withdraw your consent; and
H. You have the right to object at any time to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement or where we are using your data for direct marketing.
You can exercise the above rights at any time by contacting us via email atcustomerservice@bidworkers.com or may contact us at the following link: https://www.bidworkers.com/contact.
As for direct marketing, please note that you can also object at any time by clicking the unsubscribelink which we provide in each communication sent to you.
Your rights in relation to your personal data might be limited in some situations. For example, if fulfilling your request would reveal personal data about another person or if we have a legal requirement or a compelling legitimate ground we may continue to process your personal data which you have asked us to delete.
You also may have the right to make a complaint if you feel your personal information has been mishandled. We encourage you to come to us in the first instance but, to the extent that this right applies to you, you are entitled to complain directly to the relevant Data Protection Supervisory Authority.
7. Update and old versions of this privacy policy
We reserve the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will post the revised Privacy Policy on our website and app and update the “Last Updated” date at the top of this Privacy Policy.