Privacy Policy

Learn about how we handle your data responsibly

Effective Date: Feb 8, 2024

This Privacy Policy applies to the website www.crewmojo.com and app.crewmojo.com (the “Sites”), together with the Crewmojo web applications and services (the “Services”), owned and operated by Crewmojo Pty Ltd (collectively, “Crewmojo”, “we”, “us”, or “our”). This Privacy Policy describes how Crewmojo collects, uses, shares and secures the personal information you provide, as well as the information about our customers' employees or end users that we process on behalf of our customers. It also describes your choices regarding use, access, correction and deletion of your personal information.

1. How we collect information:

We collect the following personal information from you:

1.1 Information that you provide to us about yourself

When you sign up for the Services, we ask you for information such as

Contact Information, such as name, email address, mailing address, or phone number;
Billing Information, such as billing address;
Unique Identifiers, such as username, account number or password;
IP address;
Information about your business, such as company name, company size, business type.

If you do not provide this information, we will not be able to provide the Services to you.

1.2 Information you provide to us about your employees and end users

For the provision of our Services to you, you provide us with information which will identify your employees and end users. Such information includes:

Employee email addresses, name, role, team, manager, relationships, etc;
Content of surveys, 1:1s, forms and workflows completed in the Crewmojo platform.

You may also provide us personal information about your contacts such as Name and email address where we can send invoices and receipts of your purchases. When you provide us with personal information about your contacts we will only use this information for the specific reason for which it is provided. If you believe that one of your contacts has provided us with your personal information and you would like to request that it be removed from our systems, please contact us at the contact information below.

1.3 Information collected automatically

When you use our Services, we use cookies and similar technologies to collect information about your location, and your activities on our website, information about your device and log information. This is described in more detail below. These cookies and similar technologies collect anonymized Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system, date/time stamp, and/or clickstream data.

Crewmojo allows Google Analytics to use these technologies to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole for the purpose of analytics.

You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our website or service.

Google Analytics:

We use a tool called “Google Analytics” to collect some information we listed above about your use of the Services. We use the information we get from Google Analytics to improve the Services. In order to collect this information, Google Analytics may set cookies on your browser or mobile device, or read cookies that are already there. Google Analytics may also receive information about you from apps you have downloaded, that partner with Google. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Google’s ability to use and share information collected by Google Analytics about your visits to the Services to another application which partners with Google, is restricted by the Google Analytics Terms of Use and the Google Privacy Policy. Please review those and see http://www.google.com/policies/privacy/partners/ for information about how Google uses the information provided to Google Analytics and how you can control the information provided to Google. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on for Google Analytics which can be found here.

2. Purpose and legal basis of the processing

To the extent EU or UK data protection law applies to our processing of information about you, we act as the "data controller". To the extent EU or UK data protection law applies to our processing of your employee or end user data, you serve as the "data controller" and we serve as the "data processor".

To perform the Services: We use your information to identify you, process your transactions, provide you with technical support and assistance; and communicate with you about the Services via app, email or online meeting software. Our Services also include tailored features that personalize your experience, enhance your productivity, and improve your ability to perform effectively with others by automatically analyzing activities to provide search results, activity feeds, notifications, connections and recommendations that are most relevant for you and your team. For example we will contact you to notify you of any issues with the Services or any suspicious activity in your account. The legal basis for these uses is in the performance of the contract with you.

To Optimize or improve the Services: We use your information to authenticate you, prevent fraud and abuse of our Services and perform research. We are always looking for ways to make our Services faster, more secure, integrated, and useful. We use information and collective learnings (including feedback) about how people use our Services to troubleshoot, identify trends, usage, activity patterns, and areas for integration to improve our Services and develop new products, features and technologies that benefit our users and the public. The legal basis for these uses is our legitimate interest in the improvement and optimization of our service offerings and in ensuring the security of our services and we apply appropriate safeguards to protect your information.

You give us consent to do so for a specific purpose: If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. Where we are using your information because we or a third party (e.g. your employer) have a legitimate interest to do so, you have the right to object to that use though, in some cases, this may mean no longer using the Services.

You may ask us to stop accessing, storing, using and otherwise processing your information where you believe we don't have the appropriate rights to do so. For example, if you are no longer an active user, you can request that we delete your account. You can also opt-out of our use of your information for certain marketing purposes by contacting us, as provided below. If there is delay or dispute as to whether we have the right to continue using your information, we will restrict any further use of your information until the request is honored or the dispute is resolved, provided your administrator does not object (where applicable).

3. How we share your information

We share information with service providers, as required by law, and in connection with the protection and enforcement of our legal and contractual rights.

With Service Providers: We share your information with third parties who provide services on our behalf to help with our business activities. This includes: hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analysis, marketing, and other services for us. The legal basis for sharing this information is our legitimate interest in providing our Services efficiently and we implement measures to safeguard your information.

Compliance with Enforcement Requests and Applicable Laws: In certain situations, Crewmojo may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose your personal information as required by law (such as to comply with a subpoena or other legal process), when we believe in good faith that disclosure is necessary to protect our rights, when we believe there is a violation to our Terms of Service, to protect your safety or the safety of others, to investigate fraud, to respond to a government request, if we are involved in a merger, acquisition, or sale of all or a portion of our assets, or if we are involved in a bankruptcy or liquidation proceeding. The legal basis for this is our legitimate interest in protecting our legal rights and those of others, compliance with legal obligations and our legitimate interest in fulfilling legal obligations imposed by legal authorities outside of the EU or the UK.

With your consent: We disclose information about you to third parties when you give us consent to do so. For example, we often display personal testimonials of satisfied customers on our public websites. With your consent, we may post your name alongside the testimonial.

Prevent fraud and abuse of the Services: We will share information to prevent or detect fraud or to address technical issues and if we believe it is necessary to investigate, prevent, or take action regarding situations that involve abuse of the Services infrastructure. The legal basis for this is our legitimate interest in the maintaining the security of our Services.

We also process and share information in an aggregated, de-identified manner, where the information is shared as part of a statistical report and does not contain personal information.

4. Security

The security of your personal information is important to us. We implement adequate measures to protect the personal information submitted to us, both during transmission and once it is received. Crewmojo takes steps to ensure that all source code, files and data remain private and confidential. Due to the sensitive nature of source code we take this very seriously and make it our primary concern for all customers. We restrict access to personal information to Crewmojo employees, contractors and agents who need to know that information in order to operate, develop or improve our service. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations. For more information on how we store your information, please see https://www.crewmojo.com/trust. If you have any questions about the security of your personal information, you can contact us at the contact information below.

5. Rights with respect to your information

Crewmojo acknowledges that you have the right to access your personal information. Crewmojo has no direct relationship with your employees or end users whose personal data it processes. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct their query to Crewmojo’s customer (the data controller). If requested to remove data we will respond within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.

Upon request Crewmojo will provide you with information about whether we hold any of your personal information. You may access, correct, obtain a copy of or request deletion or transfer of your personal information by logging into your account or by contacting us at the contact information below. We will respond to your request within a reasonable timeframe. In certain circumstances we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing a service.

If you are a resident of the European Economic Area or the United Kingdom, you may have the right to object to, or request that we restrict, certain processing activities. You may also have the right to make a complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here (for EEA residents) or here (for UK residents).

6. Your choices with respect to the information

We use and disclose personal information in ways that are consistent with your expectations and choices. Accordingly, we will provide you with the opportunity to choose (opt out) whether your personal information is to be used for a purpose that is materially different from the purpose(s) for which it was collected or subsequently authorized. You will be provided with clear, conspicuous and readily available mechanisms to exercise your choices. To do so, please email us your request any time at privacy@crewmojo.com, and we will respond to your request within a reasonable timeframe.

Promotional Email communication: You may sign-up to receive email or newsletters or other communications from us. If you would like to discontinue receiving this information, you may update your email preferences by using the “Unsubscribe” link found in emails we send to you or by contacting us at the contact information below.

Google Analytics: See http://www.google.com/policies/privacy/partners/ for information about how Google uses the information provided to Google Analytics and how you can control the information provided to Google. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser add-on for Google Analytics which can be found here.

7. Data retention

We retain your personal information for as long as necessary to carry out the business purposes described in this policy, or as otherwise required under law. The length of retention may vary depending upon factors such as recordkeeping or legal compliance requirements, the need to resolve inquiries or complaints, and the existence of an ongoing relationship with you. After such time, we will either delete or de-identify your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible.

8. Policy regarding children

The Services are not directed to children under the age of 16. We do not knowingly collect, and therefore do not sell, Personal Information from children under 16. If you are under 16, please do not use the Services and do not provide any personal information to us. If you become aware that a child under 16 has provided us with personal information without your consent, please contact us at privacy@crewmojo.com. If you are a California resident under the age of 18 and you wish to remove publicly available content, please contact us at privacy@crewmojo.com with the subject line “California Eraser”.

9. International data transfers

Your personal information may be transferred to, stored, and processed by us and our affiliates and other third parties outside the country in which you reside, including, but not limited to Australia, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. By using any of our Services, you agree to this transfer, storing, or processing.

9.1 If you're based in the EEA OR THE UK

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), your personal information may be processed outside of the EEA or the UK and in countries that are not subject to an adequacy decision by the relevant authority. In this event, we will ensure that the recipient of your personal information offers an adequate level of protection, for instance by entering into standard contractual clauses for the transfer of data as approved by the European Commission. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy.

9.2 Transfers of information not from the EEA, or the UK or Switzerland

To the extent that personal information is transferred to Australia from countries other than countries within the European Economic Area, the United Kingdom or Switzerland, including personal information that is transferred from NZ, Canada and USA, we employ similar safeguards such as selecting third party vendors carefully, ensuring personal information will be used and disclosed only as set out in this privacy policy and that it is protected by appropriate security safeguards.

However, in connection with these transfers of personal information, your personal information may be subject to privacy laws that may not provide the same protection as your country of residence. For example, government entities in such other countries may have certain rights to access your personal information. By using the Services that this privacy notice relates to you are consenting to this transfer of your personal information.

10. UK Residents

This Section only applies if you are a UK resident.

Crewmojo, which processes the personal data of individuals in the United Kingdom, in either the role of 'data controller' or 'data processor', has appointed DataRep as its Data Protection Representative for the purposes of UK GDPR, as part of The Data Protection Act 2018 (as amended) (hereafter the "UK GDPR") in the UK.

If Crewmojo has processed or is processing your personal data, you may be entitled to exercise your rights under UK GDPR in respect of that personal data. For more details on the rights you have in respect of your personal data, please refer to the UK Information Commissioner's Office.

Crewmojo has appointed DataRep as their Data Protection Representative in the UK so that you can contact them directly in your home country. If you want to raise a question to Crewmojo, or otherwise exercise your rights in respect of your personal data, you may do so by:

Contacting us on the online webform, or
Mailing your inquiry to: DataRep, 107-111 Fleet Street London, EC4A 2AB, United Kingdom

PLEASE NOTE: when mailing inquiries, it is ESSENTIAL that you mark your letters for 'DataRep' and not 'Crewmojo Pty Ltd', or your inquiry may not reach us. Please refer clearly to Crewmojo Pty Ltd within your correspondence. On receiving your correspondence, Crewmojo will request evidence of your identity, to ensure your personal data and information connected with it is not provided to anyone other than you.

11. California residents

This Section only applies if you are a California resident.

In the preceding 12 months, we have collected the following categories of personal information as defined under the California Consumer Privacy Act:

Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, and account name;
Characteristics of protected classifications under state or federal law, such as age or gender;
Commercial Information, including records of Services purchased and credit card or other payment information;
Internet or electronic network activity information, information, including, but not limited to, browsing history, search history, and information regarding your interaction with the Services including an internet website, application, or advertisement;
Geolocation data, such as an IP address;
Professional or employment related information;
Education information; and
Inferences drawn to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

For more specific examples of the personal information we collect, please see Section 1 above. The business and commercial purposes for which we have disclosed this information in the preceding 12 months are described in Section 2 of this policy and the categories of third parties to whom we have made such disclosures are described in Section 3 of this policy.

In addition, please see our Privacy Notice for California Residents, which is incorporated into this Privacy Policy by this reference.

12. Browser Do Not Track (DNT)

The Services honor and enforce Do Not Track preferences. Do Not Track (DNT) is a privacy preference you can set in your web browser to indicate that you do not want certain information about your webpage visits collected across websites when you have not interacted with that service on the page. For all the details, including how to turn on Do Not Track, visit donottrack.us.

13. Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than permitted under applicable law.

14. Notice to End Users / Customers' Employees

Our products are intended for use by organizations. Where the Services are made available to you through an organization (e.g. your employer), that organization is the administrator of the Services and is responsible for the accounts and/or Services over which it has control. If this is the case, please direct your data privacy questions to your administrator, as your use of the Services is subject to that organization's policies. We are not responsible for the privacy or security practices of an administrator's organization, which may be different than this policy.

Administrators are able to:

Require you to reset your account password;
Restrict, suspend or terminate your access to the Services;
Access information in and about your account;
Access or retain information stored as part of your account;
Install or uninstall third-party apps or other integrations
Change the email address associated with your account;
Change your information, including profile information;
Restrict your ability to edit, restrict, modify or delete information

Please contact your organization or refer to your administrator’s organizational policies for more information.

15. Changes to this Privacy Policy

We may need to update this policy from time to time. If we make changes, we will notify you by revising the date at the top of this policy, and we may provide you with additional notice (such as adding a statement to our homepage or sending you an email notification). We encourage you to periodically review this page for the latest information on our privacy practices.

16. Privacy questions / feedback

For further information about our Privacy Policy or practices, or to raise any privacy requests or complaints in relation to your data, please contact us using the following methods:

Attn: Data Protection Officer
Email: privacy@crewmojo.com
Contact Page: https://www.crewmojo.com/contact