Icertis (“We”, “Us”) is committed to protecting your privacy and providing you with a safe online experience. This Privacy Policy covers the collection, use and disclosure of information collected through the website https://www.icertis.com and the Icertis Contract Management Platform (“Platform”). The use of information collected through our Platform shall be limited to the purpose of providing the service for which our clients have engaged Icertis. By using the Icertis website and the Icertis Platform, you consent to the data practices described in this policy. U.S—E.U. Privacy Shield Icertis complies with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. Icertis has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/ Icertis and its controlled U.S. subsidiaries (Icertis) comply with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. Icertis has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. Icertis’s participation in the Privacy Shield applies to all personal data that is subject to the Icertis Privacy Statement and is received from the European Union and the European Economic Area. Icertis will comply with the Privacy Shield Principles in respect of such personal data. Icertis’s accountability for personal data that it receives under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Icertis remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless Icertis proves that it is not responsible for the event giving rise to the damage. We encourage you to contact us should you have a Privacy Shield-related (or general privacy-related) complaint by using the information provided on the Contact Us page. For any complaints that cannot be resolved with Icertis directly, Icertis has chosen to use JAMS as the recourse mechanism (as further described in the Privacy Shield Principles). As further explained in the Privacy Shield Principles, a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. Icertis is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). Collection of your Personal Information Icertis collects personally identifiable information, such as your e-mail address, name, home or work address or telephone number and company information such as business address and employee count. There is also information about your computer hardware and software that is automatically collected by Icertis on our website. This information can include: your IP address, browser type, domain names, access times and referring Web site addresses. This information, which does not identify individual users, is used by Icertis for the operation of the service, to maintain quality of the service, and to provide general statistics regarding use of the Icertis Web site. We do not link this automatically-collected data to personally identifiable information. Data Collected through the Icertis Platform Icertis, Inc, may collect and process third party personally identifiable information under the direction of our Customers, who are the controllers of that data. We have no ownership of this information of individuals whose personally identifiable information may be processed as part of the use of our Platform. An individual who seeks access to their data, seeks to correct, amend or delete inaccurate data or wishes to opt-out of communications from a Icertis Customer should direct his/her query to the Icertis Customer he/she interacts with directly (the data controller). If a Icertis Customer requests that we remove personally identifiable information on their behalf, we will respond to their request within 30 days. Icertis may transfer personal information to other companies that help us manage our Platform. Transfers to subsequent third parties are covered by the provisions in this Policy regarding notice and choice and the service agreements with our Customers. Clients who use the Icertis Platform may submit the personal information of other individuals at their organization to register them as authorized users. It is the Customer’s obligation, as the data controller, to inform its authorized users about the purposes for which information about them is collected and may be used on this Platform. Use of your Personal Information Icertis collects and uses your personal information to operate the Icertis Web site and deliver the services you have requested. Icertis may also use your personally identifiable information to inform you of other products or services available from Icertis and its affiliates. Information Sharing We will share your personal information with third parties only in the ways that are described in this privacy policy. Icertis does not sell, rent or lease its customer lists to third parties. In addition, Icertis may share data with trusted partners to help us perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Icertis, , and they are required to maintain the confidentiality of your information. Icertis Web sites will disclose your personal information, without notice, only if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process, such as a subpoena, served on Icertis or the site; (b) protect and defend the rights or property of Icertis; and, (c) act under exigent circumstances to protect the personal safety of users of Icertis, or the public. If Icertis is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via email and/or a prominent notice on our Web site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information. Use of Cookies The Icertis web site (“Site”) uses “cookies” to help you personalize your online experience. A cookie is a text file that is placed on your local storage by a Web page server. Cookies are useful to personalize your online experience. Disabling Cookies. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to disable and manage your cookies settings. If you disable cookies you may still browse public areas of the Site, but some features and Services may not function. Site Analytics. As is true of most web sites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use automated devices and applications, such as Google Analytics, to evaluate usage of our Site. We also may use other analytic means to evaluate our Services. We use these tools to help us improve our Services, performance and user experiences. We do not link this automatically-collected data to personally identifiable information. Security of your Personal Information The security of personal information is very important to us. Icertis secures your personal information from unauthorized access, use or disclosure. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. When sensitive information (such as log-in credentials) is submitted, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our Web site, you can contact us at itsecure@icertis.com. Change and Removal of Personal Information If your personal information changes, you may correct, update, amend, remove, or ask to have it removed by making the change on your user account settings page, by contacting your Accoutn Contact, or by contacting us by telephone or postal mail at the contact information available on our Web site. We will retain your information for as long as your account is active, as needed to provide you services and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Opt-Out We may occasionally send you promotional material on behalf of business partners, with your consent. You may also sign up for periodic newsletter and/or blog updates from our Web site. In both of these cases, we will use your name and email address to send these materials to you. You may choose to stop receiving these communications by following the unsubscribe instructions included in these emails or you can contact us at info@Icertis.com. Third Party Links Our Site includes links to other Web sites whose privacy practices may differ from those of Icertis If you submit personal information to any of those sites, your information is governed by their privacy policies. Icertis is not responsible for the privacy statements or other content on Web sites outside of the Icertis web sites. Updates to the Privacy Policy This Policy may be amended from time to time, consistent with the Privacy Shield Principles and applicable data protection and privacy laws and principles. We will notify you of changes to this Policy either by posting to our intranet, through email, or other means. We will notify Customers if we make changes that materially affect the way we handle Personal Data that we previously collected, and we will allow them to choose whether their Personal Data may be used in any materially different manner. Contact Information If you believe that Icertis has not adhered to this Statement or have questions, please contact Icertis at info@Icertis.com. Or you can reach us by telephone or mail at the contact information listed at https://www.icertis.com. You also have the option of filing a complaint with JAMS, an independent dispute resolution body located in the United States. Icertis has designated JAMS as its independent dispute resolution body, and Icertis shall be solely responsible for all costs associated with any complaints filed with JAMS regarding the violation of this policy. Information about filing a complaint with JAMS can be found at its website: https://www.jamsadr.com/eu-us-privacy-shield .