IntegrateAuricular Privacy Policy

Clause 1. Agreement and Definitions

This Privacy Policy constitutes a legally binding agreement between you (the “User”) and IntegrateAuricular (the “Company”), as the owner and provider of this Website. This Policy governs the collection, storage, processing, and transfer of any and all personal data or information (collectively, "Data") acquired by the Company as a direct or indirect result of your use of the Website, including any underlying services, systems, modules, or digital interfaces hosted therein (governed specifically by Clauses 1 through 7).

In this Policy the following terms shall have the following meanings:
Account | Collectively, the personal information, payment information, and credentials, used by Users to access Material and/or any communications or related System on the Web Site
Company | IntegrateAuricular
Content
| Any text, graphics, images, audio, video, software, data compilations and any other form of information capable of being stored in a computer that appears on or forms part of this Web Site;
Cookie | A small text file placed on your computer by IntegrateAuricular Ltd when you visit certain parts of this Web Site. This allows us to identify recurring visitors and to analyse their browsing habits within the Web Site.
Data | Collectively, all information that you submit to the Web Site. This includes, but is not limited to, Account details and information submitted using any of our Services or Systems;
Service | Collectively, any online facilities, tools, services or information that IntegrateAuricular makes available through the Web Site either now or in the future;
System | Any online infrastructure that IntegrateAuricular makes available through the Web Site either now or in the future. This includes, but is not limited to, web-based email, message boards, live chat facilities and email links;
User(s) | Any individual that accesses the Web Site;
Website | The website that you are currently using (www.integrateauricular.com) and any sub-domains of this site, unless expressly excluded by their own terms and conditions.

Clause 2. Data Collected

Without limitation, any of the following Data may be collected:
  • 2.1 name
  • 2.2 date of birth
  • 2.3 credentials & profession (healthcare practice setting)
  • 2.4 contact information such as email addresses and telephone numbers
  • 2.5 demographic information such as post code, preferences and interests
  • 2.6 shipping information such as addresses
  • 2.7 payment information such as credit / debit card numbers, or other account details for alternate payment methods
  • 2.8 IP address (automatically collected)
  • 2.9 web browser type and version (automatically collected)
  • 2.10 operating system (automatically collected)
  • 2.11 a list of URLS starting with a referring site, your activity on this Web Site, and the site you exit to (automatically collected)
  • 2.12 Cookie information

Clause 3. Your Control of Data

Clause 4. Our Use of Data

  • 4.1 Your personal Data will never be sold
  • 4.2 Any personal Data you submit will be retained by Company until your account is deleted. Data that you may have submit through any communications System that we may provide may be retained for a longer period, or protected under that System’s Privacy Policy.
  • 4.3 Unless we are obliged or permitted by law to do so, and subject to Clause 5, your Data will not be disclosed to third parties. This includes our affiliates and / or other independently cooperating individuals or schools within our consortium.
  • 4.4 All personal Data is processed and stored securely. For more details on security, see Clause 6 below.
  • 4.5 Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Web Site. Specifically, Data may be used by us for the following reasons:
  • internal record keeping
  • improvement of our products/services
  • transmission by email of non-promotional and/or promotional communications (depending on opt-in selections)
  • your identification (e.g. by name) in platform communications such as forum, discussions, messaging, or forms
  • administrative operations such as processing, management, or delivery of certifications

Clause 5. Third-Party Web Sites, Systems and Services

  • 5.1 IntegrateAuricular may, from time to time, employ the services of other parties for dealing with matters that may include, but are not limited to, payment handling, delivery of purchased items, search engine facilities, advertising and marketing. The providers (see comprehensive but not necessarily all-inclusive listing in 5.2) of such services do not have access to certain personal Data provided by Users of this Web Site. Any Data used by such parties is used only to the extent required by them to perform the services that IntegrateAuricular requests. Any use for other purposes is prohibited.
  • 5.2 Accredible, National Certification Board for Acupuncture and Herbal Medicine, (certification related services); LearnWorlds (LMS platform services and data processor); Stripe (payment gateway services), Calendly (scheduling services); Google (Email services); Zapier (operational triggers)

Clause 6. Security

Data protection measures are in place to safeguard and secure Data collected online using suitable physical, electronic and managerial procedures. Specifically, these measures include:
  • 6.1 Data security measures of the learning management System provided by LearnWorlds (data processor), according to https://www.learnworlds.com/data-security/
  • 6.2 Privacy settings: Opt-in options for Cookies, marketing material, Email notification settings, and data access and deletion requests are enabled for all Users following General Data Protection Regulation (GDPR) compliance guidance at https://support.learnworlds.com/support/solutions/articles/12000051532-how-to-make-your-school-gdpr-compliant
  • 6.3 Incident response plan: In case of breach the Company will 1) freeze the compromised vulnerability (e.g. disconnecting affected integrations, revoking user access on compromised accounts, forcing logout on all active sessions, unpublishing or replacing affected website pages); 2) notify SaaS provider(s); 3) comply with GDPR data breach notification laws requiring notification (generally by email) to affected users within 72 hours of detected breach; 4) secure documentation (e.g. exporting security logs, or documenting error messages, suspicious user activities, and unauthorized modifications); 5) contain and remediate (e.g. forcing global password rests, rotating all credentials, or disabling rogue data collection inputs; and 6) identify cause and verify security fix 
  • 6.4 Vendor risk management: The Company seeks to select reputable providers, and limit provider API connections and data sharing to those necessary for operations (as detailed in the above Clause for “Third Party Websites and Services”)

Clause 7. Changes

  • Changes in Business Ownership and/or Control: In the unlikely event that IntegrateAuricular changes ownership or control, e.g. the transfer of control or the sale of certain divisions to another party, Data provided by Users will — where it is relevant for continued operations — be transferred along with that new owner or new division. The newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was supplied by you. In the event that any Data submitted by Users will be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your Data deleted or withheld from the new owner or controller.
  • Changes to this Policy: IntegrateAuricular reserves the right to change this Privacy Policy at anytime deemed necessary, or as may be required by law. When any material updates are made, you will receive a direct notification via email and will be directed to re-consent.  

Please contact us
if there are any questions regarding this privacy policy: duvan@integrateauricular.com