isolved Privacy Policy

This isolved Privacy Policy for California Residents (“Policy”) supplements the isolved Privacy Policy and Terms of Use and is adopted to comply with privacy rights law of California. California residents can find more information about consumer privacy at https://oag.ca.gov/privacy/consumer-privacy-resources. The Policy applies solely to all visitors, users, and others who reside in the State of California ("consumers" or "you").

Privacy Notice & Information We Collect

When you visit any of our Sites (inclusive of isolved, inc., its affiliated entities, "isolved," "we" or "us") websites, isolved may collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer (you), household, or device ("Personal Information"). Personal information does not include:

• Publicly available information from government records.
• Deidentified or aggregated consumer information.
• Information excluded from California consumer privacy laws, like:
• health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA), clinical trial data, or other qualifying research data;
• personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

Your Personal Information may be collected to support isolved business operations and for website optimization; however, isolved does not sell your Personal Information. Selling does not include isolved performing services on behalf of a client or other person or entity.

isolved may use and disclose certain aggregated, anonymized information, such as website usage data, to our trusted business partners. Such information may also be shared with other users or the public for advertising, informational, or comparison purposes.

isolved may also disclose information collected if it becomes subject to a subpoena or court order, or if it is otherwise legally required to disclose information. isolved may also use and disclose collected information as required or permitted by applicable law, including to establish or exercise our legal rights, to enforce the Terms of Use, to assert and defend against legal claims, or if we believe such disclosure is necessary to investigate, prevent, or take other action regarding actual or suspected illegal or fraudulent activities or potential threats to the physical safety or well-being of any person.

As isolved grows and develops its business, it is possible that its corporate structure or organization might change or that it might merge or otherwise combine with, or that it or portions of its business might be acquired by, another company. Under such circumstances, website information generally is, and should be expected to be, one of the transferred business assets. Further, if any bankruptcy, liquidation, or reorganization proceeding is brought by or against isolved, certain information may be considered a company asset that may be transferred to third parties.

Collection Notice

isolved collects your Personal Information to support its business operations, including for the purposes listed below.

The following tables identify uses of certain information that may be obtained from your visits to isolved websites.

We collected the following categories of Personal Information from consumers within the last twelve (12) months:

We obtain the categories of Personal Information listed above from the following categories of sources:

• Directly from you. For example, from forms you complete or products and services you purchase.
• Indirectly from you. For example, from observing your actions on our Sites.

Use of Personal Information

We may use or disclose the Personal Information we collect for one or more of the following purposes:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that Personal Information to respond to your inquiry. If you provide your Personal Information to purchase a product or service, we will use that information to process your payment and facilitate delivery¹. We may also save your information to facilitate new product orders or process returns.
• To provide, support, personalize, and develop our Sites, products, and services.
• To create, maintain, customize, and secure your account with us.
• To process your requests, purchases, transactions, and payments and to prevent transactional fraud.
• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.
• To personalize your Sites experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Sites, third-party sites, and via email or text message (with your consent, where required by law).
• To help maintain the safety, security, and integrity of our Sites, products and services, databases and other technology assets, and business.
• For testing, research, analysis, and product development, including to develop and improve our Sites, products, and services.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• As described to you when collecting your Personal Information or as otherwise set forth in applicable California law.
• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us about our Sites’ users/consumers is among the assets transferred.

We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing you notice.

NOTICE: YOU ACKNOWLEDGE AND AGREE THAT ANY INFORMATION YOU TRANSMIT, POST, OR SHARE TO A PUBLIC FORUM, A NON-CONFIDENTIAL MEDIUM, OR IN A CHATBOT WILL NOT BE TREATED AS CONFIDENTIAL OR SENSITIVE INFORMATION. PLEASE DO NOT PUT CONFIDENTIAL OR SENSITIVE INFORMATION INTO A PUBLIC FORUM, SUCH AS THE CHATBOT.

Sharing Personal Information

We may share your Personal Information by disclosing it to a third party for a business purpose. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the Personal Information confidential and protected, and prohibit using the disclosed information for any purpose except performing the contract. In the preceding twelve (12) months, Company has not disclosed Personal Information for a business purpose to the categories of third parties indicated in the chart below.

De-identified Patient Information

We do not sell or disclose de-identified patient information.

Choices About How We Use and Disclose Your Information

At isolved, we strive to provide you with choices about the personal information you provide to us. The following are ways you can exercise control over your information:

• Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Sites may then be inaccessible or not function properly.
• Disclosure of Your Information for Third-Party Advertising. isolved will not sell or share your personal information with unaffiliated or non-agent third parties for promotional purposes.
• Promotional Offers from isolved. If you do not wish to have your contact information used by isolved to promote our own or third parties' products or services, you can opt-out by sending us an email stating your request to [email protected].

isolved does not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.

Right to Know and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months (the "right to know"). Please see the Questions and Answers section below for general questions.

Data Portability General Questions and Answers:

Question - What are the specific pieces of personal information collected about the consumer?

Answer - See charts above.

---

Question - What are the personal information categories collected about the consumer?

Answer - See charts above.

---

Question - What are the source categories from which isolved collected the personal information?

Answer - This information is collected either through your visit to our website, or by your employer if your employer uses isolved systems, products or services.

---

Question - What are the personal information categories sold, if any, and the categories of third parties purchasing that personal information?

Answer - isolved does not sell your personal information.

---

Question – What are the personal information categories disclosed for a business purpose, if any, and the categories of third parties receiving that personal information?

Answer - See charts above. The third parties that may receive such information are service providers to isolved involved in the provision of products and services to your employer or you, who are bound by confidentiality, privacy and security covenants.

---

Question - What is the business or commercial purpose for collecting or selling personal information?

Answer - Collection of personal information is only for providing isolved products and services to our clients, processing and operational optimization. isolved does not sell your personal information.

---

Question - What personal information is shared for cross-context behavioral advertising?

Answer - isolved does not share your information for such purposes.

---

For more detailed requests, once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will disclose to you specifics about:

• The categories of Personal Information we collected about you.
• The categories of sources for the Personal Information we collected about you.
• Our business or commercial purpose for collecting or selling that Personal Information.
• The categories of third parties with whom we share that Personal Information.
• If we sold or disclosed your Personal Information for a business purpose, two separate lists disclosing:
• sales, identifying the Personal Information categories that each category of recipient purchased; and
• disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained.
• The specific pieces of Personal Information we collected about you (also called a data portability request).

We do not provide a right to know or data portability disclosure for business-to-business information.

Right to Delete

You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Delete or Correct), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the Personal Information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
8. Comply with a legal obligation.
9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or de-identify Personal Information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

We do not provide these deletion rights for business-to-business Information.

Right to Correct

You have the right to request that we correct any inaccuracies you may find with your Personal Information that we collected from you. Once we receive your request and confirm your identity (see Exercising Your Rights to Know, Delete or Correct), we will review your request and determine if a correction is needed.

Exercising Your Rights to Know, Delete or Correct

To exercise your rights to know or delete described above, please submit a request by either:

• Calling us at 866-231-1193.
• Emailing us at [email protected].
• Website - https://www.isolvedhcm.com/contact.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your Personal Information. To designate an authorized agent for the purposes described in this Policy, email [email protected].

You may also make a request to know or delete on behalf of your child by sending an email to [email protected].

You may only submit a request to know twice within a 12-month period. Your request to know or delete must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative, which may include:
• Power of attorney
• Other lawful binding documentation allowing a representative to act on your behalf
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity and authority to make the request and confirm the Personal Information relates to you.

You do not need to create an account with us to submit a request to know or delete. However, we do consider requests made through your password protected account sufficiently verified when the request relates to Personal Information associated with that specific account.

We will only use Personal Information provided in the request to verify the requestor's identity or authority to make it.

Response Timing and Format

We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact [email protected] or call 866-231-1193.

isolved will generally provide a substantive response to a verified consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your consumer privacy rights under the laws of California. Unless permitted by California law, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Other California Privacy Rights

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Sites that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. isolved does not share your information for such purposes.

Changes to Our Privacy Policy

We reserve the right to amend this privacy policy at our discretion and at any time. When we make changes to this privacy policy, we will post the updated notice on our Sites and update the notice's effective date. Your continued use of our Sites following the posting of changes constitutes your acceptance of such changes.

Contact Information

If you have any questions or comments about this notice, the ways in which isolved collects and uses your information described here and in the Privacy Policy, your choices and rights regarding such use, or if you wish to exercise your rights under California law, please do not hesitate to contact us at:

Email: [email protected]

Postal Address:
isolved, inc.
Attn: Privacy Office Request
11215 N. Community House Rd.
Suite 800
Charlotte, NC 28277

If you need to access this Policy in an alternative format due to having a disability, please contact [email protected] or call us at 866-231-1193

isolved has instituted the following policy related to any biometric data that isolved may possess as a result of isolved’s operations or of isolved’s clients’ and client employees’ use of isolved products and services. **isolved’s clients are responsible for developing and complying with their own biometric data retention and destruction policies as may be required under applicable law. **

Biometric Information: 

Biometric information refers to measurable biological or physical characteristics that can be used to identify an individual, such as a person’s facial images, fingerprints, voiceprints, handprints, iris scans and the like. Some laws regulate the use of biometric information by requiring collectors, users and storers of it to obtain permission from the individual whose biometric information is collected or used, or by requiring that those individuals receive information about biometric information storage, such a duration of retention and data purging details.   

The reason for this, we believe, is to protect this unique information from compromise and to ensure that individuals providing their biometric information make informed decisions about doing so. 

How Biometrics Work with isolved Time Solutions: 

While the isolved Timeclocks may contain a touchpads and touchless display features, the touchpad and touchlesstechnology do not retain a picture, image, or other depiction of a finger, fingerprint or facial. Instead, the touchpad senses features on a portion of the finger surface, and then, through a complex technical process, facilitates the assignment of a designation to the employee. The touchless display will take a picture when you first access the system and then, through a complex technical process, facilitates the assignment of a designation to the employee and the picture is then deleted completely. That designation (or “Template”) is not a fingerprint or a facial scan/picture and cannot be used to construct, reconstruct or reverse engineer a fingerprint or picture of a person’s face.

isolved Timeclocks can function with or without the use of a touchpad or touchless display. isolved does not control the Timeclocks and isolved does not have control of the work environments or circumstances of the employer.  It is the employer who engages the settings, including whether or not to use the touchpad and touchless display feature.  If, however, the employer chooses to engage the touchpad or touchless display function, biometric information is not captured or used by isolved. Additionally, and out of an abundance of caution, isolved requires each employee’s consent prior to the use of the touchpad or touchless display feature on its timeclocks.  

If for any reason isolved were to receive biometric information isolved would delete the biometric information immediately. isolved complies with applicable retention and destruction requirements as defined by law. 

The isolved Position on Biometric Information and isolved Timeclocks: 

Because isolved Timeclocks do not capture or use a fingerprint or facial picture in their functionality, isolved does not believe that isolved Timeclocks capture biometric information as defined by law in any state. More specifically, neither the Timeclocks nor isolved collect, capture, possess, purchase, receive, obtain, use or store biometric identifiers. isolved does not sell, lease, trade or otherwise profit from biometric information. isolved does recognize that employers using isolved Timeclocks may wish, out of an abundance of caution, to take conservative measures relative to biometric information. isolved recommends consultation with legal and regulatory advisors about whether obtaining employees’ written consents or releases relative to using an isolved Timeclock would be advantageous. isolved views such measures as the responsibility of the employer and not isolved.