Data processing terms

These terms apply when an organization ("the customer") uses My Company Trivia, and we, IT Support 101 Inc., handle personal information on the customer's behalf. They form part of our terms of service.

1. Roles

The customer controls the personal information it puts into the service, such as staff accounts, players' nicknames and results, and campaign participants. We process it only as the customer's service provider, to run the service.

2. What we process

• People: the customer's admins, hosts and team members; players in its games; people taking its campaigns.
• Information: names, email addresses, nicknames, answers, scores, timings, training results, and any personal information the customer puts in quizzes or uploads.
• Purpose: providing, securing, supporting and backing up the service. Nothing else.

3. Our commitments

• We act only on the customer's instructions, which are these terms and how the customer uses the service, unless the law requires otherwise. We'll tell the customer if the law requires something different, unless we're not allowed to.
• People at IT Support 101 Inc. who can access personal information are bound to keep it confidential, and only access it to run or support the service.
• We use reasonable security safeguards, including HTTPS, hashed passwords, separation between organizations, role-based access, key-based server access and encrypted backups.
• We help the customer respond to requests from individuals to access, correct or delete their information. Much of this the customer can do directly in the service.

4. Service providers

The customer agrees that we may use the service providers listed in our privacy policy. We'll give at least 30 days' notice, by email or in the service, before adding a new provider that handles customer personal information, so the customer can object. We remain responsible for our providers' handling of the information.

5. Where information is kept

Information is stored and processed in the United States, and by our providers as described in the privacy policy. The customer is responsible for telling its staff and players about this where its own obligations require it.

6. Breaches

If we learn of a breach of security safeguards affecting the customer's personal information, we'll tell the customer without undue delay, with the details we have, and help it meet its own obligations, such as reporting to the Office of the Privacy Commissioner of Canada and notifying affected people where there's a real risk of significant harm.

7. When the service ends

An admin can download the organization's data and delete the organization at any time, under Your data. Deletion removes it from the live service straight away. Copies in encrypted backups are deleted as the backups expire, within 12 months, and are kept secure until then.

8. Information and audits

On reasonable request, and no more than once a year unless there's been a breach, we'll answer the customer's written questions about how we protect its information.

9. Liability

The limits of liability in the terms of service apply to these terms.

Contact

Privacy Officer, IT Support 101 Inc.
91 King Street East, Suite 135, Bowmanville, Ontario L1C 5E2, Canada
[email protected]