Hall

Privacy Policy

Last updated: 12 May 2024

This Privacy Policy applies to the collection, use, disclosure and handling of Personal Information by Hall Technologies Pty. Ltd. ACN 669 790 738 (“we”, “us”, or “our”) and our Affiliates, including information collected via usehall.com (our “website”), our Services, and through your communication and interactions with us. Any capitalized terms not defined in this Privacy Policy have the meanings given to those terms in our Customer Subscription Agreement.

Your privacy is very important to us, and we encourage you to read this Privacy Policy carefully. By providing Personal Information to us, you consent to our collection, handling, use and disclosure of your information in accordance with this Privacy Policy. If we are not able to collect certain Personal Information about you, this may limit your ability to use or access the Services.

This Policy does not apply to websites, apps, products, or services that we do not own or control. Further, where our Services are made available to you via an organization (for example, where your employer is our Customer and has made you an Authorized User of the Services under our contract with them), that organization will control the information processed via the Services, including Customer Data. This means that this Privacy Policy will not apply to that information, and we will not be responsible for the privacy practices of that organization. Rather, your information will be subject to that organization’s practices, policies, and collection notices. We encourage you to review these materials as they relate to the handling of your information.

2. What information we collect

We collect Personal Information in several ways. We may collect information directly from you or during our dealings with you, for example where you use our Services, contact and correspond with us, attend our premises or events, or apply for a position of employment with us.

When you use our Services, you may provide information to us. This includes:

  1. when you set up a profile, your name, email address, and profile photo;
  2. content you provide through the Services;
  3. when you subscribe to our paid services, your billing details including your billing address;
  4. details of services we have provided to you or that you have enquired about;
  5. your responses to questionnaires, surveys, or requests for feedback; and
  6. additional Personal Information that you provide to us directly or indirectly through your use of our Services, associated social media platforms or accounts from which you permit us to collect information.

We log certain information about your access to and use of our Services (“Technical Information”). This includes:

  1. device data (including, but not limited to, the type of device you use, data on device advertising identifiers and similar hardware qualifiers, the browser you use, your operating system, and approximate geographic location data);
  2. usage data (including, but not limited to, search terms entered, pages viewed, and other usage behavior identified by analytics events);
  3. network and internet information (including, but not limited to, URLs, and Internet Protocol addresses); and
  4. information we collect via cookies and other tracking technologies.

If you apply for a job with us, we may collect certain information in connection with your application such as your name, contact details, occupation, education and work history. We may also collect certain information necessary to verify your identification or working rights.

We may receive information about you from third party sources. This includes marketing or demographic information about you from third party providers, including data about your organization or industry or other public information available online, such as through professional profiles. We may combine this information with other data we have to improve your experience with the Services or inform you of Services we think may be of interest to you.

3. How we use information we collect

The way we use your information depends on our relationship with you and the purpose of collection. We collect and use your information:

  1. to deliver our Services and enable you to access and use our Services;
  2. to improve our Services and your overall user experience;
  3. to process your payments where you have signed up to a paid service;
  4. to contact and communicate with you;
  5. to prevent and address technical problems, and maintain the security of the Services;
  6. to provide you with support services, if requested;
  7. to help us understand traffic patterns, and analyze how you use the Services;
  8. for internal record keeping;
  9. for advertising and marketing, including to send you information about our products and services;
  10. in connection with a merger, acquisition, reorganization or similar transaction;
  11. when required or permitted by law, or to respond to legal process; and
  12. for any other purpose with your consent.

4. How we share information we collect

We share information we collect in the ways set out below, including in connection with possible business transfers. In addition to the specific circumstances discussed elsewhere in this policy, we may share Personal Information:

  1. with our Affiliates;
  2. with third parties performing services to support our core business functions and internal operations, including advertising and analytics providers that help us understand user behavior and improve our Services;
  3. with third parties (including agents and subcontractors) assisting us to provide information, products, services or direct marketing to you, who are bound by confidentiality and data protection requirements;
  4. to support our audit, compliance, and corporate governance functions;
  5. in connection with a change of ownership or control of all or part of our business (such as a merger, acquisition, reorganization, or bankruptcy);
  6. with credit reporting agencies and courts, tribunals and regulatory authorities where you fail to pay for goods or services provided to you;
  7. if we have a good faith belief that access, use, preservation, or disclosure of such information is reasonably necessary to detect or protect against fraud or security issues;
  8. if otherwise required or permitted by applicable law or regulation, including laws and regulations of Australia and other countries, or in the good faith belief that such action is necessary to:
  1. comply with a legal obligation or in response to a request from law enforcement or other public authorities wherever we may do business;
  2. protect and defend our rights or property;
  3. act in urgent circumstances to protect the personal safety of our users, customers, and contractors/employees; or
  4. enforce our legal terms or otherwise protect against any legal liability; and
  1. with your consent or at your direction.

Some of the third parties noted above may be located or store data outside your country of residence. We implement appropriate safeguards in all cases where we transfer data across borders.

5. How we use tracking technologies

Some features in the Services may require the use of “cookies” (i.e. small text files that are stored on your device). You may delete and block all cookies from our Services, but parts of the Services may not operate as intended. We use different categories of cookies for different reasons.

When you first visit our Services, you will be presented with a cookie banner giving you the option to accept or decline non-essential cookies. You can change your preferences at any time using the button below:

Essential cookies

Essential cookies and services are used to enable core website features, such as ensuring the security of the website, maintaining your session, and remembering your authentication status. These cookies are strictly necessary for the functioning of our Services, and cannot be disabled.

Functional cookies

Functional cookies and services are used to offer enhanced and personalized functionalities. These technologies provide additional features and improved user experiences, such as remembering your language preferences, font sizes, region selections, and customized layouts. Opting out of these cookies may render certain services or functionality of the website unavailable.

Marketing cookies

Marketing cookies and services are used to deliver personalized advertisements, promotions, and offers relevant to your interests. These cookies collect information about your browsing habits and online activities to help us and our advertising partners deliver more relevant advertisements to you across our Services and on third-party websites.

Under certain privacy laws (such as CCPA/CPRA in California and similar laws in other states), the sharing of data with third-party advertising partners through these cookies may constitute a “sale” or “sharing” of Personal Information, even though we do not directly sell your information for money. When we allow advertising partners to collect information about your browsing activity through cookies for targeted advertising purposes, this may be considered a “sale” or “sharing” under these laws, and you have the right to opt out of this activity.

Analytics cookies

Analytics cookies and services are used for collecting statistical information about how visitors interact with a website. These technologies provide insights into website usage, visitor behavior, and site performance to understand and improve the site and enhance user experience.

6. Managing your information

You can review, update, correct or delete the Personal Information held by us by contacting legal@usehall.com. If you are an Authorized User of our Services, you may also manage certain information directly via your user account. If you wish to remove your user account, you may do so through your account settings. However, this will not necessarily remove all Personal Information held about you by us.

To maintain the privacy of our users, we may need to verify your identity before fulfilling your request by asking for additional information from you that matches information we have on record. We will endeavor to respond to verified requests within thirty (30) days, or within the timeframe required by applicable laws.

Please note that we may retain certain information in anonymized and aggregated form, in archived or backup copies as required pursuant to records retention obligations, or otherwise as required or permitted by law. Some information may remain in our systems after deletion of other data due to technical constraints.

Your choices and controls

You have several options to control your information:

  • Marketing communications: You may opt out of receiving marketing communications by clicking “Unsubscribe” in our emails or contacting legal@usehall.com. Even if you opt out of marketing communications, you will continue to receive service-related communications.
  • Account information: You can update your account information and communication preferences through your account settings.
  • Cookies and tracking technologies: You can manage cookies through your browser settings and our Cookie Preferences controls. Note that blocking certain cookies may affect your experience with our Services.
  • Do Not Track: While we do our best to respect your privacy preferences, our Services currently do not respond to Do Not Track signals from browsers.

We process all requests in accordance with applicable laws and within a reasonable timeframe. Certain legal obligations may limit our ability to delete information completely, such as retention requirements for financial or legal purposes.

7. Data storage, transfer, and security

We may host data with hosting service providers in countries outside your country of residence. Your Personal Information may also be stored and processed in other countries where we have facilities or in which we engage service providers. By using our Services, you consent to this transfer where legally permissible.

To protect your information when transferred internationally, we implement appropriate safeguards such as standard contractual clauses or other legal mechanisms as required by applicable laws.

We have in place a number of physical, technical and organizational measures to safeguard and secure your information and protect it from misuse, interference, loss and unauthorized access, modification and disclosure. These include:

  • Encryption of data in transit and at rest
  • Access controls and authentication requirements
  • Regular security assessments and vulnerability testing
  • Employee security training and confidentiality agreements
  • Monitoring for suspicious activities and unauthorized access attempts
  • Backup procedures and disaster recovery planning

We maintain these security measures and regularly review their effectiveness, but no security system is impenetrable. We cannot guarantee the absolute security of your information. If we become aware of a data breach affecting your Personal Information, we will notify you in accordance with applicable laws.

8. Children under 16

The Services are not directed to individuals who are under the age of 16 and we do not solicit nor knowingly collect Personal Information from children under the age of 16. If you believe that we have unknowingly collected any Personal Information from someone under the age of 16, please contact us immediately at legal@usehall.com and we will take steps to ensure that the information is deleted.

Our Services may contain links to other websites of interest. We do not have any control over those websites. We are not responsible or liable for the protection and privacy of any information which you provide while visiting such websites, and such websites are not governed by this Privacy Policy.

10. Changes

We reserve the right to change this Privacy Policy at any time, and such changes will be effective when they are posted to this page. We will notify you of any changes by posting the updated policy to this page, and/or by sending notice to the contact email address associated with your Authorized User account for the Services, if you have one. By continuing to use our Services or otherwise continuing to interact with us, you acknowledge that the collection, use and sharing of your Personal Information is subject to the updated Privacy Policy. We recommend that you review this page periodically for any changes.

11. Contact us

Please contact legal@usehall.com if you have any questions or concerns about this Policy or our information handling practices, or if you believe that we have not complied with this Policy or applicable privacy laws.

We will take any privacy complaint seriously and will investigate and aim to resolve any such complaint in a timely and efficient manner. Our target response time is thirty (30) days, and we request that you cooperate with us during this time, including providing us with any relevant information we may require.

We expect to be able to deal with your complaint fairly and promptly. If you are not satisfied with our response, you may have rights to escalate your complaint to a relevant regulatory authority in your jurisdiction.

12. Jurisdiction-Specific information

Australian residents

If you are an Australian resident, this privacy policy has been drafted with consideration of the Australian Privacy Act and Australian Privacy Principles, though applicability may vary based on our specific circumstances. When handling your Personal Information, we may store and process it in countries outside of Australia, including the United States. We implement appropriate safeguards when transferring your data internationally.

If you have a privacy complaint and are not satisfied with our response, you may have the right to contact the Office of the Australian Information Commissioner (“OAIC”) for further assistance. The OAIC provides guidance and oversight for privacy matters in Australia.

In collecting and managing your Personal Information, we strive to ensure the information we maintain is relevant, accurate, up-to-date, complete, and not misleading, in alignment with good privacy practices.

European and UK residents

The laws of certain jurisdictions, including the European Union (EU), European Economic Area (EEA), and the United Kingdom (UK), provide data subjects with various rights in connection with the processing of Personal Information, including:

  1. the right to withdraw any previously provided consent;
  2. the right to access certain information about you that we process;
  3. the right to have us correct or update any Personal Information;
  4. the right to have certain Personal Information erased;
  5. the right to have us temporarily block our processing of certain Personal Information;
  6. the right to have Personal Information exported into common machine-readable format;
  7. the right to object to our processing of Personal Information in cases of direct marketing, or when we rely on legitimate interests as our lawful basis to process your information; and
  8. the right to lodge a complaint with the appropriate data protection authority.

Where we are deemed a data controller under the laws of certain jurisdictions, we will take steps to help ensure that you are able to exercise your rights regarding Personal Information about you in accordance with applicable law. To do so, you may contact us at legal@usehall.com. Please note these rights may be limited in certain circumstances as provided by applicable law. We will promptly review all such requests in accordance with applicable laws.

Depending on where you live, you may also have a right to lodge a complaint with a supervisory authority or other regulatory agency if you believe that we have violated any of the rights concerning Personal Information about you:

  • EU/EEA residents may contact their national Data Protection Authority
  • UK residents may contact the Information Commissioner’s Office (ICO)

We encourage you to first reach out to us at legal@usehall.com, so we have an opportunity to address your concerns directly before you contact a regulatory authority.

Under the laws of certain jurisdictions, when processing the Personal Information of Authorized Users in connection with the provision of Services to our Customers, we may be deemed a ‘data processor’ while our Customers are deemed ‘data controllers’. Where we are deemed a data processor, Authorized Users should contact our Customer, the data controller, to pursue any such legal data subject rights. We will reasonably cooperate with our Customers to support and comply with any such data subject rights requests.

Where we are deemed a data controller under applicable privacy laws of the European Economic Area (EEA) or the United Kingdom (UK) and if you are an individual in the EEA or UK, we collect and process information about you only where we have legal bases for doing so under applicable laws. The legal bases may depend on the Services you use and how you use them, such as the following:

  1. we need your information to provide you the Services, including to operate the Services, provide customer support and personalized features and to protect the safety and security of the Services;
  2. our collection and use of your information satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Services and to protect our legal rights and interests;
  3. you give us consent to collect and/or use your information for a specific purpose; or
  4. we need to process your information to comply with a legal obligation.

If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place.

Where we are using your information because we or a Customer (e.g., your employer) have a legitimate interest to do so, and you object to such use, then, in some cases, this may mean no longer being able to access or use the Services.

United States residents

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or other U.S. states with comprehensive privacy laws, you may have specific rights regarding your Personal Information:

  • Right to Know/Access: You can request what Personal Information we have collected, used, disclosed, and sold about you.
  • Right to Delete: You can request deletion of Personal Information we have collected about you.
  • Right to Correct: You can request correction of inaccurate Personal Information.
  • Right to Opt-Out: You can opt out of the “sale” or “sharing” of your Personal Information as those terms are defined under applicable laws. This includes opting out of targeted advertising through cookies.

To exercise these rights, please contact us at legal@usehall.com. We will respond to verifiable requests within the timeframe required by applicable law.

We do not discriminate against you for exercising any of these rights. However, certain services may require some Personal Information to function, and we may not be able to provide those services if you choose to exercise your rights to delete or opt out of certain data uses.