Last updated: January 5, 2021
The Information We Collect and Store
We may collect and store the following Information when you are using the Services:
Information You Provide.
When you register for, or access, a Kin account, we may collect some personal Information that can be used to contact or identify you (“Personal Information”), such as your name, phone number, credit card or other billing Information, email address, home and business postal addresses.
Information Your Employer May Provide.
The Services may also be used by your employer to store other certain employment-related Information (“Employment Information”). This Employment Information may include employment status, W-2 information including your social security number, benefits information and emergency contacts (but should not include Form I-9 Employment Eligibility Verification which your account administrator has agreed not to store using the Services). This Employment Information is encrypted and stored on secured servers and may only be accessed by a person or persons designated by your employer as an account administrator. Kin does not access your Employment Information, nor do the Services allow for dissemination of such Information other than by you, the human resource administrators of the account, or the owner(s) of the account (each referred to herein as an “account administrator”), or as may be required by law.
We collect and store the files you or your account administrator uploads, downloads, or accesses with the Services (“Files”). If you or your account administrator adds a File to a Kin account that has been previously uploaded by you or another user, we may associate all or a portion of the previous File with your account rather than storing a duplicate.
We use “cookies” to collect Information and improve our Services. A cookie is a small data file that we transfer to your device. We may use “session ID cookies” to enable certain features of the Services, to better understand how you interact with the Services and to monitor aggregate usage and web traffic routing on the Services. We may also use “persistent cookies” to save your registration ID and login password for future logins to the Services. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all aspects of the Services.
When you use the Services, we automatically record Information from the device you use, its software, and your activity using the Services. This may include the device’s Internet Protocol (“IP”) address, browser type, the web page(s) visited before you came to our website, Information you search for on our website, locale preferences, identification numbers associated with your devices, your mobile carrier, date and time stamps associated with transactions, system configuration, metadata concerning your Files, and other interactions with the Services.
Kin may allow third party integrators (“Integrators“) to create applications and/or tools that supplement or enhance the Services (the “Integrations“). If you choose to access any such Integrations, the Integrators will access (via API) and use information you provide solely for the purpose of supplementing or enhancing the Services through the Integrations.
How We Use Your Information
Personal Information and data collected from cookies and other logging data may be used: (i) to provide and improve our Services and customer service, (ii) to administer your use of the Services, (iii) to better understand your needs and interests, (iv) to personalize and improve your experience, and (v) to provide or offer software updates and product announcements. If you no longer wish to receive communications from us, please follow the “unsubscribe” instructions provided in any of those communications, or update your account settings, as applicable. We do not sell your Personal Information, Files or Employment Information to third parties.
Employment Information and Files.
Employment Information and Files are encrypted and stored with Amazon’s S3 storage service and may be accessed and downloaded by you and your account administrator(s). Kin does not access or use Employment Information or your Files other than (i) in an encrypted form or (ii) in aggregated reports that do not contain, nor that can be used to extract, personally identifiable information. Your account administrator is responsible for any use of your personal Employment Information or Files.
We may also collect some Information (ourselves or by using third party services) using logging and cookies, such as IP addresses, which can sometimes be correlated with Personal Information. We use this Information for the above purposes and to monitor and analyze use of the Services, for the Services’ technical administration, to increase our Services’ functionality and user-friendliness, and to verify users have the authorization needed for the Services to process their requests.
Information Sharing and Disclosure
We will display your Personal Information and some Employment Information in your profile page and any profile page created by your account administrator and elsewhere on the Services according to the preferences you or your account administrator sets in your profile or in any Kin account which you access. You or your account administrator can review and revise your profile Information at any time.
Service Providers, Business Partners and Others.
The data that we process is considered HR data (names, addresses, SSN/Tax-Ids, email addresses, salary information, payroll documents, banking information, employee reviews). Information regarded as Personally Identifiable Information is not sold to any third party. We do, however, use third party services that aide us in the functionality of our application, as well as improving the application based on customer needs. Third party services only have access to data that is absolutely needed for the functionality of the application. Data that is shared with third parties depend on the scope of services each third party service provides to KinHR. The data is sent to each provider via API calls from their respective services. Each provider is screened for compliance to both Privacy Shield and a commitment to GDPR compliance in their respective privacy policies. Examples are as follows:
- Cheddar – Credit card processing and information
- Stripe – Credit card processing and information
- Hellosign / Docusign – Sign and distribute PDFs via API
- Intercom – Technical support requests to KinHR staff
- Amazon AWS – Infrastructure and HR information as designed by KinHR
- Mixpanel – Application Analytics
- Sentry.io – Error Tracking and Reporting
Compliance with Laws and Law Enforcement Requests; Protection of Kin’s Rights.
We may disclose to outside parties Files, Personal Information and/or Employment Information stored in Kin accounts which you access and Information about you that we collect when we have a good faith belief that disclosure is reasonably necessary to (a) comply with a law, regulation or compulsory legal request; (b) protect the safety of any person from death or serious bodily injury; (c) prevent fraud or abuse of Kin, its Services or its users; or (d) to protect Kin’s property rights. If we provide your Files to a law enforcement agency as set forth above, we will remove Kin’s encryption from the Files before providing them to law enforcement. However, Kin will not be able to access and decrypt any Files on your behalf or that you encrypted prior to storing them via the Services.
Transfers of Our Business.
Non-private or Non-Personal Information.
We may, at our discretion, disclose your non-private, aggregated, or otherwise non-personal Information, such as usage statistics of our Services.
Other than the primary elements of the Services that we encrypt and provide through Amazon’s S3 storage, you may opt out of our using or sharing any other Personal Information with our third party business partners. Opting out may affect how well we are able to service your account(s) and customer needs, but we will still be able to provide you with the Services. You may opt out by selecting the applicable “opt out” features within the Services, or contacting us via email at email@example.com or in writing at 1658 N. Milwaukee Ave, STE 296, Chicago, IL 60647.
Changing or Deleting Your Information
If you are registered as the account holder or account administrator, you may review, update, correct or delete the Personal Information provided in your registration or account profile by changing the “account settings.” Files and Employment Information may only be updated or deleted by your account administrator. In some cases we may retain copies of your Information and Files if required by law. For questions about your Personal Information, Employment Information or Files on our Services, please contact firstname.lastname@example.org. We will respond to your inquiry within 30 days.
We may retain and use your Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Consistent with these requirements, we will attempt to delete your Information quickly upon request by you or your account administrator, as applicable. Please note, however, that there might be latency in deleting Information from our servers and backed-up versions might exist after deletion. In addition, we do not delete from our servers Files that you have in common with other users.
Account and Administrator
Your account administrator has the ability to:
- access, add, delete modify or save all Employment Information, Files and other Information in and about your Kin account;
- disclose, restrict, or access Information that you have provided or that is made available to you when using such Kin account; and
- control how your Kin account may be accessed, modified or deleted.
Please refer to your organization’s policies if you have questions about your account administrator’s rights.
The security of your Information is important to us. When you enter sensitive Information (such as a bank routing number) on our order forms and when your account administrator adds or uploads Employment Information or Files, we encrypt the transmission of that Information using secure socket layer technology (SSL).
We follow generally accepted standards to protect the Information submitted to us, both during transmission and once we receive it. No method of electronic transmission or storage is 100% secure, however. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our website, you can contact us at email@example.com.
Provisions Related to Users Residing in Europe
Kin Workplace Solutions, LLC has further committed to refer unresolved Privacy Shield complaints to International Centre for Dispute Resolution-American Arbitration Association (ICDR-AAA), an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit http://go.adr.org/privacyshieldfiling.html for more information or to file a complaint. The services of ICDR-AAA are provided at no cost to you. If you have a complaint regarding our processing of your personal information or other use thereof, you may invoke binding arbitration by using the hyperlink provided above. Non HR Resource Mechanism: If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.c
Kin Workplace Solutions, LLC commits to cooperate with EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from the EU and Switzerland in the context of the employment relationship.
Kin Workplace Solutions, LLC is subject to the investigatory and enforcement powers of the Federal Trade Commission.
If you wish to opt out of any disclosures of your information to third parties or to prevent the use of your personal information for a purpose that is materially different from the purpose for which it was originally collected, you may contact your employer’s account administrator or log into your account and make changes as shown in Sections 3 and 4 above. The use of your information can be limited, or the information can be corrected, deleted, or exported to you or a third-party of your choice, except as required by law, either online as shown in Sections 3 and 4 above, or by contacting your account administrator.
If Kin Workplace Solutions, LLC transfers your information along to third parties, it is responsible to ensure the security and appropriate use of your information, and it may be held liable for damages arising out of such transfer.
Our Policy Toward Children
Our Services are not directed to persons under 13. We do not knowingly collect Personal Information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at firstname.lastname@example.org. If we become aware that a child under 13 has provided us with Personal Information, we will take steps to delete such Information.
Kin Workplace Solutions, LLC.
© 2021. All rights reserved.