Privacy Policy

Last updated: June 13, 2021

Thank you for using the ALIHR CARROTS Rewards provided by Nuvem Inc. We value your privacy and we want to protect your personal information. Please read this Privacy Policy to learn more.

Nuvem Inc. ("us", "we", "our", or “Company”) provides the platform https://alihrcarrotsph.avail.at (the "Site") and operated by our partner A-Solutions Online Stores, Inc. This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site.

We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy.

We are not responsible for the content or privacy practices on any web site not provided by Nuvem Inc., of which the Site links to or that links to the Site.

The Customer is the controller of the personal data processed in the course of using the Service ("Personal Data") or acts as a processor. The Customer shall mean your employer, which entered into an Agreement with us for the services provided by our Site.

Company provides the Service to the Customer based on the signed Proposal and Agreement Terms of Service ("Terms of Service").

INFORMATION COLLECTION AND USE

We use Personal Information of employees or members of our Customers only for providing and improving our Services.

Personal data that is approved by our Customers may be collected as needed depending on the requirements of our Customers for the purpose of providing our Service including processing rewards points and deliver rewards whether in physical or digital form.

While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to basic name, home address, office address, email address, work telephone number, home telephone number, mobile number, points earned, and transaction details. Other data types may be collected as needed for the purpose of processing your rewards points and to deliver rewards whether in physical or digital.

The information you provide to us or our partners operating the Site may also be combined with demographic and other information that are available in order to allow us to better communicate with you and enhance your shopping experience.

We may occasionally contact you to obtain feedback on a specific transaction and/or item you ordered online. As part of using our platform, we may have to share your contact information with third parties in order to fulfill the order/s you made online.

COLLECTION METHOD

We collect personal information mainly through our Platform or Service.

Customer designated administrators (“Administrators”) are the ones who upload and update the personal data of their employees or approved members who access our Services. Our Customers have the final decision on the scope of Personal Data that can be collected. We only recommend the minimum personal data to our Customers so that we can provide our Services.

Our Customers determine the personal data that is collected with the use of our Services. Only personal data approved by our Customers is collected in our website or Platform.

We also collect information from the computer or device used to provide or improve our Services to our Customers (See Log Data below).

TIMING OF COLLECTION

Only members or employees enrolled and approved by our Customers gain access to our Services and whose personal data are collected as part of the registration process or for the purpose of fulfillment of our Services.

Designated Administrators of our Customers are the ones who can upload and update the personal data of their employees or approved members at any time of their choosing.

Authorized members or employees of our Customers can update their personal data anytime after proper authentication directly through forms in our website/s.

METHOD OF USE

Personal Data shall be processed by the Company in order for the Customer to use the Service provided by the Company.

Processing is both automated and non-automated. Personal Data processing by Company takes place using the IT systems provided within the Service and includes following processing activities: collection, recording, storage, adaptation, alteration, disclosure, backup of Personal Data, as well as other activities as required to provide the Service.

Company may communicate directly with the Personal Data subjects in the course of Personal Data processing.

Company’s role is limited to making the Service available to the Customer for use in order to process the Personal Data. Company does not have any impact on the scope of Personal Data processed by the Customer within the Service and does not monitor scope of such Data. The purposes and means of their processing will only be for the fulfilment of the Service to the Customer.

Decision as to the scope of data that to be processed by Company in the Service belongs to the Customer. By using the Service to process such data, the Customer confirms that security measures implemented by Company are in his opinion sufficient to protect entrusted Personal Data.

INFORMATION SHARED WITH THIRD PARTIES

As a necessary part of providing the Services, we may disclose information collected from you to certain third parties. For example, we may disclose certain Personal Information about you to our third-party service providers (e.g., our third party payment processors; website service providers, third party merchants, logistics providers), so long as they are only using the Personal Information to provide services to us.

If another company acquires our company, business, or our assets, that company will possess the Personal Information collected by it and us and will assume the rights and obligations regarding your Personal Information as described in this Privacy Policy.

Under certain limited circumstances, we may cooperate with public authorities and/or legal investigations and/or we may be subject to legal requirements to disclose information collected through the Site or the Services, such as, by way of example, to a court or a governmental agency, and our policy is to provide such cooperation and comply fully with all such legal requirements.

LOG DATA

Like many site operators, we collect information that your browser sends whenever you visit our Site ("Log Data").

This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.

In addition, we may use third party services such as Google Analytics that collect, monitor and analyse the collected data.

Information from computer/mobile device. We might collect information about the computer system or other technological device that you use to access one of our Websites or apps, such as the Internet protocol (IP) address used to connect your computer or device to the Internet, operating system type, and web browser type and version. If you access our Site or Platform via a mobile device such as a smartphone, the collected information will also include, where permitted, your phone’s unique device ID, advertising ID, geo-location, and other similar mobile device data.

Websites/communication usage information. As you navigate through and interact with our Site or Platform, we might use automatic data collection technologies to collect certain information about your actions. This includes information such as which links you click on, which pages or content you view and for how long, and other similar information and statistics about your interactions, such as content response times, download errors and length of visits to certain pages. This information is captured using automated technologies such as cookies and web beacons, and is also collected through the use of third-party tracking for analytics or Service improvement purposes.

COMMUNICATIONS

For those who have registered through our platform, we may use your Personal Information to contact you for processing of your rewards and providing services in the platform.

As part of our communication, you may receive periodic e-mails from us, Carrots.ph, and its partners for processing of your rewards and your transactions in the platform.

SECURITY, STORAGE, AND TRANSMISSION OF PERSONAL INFORMATION

The Site incorporates physical, electronic, and administrative procedures to safeguard the confidentiality of your personal information, including Secure Sockets Layer ("SSL") for all financial transactions through the Site. We use SSL encryption to protect your personal information online, and we also take several steps to protect your personal information in our facilities.

Access to your personal information is restricted. Only employees of Carrots.ph and our partner A-Solutions Online Stores, Inc. who need access to your personal information to perform a specific job are granted access to your personal information.

Our web servers, where we store your personal information, are hosted and managed by Liquid Web which has a whole suite of security features including SSL, firewall, anti-virus, and daily security audits ensuring that we are taking considerable steps to protect your personal information. For a full list of security features, please check out this link: https://documentation.cpanel.net/display/68Docs/WHM+Features+List#SecurityCenter

Daily, weekly and monthly backup of data, on the other hand, is managed by Amazon Web Services (AWS), which implements strict security controls including data encryption, firewalls, protection against DDOS attacks and which regularly tests for system vulnerabilities via penetration testing. For more details on the security of the AWS server, please check: https://aws.amazon.com/security/.

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

RETENTION PERIOD

Once the Agreement or Service with the Customer is terminated, Company shall, according to the Customer's statement, delete the Personal Data (by deleting any existing copies of Personal Data) or return them to the Customer (along with any media where they are stored, if possible), unless Company has the right to further process the Personal Data for a longer period based on independent legal grounds.

If Company does not receive the statement referred to in the preceding sentence, whether in writing or by e-mail, within 5 days of Agreement termination, the Customer shall be deemed to require that the entrusted Personal Data be deleted.

The Customer may obtain a copy of the processed Personal Data throughout the term of the Service Agreement, but no later than 5 days after the Customer's Account has been deactivated. In the said period of 5 days after the Customer's Account has been deactivated, the Personal Data shall only be processed by Company for the purpose of potential reactivation of the Customer's Account, and shall only involve Personal Data storage for the Customer without any other processing activities, subject to Company's other obligations or rights arising from applicable laws or public authorities’ orders. After the expiry of this term, Personal Data shall be deleted from the main storage base without possibility of recovery.

SITE USAGE FOR MINORS

Nuvem Inc. and its partner A-Solutions Online Stores, Inc. does not knowingly solicit or collect personally identifiable information online from children under the age of 13 without prior verifiable parental consent.

If we determine that any content has been uploaded to the Site by someone under the age of 13, it will be removed.

If you are between the ages of 13 and 18, please ask your parent's permission before using the Site and the Service as some offers may be subject to further age limitations.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy is effective as of Dec 1, 2021 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

CONTACT US

If you have any questions about this Privacy Policy, please contact us through your Company Representative or HR Officer.