Privacy Policy

Last Updated: May 1, 2024

1. Introduction and Overview.

This Privacy Policy provides a comprehensive description of how One Analytics, LLC (“One Analytics,” “we,” “our,” or “us”) collects, uses, and discloses information about you as well as your rights and choices regarding such information. It applies to any online location controlled by us that links to this Privacy Policy (the “Service”).

This Privacy Policy does not govern information we process on behalf of our clients. For details about the processing of client data, please see the “Information from Our Clients” section below.

By using the Service, you agree to our Terms of Use and to our collection, use and disclosure practices, and other activities as described in this Privacy Policy. If you do not agree, discontinue use of the service.

If you have any questions or wish to exercise your rights and choices, please contact us as set out in the “Contact Us” section.

You may have additional rights based on your jurisdiction. Please click the relevant link below for more information:

2. Information Collection.

A. Information You Provide.

We collect information about you when you use the Service, including information you provide when you access our content, contact us, or apply for a job. The categories of information we collect include:

Contact Data, including your full name and email address.
Content, including content within any messages you send to us
Job Applicant Data, including your employment and education history, transcript, writing samples, and references as necessary to consider your job application for open positions.

You may choose to voluntarily provide other information to us that we do not request, and, in such instances, you are solely responsible for such information.

B. Information Collected Automatically.

In addition, we automatically collect information when you use the Service. The categories of information we automatically collect include:

Service Use Data, including data about features you use, pages you visit, emails and advertisements you view, the time of day you browse, and your referring and exiting pages.
Device Data, including data about the type of device or browser you use, your device’s operating software, your internet service provider, your device’s regional and language settings, and device identifiers such as IP address.
Location Data, including non-precise location data (such as location derived from an IP address or data that indicates a city or postal code level).

The types of tracking technologies we use to automatically collect this information include:

Cookies, which are small data files stored on your browser that save data about your visit. Cookies often include a unique identifier (e.g., cookie #123). We use two types of cookies: session cookies and persistent cookies. Session cookies make it easier for you to navigate our website and expire when you close your browser. Persistent cookies help with personalizing your experience, remembering your preferences, and supporting security features. Additionally, persistent cookies allow us to bring you advertising both on and off the Service. Persistent cookies may remain on your device for extended periods of time, and expire on a set expiration date or when they are deleted manually.
Pixels (also known as web beacons), which is code embedded in a service that sends information about your use to a server. There are various types of pixels, including image pixels (which are small graphic images) and JavaScript pixels (which contains JavaScript code). When you access a service that contains a pixel, the pixel may permit us or a separate entity to drop or read cookies on your browser, or collect other information about your visit.
Device Fingerprinting, which is the process of analyzing and combining sets of data elements from your device’s browser, such as JavaScript objects and installed fonts, to create a “fingerprint” of your device and uniquely identify your browser and device.

Cookie Declaration:

To provide transparent and detailed information about the cookies we use, their purpose, and the data they collect, we’ve implemented a Cookie Declaration. You can access this declaration here. This will give you detailed control over the cookies you want to allow during your use of the Service.

For further information on your rights and choices regarding the tracking technologies we use, see the “Your Rights and Choices” section below.

C. Information From Our Clients.

We provide products and services to our clients, and collect and process information about individuals (including through tracking technologies) at the direction of our clients (“client data”). Client data has historically included contact data, demographic data, content, service use data, device data, and location data, among other information. Our processing of client data is governed by the terms of service agreements with our clients, and not this Privacy Policy. In the event we are permitted to process client data for our own purposes, we will process the client data in accordance with the practices described in this Privacy Policy. We are not responsible for how our clients treat the information we collect on their behalf, and we recommend you review their own privacy policies.

For further information on your rights and choices regarding client data, see the “Your Rights and Choices” section below.

D. Information From Other Sources.

We also collect information from other sources. The categories of sources from which we collect information include:

Social media platforms with which you interact.
Partners that offer co-branded services, sell or distribute our products, or engage in joint marketing activities.
Publicly-available sources, including data in the public domain.

3. Use of Information.

We collect and use information in accordance with the practices described in this Privacy Policy. Our purposes for collecting and using information include:

Providing the Service to you.
Preventing and addressing fraud, breach of policies or terms, or threats of harm.
Understanding trends, usage, and activities, including through tracking technologies or surveys, to make business and marketing decisions.
Communicating with you about updates, security alerts, changes to policies, and other transactional messages.
Personalizing your experience to show you content we believe you will find interesting.
Engaging in direct marketing and promotional communications.

Notwithstanding the above, we may use publicly available information (as that term is defined by applicable law) or information that does not identify you (including information that has been aggregated or de-identified as those terms are defined by applicable law) for any purpose to the extent permitted by applicable law. For information on your rights and choices regarding how we use information about you, please see the “Your Rights and Choices” section below.

4. Disclosure of Information.

We disclose the information we collect in accordance with the practices described in this Privacy Policy. The categories of persons to whom we disclose information include:

Service Providers. We use third-party service providers to help us manage and improve our services. For example, we use Mailchimp to send our newsletters and promotional emails. Mailchimp is a marketing automation platform that helps us manage our email communications. When you sign up for our newsletter, your email address is transferred to Mailchimp for processing in accordance with their privacy policy and terms. We ensure all our third-party providers are committed to high standards of data security and use your personal information only as directed by us to provide the services requested.
Analytics. We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”), to collect information about how visitors use our website. Google Analytics uses cookies, which are text files placed on your device, to help analyze how users interact with the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
Partners. We disclose information to our partners in connection with offering co-branded services, selling or distributing our products, or engaging in joint marketing activities.
Merger or Acquisition. We disclose information in connection with, or during negotiations of, any proposed or actual merger, purchase, sale or any other type of acquisition or business combination of all or any portion of our assets, or transfer of all or a portion of our business to another business.
Security and Compelled Disclosure. We disclose information to comply with the law or other legal process, and where required, in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We also disclose information to protect the rights, property, life, health, security and safety of us, the Service or anyone else.
Facilitating Requests. We disclose information where you direct us to disclose the information.
Consent. We disclose information with notice to you and your consent.

Notwithstanding the above, we may disclose publicly available information (as that term is defined by applicable law) or information that does not identify you (including information that has been aggregated or de-identified as those terms are defined by applicable law) to the extent permitted by applicable law. For information on your rights and choices regarding how we disclose information about you, please see the “Your Rights and Choices” section below.

5. Other Parties.

We offer parts of our Service through websites, platforms, and services operated or controlled by other parties. In addition, we integrate technologies operated or controlled by other parties into parts of our Service.

Some examples include:

Links. Our Service includes links that hyperlink to websites, platforms, and other services not operated or controlled by us.
Brand Pages and Messaging. We may offer our content through social media. Any information you provide to us when you engage with our content (such as through our brand page) is treated in accordance with this Privacy Policy. Also, if you publicly reference our Service on social media (e.g., by using a hashtag associated with One Analytics in a tweet or post), we may use your reference on or in connection with our Service.

Please note that when you interact with other parties, including when you leave our Service, those parties may independently collect information about you and solicit information from you. The information collected and stored by those parties remains subject to their own policies and practices, including what information they share with us, your rights and choices on their services and devices, and whether they store information in the U.S. or elsewhere. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

6. Your Rights and Choices

In addition to the rights and choices below, you may have additional rights based on your jurisdiction. Please click the relevant link at the top of this Privacy Policy or visit the applicable section below for more information.

A. Cookies

Upon your arrival at our Service, you will encounter a cookie consent banner. This banner provides you with the option to accept additional cookies beyond those that are strictly necessary. These additional cookies may include those used for analytics, personalization, and advertising. By selecting to enable these cookies, you are granting us permission to process your data according to the specific purposes outlined at that time.

We understand that your preferences may change over time. Therefore, you can modify your cookie selections at any time via our Cookie Declaration page. This page provides a detailed overview of the cookies we use, their purpose, and provides you with the ability to manage your preferences by either granting or withdrawing consent for various categories of cookies.

B. Communications.

You can unsubscribe from receiving promotional emails by following the unsubscribe instructions at the bottom of the email, or emailing us at legal@one-analytics.com with the word UNSUBSCRIBE in the subject field of the email. Please note that you cannot opt out of transactional messages. Additionally, please note that your opt out is limited to the email address used and will not affect subsequent subscriptions.

7. Children.

The Service is not directed toward children under 13 years old, and we do not knowingly collect personal information (as that term is defined by the U.S. Children’s Privacy Protection Act, or “COPPA”) from children. If you are a parent or guardian and believe we have collected personal information from children, please contact us at legal@one-analytics.com. We will delete the personal information in accordance with COPPA.

8. Data Security.

We implement and maintain reasonable administrative, physical, and technical security safeguards to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration, and destruction. Nevertheless, transmission via the internet is not completely secure, and we cannot guarantee the security of information about you.

9. International Transfer.

We are based in the U.S. and the information we collect is governed by U.S. law. If you are accessing the Service from outside of the U.S., please be aware that information collected through the Service may be transferred to, processed, stored, and used in the U.S. and other jurisdictions. Data protection laws in the U.S. and other jurisdictions may be different from those of your country of residence. Your use of the Service or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, disclosure, and storage of information about you in the U.S. and other jurisdictions as set out in this Privacy Policy. Where required by applicable law, we will provide appropriate safeguards for data transfers, such as through use of standard contractual clauses.

10. Changes to this Privacy Policy.

We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon posting of the revised Privacy Policy. Your continued use of our Service indicates your consent to the Privacy Policy then posted. If the changes are material, we may provide you additional notice to your email address.

11. Contact Us.

By email:
legal@one-analytics.com

By mail:

One Analytics
2920 W Broad St.
Suite #36
Richmond, VA 23230

12. California.

The California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”), provide additional rights to California residents. This section addresses those rights and applies only to California residents.

Our Service is intended to provide information and services to job applicants and business clients. You understand and agree that information collected about you is solely within the context of (i) your role as an employee, job applicant, owner, director, officer, or contractor or (ii) us conducting due diligence regarding, or providing or receiving a product or service to or from your employer.

We acknowledge that you may have rights under CCPA/CPRA in connection with the personal information we process on behalf of our clients. If personal information about you has been processed by us as a service provider on behalf of a client and you wish to exercise any right you have with such personal information, please inquire with our client directly. If you wish to make your request directly to us, please provide the name of our client on whose behalf we processed your personal information. We will refer your request to that client and will support them to the extent required by applicable law in responding to your request.

A. Notice of Collection.

We have collected the following categories of personal information (as described in the CCPA/CPRA) in the past 12 months. For further details on the personal information we collect and how we obtain this information, please review the “Information Collection” section above.

Identifiers, including full name, email address, and online identifiers (such as IP address).
Internet activity, including browsing history, search history, and interactions with a website or email.
Non-precise geolocation data, including location derived from an IP address.
Professional, employment, or education-related information.
Inferences drawn from any of the information identified in this section

We collect and use this personal information for the business and commercial purposes set out in the “Use of Information” section above.

We disclose this personal information to the categories of persons set out in the “Disclosure of Information” section above.

We do not sell your personal information as that term is traditionally understood. None of our disclosures are considered a “sale” or “share” as those terms are defined under the CCPA / CPRA.

B. Retention.

We retain each category of personal information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

C. Right to Know, Correct, and Delete.

You have the right to know certain details about our data practices. In particular, you may request the following from us:

The categories of personal information we have collected about you;
The categories of sources from which the personal information was collected;
The categories of personal information about you we disclosed for a business purpose;
The categories of persons to whom the personal information was disclosed;
The business or commercial purpose for collecting the personal information; and
The specific pieces of personal information we have collected about you.

Unless you specify otherwise, the response we provide will cover the 12 month period preceding our receipt of the request. Starting with personal information collected on or after January 1, 2022, you may request that we disclose details beyond the 12-month period, and we shall do so unless doing so proves impossible or would involve a disproportionate effort.

In addition, you have the right to correct (effective January 1, 2023) or delete the personal information we have collected from you.

To exercise any of these rights, please email us at legal@one-analytics.com. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your request.

D. Authorized Agent.

You can designate an authorized agent to submit requests on your behalf. However, we will require written proof of the agent’s permission to do so and verify your identity directly.

E. Right to Non-Discrimination.

You have the right not to receive discriminatory treatment by us for the exercise of any of your rights.

13. Nevada.

We do not sell and will not sell your covered information (as those terms are defined by NRS 603A.340).

14. Virginia.

The Virginia Consumer Data Protection Act (“VCDPA”) provides additional rights to Virginia residents. This section addresses those rights and applies only to Virginia residents. Any rights shall not take effect until January 1, 2023.

You have the following rights under the VCDPA:

To confirm whether or not we are processing your personal data;
To request access to your personal data that we process;
To correct inaccuracies in your personal data;
To request we delete your personal data;
To obtain a copy of your personal data that you previously provided to us in a portable and readily usable format; and
To opt out of (i) the process of personal data for purposes of targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

To exercise any of these rights, please contact us as set out in the “Contact Us” section above and specify which right you are seeing to exercise. We will respond to your request within 45 days. We may require specific information from you to help us confirm your identity and process your request. If personal data about you has been processed by us as a processor on behalf of a client and you wish to exercise any rights you have with such personal data, please inquire with our client directly. If you wish to make your request directly to us, please provide the name of our client on whose behalf we processed your personal data. We will refer your request to that client, and will support them to the extent required by applicable law in responding to your request.

If we refuse to take action on a request, you may appeal our decision within a reasonable time period by contacting us at legal@one-analytics.com and specifying your wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us/consumercomplaintform/start