Privacy Policy

This privacy policy is our way of providing you with details about the types of information we collect from you, why we collect your information, and how we use and share your information. Furthermore, we strive to make sure you are fully informed of your data subject rights. If you have any questions or concerns about this policy or about your rights regarding your information, we encourage you to contact us as provided below.

As used throughout this policy, we will refer to Prosci as either “Prosci,” “we” or “us,” and we will refer to our website, www.prosci.com, and our online portal, www.portal.prosci.com, collectively as the “Websites.” Also, we will refer to any services offered through our Websites, emails, or Prosci trainings collectively as the “Services.” Last, we will refer to the following types of information collectively as “Marketing” information: our blog posts, thought leadership articles, webinars, public training events, opportunities to participate in our research, customized information based on your experiences and interactions with our Websites and emails, and additional product information.

We may collect and store information from you, including information that directly or indirectly identifies you, in connection with your use of our Services, including any information you transmit to or through the Services (“Personal Data”). For the purposes of our Services, Personal Data also includes personal data, as defined by the General Data Protection Regulation, personal information, as defined by the EU-U.S. Privacy Shield, and personal information, as defined by the California Consumer Privacy Act.  We use Personal Data we collect to provide the Service’s functionality, fulfill your requests, improve the Service’s quality, engage in research and analysis relating to the Service, personalize your experience, track usage of the Service, provide feedback to third-party businesses that are listed on the Service, display relevant advertising, market the Service, provide customer support, message you, back up our systems, allow for disaster recovery, enhance the security of the Service, and comply with legal obligations.

Please also note:

We, and third parties with whom we partner, may use cookies and similar technologies ("Cookies") in connection with your use of our Services and Websites. A "cookie" is a text file that websites send to a visitor’s computer or other Internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. Cookies may reside, among other places, on your computer or mobile device, in emails we send to you, and on our web pages. Cookies may transmit information about you and your use of our Services and Websites. Cookies may be persistent or stored only during an individual session.

We share your personal data with your consent or as necessary to complete any transaction or provide any product or Service you have requested or authorized. This includes sharing your personal data with our Sub-Processors, the Prosci family of businesses, and when we are legally bound to do so by law. 

This privacy policy is our way of providing you with details about the types of information we collect from you, why we collect your information, and how we use and share your information. Furthermore, we strive to make sure you are fully informed of your data subject rights. If you have any questions or concerns about this policy or about this policy or about your rights regarding your information, please feel welcome to contact us as provided below.  You have the following data protection rights:

You can exercise any of your data subject rights by submitting this form, calling our toll-free phone number (1-800-700-2831), or emailing privacyandsecurity@prosci.com. After submitting your request to exercise your data privacy rights, Prosci will first verify your identity using one of the following methods:

Prosci will use appropriate verification methods based on the type and sensitivity of the personal data requested to be disclosed. After verifying the identity of the data subject, Prosci will notify the data subject of receipt of the request within 10 days and respond to the request between 30 and 45 calendar days, depending on the governing jurisdiction of the data subject.

How long we keep information we collect about you depends on the type of information processed, as described in further detail below. After such time described below, we will either delete or anonymize your information or, if this is not possible, then we will securely store your information and isolate it from any further use until deletion is possible.

Prosci complies with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use and retention of Personal Data transferred from the European Union to the United States. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

Prosci is responsible for the processing of Personal Data it receives under the Privacy Shield Framework and subsequently transfers to a third party acting as an agent on its behalf. Prosci complies with the Privacy Shield Principles for all onward transfers of Personal Data from the EU, including liability for the onward transfer of Personal Data.

If you have any questions or concerns, please contact us via the contact information listed below. We will investigate and attempt to resolve complaints and disputes regarding use and disclosure of Personal Data in accordance with the EU-U.S. Privacy Shield Principles.

In the event we are unable to resolve your complaints or disputes, you may contact JAMS (https://www.jamsadr.com/eu-us-privacy-shield), an alternative dispute resolution provider located in the United States, for more information or to file a complaint. JAMS will investigate and assist you free of charge in resolving your complaint.

As further explained in the EU-U.S. Privacy Shield Principles, a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. Prosci is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

Although Prosci is still a member of the Privacy Shield Framework and abides by its principles, we no longer rely on it as the mechanism to transfer data from the European Union to the United States. Instead, Prosci relies on a variety of other mechanisms, including the EU-approved Standard Contractual Clauses and the article 49 derogations of the GDPR.

Prosci complies with the California Consumer Privacy Act (“CCPA”) and is committed to protecting information that identifies, relates to, describes, is capable of being associated with, or could be reasonably linked, directly or indirectly, with a particular California consumer or household. Under the CCPA, California consumers have the following rights:

This privacy policy is our way of providing you with details about the types of information we collect from you, why we collect your information, and how we use and share your information. Furthermore, we strive to make sure you are fully informed of your data subject rights. California data subjects have the following data protection rights:

If a California consumer wishes to exercise any of the above privacy rights, they can submit their request via this form, our toll-free phone number (1-800-700-2831), or email (privacyandsecurity@prosci.com). If the data user is not able to make the request themselves, they may appoint an authorized agent to make the request on their behalf. If using an authorized agent, Prosci will require the agent to submit written permission from the consumer, with the exception of when the agent has documented power of attorney. After verifying the identity of the agent, Prosci will process the data user request.

Prosci does not sell consumer’s Personal Data. Prosci does disclose Personal Data to entities that process information for a business or commercial purpose on our behalf (“Sub-Processor”). Prosci discloses Personal Data to its Sub-Processors for the business purposes listed in the “Sub-Processor” section of this policy.

Prosci does not knowingly collect, solicit or sell Personal Data from children under the age of 13. If we learn we have collected or received Personal Data from a child under the age of 13, we will delete that information. If you believe we might have any information from or about a child under the age of 13, please contact us as indicated below.

The privacy of your information is important to us, and we have taken steps aligned with industry best practices to ensure that your information is secure from unauthorized access, use, alteration and disclosure. Please note that no electronic transmission of information can be entirely secure. We cannot guarantee that the security measures we have in place will never be defeated or fail, or that such measures will always be sufficient or effective, so please keep this in mind as you provide your information to us.

Any information that we collect is subject to the version of this privacy policy that was in effect at the time we collected such information. However, we may revise this privacy policy from time to time. If we make any meaningful changes to this privacy policy, we will inform you of those changes by sending you an email or other notification if we have your contact information, or by posting an updated version of this privacy policy on our website. We will also indicate when such changes will become effective.