Last Modified: February 15, 2021
By using the Service, you agree that you accept the data practices and terms detailed in this Policy. If you are using the Service on behalf of another entity (such as your employer), you are agreeing to these terms for that entity, and you promise that you have the authority to do so. In that case, “you” and “your” will refer to that entity. If you do not agree to these terms, do not use the Service.
FreeBusy has the following relationships with individuals who utilize its Services:
When you use our Services, we collect personal information about your use of our Services and information that you send us. We may also obtain information about you from third party sources.
Throughout this Policy, we use the term "personal information" to describe information that identifies you or makes you identifiable. We do not consider personal information to include information that has been anonymized so that it does not identify a specific individual.
We may collect personal information in the following ways:
Parts of our Services are public, such as your FreeBusy link (which may disclose your email address) and FreeBusy page, and any information that is disclosed on such public parts of our Services may appear on search engines or other publicly available platforms, and may be “crawled,” searched and used by third parties or other Registered Users, Ad-hoc Users and Visitors of the Services. Please do not post any information that you do not want to reveal publicly.
When you use our Services, we may collect personal information about you from the following sources:
Generally, we collect and use information from you to provide, protect, and improve our Services, and to provide you with a personalized experience when using our Services. For example, when you provide FreeBusy with your email address, we may send you updates on new or expanded Services, notices about security updates or change to our policies, and other administrative or transactional information. Much of the information you provide us through our Services is information that is designed to be made public for the purpose of meeting scheduling, such as your FreeBusy Page information, including your name, photo, and email address.
Some specific examples of how FreeBusy may use your personal information include:
We do not sell, exchange, transfer, or give your personal information to any other company or individual for any reason except as set forth below.
Designated Countries: Pursuant to the Data Protection Legislation, FreeBusy processes your personal information for (a) based on your consent; for (b) based on our contract with you or to take steps as directed by you to enter into a contract; for (c) based on our legitimate interest; and for (d) to comply with our legal obligations, to protect your vital interests, or in the public interest.
FreeBusy takes reasonable precautions to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction. We maintain physical, technical and procedural safeguards to protect the confidentiality and security of your personal information. Such safeguards include the use of firewalls and data encryption, enforcing physical access controls to our buildings and files, and limiting access to personal information only to those employees, agents or third parties who need access to that information to process it for us. We contractually require all third-party service providers to maintain appropriate security measures to protect your personal information.
However, you are also responsible for keeping your personal information confidential and secure. FreeBusy cannot guarantee that your personal information will be 100% safe while using its Services. You should choose a Calendar Credential that is complex (e.g., special characters and numbers, sufficient length, etc.) and keep your Calendar Credential confidential. Do not leave your device unlocked so that other individuals may access your device or FreeBusy account. FreeBusy is not in control of your wireless connection or the devices you use to log into the FreeBusy Services, so you should make sure you trust the devices and connections you use to access the Services.
If you believe that you have experienced unauthorized access or use of your FreeBusy account, please contact us immediately.
We store your personal information for as long as your Account is active in order to provide the Services to you. We may also keep and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements to the extent permitted by law. While retention requirements vary, we generally apply the retention periods noted below.
If you no longer want us to use your personal information, you must close your Account. You can close your Account by clicking on the ‘Close Account’ button in your Account page. When you close your Account, we will schedule Your Information to be deleted as soon as possible. Note that we may use offline backups and other technologies to provide the Service and all of your personal information may not be deleted immediately, but we will make commercially reasonable efforts to do it as quickly as possible. In any event, we will not use your personal information for any purpose other than to comply with our legal obligations, resolve disputes, and enforce our agreements after you close Your Account.
We do not knowingly request to collect personal information from any person under the age of 13. If a Registered User, Ad-hoc User or Visitor submitting personal information is suspected of being younger than 13 years of age, we will require the Registered User, Ad-hoc User or Visitor to close his or her account and will not allow continued use of the Services. We will also take steps to delete the information as soon as possible, unless an exception applies. Please notify us if you know of any individuals under the age of 13 using our Services so we can take action to prevent access to our Services.
We collect the following types of cookies:
Some Internet browsers allow you to transmit “Do Not Track” signals, but our Services do not respond to “Do Not Track” signals because we do not track our Visitors, Customers or Users over time and across third-party websites to provide targeted advertising.
Retention periods for cookie information depend on the type of cookie. Session cookies only stay as long as you are browsing with your device, while persistent cookies stay on your browsing device until they expire or are deleted. Each category of cookie listed above is either a session cookie or persistent cookie. The retention period applicable to persistent cookies depends on the purpose of the cookie collection and tool used. You can delete cookie data as described below.
Designated Countries: Pursuant to the Data Protection Legislation, FreeBusy processes your personal information to satisfy its legitimate interests as described above. As required by law, FreeBusy will ask for your consent.
If you would like to access the information we hold on you or would like to modify the information we have on file, please contact us. We reserve the right to limit your access or modifications if your requests are too frequent and/or burdensome, or as necessary to manage our risks or comply with our contractual or legal obligations.
For individuals residing in the State of California or Designated Countries, please refer to Section entitled “California Privacy Rights” or “Designated Countries Privacy Rights” below for more information.
We want to keep you up-to-date with new or expanded Services, provide you with important information about your account or transactions, and send you information we believe interests you. Any communications from us that are not Service-related or transactional in nature will offer you an "unsubscribe" option so that you can opt out of receiving such messages.
For individuals residing in the State of California or Designated Countries, please refer to the “California Privacy Rights” or “Designated Countries Privacy Rights” section below for more information.
This Section only applies to Registered Users, Ad-hoc Users, and Visitors of the Services who live in the State of California (“California Residents”). FreeBusy adopts this Section to comply with the California Consumer Privacy Act of 2019 and any subsequent amendments (“CCPA”). All terms used in this California Notice have the same meaning as when used in the CCPA.
FreeBusy collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“Personal Information”). In particular, our Website may have collected the following categories of Personal Information from California Resident Registered Users, Ad-hoc Users, and Visitors within the last twelve months, for the purpose of establishing, maintaining, and supporting the Services:
FreeBusy Obtains the Categories of Personal Information Listed Above from the Following Categories of Sources:
We may use or disclose the Personal Information we collect for one or more of the following business purposes:
We may disclose your Personal Information to a third-party for a business purpose. When we disclose Personal Information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that Personal Information confidential and not use it for any purpose except performing your contract.
We disclose your Personal Information for a business purpose to the following categories of third parties:
In the preceding twelve (12) months, we have not sold any Personal Information.
You have the right to request that we disclose certain information to you about our collection and use of your Personal Information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
You have the right to request that we delete any of your Personal Information that we have collected from you and retained, subject to certain exceptions. All deletion requests will be managed in accordance with FreeBusy Deletion Procedures. Deletion requests should be sent to [email protected] Once we receive and confirm your verifiable request, we will delete (and direct our Service Providers to delete) your Personal Information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers to:
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by reaching out to [email protected]
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your Personal Information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable California Resident request for access or data portability twice within a 12-month period.
The request must:
We will attempt to respond to California Resident requests in as timely a fashion as possible. In the event of delays over 60 days, we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. Any disclosures we provide will only cover the 12-month period preceding the verifiable receipt of a California Resident’s request. The response we provide will explain the reasons we cannot comply with a request, if applicable.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before fulfilling your request.
In accordance with the CCPA's requirements, we will not discriminate against you for exercising any of your CCPA rights.
This Section only applies to Registered Users, Ad-hoc Users and Visitors of the Services that are located in the European Economic Area, United Kingdom and/or Switzerland (collectively, the “Designated Countries”) at the time of data collection. We may ask you to identify which country you are located in when you use some of the Services, or we may rely on your IP address to identify which country you are located in. Where we rely only on your IP address, we cannot apply the terms of this Section to any Visitor, Customer or User that masks or otherwise obfuscates their location information so as not to appear located in the Designated Countries. If any terms in this Section conflict with other terms contained in this Policy, the terms in this Section shall apply to Registered Users, Ad-hoc Users and Visitors in the Designated Countries.
FreeBusy is a data controller with regard to any personal information collected from Registered Users or Visitors of its Services. A data controller is an entity that determines the purposes for which and the manner in which any personal information is processed. FreeBusy is also a data processor with regard to any personal information collected from Ad-hoc Users of its Services. Any third parties that act as our Sub-processors are data processors that handle your personal information in accordance with our instructions.
We describe our lawful bases for processing in Section “How Is Collected Information Used” and Section “Information We Share” under headings entitled “Designated Countries.” The lawful bases on which we rely to process your personal information include: your consent to the processing; satisfaction of our legal obligations; to protect your vital interests; to carry out our obligations arising from any contracts we entered with you or to take steps at your request prior to entering into a contract with you; in the public interest; or for our legitimate interests as described in those sections.
Direct marketing includes any communications we send to you that are only based on advertising or promoting products and services. Transactional communications about your account or our Services are not considered “direct marketing” communications. We will only contact Registered Users, Ad-hoc Users and Visitors by electronic means (including email or SMS) based on our legitimate interest or their consent. When we rely on legitimate interest, we will only send you information about our Services that are similar to those which were the subject of a previous sale or negotiations of a sale to you. If you do not want us to use your personal information in this way, please click an unsubscribe link in your emails, or contact us. You can object to direct marketing at any time and free of charge.
We provide you with the rights described below when you use our Services. Please contact us if you would like to exercise your rights under applicable law. When we receive an individual rights request from you, please make sure you are ready to verify your identity.
Please be advised that there are limitations to your individual rights. We may limit your individual rights in the following ways: (i) where denial of access is required or authorized by law; (ii) when granting access would have a negative impact on other's privacy; (iii) to protect our rights and properties; and (iv) where the request is frivolous or burdensome.
Right to withdraw consent. If we rely on consent to process your personal information, you have the right to withdraw your consent at any time. A withdrawal of consent will not affect the lawfulness of our processing or the processing of any third parties based on consent before your withdrawal.
Right of access and rectification. If you request a copy of your personal information that we hold, we will provide you with a copy without undue delay and free of charge, except where we are permitted by law to charge a fee. We may limit your access if such access would adversely affect the rights and freedoms of other individuals. You may request to correct or update any of your personal information held by us, unless you can already do so directly via the Services.
Right to erasure (the “Right to be Forgotten”). You may request us to erase any of your personal information held by us that: is no longer necessary in relation to the purposes for which it was collected or otherwise processed; was collected in relation to processing that you previously consented to, but later withdrew such consent; or was collected in relation to processing activities to which you object, and there are no overriding legitimate grounds for our processing.
Right to restriction. You have the right to restrict our processing your personal information where one of the following applies:
Right to object to processing. You may object to our processing at any time and as permitted by applicable law if we process your personal information on the legal basis of consent, contract or legitimate interests. We can continue to process your personal information if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
Right to data portability. If we process your personal information based on a contract with you or based on your consent, or the processing is carried out by automated means, you may request to receive your personal information in a structured, commonly used and machine-readable format, and to have us transfer your personal information directly to another “controller”, where technically feasible, unless exercise of this right adversely affects the rights and freedoms of others.
Notification to third-parties. If we share your personal information with third parties, we will notify them of any requests for rectification, erasure or restriction of your personal information, unless this proves impossible or involves disproportionate effort. Upon your request, we will identify such third parties.
Automated individual decision-making, including profiling. You have the right not to be subject to a decision based solely on automated processing of your personal information, including profiling, which produces legal or similarly significant effects on you, unless an exception applies under applicable law.
Right to Lodge a Complaint. If you believe we have infringed or violated your privacy rights, please contact us so that we can work to resolve your concerns. You also have a right to lodge a complaint with a competent supervisory authority situated in a Member State of your habitual residence, place of work, or place of alleged infringement.
Data Protection Officer. You may reach our Data Protection Officer at [email protected]
We may store, process and transmit personal information in locations around the world, including locations outside of the country or jurisdiction where you are located. Such countries or jurisdictions may have Data Protection Legislation that are less protective than the laws of the jurisdiction in which you reside. Some information may also be stored locally on devices you use to interact with FreeBusy’s Services. If you do not want your information transferred to or processed or maintained outside of the country or jurisdiction where you are located, you should not use our Services.
Designated Countries: FreeBusy transfers your personal information subject to appropriate safeguards as permitted under the Data Protection Legislation. Specifically, when your personal information is transferred out of the Designated Countries, we have the required contractual provisions for transferring personal information in place with the third parties to which your information is transferred. For such transfers, we rely on legal transfer mechanisms such as Standard Contractual Clauses or we work with U.S. based third parties that are certified under the EU-U.S. and Swiss-U.S. Privacy Shield Framework.
FreeBusy uses a range of third party service providers to assist them in connection with the Services. The following are Sub-processors authorized to process customer data for FreeBusy Services:
|Entity Name||Corporate Location||Service Provided|
|Cloudflare Inc.||United States||Content delivery and optimization|
|Google Inc.||United States||Web analytics|
|Hotjar Limited||Malta||Web analytics|
|HubSpot Inc.||United States||Customer assistance|
|Intercom R&D Unlimited Company||Ireland||Customer assistance|
|Mango Technologies Inc.||United States||Customer assistance|
|Microsoft Corp.||United States||Cloud hosting|
|Slack Technologies Inc.||United States||Customer assistance|
|Stripe Inc.||United States||Payment processing|
|Twilio Inc.||United States||SMS delivery|
|Wildbit LLC||United States||Email delivery|
|Zoho Corp.||United States||Subscription billing|
We may amend this Policy at any time by posting the most current version on our website. If we make any material changes your rights under this Policy, we will notify you by means of a prominent notice in advance of such changes coming into effect. A prominent notice may include sending email notifications to the email address we have on file, or providing you with an in-application notice such as a banner or popup alerting you of the changes. We will update the “Last Updated” date at the top of the Policy when we post the new Policy. Your continued use of the Services after posting of the Policy will constitute your acceptance of the changes.
If you have questions or concerns regarding this Policy or would like to access, change or delete your personal information, or have a complaint, please contact us via our customer assistance web chat available on https://freebusy.io or by emailing us at [email protected]