November 15, 2020
We may change provisions of this Policy from time to time and will indicate when changes have been made by revising the date at the top of this Policy. We encourage you to review the Policy whenever you access the Product to make sure that you understand our practices. If we make material changes to this Policy, we will provide you with additional notice.
It’s important that you read the following carefully to understand our practices. Please also review the Terms of Service Agreement. If you have any questions or unresolved privacy concerns, please contact us at [email protected]
Data Protection Across the Globe
Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply common protections described in this policy. These protections align with well-known standards such as ISO 27001:2017 and others.
Information that We Collect
Information that you provide to us: We may collect information that you provide when using our Product, such as when you: (1) create an account; (2) subscribe to our Product; (3) participate in events or promotions; (4) send questions or comments via email or live chat; (5) interact with our sales or customer support team; (6) fill out surveys; or (7) otherwise communicate with us through or about our Product. The types of personal information that you provide may include your name, email address, telephone number, mailing address, credit card information, and other contact or identifying information that you choose to provide. We store, process, and maintain files and content that you create and/or upload using our Product, as well as other data related to your account in order to provide the Product to you.
We do not store any credit card information we receive except as necessary to complete and satisfy our rights and obligations with regard to such transaction, billing arrangement, and/or as otherwise authorized by you.
Information about use of our Product: Our servers automatically collect usage information about your use of the Product, including the webpages visited, number of log-ins, data displayed or clicked on, actions taken, your language preference, and other login information. We may collect automated error reports in the case of software malfunctions, which may contain some or all of the information in your account and content and may be reviewed to help resolve problems with the Product.
If you participate in a video conference with us, we may record the session and retain the recordings. We will notify you first that the session is being recorded so that you can choose not to participate. If you participate in a training or product course, we collect completion data.
We collect information from the device and application you use to access our Product. Device data mainly means your IP address, operating system version, device type, device ID/MAC address, system and performance information, and browser type. If you are on a mobile device we also collect the UUID for that device.
We use a variety of technologies to collect this information, such as first party and third party cookies and tracking services that employ cookies and page tags (also known as web beacons). This data includes usage and user statistics. Emails sent by us or by users through our Product also include page tags that allow the sender to collect information about who opened those emails and clicked on links in them. We provide more information on cookies below.
Like most websites today, our web servers keep log files that record data each time a device accesses those servers. The log files contain data about the nature of each access, including originating IP addresses, internet service providers, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system versions, device type and timestamps.
If you arrive at our learning platform (Kajabi.com) from an external source (such as a link on another website or in an email), we record information about the source that referred you to us.
Information from third parties and integration partners: We may obtain personal information from third parties and combine such information with the information that we collect through our Product and such information may be used for the purposes described in the “How We Use the Information We Collect” section below. For example:
- You give permission to those third parties to share your information with us or where you have made that information publicly available online.
- You create or log into your account through a third-party social networking site or one of our integration partners, we will have access to certain information from that service such as your name and account information.
- If you purchase our Product, we may receive information from our third-party payment processors.
- We may collect information from unaffiliated third parties so that we can better understand you and provide you with information and offers that may interest you.
How We Use the Information We Collect
Use of Information: We may use the personal information collected through our Product to:
- Operate and improve our Product;
- Send you advertising or promotional materials;
- Provide and deliver the Product or other services you request, process transactions, and send you related information;
- Send you technical notices, updates, security alerts, and support and administrative messages;
- Respond to your comments, questions, and requests and provide you with requested customer support;
- Monitor and evaluate trends, usage, and activities in connection with our Product;
- Secure our systems, prevent fraud, and help us to protect the security of your account;
- Prevent, detect, and investigate potentially prohibited or illegal activities and to enforce our terms and policies;
- Personalize and improve the Product, and provide content, communications, or features that match users interests; and
- Link or combine with other information we obtain from third parties to help understand your needs and provide you with better service.
We reserve the right at all times to review your content and information to help resolve problems with our software or Product, or to ensure that you remain in compliance with our Terms of Service and other policies (like our Acceptable Use Policy).
Information we may share: We will never “sell” your personal information (as that term is defined in the California Consumer Privacy Act). However, we may share your personal information with third parties as follows:
- Service Providers: We use other companies, agents, or contractors to perform services on our behalf or to assist us with the provision of services to you. For example, we engage service providers to provide marketing, advertising, communications, security, payment processing, infrastructure and IT services, to customize, personalize, and optimize our Product, to process payment transactions, to provide customer service, and to analyze and enhance data. While providing such services, these service providers may have access to your personal information. These service providers have agreed to maintain the confidentiality, security, and integrity of the personal information that they obtain from us and we do not authorize them to use or disclose your personal information except in connection with providing their services.
- Other Users: Content that you create, upload, or copy into our Product, may, if you choose, be read, copied, used, and distributed by people you know, your members, or people you don’t know. Information that you disclose using the chat function of the Product may be read, copied, used, and distributed by people participating in the chat. Use care when including sensitive information, such as home addresses or phone numbers, in content you share or chat sessions.
- With Your Consent: We may share your personal information when we have your consent.
Where We Store Your Personal Data
Data Storage: All data that you provide to use through our Product is stored on our secure servers located in the U.S. Any payment transactions will be encrypted using SSL technology; all payment data is stored by our payment processors and is never stored on our servers. Where we have given you (or where you have chosen) a password that enables you to access your account and the Product, you are responsible for keeping this password confidential. We recommend that you not share your password and that you change it frequently.
Data Security: Kajabi takes reasonable measures to protect your personal information and your content from loss, misuse, and unauthorized access, disclosure, modification, and destruction and to ensure that your content remains protected and available to you. Unfortunately, the transmission of data via the internet is not completely secure and although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted through the Product. All transmissions are at your own risk. Further information is provided in our Security Statement. Contact [email protected] to receive a copy.
Data Retention: Kajabi stores the information we collect for as long as necessary for the purpose for which it was originally collected and in compliance with our legal obligations. The retention periods applied by Kajabi comply with applicable legislation then in effect, namely:
- For data relating to your account, such data will not be retained beyond your request that your account be deleted.
- For transactional data relating to your purchases, such data is kept for the entire period of our contractual relationship, then in accordance with legal obligations and applicable statute of limitations periods. Please note that this data does not include payment card information, which is processed by our third-party payment processors and not Kajabi.
- For data collected based on your consent to receive marketing communications, we will use the data until you withdraw your consent or applicable law requires that such data is no longer used.
- For data collected in connection with your requests or questions, such data is kept for the period necessary to process and reply to your request or question.
- When cookies or other trackers are placed on your computer, they may be retained for a period of 12 months.
We may retain certain information for legitimate business purposes or as required by law.
Our Customers’ Information
In order to power our customers’ businesses, we collect and use personal information about their users. In general, we collect and use this personal information as directed by the customer, and as further described in our Data Processing Addendum. Legally speaking, we are a “data processor” and a “service provider” as these terms are used in European and California Consumer Privacy Act. We will never use the personal information from our customers’ users to independently market or advertise to individuals unless such individuals are also using our Services directly. We also will not “sell” your customers' information, as that term is defined in the California Consumer Privacy Act.
Children Age 16 and Under
Kajabi’s Product is not directed at children under the age of 16 and we never knowingly collect personal information from children. We recognize the special obligation to protect personally identifiable information obtained from children age 13 and under. IF YOU ARE 16 YEARS OLD OR YOUNGER, THE COMPANY REQUESTS THAT YOU NOT SUBMIT ANY PERSONALLY IDENTIFIABLE INFORMATION TO THE SITE OR TO KAJABI. If we discover that a child age 16 or younger has signed up for our Product or provided us with personally identifiable information, we will delete that child’s identifiable information from our records.
Kajabi nonetheless encourages parents to go online with their kids. Here are a few tips to help make a child’s online experience safer:
- Teach kids never to give personal information, unless supervised by a parent or responsible adult. Includes name, address, phone, school, etc.
- Know the sites your kids are visiting and which sites are appropriate.
- Look for Website privacy policies. Know how your child’s information is treated.
- Check out the FTC’s site for more tips on protecting children's privacy online.
How We Use “Cookies” and Other Tracking Technologies
Your Choices and Rights
You have several options with respect to your personal information, as follows:
- You may terminate your use of the Product at any time. However, please note that Kajabi may still process your personal information as a service provider to our customers if your personal data.
- If you have created an account, you may at any time access, edit, or delete your personal information. Please note that even if you delete information from your account, or deactivate your account, we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of your information for a certain period of time.
- You may opt out of receiving promotional emails, text messages, or mail from Kajabi by visiting your user settings via the “Edit Your Preferences” or “Completely Unsubscribe” link in any promotional email. If you opt out, we may still send you transactional or relationship messages, such as emails about your account or updates to our Product.
- If you do not have a user account and wish to delete your email address or other personal information that you might have provided through your use of our Product and/or any other services, please email us at: [email protected] with the words “Delete My Information” in the subject line.
We do not knowingly permit the use of malware, spyware, viruses, and/or other similar types of software.
Links to External Sites
Data Posted on Forums
Kajabi users may have the ability to post content to one or more Kajabi forums, such as chat rooms and bulletin boards. You should be aware that when you voluntarily disclose personal information in any forum, that information can be collected and used by others and may result in unsolicited messages from other people. You are responsible for the personal information you choose to submit in these instances. Please take care when using these features. You may request and obtain removal of such posted content by contacting us at [email protected] and specifically identifying the content to be removed. Please be advised that any such removal does not ensure complete or comprehensive removal of all traces of the content posted on the Kajabi forums.
Transfer of Information Across National Borders:
For users located outside the jurisdiction of the United States, Kajabi operates and processes data in the United States. Information we collect from you will be processed in the United States, and by using this website you acknowledge and consent to the processing of your data in the United States. The United States has not received a finding of “adequacy” from the European Union under Article 41 of the GDPR. We collect and transfer to the U.S. personal data only with your consent; to perform a contract with you; or to fulfill a compelling legitimate interest of ours in a manner that does not outweigh your rights and freedoms. When we transfer your personal information to other countries, we will protect that data as described in this Policy or in our agreement with you and take steps, where necessary, to ensure that international transfers comply with applicable laws.
Your California Privacy Rights:
Please review the “California Supplemental Privacy Notice” which is incorporated as part of this Policy for California residents only.
Residents of the European Economic Area
We provide the representations and information in this section in compliance with European privacy laws, in particular the European General Data Protection Regulation (GDPR). If you are a visitor from the European Territories (including the European Economic Area, Switzerland, and the United Kingdom), our legal basis for collecting and using the personal data described above will depend on the personal information concerned and the specific context in which we collect it.
We will normally collect personal data from you where the processing is in our legitimate interests. In some cases we may collect, and process personal data based on consent.
EU data subjects have certain rights with respect to your personal data that we collect and process. We respond to all requests we receive from individuals in the EEA wishing to exercise their data protection rights in accordance with applicable data protection laws.
- Access, Correction or Deletion. You may request access to, correction of, or deletion of your personal data. You can often go directly into the Service under Account Settings to take these actions.
- Objection. You may object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes and may do so using the options provided in this Policy. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Restriction. You have the right to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Portability. You have the right to request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Withdraw Consent. If we have collected and processed your personal data with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
- File a complaint. You have the right to file a complaint with a supervisory authority about our collection and processing of your personal data. To file a request or act on one of your rights, please contact us at the contact details provided below. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
General Data Protection Regulation (GDPR) - European Representative: Pursuant to Article 27 of the General Data Protection Regulation (GDPR), we have appointed European Data Protection Office (EDPO) as its GDPR representative in the European Economic Area. You can contact EDPO regarding matters pertaining to the GDPR by:
- Sending an email to [email protected]
- Using EDPO’s online request form at https://www.edpo.brussels/contact
- Writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium
If you are a resident of the European Economic Area and have a data privacy concern that we are unable to resolve, you have the right to file a complaint/inquiry with the data privacy authority where you reside. For contact details of your local Data Protection Authority, please see: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
Do Not Track Disclosure
Regulatory agencies such as the U.S. Federal Trade Commission have promoted the concept of Do Not Track as a mechanism to permit Internet users to control online tracking activity across websites through their browser settings. Since no industry standard has been adopted, we currently do not process or comply with any web browser’s “do-not-track” signal or other similar mechanism that indicates a request to disable online tracking of individual users who visit the Kajabi website or use our Product.
Contact Information for Complaints or Concerns