Compriva Communications Privacy Solutions Inc. Privacy Statement
Revision 2.0 July 2008
Compriva Communications Privacy Solutions Inc. (Compriva Inc.) is committed to providing you with a high level of service for all of your dealings with us. We respect your right to privacy, and have developed this Privacy Statement to inform you about our privacy practices for the entire Compriva Web site.
We at Compriva Inc. are aware of and sensitive to the privacy concerns of our subscribers and other visitors to the Compriva Web site. Whether you are a customer of our various products and services or a visitor to our site, we assure you that we do not collect personal information from you unless you provide it to us.
If you are enrolling for a Compriva Private Email certificate (digital certificate), you will be asked to provide certain personal information. Please note, however, that we are asking for this information for the limited purposes of creating your Compriva Private Email certificate, providing the services that may be part of your Compriva Private Email certificate, and authenticating your identity in order to issue you a Compriva Private Email certificate.
You should also be assured that we do not provide or sell information about our customers or site visitors to vendors that are not involved in the provision of Compriva Inc. public certification and other services.
This Privacy Statement applies to the Compriva Web site. Please note that our site contains links to other sites. Compriva Inc. is not responsible for the privacy practices, privacy statements, or content regarding these other sites.
If you feel that we are violating this Privacy Statement or have questions about it, please email our Legal Department with the text "Privacy Statement" in the subject line.
Information We Gather from You
We do not collect any personal information from a visitor to our site unless that visitor explicitly and intentionally provides it. Under no circumstances do we collect any personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, or sex life. If you are simply browsing our site, we do not gather any personal information about you.
There are two ways in which you may explicitly and intentionally provide us with, and consent to our collection of certain personal information:
- Email Request for Information
We use links throughout our site to provide you with the opportunity to contact us via email to ask questions, request information and materials, or provide comments and suggestions. You may also be offered the opportunity to have one of our representatives contact you personally to provide additional information about our products or services. To do so, we may request additional personal information from you, such as your name and telephone number, to help us satisfy your request.
If you choose to enroll for one of our products or services, or someone has requested a Compriva Private Email certificate on your behalf, we will request certain information about you. Depending on the type of product or service that was requested, you may be asked to provide different personal information. For certain products, we may require your name, address, telephone number, and email address. Other products may require different or supplemental information from you in order to apply. For a detailed listing of the type of personal information requested for our various products, please refer to the enrollment page for the particular product. In every case, the information that we collect and process is the minimum amount of information we require in order to enroll and service you for such product or service.
Statistical Information About Your Visit
When you visit our site, our computers may automatically collect statistics about your visit. This information does not identify you personally, but rather is about a visit to our site. We may monitor statistics such as how many people visit our site, the user's IP address, which pages people visit on our site, from which domains our visitors reach our site, and which browsers people use. We use these statistics about your visit for aggregation purposes only. These statistics are used to help us improve the performance of our Web site.
How We Use and With Whom We Share the Information We Gather
We assure you that the information we gather from you is used by us only as explained below:
- Sending you responses and updates.
We generally respond to any email questions, requests for product or service information, and other inquiries that we receive. We may also retain this correspondence to improve our products, services, and Web site, and for other disclosed purposes. Frequently, we retain contact information so that we can send individuals updates or other important information about our services and products.
- Facilitating the support, renewal, and purchase of our
products and services.
We may use the information you submit to contact you to discuss the support, renewal, and purchase of our products and services. We may also provide the information you have submitted to us to a Compriva Inc. representative, so that they can contact you and facilitate the support, renewal, and purchase of Compriva Inc. products and services.
- Validating your identity (if you are applying for certain
types of Compriva Private Email certificates).
Certain types of digital certificates require that we compare some of the information in your application to information contained in a third-party database or with some other third party source. We do this in order to authenticate your identity and other attributes and also to prevent identity theft. We have confidentiality agreements in place with these third-party databases restricting the disclosure of your information. In certain limited situations, we have contracts in place permitting the third-party database to disclose the information to its subcontractors or affiliates, but only for authenticating your identity and only in accordance with confidentiality agreements.
- Forming the contents of a Compriva Private Email certificate.
The exact information that appears in our different types of Compriva Private Email certificates is set forth in the relevant enrollment page and this Privacy Statement. Please note that all information that you provide us that forms the content of a digital certificate will be "published". Publication of Compriva Private Email certificates in an accessible location is an integral part of enabling the widespread use of digital certificates. Your Compriva Private Email certificates will be published so that a third-party may access, review, and rely upon your digital certificate. You should have no expectation of privacy regarding the content of your Digital ID.
- If we are required to disclose by law.
If we are required by law to disclose certain information to local, state, federal, national or international law enforcement authorities, we will do so (for example, we may disclose the identity of purchasers of certain software products to the U.S. Department of Commerce, Bureau of Export Administration, as required under the terms of our export licenses).
From time-to-time we may request information from customers via surveys. Participation in these surveys is completely voluntary and the user therefore has a choice whether or not to disclose this information. Survey information will be used for purposes of monitoring or improving the use of, and satisfaction with this Web site, and improving our customer service and product offerings.
- Your Ability to Opt-Out of Further Notifications.
From time-to-time, we notify our subscribers of new products, announcements, upgrades and updates. If you would like to opt-out of being notified, please email Customer Support with the text "Opt out" in the subject line.
Please be aware that we reserve the right to notify our subscribers of any information that affects the security of our products or services.
- Our Security Procedures.
We consider the protection of all personally identifiable information we receive from our Web site visitors and subscribers as critical to our corporate mission. Please be assured that we have security measures in place to protect against the loss, misuse, and alteration of any information we receive from you. As with any transmission over the Internet, however, there is always some element of risk involved in sending personal information. In order to try to minimize this risk, we encrypt all information that you submit in ordering one of our products or services using the Secure Sockets Layer (SSL) protocol.
How You Can Update or Correct Your Information
We cannot update or correct information contained in a digital certificate without destroying the integrity of the digital certificate. This is because we digitally sign each subscriber's digital certificate as a part of the digital certificate issuance process. If we were to subsequently modify or remove any information listed in a digital certificate, our digital signature would not verify the digital certificate's new content. Furthermore, if a subscriber (sender) then digitally signed a message with his or her private key, a third-party would not be able to properly verify the sender's signature (created using the sender's private key) because the sender's digital certificate would have been altered after the key pair's creation.
If you would like to update or correct any information in our records that is not contained in your Compriva Private Email certificate, please email Customer Support.
How You Can Revoke (Deactivate) Your Compriva Private Email certificate.
When a third-party wants to rely on a digital certificate (your Compriva Private Email certificate), it is important for the third-party to know its status (for example, whether it is valid, suspended (where available) or revoked). The third-party may do this by accessing our Web site and querying the status of the digital certificate. We do not generally delete digital certificates (and their content) from our repository because a third-party might not then be able to check its status. You may, however, revoke (deactivate) your digital certificate. A revoked digital certificate will still appear in our repository with an indication that it has been revoked.
Changes to this Privacy Statement
If a material change is made to this Privacy Statement and/or the way we use our customers' personally identifiable information then, prominent notice of the nature of the change will be posted on the first page of this Privacy Statement and on our home page.
Compriva Communications Privacy Solutions Inc.
67 Windeyer Cres.
Kanata, ON K2K 2P7
Authenticated, Encrypted, Private Email