Your data is owned by you.

We don’t sell |cbase| email addresses or any other |cbase| data to any third parties and we do not share |cbase| email addresses or any other |cbase| data.

Your data is shared beyond |cbase| only when you make use of the online directories or PDF rosters and directories that are core features of |cbase|, and if you flag any data in |cbase| as "opted-out", it will not display in the online directories or PDFs.

We hold your data securely. Read our Security Statement for more information.

Data is stored on servers located in the United States.

When you use |cbase|, we collect information relating to you and your use of our services from a variety of sources. These are listed below. The sections afterward describe what we do with this information.

Information we collect directly from you:

Registration information. You need a |cbase| account before you can use |cbase|. When you register with us for a subscription, we collect your username, password and email address.

Billing information. We require you to provide your billing details, including name, address, email address and financial information corresponding to your selected method of payment (e.g. a credit card number and expiration date or a bank account number).

|cbase| data. We securely store and manage your |cbase| data for you, including personal contact details, organizational contact details, email addresses, physical addresses, phone numbers, notes, roles, committees, role relationship, and all other data managed by |cbase|. We don’t use these email addresses for our own purposes or email them except at your direction. We don't use any other |cbase| data for own purposes or make use of it except at your direction.

Information we collect about you indirectly or passively when you interact with us:

Usage data. We collect usage data about you whenever you interact with our services. This may include which pages of |cbase| you visit, what you click on, when you performed those actions, and so on. Additionally, like most websites today, our web servers keep log files that record data each time a device accesses those servers. The log files contain data about the nature of each access, including originating IP addresses.

Device data. We collect data from the device and application you use to access our services, such as your IP address and browser type. We may also infer your geographic location based on your IP address.

We treat your |cbase| data as information that is private to you. Unless you decide to share any |cbase| data with the public (such as by making the |cbase| data available via a public link to a public or members-only online directory), we do not use your |cbase| data other than as described in this privacy policy or unless we have your express consent. We do not sell your |cbase| data to third parties without your permission.

Generally, we use the information we collect from you in connection with providing our services to you. For example, specific ways we use this information are listed below. (See the next section of this privacy policy to see who we share your information with.)

To provide you with our services. This includes providing you with customer support, which requires us to access your information to assist you (such as with using |cbase| or technical troubleshooting).

To manage our services. We internally use your information, including certain |cbase| data, for the following limited purposes:

To monitor, maintain, and improve our services and features. We may use your information for internal purposes designed to keep our services secure and operational, such as for troubleshooting and testing purposes, and for service improvement, research and development purposes.

To enforce the |cbase| Saas Master Subscription Agreement.

To create new services, features or content. We may use your |cbase| data for our internal purposes to create and provide new services, functions, or features.

To contact you about your service or account. We occasionally send you communications of a transactional nature (e.g. service-related announcements, billing-related matters, changes to our services or policies). You can’t opt out of these communications since they are required to provide our services to you.

To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

We don’t sell your |cbase| data, unless you expressly permit us to!

When might we disclose your |cbase| data to third parties? Only for a limited number of reasons. We share your information with our service providers who help us to provide our services to you. We contractually bind these service providers to keep your information confidential and to use it only for the purpose of providing their services. For example, we use payment processors to process electronic check transactions. By using our services, you authorize |cbase| to sub-contract in this manner on your behalf. In rare circumstances, we may share information if required by law, or in a corporate restructuring or acquisition context.

Sharing your directory |cbase| data with the public: You can choose to share your |cbase| data via the built-in online directories available as part of the |cbase| service.

We recognize that you have entrusted us with safeguarding the privacy of your information. Because that trust is very important to us, the only time we will disclose or share your personal information or |cbase| data with a third party is when we have done one of three things, in accordance with applicable law: (a) given you notice, such as in this privacy policy; (b) obtained your express consent, such as through an opt-in checkbox; or (c) de-identified or aggregated the information so that individuals or other entities cannot reasonably be identified by it. Where required by law, we will obtain your express consent prior to disclosing or sharing any personal information.

We may disclose:

Your information to our service providers. We use service providers who help us to provide you with our services. We give relevant persons working for some of these providers access to your information, but only to the extent necessary for them to perform their services for us. We also implement reasonable contractual and technical protections to ensure the confidentiality of your personal information and data is maintained, used only for the provision of their services to us, and handled in accordance with this privacy policy. Examples of service providers include payment processors, hosting services, email service providers, and web traffic analytics tools.

Your account details to your billing contact. If your details (as the account holder) are different to the billing contact listed for your account, we may disclose your identity and account details to the billing contact upon their request (we also will usually attempt to notify you of such requests). By using our services and agreeing to this privacy policy, you consent to this disclosure.

Aggregated or de-identified information to third parties to improve or promote our services. No individuals can reasonably be identified or linked to any part of the information we share with third parties to improve or promote our services.

Your information if required or permitted by law. We may disclose your information as required or permitted by law, or when we believe that disclosure is necessary to protect our rights, and/or to comply with a judicial proceeding, court order, subpoena, or other legal process served on us.

Your information if there’s a change in business ownership or structure. If ownership of all or substantially all of our business changes, or we undertake a corporate reorganization (including a merger or consolidation) or any other action or transfer between entities, you expressly consent to CWS transferring your information to the new owner or successor entity so that we can continue providing our services. If required, CWS will notify the applicable data protection agency in each jurisdiction of such a transfer in accordance with the notification procedures under applicable data protection laws.

You can:

Access and manage your |cbase| data by using your |cbase| login.

Export your |cbase| data. We provide you with the ability to export, share and publish your |cbase| data in a variety of formats, including Excel (.xls), Adobe Acrobat PDF (.pdf), and comma delimited plaintext lists of email addresses. This allows you to create your own backups or conduct offline data analysis.

Delete |cbase| data, either via the built-in functions of |cbase|, or by contacting CWS with a manual deletion request. Deleting |cbase| data in these ways will not permanently delete |cbase| data immediately. As long as you maintain an account with us, we may retain your deleted data for a limited time in case you delete something by accident and need to restore it (which you can request by contacting CWS support). To the extent permitted by law, we will permanently delete your data if you request to cancel your account. However, if your data was previously made available to the public through a public link (ie a |cbase| online directory or PDF export), additional copies of your data may remain available on the Internet even after your account has been deleted.

Cancel your account. To cancel and delete your account, please contact CWS. Deleting your account will cause all the |cbase| data in the account to be permanently deleted from our systems within a reasonable time period, as permitted by law, and will disable your access to any other services that require a |cbase| account. We will respond to any such request, and any appropriate request to access, correct, update or delete your personal information within the time period specified by law (if applicable) or without excessive delay. We will promptly fulfill requests to delete personal data unless the request is not technically feasible or such data is required to be retained by law (in which case we will block access to such data, if required by law).

For how long do we retain your data? We generally retain your data for as long as you have an account with us, or to comply with our legal obligations, resolve disputes, or enforce our agreements. Data that is deleted from our servers may remain as residual copies on offsite backup media for up to approximately 6 months afterward.

Changes to this privacy policy. We may modify this privacy policy at any time, but if we do so, we will notify you by publishing the changes in |cbase|. If we determine the changes are material, we will provide you with additional, prominent notice as is appropriate under the circumstances, such as via email or in another conspicuous manner reasonably designed to notify you. If, after being informed of these changes, you do not cancel your subscription and continue to use our services beyond the advance-notice period, you will be considered as having expressly consented to the changes in our privacy policy. If you disagree with the terms of this privacy policy or any updated privacy policy, you may close your account at any time.

Security. Details about |cbase|’s security practices are available in our Security Statement. We are committed to handling your personal information and data with integrity and care. However, regardless of the security protections and precautions we undertake (such as our SSL encryption using a modern cipher suite), there is always a risk that your personal data may be viewed and used by unauthorized third parties as a result of collecting and transmitting your data through the internet.

Data locations. Our servers are based in the United States, so your personal information will be hosted and processed by us in the United States.

Cookies. Cookies are small bits of data we store on the device you use to access our services so we can recognize you. Each cookie expires after a certain period of time. We make very limited use of cookies on our websites for security reasons: A cookie is set to authenticate your permission to access your current |cbase| session.