HRCI (“we”, “us,” or with “our”) has developed this policy statement (“Privacy Policy”) to explain how we collect, use, process, protect and disclose personally identifiable information (“PII”) when you use any HRCI website, including but not limited to www.hrci.org, learn.hrci.org, hrcimea.org, hrjobs.hrci.org, volunteer.hrci.org, ambassadors.hrci.org, and governance.hrci.org (collectively, the “Website”) and all services made available by HRCI or through third parties on behalf of HRCI, including but not limited to the Rosterfy platform for HRCI volunteers, that enable you to interact with HRCI and participate in HRCI activities and services through the Internet (collectively, including the Website, the “Services”). “You” or “user” or “your” refers to you as a user of any part of the Services.
PII is information that can identify a specific individual, such as, without limitation, a name, address, phone number or email address.
HRCI reserves the right to change this Privacy Policy at any time to address changes to our information collection, disclosure or use practices or changes in law. If HRCI makes changes to this Privacy Policy, HRCI will post those changes on the Website and provide notice of any material changes.
By using the Services, you signify your unqualified agreement to the terms of this Privacy Policy. Please review this Privacy Policy on a periodic basis to ensure your continued agreement.
BY USING THE WEBSITE OR THE SERVICES, YOU ARE ACCEPTING THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THE TERMS OF THIS PRIVACY POLICY, DO NOT USE THE WEBSITE OR THE SERVICES. THE TERMS OF THIS PRIVACY POLICY SHALL NOT SUPERCEDE ANY LAW, REGULATION, THE HRCI CERTIFICATION POLICIES AND PROCEDURES HANDBOOK, OR ANY OTHER WRITTEN POLICY OF HRCI THAT GOVERNS THE USE OF A SPECIFIC HRCI SERVICE, OR WRITTEN AGREEMENT THAT ANY USER OF THE WEBSITE OR SERVICES HAS ENTERED INTO WITH HRCI INDIVIDUALLY OR ON BEHALF OF AN ORGANIZATION.
HRCI collects PII so that it may customize your experience when you use the Services, it may improve the products that it offers to you, and that it may make you aware of information about HRCI, its products, and similarly relevant products and services.
Specific examples of the types of PII HRCI may collect through the Services include:
Contact Information: HRCI may request or require contact information, such as your name, address, phone number, facsimile number, email address and date of birth when you seek access to some of the Services, register for certification or recertification examinations (“HR Certification”), and/or use the Services to make payments to HRCI or purchase HRCI Services (including, without limitation, examination preparation materials, accessories, and HR Certification applications).
Demographic Information: HRCI may collect and compile demographic data (e.g., general employment or military information such as duration of employment or service, organization, service branch, title, rank and position) when you use the Services.
Transactional Information: HRCI may create and maintain a database of aggregated information about transactions that occur when you use the Services (e.g., tool or feature (and related database) utilization, registration information, and activity, navigation or content selection data).
Financial Information: HRCI may use credit card account information you provide to facilitate payments to HRCI or purchase HRCI Services (including, without limitation, examination preparation materials, accessories and HR Certification applications).
Usage Information: HRCI may collect usage information, including but not limited to the Internet Protocol (IP) addresses from all users of the Services, as well as the date and time of access and the Services accessed. HRCI may also catalog log-in information and the type of computer, device, browser or operating system used by the user.
Location Information: The Services and/or mobile applications utilized to access the Services on a cell phone may collect certain additional information automatically, including, but not limited to, the type of mobile device you use, your mobile device’s unique device ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browsers you use, available storage space, connection type (e.g. WiFi vs. cellular) and information about the way you use the application. We may also use GPS technology (or other similar technology) to determine your current location. If you do not want us to have your location information, you should turn off the location services for the mobile application and/or mobile web browser that you use to access the Services located in your account settings or in your mobile phone settings and/or within the mobile application.
HRCI or its contractors may use cookies, web beacons, tags, log-in files, and/or other similar data collection or tracking techniques (collectively, “Cookies”) to enhance and/or monitor your experience while using the Services and/or to track the efficacy of advertising campaigns.
Cookies are generally pieces of information, which HRCI uses for record-keeping purposes and which the Services may transfer to us and/or your computer’s Web-browser for storage on our server(s) or your computer’s hard drive.
Cookies enable HRCI to manage and/or customize your experience using the Services, including available advertisements. Cookies also make navigating the Services in a browser easier by automatically performing certain functions, such as saving your personal preferences and by providing targeted content.
HRCI never will use cookies to record passwords, credit card or other financial information.
The use of Cookies is an industry standard measure, your Web browser likely is set to allow them. If you would prefer not to receive Cookies, however, you may alter the configuration of your browser to refuse cookies or surf anonymously. If you choose to have your browser refuse cookies or attempt to navigate the Services anonymously, you should understand that it is possible that some areas of the Services will not be accessible or will not function properly.
As detailed below, HRCI uses PII to operate the Services and to provide and/or enhance certain of its features, tools and functionality. HRCI also uses PII to provide and improve the quality of the programs, solutions and services HRCI may offer or make available and to make you aware of information about HRCI, its products, and similarly relevant products and services.
Contact Information
HRCI may use your contact information in connection with the provision of its services, software solutions and content and to enable you to participate in any HR Certifications, events, programs and/or offerings available through the Services, including to:
facilitate registration or recertification for a particular HR Certification, event, program or service,
advertise its HR Certifications, events, programs or services,
create a personalized experience for you when using the Services,
provide you with news and information,
contact you regarding a survey,
participate in volunteer activities including test development or committee activities
assist with security or fraud prevention or response measures, and
to get in touch with you with respect to transactions related to the Services, including material changes in HRCI’s policies and agreements.
HRCI may (i) supplement the contact information collected from you while using the Services with information about you obtained from other sources, such as, without limitation, from HRCI’s advertisers and business partners.
HRCI may (ii) engage in cross-border transfers of PII to provide or enhance our ability to provide or advertise our HR Certifications, programs, events, services, or software solutions and/or the programs, events, services, or software solutions of others, and (iii) to otherwise tailor the Services.
HRCI also may share, license, and/or sell your contact information with or to third parties including, without limitation, HRCI’s agents, contractors, vendors, advertisers or business partners, to:
provide or improve our HR Certifications, programs, events, services, or software solutions,
allow for online registration for HR Certifications, programs, events, or services, the online provision of software applications,
advertise or market products and services relevant to you, and/or
facilitate other internal business purposes.
Demographic Information
HRCI may use demographic information for marketing, administrative, management, and monitoring purposes both to continue to provide or improve the Services and to provide or improve any software solutions, programs, HR Certifications, events or services HRCI may offer.
In addition, HRCI may share, license, and/or sell survey results and aggregated demographic data collected through the Services with or to third parties, including, without limitation, its affiliates, advertisers, business partners, the general public, the news media, and the U.S. Government and state governments, not only as may be required by law, but also for advertising purposes, for release to third parties, and/or to participate in government programs and initiatives. No survey results or aggregated demographic data provided by HRCI to third parties will identify any particular user.
Transactional Information
HRCI may use transactional information for marketing, administrative, and support purposes in order to provide or improve any software solutions, programs, HR Certifications, events or services HRCI may offer.
In addition, HRCI may also share, license, and/or sell such transactional data for such purposes on an aggregated basis (which will not identify any particular user) with or to third parties, including, without limitation, advertisers or business partners.
Financial Information
HRCI may use, collect, and pass credit card or online payment information to third parties to process payments for the Services and anything available for purchase on the Website, including, without limitation, examination preparation materials, accessories, and HR Certification applications. HRCI does not store credit card information on the Website but may store unique tokens provided by third parties.
Usage Information
HRCI may use usage information, such as your IP address, device idea, device type, connection type, browser and/or location, to help diagnose problems with our servers, analyze usage trends, track user movements on the Website, and to otherwise manage and monitor the Services.
Other Transfers of PII
By using the Website or Services, submitting public queries, or making public comments in parts of the Website where that is possible, you may elect to make certain of your PII available to others, such as your name or username, and you may voluntarily enter and make available comments and other content that includes additional PII. Such publicly posted information may be accessed by users who use the Website or Services and may be accessed by commercial search engines such as Google, Yahoo!, and Bing, to the extent that such engines are permitted to access the Website or Services.
Service Providers
From time to time, we may establish a business relationship with other businesses that we believe to be trustworthy and have privacy practices consistent with ours (“Service Providers”). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, accounting, data analytics and data storage and management, assessment-related activities, Internet-based platforms, and marketing and promotions. HRCI Service Providers include but are not limited to Microsoft, the provider of customer account and relationship management applications; Credly, the provider of HRCI digital badges; Pearson VUE, the provider of certification examination registration, scheduling, administration and delivery services for HRCI; HubSpot, the provider of inbound marketing, sales, and customer services for HRSI; Rosterfy, the Internet-based platform that HRCI uses to engage with HRCI volunteers; Thought Industries, the Internet-based platform that HRCI uses to host virtual learning products; and Naylor, the Internet-based platform that HRCI uses to host the HRCI career center. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect your Personal Information from unauthorized access, use, or disclosure. Service Providers are prohibited from using PII other than as specified by HRCI.
Business Transactions
If HRCI goes through a business transaction, such as a bankruptcy event, merger, investment transaction, or acquisition by another entity involving the sale of all or a portion of its assets, the PII collected and retained by HRCI may be among the assets transferred or reviewed.
If a transaction of this kind occurs and results in the transfer of your PII to a purchaser of all or a portion of the assets or ownership interests of HRCI, HRCI will notify you via e-mail and/or place a prominent notice on the Website for thirty (30) days of any such change in ownership or control and the possibility of changes being made to this Privacy Policy.
Investigation and Legal Action
We may use, process and disclose your PII, usage data, user interaction data and other non-personally identifiable information collected through the Services to investigate whether any use of the Website or the Services may potentially violate any policies of HRCI, agreements between users of the Services and HRCI, the rights of HRCI and any of its members or a third party, or any applicable law or regulation. This includes, but is not limited to, the investigation of allegations, reports or suspicion of conduct that could affect the validity of HRCI assessment results for one or more persons, HRCI certification application fraud, and other activities that may violate the terms of use of the Website and/or Services. The findings of any such investigation may be disclosed to interested third parties, which may include, as applicable, your employer, governmental authorities, certification and/or licensure bodies and credentialing bodies.
HRCI may also disclose PII when legally required to do so in accordance with subpoenas, government requests or regulations, or legal proceedings. HRCI may also disclose PII to protect against misuse or unauthorized use of the Services or as is otherwise required to limit legal liability, protect or defend our rights, property, or interests, or protect the safety, rights or property of other end users or customers.
As is appropriate for the nature of PII collected and stored by HRCI, the Services are protected by industry standard security measures or safeguards to minimize the risk of loss, misuse and alteration of the PII under HRCI’s control. With respect to any stored PII, HRCI will also use commercially reasonable efforts to preserve such PII in its original form to the extent possible and as consistent with any processing that is directed by you or necessary for HRCI to provide the Services. HRCI may store PII for a period no longer than necessary for the purpose of operating its business.
Although HRCI has endeavored to ensure the Services are secure and reliable, the confidentiality or integrity of any communication, data, or material transmitted via the Internet or stored with HRCI cannot be 100% guaranteed. Accordingly, you should consider carefully whether you want to submit PII via the Internet.
The collection, use, and sharing of your PII may be necessary for HRCI to provide certain features, programs, events, resources and services made available as part of the Services, and to operate and/or improve the Services. For example, all users who register for an event, program or seminar, or purchase resources from HRCI on the Website must agree to HRCI’s use and collection of PII.
Under other circumstances, however, you may decide on your own whether you will provide your PII or opt-out of doing so. For example, if HRCI conducts a survey on the Website, you do not have to participate unless you agree to do so.
You also may opt-out of certain HRCI business practices in which your PII may be used. Specifically, users may opt-out of including the use of their PII for inclusion in:
user postal mailings,
email communications sent by HRCI,
facsimile communications sent by HRCI, and
certain sharing arrangements with HRCI’s business partners.
You may request to opt out of certain sharing arrangements by submitting your request to https://optout.liveramp.com/opt_out.
California Residents: Companies that collect PII from California residents and disclose such information to third parties (including affiliated entities) for marketing purposes must, in response to a request by a consumer, either (1) provide a list detailing the categories of information shared and the entities to which such information was provided, or (2) provide a mechanism by which a consumer may opt-out of having his or her information shared with third parties.
HRCI has elected the second option, and you may request that your PII not be shared with third parties by sending your request, including your full name, email address and postal address, to HRCI, Attn. Privacy, 1015 15th Street NW, Washington DC 20005.
California residents are also entitled to know that they may file grievances and complaints with California Department of Consumer Affairs, 400 R Street, Suite 1080, Sacramento, CA 95814; or by phone at 916-445-1254 or 800-952-5210; or by email to dca@dca.ca.gov.
Moreover, HRCI may use certain methods and technologies to collect PII relating to your online activities over time (i.e., through more than one visit to the Website) and across third party websites or Internet-based services (i.e., through HRCI’s receipt of PII from other data sources). Any user who wishes to opt-out of such PII collection may contact us by email, phone or mail per the contact information listed in the final paragraph of this Privacy Policy.
At any time, you may go to the Website and access your account (using your username and password) to correct, modify or delete the information stored in connection with your user profile.
Moreover, when you cease to use HRCI’s services or no longer wish to be included in HRCI database, you may contact HRCI at info@hrci.org to request to have your information removed from the HRCI database.
If HRCI receives such a request or change, HRCI may require you to confirm or verify any change to your record. Please note, however, that the collection and uses of certain PII is necessary to provide all or part of the Services and you will not be able to delete such necessary information after you have entered into a contract with HRCI to provide you with services that require such information. In other instances, if you request the deletion of PII, it may render a particular HRCI solution or service in accessible to you or inoperable.
Information about the General Data Protection Regulation (GDPR) can be found here. GDPR outlines subject access rights of individuals in relation to their personal data. If you are a resident of the European Economic Area or the United Kingdom and would like to exercise any of Your rights under GDPR, Your rights and the actions you can take are summarized below.
Right to Access: You can access most of the data we have about you through your account. You can request a complete report on what personal information we have about you.
Right to Rectification: We strive to keep records and all data accurate. If you would like to modify an inaccurate record of Your personal data, in most cases you can edit the data yourself through your account. However, if you are unable to make a correction yourself, you can request that we make the correction for you.
Right to Data Portability: You can request a copy of your personal data to be transferred to a new system or platform.
Right to Object: You can object to our processing of your personal data in certain limited circumstances that are not related to our provision of the Services.
Right to Restrict Use: You can request that we restrict the processing of your personal data in certain limited circumstances that are not related to our provision of the Services.
Right to Erasure: You can request that we delete your personal data in certain extremely limited circumstances that are not related to our provision of the Services.
All GDPR subject access rights requests must be sent via email to info@hrci.org and include the specific details for your request and the basis for making the request. We will respond to all valid subject access rights requests within 30 calendar days of receiving the request; however, it may take longer to fulfill your request. If you are unsatisfied with how we handle your request, you can find the contact information for your local data protection authority here.
HRCI cares about the safety of children on its Website and encourages parents and guardians to monitor their children’s use of the internet.
Although the Website is suitable for a general audience, the Website is intended for use only by users who are over 18 years of age. Accordingly, HRCI does not knowingly solicit PII from children or send them requests for personal information.
If you become aware that a child has provided PII to HRCI, please contact HRCI immediately so that such PII may be deleted and that HRCI may discontinue any further services provided to such child.
To the extent hyperlinks or gateways are utilized to access external or third-party Websites within the Services, you should be aware that these external or third-party Websites may collect PII and are not controlled by HRCI and therefore, are not subject to this Privacy Policy. This Privacy Policy applies only to the Services as defined herein and will not apply to other websites that are not controlled or made available to HRCI stakeholders pursuant to a contract with HRCI. HRCI suggests that you check the privacy policies of other websites to determine how the proprietors of these third-party websites will utilize your PII.
This Privacy Policy is governed by and construed in accordance with the laws of the Commonwealth of Virginia, U.S.A.
The use of PII also is subject to the data protection and privacy laws of countries in which the user or the PII is located.
If any part of this Privacy Policy is determined to be invalid or unenforceable pursuant to applicable law, then the invalid or unenforceable provision or part will be deemed suspended by a valid, enforceable provision that most closely matches the intent of the original provision or part and the remainder of this Privacy Policy shall continue in full force and effect.
The Services and the servers that host the Services are located in the United States. Backup servers for the Services and associated PII may be located in other countries. Any information you provide will be transferred to the United States. By visiting and using the Services and submitting PII, you authorize this transfer of your PII to the United States and to other countries.
If you have any questions about this Privacy Policy or the PII collection and use practices for the Services, contact HRCI at info@hrci.org, (866) 898-4724 (U.S. Toll Free Phone Number), +1.571.551.6707 (International Phone Number), or at HRCI ATTN. Privacy, 1725 Duke Street, Suite 400, Alexandria, VA 22314.