This Privacy Policy is part of Sandstorm Analytics Terms of Use and describes the privacy practices of Sandstorm Analytics. It explains when and how Sandstorm Analytics collects end user and client information, including Personally Identifiable Information (defined below), how we use such information, and the circumstances under which we may disclose such information to others. This Privacy Policy includes the policies that Sandstorm Analytics observes for compliance with laws in the United States as well as other applicable laws, including those followed regarding the transfer of Personally Identifiable Information from the European Economic Area (“EEA”) and/or Switzerland to the United States under the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield, respectively.

By visiting the Sandstorm Analytics website, visiting a Sandstorm Analytics client website that provides notice of its use of Sandstorm Analytics and/or this policy, or registering for our service, you acknowledge that you accept and consent to the practices outlined in this Privacy Policy.

Visitors to the Sandstorm Analytics Website. If you are a visitor to the Sandstorm Analytics website or a Sandstorm Analytics client (“Client”) who registers or signs into the Sandstorm Analytics website (including for purposes of obtaining a free trial of Sandstorm Analytics services), we may obtain the following types of information from you or concerning your computer or device (“Sandstorm Analytics Client Information”), which may include information that can itself be used to identify and/or contact you (“Personally Identifiable Information”):

• Name
• Email address
• Phone number
• Website name and URL
• Credit card number
• Billing address
• Visitor site preferences

Sandstorm Analytics may also receive certain information that may be provided by your browser or mobile device, including:

• Browser information
• Operating system information
• Mobile device information (e.g., device identifier, mobile operating system, etc.)
• IP address
• Pages accessed
• Time of visit
• Time of last visit
• Referring site, application, or service, including the relevant search queries that led you to Sandstorm Analytics website

Visitors to the Sandstorm Analytics Blog. If you wish to access certain functions within the Sandstorm Analytics Blog, such as posting comments or registering for webinars, we may ask you to provide information, including:

• Name
• Email address
• Your website

Visitors to Sandstorm Analytics Clients’ Websites. Our Clients may use customized and proprietary Sandstorm Analytics code, software and/or services (“Service(s)”) to obtain information regarding the activities that users engage in while visiting their web pages (“Client User Data”). When a user visits a website that uses Sandstorm Analytics Service, Sandstorm Analytics code contained on the website contacts Sandstorm Analytics servers and enables Sandstorm Analytics to collect Client User Data. Some Clients may also use their own code to obtain Client User Data and then send such information to Sandstorm Analytics servers. Client User Data may include Personally Identifiable Information, including, but not limited to, the types of information listed for Sandstorm Analytics Client Information above.

Client User Data is stored on Sandstorm Analytics web servers and databases (including those hosted on third party servers on behalf of Sandstorm Analytics) for use in performing analysis and producing reports for the applicable Sandstorm Analytics Client. In addition, Sandstorm Analytics itself uses the Sandstorm Analytics Service in order to obtain insights into visitors’ activities on its own websites, which include, as of the Effective Date, https://www.kissmetrics.io and https://www.kissmetrics.io/blog.

Sandstorm Analytics collection and analysis of Client User Data helps our Clients to evaluate and understand how their users are interacting with their websites, and potentially, to modify their websites in order to make them more valuable or useful for their users. Sandstorm Analytics Clients determine the types of Client User Data that are sent to Sandstorm Analytics servers for analysis. This data may include or be linked to Personally Identifiable Information depending on how the Client uses Sandstorm Analytics Services on its website(s). Sandstorm Analytics Clients are contractually prohibited from sending personally sensitive Client User Data (e.g. personal health information, political opinions, religious or philosophical beliefs) to Sandstorm Analytics and Sandstorm Analytics does not knowingly receive such data.

In addition, Sandstorm Analytics may collect certain information about a Client’s visitor’s computer that may be provided by the visitor’s browser. This includes browser information, operating system information, mobile device information, IP address, time of visit, and the referring site, application, or service. Such information may be collected and shared with the Sandstorm AnalyticsClient even though not specifically requested by the Client.

How Do We Use This Information?

Visitors to the Sandstorm Analytics Website. We use the Sandstorm Analytics Client Information, including Personally Identifiable Information, to register your account, fulfill your requests, understand how you are engaging with Sandstorm Analytics, communicate with you, determine if you are satisfied with the Service, process billing for Sandstorm Analytics Services, and personalize your experience on the Sandstorm Analytics website and with the Sandstorm Analytics Service.

We may also use Sandstorm Analytics User Information to facilitate the delivery of content or advertisements that we believe may be of interest to you, or to communicate with you about new or existing products and services or special offers. For more information on opting out of these communications, please see the section on “User Privacy Controls” below.

Visitors to the Sandstorm Analytics Blog. We may use information you voluntarily provide when visiting the Sandstorm Analytics blog to send you e-mail communications, such as information on upcoming webinars, and to understand how you are engaging with and perceive Sandstorm Analytics Services.

Visitors to Sandstorm Analytics Clients’ Websites. Except as described in the “Disclosure of Information to Third Parties” section below, Sandstorm Analytics never sells or shares any Client User Data with individuals or companies other than the specific Client whose website transmitted the Client User Data to Sandstorm Analytics.

Sandstorm Analytics does not collect or aggregate information about end user behavior across multiple, different websites that are operated by different Clients, nor does it use any Client User Data for purposes of behavioral advertising. However, Sandstorm Analytics may analyze Client User Data in the aggregate for purposes of internal research and/or to determine overall trends or metrics concerning how users are engaging with websites, and may report such general trends publicly, without disclosing any Client User Data.

Our Client’s Use of Sandstorm Analytics. Sandstorm Analytics contractually requires its Clients to abide by all applicable laws, rules and regulations, including Privacy Shield where it applies, as well as other applicable laws relating to privacy and data collection (“Applicable Laws”). Sandstorm Analytics also contractually requires its Clients to obtain any necessary consents from visitors to its website(s) for the Client’s use of Sandstorm Analytics services, comply with all Applicable Laws (including, as an example, Privacy Shield where it applies) with respect to the transfer of Personally Identifiable Information of EU or Swiss subjects through the Service, and to post an online privacy policy that provides each visitor with clear notice of its practices regarding data collection, use, and disclosure (including the Client’s use of Sandstorm Analytics), along with a link to the Sandstorm Analytics Privacy Policy and to the Sandstorm Analytics Service Opt-Out (discussed below).

Sandstorm Analytics cannot be held responsible for any Client’s failure to make these disclosures on its website or for any Client’s use or collection of Client User Data that is not permitted under this Privacy Policy or otherwise. For more details on the terms that apply to our Clients’ use of the Sandstorm Analytics Service, please see Section 4 (“Privacy”) in the Sandstorm Analytics  Terms of Use.

Cookies. Sandstorm Analytics uses cookies (small text files that Sandstorm Analytics stores locally on your computer) on our Client’s websites for one or more of the following purposes: to help identify unique visitors and/or devices; assess usage patterns and perform traffic analysis; identify visitor preferences; conduct A/B testing; diagnose problems with our servers, and otherwise administer the Sandstorm Analytics Service. Sandstorm Analytics does not use methods such as browser cache, Flash cookies, or eTags, for acquiring or storing information about end users web browsing activity on Client websites or otherwise.

Depending on how our Clients use Sandstorm Analytics Services, information contained in Sandstorm Analytics cookies placed on the computers of end users may be linked to Personally Identifiable Information in Sandstorm Analytics database. This allows our Clients to use the Sandstorm Analytics Service to better analyze and measure their users’ interactions with their website and to organize activities by the same user on their website across time.

If you do not wish to have Sandstorm Analytics place and use cookies on your computer, you should set your browser preferences to refuse all cookies before accessing Sandstorm Analytics or other websites that may use Sandstorm Analytics. Sandstorm Analytics is not responsible for any failure by you or your browser to accurately implement or communicate your browser preferences or settings. In addition, please be aware that even if you configure your browser settings to reject all cookies, your activity on Sandstorm Analytics client websites will still be recorded by our Service, unless you opt out of our Service as set forth below. However, your rejection of all cookies will prevent Sandstorm Analytics from determining whether or not someone using your computer has previously visited the website, i.e., whether or not the visitor is a “unique” visitor, and from retrieving any information about your prior activities on a Client’s website through information contained in a cookie.

Please note that if you set your browser to reject cookies, some features of the websites you visit may be unavailable. For more information on how to reject cookies, see your browser’s instructions on changing your cookie settings. Additionally, please note that rejecting cookies may also prevent you from opting out of our Service because that involves placing an opt-out cookie in your browser.

If you do not elect to set your browser preferences to refuse cookies, you consent to have cookies, including cookies used by Sandstorm Analytics, placed on your computer when you visit our Client’s websites.

Web Beacons. Sandstorm Analytics may also collect certain information using Web Beacons. “Web Beacons” are electronic images that may be used on Sandstorm Analytics Website, in Sandstorm Analytics Service, or in our email communications. They are used, for example, to count website visits or to tell if an email has been opened and acted upon.

Service Providers. Information, including Sandstorm Analytics Client Information, Client User Data, and any Personally Identifiable Information contained therein, may be shared with certain third-party companies and individuals that help facilitate technical and administrative aspects of the Sandstorm Analytics Service (e.g., credit card processing), or perform functions related to the administration of Sandstorm Analytics (e.g. hosting services). These third parties perform tasks on our behalf and are contractually obligated not to disclose or use Sandstorm Analytics User Information or Client User Data for any other purpose, and to employ adequate security measures to prevent unauthorized access to such data. However, Sandstorm Analytics is not responsible in the event that Personally Identifiable Information is disclosed as a result of a breach or security lapse by any such third party.

Sandstorm Analytics Clients. Sandstorm Analytics Clients may share Client User Data with service providers (e.g. customer relationship management platforms) that perform tasks on behalf of Sandstorm Analytics Clients. Sandstorm Analytics contractually requires the Clients to disclose such practices to its users.

Sandstorm Analytics Partners. If you are a Sandstorm Analytics Client that signed up through our Partners Program, your Sandstorm Analytics Client Information may be shared with the Partner Program member that signed you up for Sandstorm Analytics Service, provided that, prior to any such sharing, Sandstorm Analytics will obtain contractual obligations from the Partner Program Member that it will comply with all Applicable Laws with respect to such Sandstorm Analytics Client Information. These Partner Program members may use that information to help you setup, adjust, manage, and cancel your account with Sandstorm Analytics.

Law Enforcement and Legal Process. Sandstorm Analytics also reserves the right to disclose any Sandstorm Analytics Client Information or Client User Information (including Personally Identifiable Information) to: (i) comply with any law, regulation, or legal request; (ii) enforce, apply, or investigate breaches of the Terms of Use or other agreements; (iii) respond to client requests; or (iv) protect the rights, property, or safety of Sandstorm Analytics, our employees, our users, or others.

Change of Control. If Sandstorm Analytics, or substantially all of its assets, is acquired by another company or successor entity, Sandstorm Analytics Client Information and/or Client User Data will be one of the assets transferred or acquired by the purchaser or successor. You acknowledge that such transfers may occur, and that any purchaser of or successor to Sandstorm Analytics or its assets may continue to collect, use and disclose your information acquired prior to such transfer or acquisition as set forth in this policy.

Clients and Visitors to the Sandstorm Analytics Website. Sandstorm Analytics offers several ways for you to review and update account information that is obtained and stored by Sandstorm Analytics, or to change your Sandstorm Analytics communication preferences:

• If you have a Sandstorm Analytics account, you can review or update your account information by contacting us at support@kissmetrics.io.
• You may unsubscribe to any of our e-mail or direct message communications regarding updates or products by following the unsubscribe instructions in the body of any message.
• You may contact us at privacy@kissmetrics.io, attn: Sandstorm Analytics Privacy Office.

Do Not Track Signals. Sandstorm Analytics Clients decide whether their use of Sandstorm Analytics Service is responsive to Do Not Track signals from browsers, and whether Sandstorm Analytics will be notified of a Do Not Track signal received from a user’s browser. If a Sandstorm Analytics Client enables the forwarding of a Do Not Track signal to Sandstorm Analytics, Sandstorm Analytics will attempt to read the signal and will not collect any Client User Data from a user visiting that Sandstorm Analytics Client’s website during that session, following receipt of the Do Not Track signal. The Do Not Track signal is browser-specific, and will not work for mobile devices. If a Sandstorm Analytics Client does not forward Do Not Track signals to Sandstorm Analytics, then Sandstorm Analytics will not have any access to such signals from the Client’s users, and such signal will have no effect on Sandstorm Analytics collection or use of data received from that user during the applicable session(s).

Visitors to Sandstorm Analytics Clients’ Websites. If you wish to opt out of Sandstorm Analytics collecting Client User Data when you visit Sandstorm Analytics Client Websites, please opt out directly below.

Your opt-out preference has been saved.

Unlike the Do Not Track signal described above, which applies only to Sandstorm Analytics Clients who have activated the functionality, this opt-out mechanism applies to all Sandstorm Analytics Client websites, meaning that no user data will be collected about you on any such websites. Please note that if you use a different device or Internet browser than you used when opting out of Sandstorm Analytics Service, or if you clear your cookies, Sandstorm Analytics will not be able to view the opt-out and will collect Client User Data when you visit Sandstorm Analytics Client websites. In these circumstances, you will need to revisit the link above from the new browser or device in order to reiterate your opt-out decision for that device or browser.

Email Communications

We may contact you by e-mail or other equivalent electronic communications if you access Sandstorm Analytics products or services. By registering or using Sandstorm Analytics Services, you specifically consent to the receipt of these e-mail or text message communications. If you do not want to receive emails or other communications from us, please follow the unsubscribe instructions in the body of such communications or notify us by email at privacy@kissmetrics.io.

How We Protect Your Personal Information

Sandstorm Analytics has implemented reasonable security mechanisms to protect Sandstorm Analytics Client Information and Client User Data that is maintained on Sandstorm Analytics servers from loss, misuse and unauthorized access, disclosure, alteration and destruction. Examples of these security mechanisms include limited and password-protected access, high security public/private keys, encryption on processed data, and SSL encryption to protect transmission of data.

However, please keep in mind that no security system is impenetrable. It may be possible for third parties to intercept or access Sandstorm AnalyticsClient Information and Client User Data in spite of these measures. Sandstorm Analytics cannot guarantee the security of your information and cannot be held responsible for unauthorized access to Sandstorm Analytics client accounts.

Our Policy Toward Children

Our Site and Service is not directed to children under 13. We do not knowingly collect personally identifiable information from children under 13 or from websites that are targeted to children under 13. If you are under 13, please do not attempt to register or send any information about yourself to us, including your name, address, telephone number, or email address. If a parent or guardian becomes aware that his or her child has provided us with personally identifiable information without their consent, he or she should contact us as provided below. If we become aware that a child under 13 has provided us with personally identifiable information, we will delete such information from our servers.

Changes to this Privacy Policy

Sandstorm Analytics retains the discretion to amend or modify this Privacy Policy from time to time. If we make material changes to the way we collect, use or disclose Personally Identifiable Information, we will notify you by posting a clear and prominent announcement on Sandstorm Analytics or through a direct communication to your Sandstorm Analytics account. For new users, the change or update will become effective upon posting. For existing users, the change or update will become effective 14 days after posting.

Use and disclosure of information we obtain is subject to the later of: (1) the Privacy Policy in effect at the time such information is collected or (2) any subsequent Privacy Policy of which you have constructive notice.

Sandstorm Analytics welcomes any questions or comments about this Privacy Policy or our privacy practices. Any such comments or questions should be submitted via e-mail to: privacy@kissmetrics.io, or by first class mail, air mail, or overnight courier to:

Sandstorm Analytics Privacy Office
2529 Central Avenue St Petersburg Fl 33713

We will use reasonable efforts to respond promptly, within 10-20 business days, to requests, questions or concerns you may have regarding access to Personally Identifiable Information about you that we have collected. We may contact you for follow up information.

Privacy Shield Rights and Dispute Resolution

Sandstorm Analytics complies with the EU-U.S. Privacy Shield framework and the Swiss-U.S. Privacy Shield as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from European Union member countries and Switzerland. Sandstorm Analytics has certified that it adheres to the Privacy Shield Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Privacy Shield programs, and to view Sandstorm Analytics certification, please visit https://www.privacyshield.gov/ . Sandstorm Analytics complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.

With respect to personal information received or transferred pursuant to the Privacy Shield Framework, Sandstorm Analytics is subject to the investigatory and regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Sandstorm Analytics may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Under Privacy Shield individuals have the right to access information held about them and amend or delete it if it is inaccurate. Any such requests or inquiries should be directed to the Sandstorm Analytics Privacy Office; contact information is provided above under “How to Contact Us”

Under Privacy Shield individuals must have the choice to opt out of the collection and forward transfer of the data to third parties. Sandstorm Analytics’ options for doing so are explained under “User Privacy Controls” Sandstorm Analytics further certifies that it complies with Privacy Shield policies regarding the onward transfer of data to third parties. Information about onward transfer and disclosure is available under “Disclosure and Transfer of Information to Third Parties”

Any questions or concerns regarding the use or disclosure of Personally Identifiable Information should be directed to the Sandstorm Analytics Privacy Office at the address given above. Sandstorm Analytics will investigate and attempt to resolve complaints and disputes regarding use and disclosure of Personally Identifiable Information by reference to the principles contained in this Privacy Policy. For complaints that cannot be resolved between Sandstorm Analytics and the complainant, disputes will be resolved pursuant to Sections 13.4 through 13.6 of the Terms of Use. For the avoidance of doubt, the dispute resolution procedures will be conducted in English.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at:

https://feedback-form.truste.com/watchdog/request/ .

Under certain conditions individuals may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. In addition, the United States Federal Trade Commission is the statutory body that has jurisdiction to hear any claims against Sandstorm Analytics regarding possible unfair or deceptive practices and violations of laws or regulations governing privacy.

Effective Date of this Privacy Policy

This Privacy Policy is effective as of the Effective Date set forth at the top of this document.