Welcome to Strawbees Privacy Policy

Date 2022-10-20

Protecting your privacy is fundamental to us. This Privacy Policy describes what data we collect, how and why we use it, and where you can find out more. It governs the use of data collected by our platforms located at strawbees.com, classroom.strawbees.com, and admin.strawbees.com (from now on referred to as “our Services”).

Please read this Privacy Policy carefully and ensure that you understand it. By using our Services, you consent to this Privacy Policy, and agree that the data you provide to us is accurate. If you have any questions in relation to this, please contact us at privacy@strawbees.com.

FERPA AND COPPA COMPLIANCE

Our Services are compliant with Family Educational Rights and Privacy Act (FERPA) and Children’s Online Privacy Protection Rule (COPPA). We don’t collect student data and our Services don’t hold any student education records.

GDPR COMPLIANCE

Our Services comply with the European Union General Data Protection Regulation ("GDPR"). We aim to ensure:

• Transparency regarding the use of data
• That any processing is lawful, fair, transparent and necessary for a specific purpose
• That data is accurate, kept up to date, and removed when no longer necessary
• That data is kept safely and securely

Who do we collect data from?

How we collect data, what data we collect, and how we use the data, may differ based on how you interact with us. The most common ways to interact with us is by:

• Signing up for an account and registering as a “User” on our Services. This is typically done by teachers and educators. Students do not create accounts to access the content. When a student accesses a resource assigned by their teacher, they do so anonymously.
• Being an “Administrator”, who creates an account where they administer licenses and subscriptions on our Services. This is typically done by education professionals.
• Purchasing a product from our webshop, becoming a “Customer”.
• Being a “Visitor” on our Services, attending webinars, sending us emails, participating in contests, surveys or in any other way interacting with us, or using parts of our Services without registering as a User or becoming a Customer.

What data do we collect?

The Personal data we collect depends on who you are and how you interact with our Services.

• Account Information: When you register as a User or Administrator on our Services, we collect data you submit on the forms on our websites. This includes but is not limited to name, email address, country, school name, and what Strawbees products you have access to.
• Contact Information: When you make a purchase from our webshop and become a Customer, we collect your name, email address, shipping address, and billing information.
• Usage Information: When you use our Services, we collect information on how you use them (dates, times, and details of your browsing activities (such as what portions of the Services you use)), as well as technical data regarding the performance of the Services (such as page response times, download errors).
• Log Data: When you use our Services, we receive log data such as IP address, browser type, operating system, device information, and mobile carrier. In addition, we may collect additional information such as the referring web page, referring search terms, and pages visited.
• Information from your Google Account or other Third-Party Sign-in Service: Our Services allow Users to sign up for and log in to our Services using Google, Apple, Microsoft, or Clever. When you create an account using one of these Third-Party Services, we use the name, profile picture, and email address (if available) provided by these services.
• Additional Information: Means other information, when and to the extent submitted to our Services, or if you, for example, participate in a webinar, contest, request support, leave reviews, or otherwise communicate with Strawbees.

How do we use this data?

We may use your Personal data for the purposes and on the legal bases described below:

• Provide our Services. We use your Personal Data to provide our Services to you, such as verifying your identity, allowing access to the Services, and providing customer support. This is done to perform our contractual relationship with you and/or to comply with a legal obligation.
• Communicate with you. We might need to communicate with you about your account and/or our Services. This could be to notify you about activity, abuse warnings, and/or updates to your account. We might also send you system alerts, service updates and information, such as temporary outages and/or updates to this Privacy policy. This is done to perform our contract obligations with you and/or to comply with a legal obligation.
• Improve and support the Service. We might use your Personal Data to research, understand, and analyze trends of usage to improve and develop new features for our Services. This is in reliance on our legitimate interests in developing and improving the Service.
• Prevention of issues and abuse of the Services. Your Personal data might be used to investigate, prevent, and detect activities on our Service that we believe may violate the law, our Terms of Service, or applicable regulations. At the request of a school, we may investigate accounts to determine whether they comply with school policies. This is done to perform our contractual relationship with you and/or to comply with a legal obligation.
• Perform payments and purchases. Your Personal data might be used for payments and purchases that you do in order to use the Services. We process the data in order to perform our contractual obligations with you. Credit card transactions are securely handled by third parties who collect billing information from you in order to perform transactions.
• Comply with legal obligations. Your Personal data can be used to comply with laws, governmental regulations, or other appropriate legal mechanisms.
• Marketing. Your Personal data can be used to send you marketing communication or other product related information. This is done in accordance with your marketing preferences. Opt-out from marketing communication is always possible, either directly in the marketing email or by contacting us at privacy@strawbees.com.

Do we allow advertising within our Services or share Personal data for advertising?

No. We don’t display ads, allow third-party ads, share data for advertising or marketing purposes on our platforms. Neither do we allow data collection by third-party advertisers or data brokers, or share Personal Data with third parties for marketing purposes.

In what circumstances do we share Personal data with third parties?

We only share your personal data with third parties in the limited circumstances detailed below:

• For operating our Services. We use third party services to operate our Services, such as hosting service providers, payment providers, and notification services that help us communicate with you. Only the Personal data required for these services to function is shared. Third parties are contractually prohibited from using the Personal data for any other purpose than to provide the service requested by us, in for purposes described in this Privacy Policy.
• For analyzing data to improve our Services. We may use third party services (such as but not limited to Plausible Analytics) to help with analyzing data to improve our services. We may run beta tests of new features of our platform that require the collection of personally identifiable data. These tests will always be agreed upon with users ahead of time, and only those who give consent have their data collected. For these tests, we use third-party services (such as but not limited to Hotjar).
• To comply with applicable laws or regulations, if we are subject to a business transaction or in case of bankruptcy

How do we use cookies?

Our platforms use cookies to enhance your experience and to improve the Services. Please visit our Cookie Policy for more information.

How long do we store your Personal data?

We store your Personal data no longer than necessary for fulfilling the purposes for which the Personal data was collected.  Abandoned accounts and all content associated will be deleted automatically if the account has not been accessed for more than 7 years.

Your data protection rights

You have the right to access, correct, port, or delete any of your Personal data collected by us. You can update the information associated with your Strawbees Classroom account directly by logging in to your account at classroom.strawbees.com. You can also contact us directly at privacy@strawbees.com, if you wish to exercise any of your rights.

How do you delete your account?

If you wish to delete your Strawbees Classroom account, you can do so by logging in to your Strawbees Classroom account and clicking on "Delete account" on the Account Settings tab. You can also contact us directly at privacy@strawbees.com.

How do we keep your Personal data safe?

We take protecting your security and privacy very seriously and have several measures in place to protect the integrity of your Personal data, including the use of access-controlled data centers, restricted employee access to user information, and data encryption in transit.

In the unlikely event of a security breach, we will notify affected account holders within the amount of time required by law.

Changes to our Privacy Policy

We may from time to time make changes to this Privacy Policy. If the changes made to this Privacy Policy are believed to materially affect your rights, we will notify you by email and post a notice to our Services. If you continue to use our Service after you receive notice of changes to this Privacy Policy, you accept  the changes.

Contact information

If you have any questions about this Privacy Policy or how we handle your data, please contact privacy@strawbees.com.

You can also reach us by mail at our headquarter:

Strawbees AB

Stenkolsgatan 1B

417 07 Gothenburg

Sweden