Invoka Privacy Policy
Introduction
This privacy statement is effective as of May 1, 2022. Please be aware that this privacy statement will regularly be updated to reflect any changes in the way we handle your personal data or any changes in applicable laws.
If you wish to obtain further information
What data do we collect?
Invoka Consulting collects personal data of our employees, potential employees, clients, suppliers, business contacts, shareholders and website users. Access to personal data is also limited to those that need it for processing. We classify information into different categories to ensure its protection and appropriate usage:
Unclassified – This is information that can be made public without any implications for the company, such as information that is already in the public domain.
Employee confidential – This includes information such as medical records, remuneration, work history and employment details.
Company confidential – Such as contracts, source code, business plans, passwords for critical IT systems, client contact records, accounts etc.
Client confidential – This includes personally identifiable information such as name or address, passwords to client systems, client business plans, new product information, market-sensitive information etc.
We have categorised information as follows:
Type of Information
Customer financial data
Test Data: Invoka Employee data
Customer solution design: Customer business data, Personal Identifiable Information
Classification Level
Client confidential: Unclassified
Employee confidential: Client confidential
How do we collect your data?
You provide Invoka with most of the data that we collect. We collect and process data when you:
- Share data via the Smartsheet platform
- Voluntarily share data via electronic communications, such as email and VOIP
- Discuss your organisation with Invoka Consulting in the planning or execution of an engagement.
- When you visit Invoka Consulting’s website
How long do we retain your data?
Invoka retains customer business data for the duration of the active relationship between you and Invoka, plus an additional 2 years, after which time customer data will be anonymised and used only for historical financial reporting purposes.
When personal data is no longer required, all reasonable steps will be taken to erase or otherwise dispose of it without delay.
Third Parties
We share your information with third-party service providers that provide services to us, including billing, payment processing, customer service, email deployment, advertising and marketing, security and performance monitoring, maintaining or servicing accounts, processing or fulfilling orders and transactions, verifying customer information, research, data hosting, auditing, and data processing;
Unless you are otherwise notified, any transfers of your personal data from within the European Economic Area (EEA) to third parties outside the EEA will be based on an adequacy decision or are governed by the standard contractual clauses. Any other non-EEA related transfers of your personal data will take place in accordance with the appropriate international data transfer mechanisms and standards.
Your Rights
You have the right to access your personal data, including to:
- The right to be informed;
- The right of access;
- The right to rectification;
- The right to erasure (also known as the ‘right to be forgotten’);
- The right to restrict processing;
- The right to data portability;
- The right to object; and
- Rights with respect to automated decision-making and profiling.
To submit a request, please send an email to dpo@invocaconsulting.com.
Contact us
Please contact us if:
- You have a general question about how Invoka Consulting protects your personal data.
- You wish to exercise your rights in relation to your personal data rights
- You wish to make a complaint about Invoka’s use of your data
To contact Invoka’s Data Privacy Officer, please send an email to dpo@invokaconsulting.com.