Important distinction: information submitted through this marketing website is handled by Sorbtree Corporation. Data entered into a customer's Sorbtree environment is governed by that customer's instructions, deployment model, and contractual arrangements with Sorbtree.
1. Scope
This Privacy Statement applies to the Sorbtree marketing website, communications sent to Sorbtree, and information submitted through website forms. It does not replace any customer agreement, data processing agreement, privacy schedule, security schedule, or public-sector addendum that may apply to a Sorbtree deployment.
2. Information we collect
Sorbtree may collect information that you choose to provide, including your name, role or title, organization, organization type, email address, phone number, and a description of the process you would like to improve.
The website and its hosting infrastructure may also generate limited technical information needed to operate, secure, and troubleshoot the site, such as request timestamps, browser or device information, IP address, referring page, and server logs.
Please do not submit confidential case information, health information, government identifiers, payment-card information, or other sensitive personal information through the marketing-site contact form.
3. How we use information
Sorbtree may use information collected through the website to:
- respond to questions and process-walkthrough requests;
- understand an organization's service-delivery, workflow, workload, security, and deployment needs;
- provide requested information about Sorbtree products and services;
- operate, secure, maintain, and improve the website;
- prevent misuse, investigate technical issues, and protect Sorbtree's rights; and
- comply with legal, accounting, and regulatory obligations.
Sorbtree does not sell personal information submitted through the website.
4. Customer data in Sorbtree
Organizations using Sorbtree generally determine what records and personal information are entered into their environment, why that information is processed, which users may access it, how long it is retained, and which deployment model applies.
Where Sorbtree processes customer data on behalf of an organization, Sorbtree's role and obligations are defined by the applicable agreement. Customers remain responsible for establishing a lawful basis for processing, providing required notices, managing user access, configuring retention, and responding to individuals where required by law.
Customer-hosted, on-premises, or air-gapped deployments may place additional privacy and operational responsibilities on the customer.
5. Service providers and disclosure
Sorbtree may use service providers to support website hosting, email delivery, infrastructure, security, communications, and business operations. Providers are expected to handle information only for the services they provide and subject to appropriate contractual or operational safeguards.
Sorbtree may disclose information where reasonably necessary to comply with law, respond to lawful process, protect users or systems, investigate fraud or misuse, enforce agreements, or complete a corporate transaction. Sorbtree does not authorize service providers to use website-submitted information for their own advertising purposes.
6. Retention
Sorbtree retains website inquiries and related communications only for as long as reasonably needed to respond, maintain business records, support legitimate follow-up, resolve disputes, and meet legal obligations. Retention periods for customer data are determined by the applicable customer configuration and agreement.
7. Security
Sorbtree uses reasonable administrative, technical, and operational measures appropriate to the information and services under its control. No internet transmission, website, or storage system can be guaranteed to be completely secure.
Additional information is available in the Sorbtree Security Overview.
8. Data location and residency
Sorbtree is Canadian owned, and its standard hosted offering is designed around Canadian data-residency priorities. The exact location, infrastructure, service providers, administrative-access model, and cross-border considerations for a customer deployment depend on the selected deployment model and applicable agreement.
See the Canadian Ownership and Hosting Statement for more detail.
9. Privacy rights
Depending on applicable law, you may have rights to request access to or correction of personal information held by Sorbtree, withdraw consent where consent is the basis for processing, or raise a concern about Sorbtree's handling of your information.
Requests concerning information held inside a customer's Sorbtree environment should normally be directed to that customer, because the customer determines the purposes and means of processing.
10. Updates and contact
Sorbtree may update this statement as its website, services, practices, or legal obligations evolve. The date at the top identifies the latest published version.
Privacy questions or requests
Sorbtree Corporation
privacy@sorbtree.ca