COLLECTION OF PERSONAL INFORMATION

“Personal information” is defined as information that whether on its own or in combination with other information may be used to readily identify or contact you such as: name, address, email address, phone number etc.

Service Users: During the Account registration process, we will collect information such as your name, postal code, contact number, email address and other personal information. You also may provide us with your mailing address, and demographic information (e.g., gender, age, political preference, education, race or ethnic origin, and other information relevant to user surveys and/or offers). We may also collect personal information that you post in your Offer, Profile, Wants, or Feedback, and any comments or discussions you post in any blog, chat room, or other correspondence site on the mobile application, or any comments you provide during dispute resolution with other users of the Website or mobile application.

Service Providers: If you are a Service Provider and would like to post any information about yourself, we will require you to register for an Account. During the Account registration process, we will collect your business name, telephone number, address, zip code, travel preferences, a description of your services, a headline for your profile, first and last name, and email address. In addition, you may, but are not required to, provide other content or information about your business, including photographs and videos. We also may collect payment information, such as credit card information, from you. If we deem it necessary, in our sole and absolute discretion, we may also ask for and collect supplemental information from third parties, such as information about your credit from a credit bureau (to the extent permitted by law), or information to verify any identification details you provide during registration.

We collect personal information from Service Providers offering their products and services. This information is partially or completely accessible to all visitors using CHPL website or mobile application. Service Providers and Service Users are required to create an account to be able to access certain portions of our website, such as to submit questions, participate in polls or surveys, to request a quote, to submit a bid in response to a quote, and request information. – Service Providers, if and when they create an account with Communities Heritage Limited, will be required to disclose information including personal contact details, agree to participation in polls or surveys or feedbacks or any other information that can help customer satiate their needs. The type of personal information that we collect from you varies based on your particular interaction with our Website or mobile application.

HOW MyCo USES THE INFORMATION WE COLLECT

We collect your personal information and aggregate information about the use of our Website and Services to better understand your needs and to provide you with a better Website experience. Specifically, we may use your personal information for any of the following reasons:

• To provide our Services to you, including registering you for our Services, verifying your identity and authority to use our Services, and to otherwise enable you to use our Website and our Services
• For customer support and to respond to your inquiries
• For internal record-keeping purposes
• To process billing and payments, including sharing details with third party payment gateways in connection with Website and/or products and Services
• To improve and maintain our Website and our Services (for example, we track information entered through the “Search” function; this helps us determine which areas of our Website users like best and areas that we may want to enhance; we also will use for trouble-shooting purposes, where applicable)
• To periodically send promotional emails to the email address you provide regarding new products from Communities Heritage Limited, special offers from Communities Heritage Limited or other information about Communities Heritage Limited that we think you may find interesting
• To contact you via email, telephone, facsimile or mail, or, where requested, by text message, to deliver certain services or information you have requested
• For Communities Heritage Limited’s market research purposes, including, but not limited to, the customization of the Website according to your interests
• We may use your demographic information (i.e., age, postal code, residential and commercial addresses, and other various data) to more effectively facilitate the promotion of goods and services to appropriate target audiences and for other research and analytical purposes
• To resolve disputes, to protect ourselves and other users of our Website and Services, and to enforce our Terms of Use
• We also may compare personal information collected through the Website and Services to verify its accuracy with personal information collected from third parties and may combine aggregate data with the personal information we collect about you
• MyCo App Collect location data to track employee live location duraing the duty time even when the app is closed or not in use. This setting is required for the employee who work in field work or remote location.

Email Address

We use your email address to communicate with you about your account. We won't send you any spam or other advertisements. We also will not sell your email address or share it with any third-parties. We may send you emails regarding your account or device(s).

Location Data

The app may collect your device's location data in background at any time for many reasons. This data may get stored on your local device, or uploaded to servers. The primary purpose of gathering location data is for you to track your device when you are on duty in field work or remote location.

Phone Number

The app may gather your phone number. This is usually used for verify your account using otp. It helps you identify what device on your account is using MyCo app. We do not sell your phone number or share it with any third-parties.

Contact

The app may take contacts from your mobile on demand (when you request it) and when certain triggers happen(like Add expected visitor details, Share Contact details via Chat, Add emergency conatct details). we are using your contact just for autofill form data. we are not storing your contact anywhere on our server

Pictures

The app may take pictures with your phone's camera, either on-demand (when you request it) and when certain triggers happen (like attendance self required). These pictures are uploaded to our servers . Pictures may be stored on your local device as well. Server-side pictures are retained and deleted according to the applicable purpose, retention period, and deletion procedures described in this Privacy Policy.

From time to time, MyCo (Communities Heritage Limited) may use personal information for new and unanticipated uses not previously disclosed in our Privacy Policy. If our information practices change regarding information previously collected, Communities Heritage Limited shall make reasonable efforts to provide notice and obtain consent of any such uses as may be required by law.

Face Data / Facial Image Information

What face data we collect: When you use the face-based attendance feature, the app may use the device camera to capture a clear facial image/selfie. The facial image is associated with your employee account and may be compared with the facial image previously registered for that employee for the purpose of employee identity verification and attendance verification.

How we use face data: Face data is collected and used only for employee identity verification and attendance-related purposes, including verifying that the employee marking attendance matches the authorized employee profile and helping prevent unauthorized attendance marking. Face data is not used for advertising, marketing, behavioral profiling, or unrelated purposes. Our custom face-matching feature is not intended to replace Apple's device-level Face ID or Touch ID authentication for account login.

Collection and consent: Face data is collected only when the employee uses or is authorized to use the face-based attendance functionality and provides the required camera permission. Where consent is required by applicable law or organizational policy, the employee may withdraw consent by contacting their organization's authorized administrator or us using the contact details in this Privacy Policy. Withdrawal of consent may prevent the employee from using face-based attendance, but does not affect the lawfulness of processing performed before consent was withdrawn.

Storage and security: Facial images used for attendance verification may be transmitted to and stored on our secured backend/cloud infrastructure for providing the HRMS service. We use reasonable technical, administrative, and organizational safeguards designed to protect face data against unauthorized access, disclosure, alteration, or destruction. Face data is accessible only to authorized personnel and authorized users of the relevant organization where required to provide the HRMS service.

Sharing and disclosure: We do not sell face data and do not share face data with advertising networks, data brokers, or third parties for their own advertising, marketing, profiling, or unrelated purposes. Where third-party service providers are used to host, secure, maintain, or operate the HRMS infrastructure, they may process data only as necessary to provide services to us and under contractual or other appropriate obligations requiring protection of the data. Such service providers are not authorized to use face data for their own purposes. We require any third party with whom face data is shared for service delivery to provide protection of face data that is the same as or equal to the protections described in this Privacy Policy. We may also disclose face data where required by applicable law, valid legal process, or to protect our rights, users, or the security of the service.

Retention: Face data is retained only for as long as it is reasonably necessary to provide employee identity verification and attendance functionality, or for the period required by the relevant organization's legitimate business and record-retention requirements and applicable law. When face data is no longer required for these purposes, we will delete it or arrange for its deletion in accordance with our deletion procedures and applicable law.

Deletion and user requests: Employees may request deletion of their registered face image/face data or withdraw consent by contacting their organization's authorized HR/administrator or by contacting us at contact@chplgroup.org. We will process a valid request and delete or arrange deletion of the applicable face data, subject to legal, regulatory, security, fraud-prevention, dispute-resolution, or other lawful retention requirements. If certain records must be retained by law, we will retain only the information required for that purpose and delete it when the applicable retention requirement expires. Deletion of face data may make the face-based attendance feature unavailable until the employee is re-enrolled, where permitted.

Face data is not used for account authentication: Our custom facial recognition/face-matching functionality is intended for employee attendance verification. It is not intended to replace the operating system's native biometric authentication mechanism, such as Apple Face ID or Touch ID, for account authentication.

Security

We employ procedural and technological security measures, which are reasonably designed to help protect your personal information from unauthorized access or disclosure. Communities Heritage Limited may use encryption, passwords, and physical security measures to help protect your personal information against unauthorized access and disclosure. No security measures, however, are 100% complete. Therefore, we do not promise and cannot guarantee, and thus you should not expect, that your personal information or private communications will not be collected and used by others. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. Communities Heritage Limited is not responsible for the unauthorized use of your information or for any lost, stolen, compromised passwords, or for any activity on your Account via unauthorized password activity.

Disclosure

We may share the information that we collect about you, including your personal information, as follows:

INFORMATION DISCLOSED TO PROTECT US AND OTHERS

We may disclose your information including Personal Information if: (i) Communities Heritage Limited reasonably believes that disclosure is necessary in order to comply with a legal process (such as a court order, search warrant, etc.) or other legal requirement of any governmental authority, (ii) disclosure would potentially mitigate our liability in an actual or potential lawsuit, (iii) reasonably necessary to enforce this Privacy Policy, our Terms of Use etc. (iv) disclosure is intended to help investigate or prevent unauthorized transactions or other illegal activities, or (v) necessary or appropriate to protect our rights or property, or the rights or property of any person or entity.

INFORMATION DISCLOSED TO THIRD PARTY SERVICE PROVIDERS AND BUSINESS PARTNERS

We may contract with various third parties for the provision and maintenance of the Website, Services and our business operations, and Communities Heritage Limited may need to share your personal information and data generated by cookies and aggregate information (collectively, “information”) with these vendors and service agencies. For example, we may provide your information to a credit card processing company to process your payment. The vendors and service agencies will not receive any right to use your personal information beyond what is necessary to perform its obligations to provide the Services to you. If you complete a survey, we also may share your information with the survey provider; if we offer a survey in conjunction with another entity, we also will disclose the results to that entity.

DISCLOSURE TO NON-AFFILIATED THIRD PARTIES IN FURTHERANCE OF YOUR REQUEST

Your request for services may be shared with third party websites with whom we have a contractual relationship in order to provide your request with maximum exposure. The post on the third party website will include the details of your request, including your location, and other contact details. Interested bidders, however, will be able to click on your request on such third party site, and will be directed to our Website where they will have access to your contact details (Partial or complete), as would any other service provider on our Website interested in bidding on your request.

DISCLOSURE TO OTHER USERS OF OUR WEBSITE

If you are a Service Provider, the information that you post (other than your payment information) is available to other users of our Website and our Services. Comments that users post to our Website also will be available to other visitors to our Website (see our discussion of User Generated Content below). In addition, we will post the results (in aggregate form) of surveys to our Website. If you are a Service User, name, and location, as well as the details of your request, may be available to all visitors to our Website. Service Providers also may be permitted to see the consumer’s full name, telephone number, email address and the -location

INFORMATION DISCLOSED TO LAW ENFORCEMENT OR GOVERNMENT OFFICIALS

We will disclose your information, including, without limitation, your name, city, state, telephone number, email address, user ID history, quoting and listing history, and fraud complaints, to law enforcement or other government officials if we are required to do so by law, regulation or other government authority or otherwise in cooperation with an investigation of a governmental authority.

Updating, Deleting and Correcting Your Personal Information

You can review, correct and delete your personal information by logging into the Website and navigating to your profile page in “Edit Profile,” where the relevant functionality is available. For face data specifically, you may request deletion or withdrawal of consent by contacting your organization's authorized administrator or us at contact@chplgroup.org. We may need to verify your identity before processing a deletion request. Upon a valid request, we will delete or arrange deletion of the applicable face data and other personal information as soon as reasonably practicable, subject to applicable law and the retention requirements described in this Privacy Policy. We do retain information from closed Accounts in order to comply with the law, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations of any Registered User, enforce our Terms of Use, and take any other actions otherwise permitted by law that we deem necessary in our sole and absolute discretion. You should understand, however, that once you publicly post a Request, Offer, Want, Feedback, or any other information onto the Website, you may not be able to change or remove it. Once we have deleted or removed your Account, you agree that Communities Heritage Limited shall not be responsible for any personal information that was not included within your deleted and/or removed Account that remains on the Website.

User Generated Content

We invite you to post content on our Website, including your comments, feedback, pictures, and any other information that you would like to be available on our Website. If you post content to our Website, all of the information that you post will be available to all visitors to our Website. If you post your own content on our Website or Services, your posting may become public and Communities Heritage Limited cannot prevent such information from being used in a manner that may violate this Policy, the law, or your personal privacy.

Privacy Policy Updates

THIS POLICY IS CURRENT AS OF THE EFFECTIVE DATE SET FORTH ABOVE. Communities Heritage Limited MAY, IN ITS SOLE AND ABSOLUTE DISCRETION, CHANGE THIS POLICY FROM TIME TO TIME BY UPDATING THIS DOCUMENT. Communities Heritage Limited WILL POST ITS UPDATED POLICY ON THE WEBSITE ON THIS PAGE. Communities Heritage Limited ENCOURAGES YOU TO REVIEW THIS POLICY REGULARLY FOR ANY CHANGES. YOUR CONTINUED USE OF THIS WEBSITE AND/OR CONTINUED PROVISION OF PERSONAL INFORMATION TO US WILL BE SUBJECT TO THE TERMS OF THE THEN-CURRENT POLICY.