Last Modified: September 12, 2022
This Cloudflare Campus Guide Mobile Application privacy notice (the “Privacy Notice”) describes the personal information Cloudflare, Inc., and its wholly owned subsidiaries (together “Cloudflare,” “Company,” “we,” or “us”) may collect and process during and following your download, registration with, and use of the Cloudflare Campus Guide Mobile Application (the “Application”). If you do not agree with the policies and practices as described herein, please do not download, register with, or use the Application. The Privacy Notice only applies to the Application and does not apply to any other service or product offered by Cloudflare or its affiliates.
The Application may contain links to other websites/applications and other websites/applications may reference or link to the Application. Such linked websites are not under our control, and we are not responsible for their content or privacy practices.
Personal Information We May Collect About You
Through your download, registration with, or use of the Application, we may collect or process the following personal information from or about you. Please note that we will not collect geolocation data, including GPS tracking data, as part of your use of the Application.
Identifying information, such as your first name, last name, and profile picture;
Contact information, such as your email address and telephone number;
Employment details, including your job title, department, campus, and manager email
Communications with us, such as questions relating to your use of the Application; and
Device information, such as IP address, device ID, and other similar identifiers.
The technologies that the Application uses for automatic information collection may include:
Google Firebase. The Application integrates with Google Firebase using their Software Development Kit (“SDK”) in order to capture analytics that, for example, enable us to assess how the Application is interacted with, if and how certain features are being used and to collate usage statistics such as Daily and Monthly Active users, average Application session lengths.
Apple Developer Console and Google Play Console. We use App Store Connect and Google Play Console to distribute the Application on the iOS and Android platforms, respectively. Data in connection with downloads, source countries, crash analytics, devices and operating system versions are all collected and shared with Apple and Google upon download of the app from the App Store or Google Play Store.
Our Use of Your Personal Information
The personal information collected about you through the Application may be used to:
Provide core functionality for the Application, including:
Viewing maps of Cloudflare facilities;
Providing information about the facility where you are located, including directions to a particular conference room, office, desk, or other landmark, or sending you relevant messages for that facility;
Providing real-time availability and enabling you to reserve a conference room, office, or desk;
Displaying hours and menus of the dining facilities most relevant to your location;
Managing your visitors/guests, such as allowing you to register a guest or get notified when they arrive;
Comply with all applicable laws and regulations;
Perform workforce analytics, data analytics, and benchmarking, including analytics regarding worker use of the Application; and
Conduct other reasonable and legitimate purposes related to your use of Cloudflare facilities.
Our Sharing of Your Personal Information
We may share your personal information as set forth below:
Service Providers. With software, IT, consultants, contractors and cloud service and other similar service providers we use to support our business, including the Application developer, Inpixon.
Public and Governmental Entities. Entities that regulate or have jurisdiction over the Company such as regulatory authorities, law enforcement, public bodies, and judicial bodies.
APIs. We may use third-party Application Program Interfaces (“APIs”) and SDKs as part of the functionality of the Application. These include Google Firebase and the Apple Developer and Google Play Consoles discussed above. For more information about our use of APIs and SDKs, please contact us as set forth in “Contact Us” below.
Other Third Parties.In addition, we may disclose your information if we believe disclosure is necessary or appropriate to protect the rights, property or safety of Cloudflare, or any of our respective affiliates, business partners, workers, customers or others. We may also share your information with other third parties if you authorize us to do so. When we disclose personal information for a business purpose, we execute a contract or other legal agreement that describes the purpose of our disclosure and requires the recipient to keep that personal information confidential and process it consistent with the terms of our agreement and applicable data privacy laws and regulations.
Data Security
We have put in place reasonable and appropriate security measures to protection your personal information, including to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those staff members, agents, contractors and other third parties who have a business need to know. They will only process your personal data according to our instructions, and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected data security incident and will notify you and any applicable regulator of a suspected breach where we are legally required or it is appropriate to do so.
Updating Your Personal Information
We strive to keep information contained in our records accurate and up to date. If your personal information changes during your employment, please keep us informed of such changes by contacting hr@cloudflare.com.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements, after which it will be deleted or archived except to the extent that it is necessary for us to continue to process it for the purpose of compliance with legal obligations to which we are subject or for another legitimate and lawful purpose. In some circumstances, we may anonymize your personal data so that you are no longer identifiable, in which case we may use such information without further notice to you.
Additional Terms For U.S. Users
Notice to California Residents
We do not sell, rent, or share personal information with third parties as defined under the California Consumer Privacy Act of 2018 (California Civil Code Sec. 1798.100 et seq.), nor do we sell, rent, or share personal information with third parties for their direct marketing purposes as defined under California Civil Code Sec. 1798.83.
Your Rights
Under certain circumstances, by law you have the right to:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you in a readily-usable format and to know how it’s being used and shared.
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason or legal obligation for us continuing to process it.
Non-discrimination for exercising your rights.
Please note, however, that certain personal data may be exempt from such requests pursuant to Applicable Laws or other laws and regulations.
How to Exercise Your Right of Access or Other Rights Relating to Your Personal Data
If you want to make a request in respect of your rights relating to your personal data, please contact us using the information below. Please note that we may be required to ask you for further information in order to confirm your identity before we provide the information requested.
We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data, make a correction or delete personal data requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under Applicable Laws).
Additional Terms For U.K. Users
Transfer of Personal Information
Information collected about you may be collected, stored and processed in the United States and anywhere we engage service providers, including countries that do not have data protection laws equivalent to those in the UK. Cloudflare has implemented appropriate safeguards to ensure the necessary level of data protection for any transfers to countries outside of the European Economic Area (“EEA”) without an adequacy decision by entering into appropriate data transfer arrangements, as required by law. When we transfer and process information about you, we will protect it as described in this Privacy Notice. You understand that the transfer of information to countries outside of your country of residence, which may provide for different data protection rules than in your country.
Your rights in connection with your personal data
Under certain circumstances, by law you have the right to:
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it;
Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected;
Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below);
Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and the circumstances of your particular situation mean you wish to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes (including profiling);
Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it; and
Request the transfer of your provided personal data to another party.
Please note, however, that certain personal data may be exempt from such access, correction and deletion requests pursuant to applicable data protection laws or other laws and regulations.
Right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law. If we have another legitimate basis for processing information in law, we may still process the same data and we will not require your consent to do so.
What we may need from you
We may request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
How to Exercise Your Right of Access or Other Rights Relating to Your Personal Data
If you want to make a request in respect of your rights relating to your personal data, please contact the Legal Team at sar@cloudflare.com. Please note that we may be required to ask you for further information in order to confirm your identity before we provide the information requested.
If your request or concern is not satisfactorily resolved by us, you can contact the UK Information Commissioner https://ico.org.uk/
Data Protection Officer
We have appointed a Data Protection Officer (DPO) to oversee compliance with this Policy. If you have any questions about this Policy or how we handle your personal data, please contact the DPO at dpo@cloudflare.com.
Changes to This Policy
We reserve the right to update this Policy at any time, and we will provide you with a new Policy when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
If you have any questions about this Policy, please contact Cloudflare’s Data Protection Officer at dpo@cloudflare.com.
Relation to the Cloudflare Employee Privacy Policy
This Privacy Notice supplements the Cloudflare employee privacy policy applicable to you, which also governs the personal information processed following your use of the Application and is incorporated into this Privacy Notice by reference. In the event of any conflict between this Privacy Notice and the applicable Cloudflare employee privacy policy, the Cloudflare employee privacy policy shall prevail.
Please be aware that under the applicable Cloudflare employee privacy policy, you may have additional rights and protections that are not mentioned in this Privacy Notice. To exercise your rights, please follow the instructions provided in the Cloudflare employee privacy policy that is applicable to you.