Bamboo HR LLC and BambooHR Payroll LLC ( together “BambooHR”) are committed to protecting the privacy of individuals who visit our website (“Visitors”) and individuals who register to use the BambooHR® Services on behalf of BambooHR’s Clients (“Users”) (collectively “you” or “your”). This Privacy Policy applies to data provided on or through the BambooHR® website located at www.bamboohr.com, the BambooHR® web application owned and operated by BambooHR, and the content and the services offered by BambooHR through the website and apps (collectively, the “Services”) and describes BambooHR’s privacy practices in connection with the BambooHR Services. It also describes the choices available to you regarding use of your Personal Information (defined below) and how you can access and update this information. Use of information collected through the BambooHR® Services shall be limited to the purposes of providing the Services for which the User or Client has engaged BambooHR and as otherwise described in this Privacy Policy. Some information provided to us that may, either alone or when connected with other information to which we may have access, individually identify a Visitor, User or employee of a client and that information may be referred to in this Privacy Policy as “Visitor Personal Information,” “User Personal Information,” or “Data” (collectively, “Personal Information”).

Visitors please see Section 2; Users please see Section 3. Employees of BambooHR’s Clients, please see the disclaimer below as well as Section 4.

IF YOU ARE AN EMPLOYEE OR PROSPECTIVE EMPLOYEE OF A CLIENT THAT USES THE BAMBOOHR SERVICES, THIS PRIVACY POLICY DOES NOT APPLY TO YOU OR YOUR USE OF THE SERVICES. PLEASE REFER TO YOUR EMPLOYER’S PRIVACY POLICY, WHICH APPLIES TO THE COLLECTION, USE, PROCESSING AND RETENTION OF YOUR PERSONAL INFORMATION. UNDER APPLICABLE PRIVACY LAWS WE ARE A DATA PROCESSOR AND YOUR EMPLOYER REMAINS THE DATA CONTROLLER AT ALL TIMES. INDIVIDUAL EMPLOYEES OF OUR CLIENTS WHO SEEK ACCESS TO THEIR PERSONAL INFORMATION, OR WHO SEEK TO CORRECT, AMEND, OR DELETE INACCURATE PERSONAL INFORMATION SHOULD DIRECT THEIR REQUESTS TO THEIR EMPLOYERS WHO ARE BAMBOOHR’S CLIENTS. BAMBOOHR CLIENTS ARE ABLE TO REMOVE AND UPDATE PERSONAL INFORMATION AND DATA WITHOUT BAMBOOHR’S INVOLVEMENT.

  • We do not collect any more Personal Information than is necessary to provide the Services;
  • We only use your Personal Information for the purposes we specify in this Privacy Policy, unless you agree otherwise;
  • We do not keep your Personal Information if it is no longer needed; and
  • Other than as we specify in this Privacy Policy, we do not share your Personal Information with third parties.

a. What Information Do We Collect?

The information collected by BambooHR depends on how a Visitor uses our website. When a Visitor to our website contacts us to obtain information or content, or registers for an event sponsored by BambooHR, we will collect the Visitor’s email address and other contact information so that we may fulfill the Visitor’s request. Some information provided to us may, either along with or when connected with other information to which we may have access, individually identify a Visitor, and that information may be referred to in this Privacy Policy as “Visitor Personal Information.”

As is true of most websites, we gather certain information automatically and store it in log files. This information may include internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. We use this information to analyze trends, to administer our website, to track Visitors’ and Users’ movements around the website and to gather non-identifiable, demographic information about our user base as a whole. We may link this automatically-collected data to Personal Information provided by Visitors and Users so that we can better gauge our Visitors’ and Users’ needs and provide specific information to best serve them, and to the extent that this automatically-collected data includes, or is linked to, Personal Information, we will treat the data in accordance with this Privacy Policy.

In some cases, we may use cookies and related technologies to collect or manage certain information from your browser and computer. Please see the section on Cookies below for more information.

b. How do we use your information?

BambooHR uses information, including Visitor Personal Information, provided by Visitors to provide the Services and for business purposes such as research, marketing and for other general business purposes. BambooHR may share information, other than Visitor Personal Information, with third parties for business and marketing purposes.

If you apply for a job with us, we will collect, process and store the information you provide to us for recruitment purposes. We may also retain some of your information for a reasonable period of time for purposes of considering you for future employment opportunities.

BambooHR will not share Visitor Personal Information, or otherwise make your Visitor Personal Information available to any other parties except as provided in this Privacy Policy. We will not sell, rent, or exchange your Visitor Personal Information with any third parties without permission from you. If you request content or sign up for an event that is co-hosted by BambooHR and one of its partners or co-sponsors, your Visitor Personal Information will also be shared with that partner or co-sponsor. Please see our partner or co-sponsors’ privacy policies for further information about how they use Personal Information. Additionally, a Visitor’s cookie related information may be shared with our third-party ad networks. Please see Section 9 on cookies for further information.

BambooHR will share your information, including Personal Information, in order to respond to investigations, court orders, legal processes, or to investigate prevent or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person, violations of BambooHR’s Terms of Service, or as otherwise required by law. If BambooHR is required by law or an order of a court of competent jurisdiction to disclose your information, BambooHR will promptly notify you of this requirement, if permitted by the court or applicable law, so that you may seek a protective order or other appropriate relief.

BambooHR may also share Visitor Personal Information with our trusted third-party service providers who help us to provide the content or other information on our website or who help us accomplish our business and marketing purposes. We will ensure that those service providers are obligated to protect Visitor Personal Information under contract terms which are no less protective than those set out in this Privacy Policy.

If BambooHR is involved in a merger, acquisition, or sale of all or a portion of its assets, Visitor Personal Information may be transferred to the acquiring person or entity and you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of Visitor Personal Information, as well as any choices you may have regarding Visitor Personal Information.

c. California Consumer Privacy Act (CCPA)

If you are a resident of the state of California, under the California Consumer Privacy Act (California Civil Code §1798.100 et. Seq. (as amended from time to time, the “CCPA”)), you have the following rights:

  • The right to know or request that a business disclose what Personal Information of yours that it collects, uses, discloses and sells.
  • The right to request that a business delete Visitor Personal Information collected or maintained by the business.
  • The right to opt-out of the sale or transfer of Visitor Personal Information for consideration by a business (aka “Do Not Sell My Information”).
  • The right not to receive discriminatory or differentiated treatment by a business because you exercised a right conferred by the CCPA.

To submit a right to know, delete or opt-out (aka Do Not Sell My Information) request regarding Visitor Personal Information, click here, or call toll-free: (888) 213-4233.

If you submit a right to know or delete request, BambooHR will attempt to verify your identity with a reasonably high degree of certainty. BambooHR will require you to sign a declaration swearing to your identity. If BambooHR cannot verify your identity it will, in accordance with its obligations under the CCPA, decline to comply with your request.

Collection of Personal Information under the CCPA

Depending on how a Visitor used our website or signed up for content sponsored by BambooHR and/or one of its partners or co-sponsors, the following personal information has been collected by BambooHR in the preceding 12 months:

Data category table

Disclosure or Sale of Personal Information

If a Visitor signed up for content or an event that is offered by BambooHR and a BambooHR partner or co-sponsor, BambooHR will disclose (i.e. transfer under the CCPA’s definition of a sale) the Visitor’s Personal Information to the partner or co-sponsor. The categories of personal information that may be disclosed are name, email, phone number, title, company and country. Additionally, a Visitor’s cookie related information may be disclosed to our third-party ad networks. BambooHR does not process or disclose Personal Information of minors under 16 years of age.

Authorized Agent

If a Visitor would like to use an authorized agent to exercise its rights under the CCPA, the Visitor may do so by providing BambooHR with written proof of having authorized their agent to act on their behalf. BambooHR will verify the identity of the authorized agent and require that the authorized agent sign a declaration under the penalty of perjury attesting to their designation as an authorized agent of the Visitor.

d. General Data Protection Regulation (GDPR)

BambooHR complies with all applicable GDPR requirements for the Personal Information that it processes.

The following table sets out how we handle Visitor Personal Information and our legal basis for doing so:

Data category table

Visitors have the following rights under the GDPR:

  • The right of access to Visitor Personal Information;
  • The right to rectification or correction of any errors in Visitor Personal Information;
  • The right to request deletion of Visitor Personal Information;
  • The right to restrict or object to the processing of Visitor Personal Information;
  • The right to withdraw consent to the processing of Visitor Personal Information;
  • The right of portability in Visitor Personal Information; and
  • The right to lodge a complaint with a supervisory authority.

BambooHR does not engage in any automated decision making with Visitor Personal Information.

a. What Information Do We Collect?

When a User registers with BambooHR, information is needed such as the User’s Name, company name and size, business address, job title, contact telephone number and email address. A billing address and credit card information is also required if the User has chosen a paid account or is acting as the billing contact for a BambooHR client. Some information provided to us may, either alone or when connected with other information to which we may have access, individually identify a User and that information may be referred to in this Privacy Policy as “User Personal Information.”

b. How Do We Use Your Information?

BambooHR uses information, including User Personal Information, provided by you to provide the Services and for business purposes such as processing and fulfilling orders, billing, service improvement, research, marketing and for other general business purposes. BambooHR may share information, other than Personal Information, with third parties for business and marketing purposes.

BambooHR will not share User Personal Information, or otherwise make User Personal Information available to any other parties except as provided in this Privacy Policy. We will not sell, rent, or exchange User Personal Information with any third parties without permission from you.

BambooHR will share your information, including Personal Information, in order to respond to investigations, court orders, legal process, or to investigate, prevent or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person, violations of BambooHR's Terms of Service, or as otherwise required by law. If BambooHR is required by law or an order of a court of competent jurisdiction to disclose your information, BambooHR will promptly notify you of this requirement, if permitted by the court or applicable law, so that you may seek a protective order or other appropriate relief.

BambooHR may also share User Personal Information with our trusted third-party service providers, who help us to provide the Services. We will ensure that those service providers are obligated to protect User Personal Information under contract terms which are no less protective than those set out in this Privacy Policy.

If BambooHR is involved in a merger, acquisition, or sale of all or a portion of its assets, User Personal Information may be transferred to the acquiring person or entity and you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of User Personal Information, as well as any choices you may have regarding User Personal Information.

c. California Consumer Privacy Act (CCPA)

Under the CCPA, the personal information of California consumers who were acting as employees or officers of a company or Users as defined in this agreement were exempted from most requirements of the CCPA in their interactions with businesses who process their personal information in their role as employees or officers of a company. Such Users maintain the following rights under the CCPA:

  • The right to opt-out of the sale or transfer of User Personal Information for consideration by a business (aka “Do Not Sell My Information”).
  • The right not to receive discriminatory or differentiated treatment by a business because you exercised a right conferred by the CCPA.

To submit a right to opt-out (aka Do Not Sell My Information) request regarding User Personal Information, click here, or call toll-free: (888) 213-4233.

BambooHR will continue to monitor any developments of the CCPA for Users and update its Privacy Policy if necessary and in accordance with any such developments.

d. General Data Protection Regulation (GDPR)

BambooHR complies with all applicable GDPR requirements for the User Personal Information that it processes.

The following table sets out how we handle User Personal Information and our legal basis for doing so:

Data category table

Users have the following rights under the GDPR:

  • The right of access to User Personal Information;
  • The right to rectification or correction of any errors in User Personal Information;
  • The right to request deletion of User Personal Information;
  • The right to restrict or object to the processing of User Personal Information;
  • The right of portability in User Personal Information; and
  • The right to lodge a complaint with a supervisory authority.

BambooHR does not engage in any automated decision making with User Personal Information.

Use of User Personal Information is necessary for BambooHR to enter into and provide Services to you under your company’s contract with BambooHR. Failure to provide or allow BambooHR to process User Personal Information as a User may result in BambooHR no longer being able to provide you or your employer with Services.

As discussed in section 2.5 of the BambooHR Terms of Service located at https://www.bamboohr.com/terms-of-service/, “Data” of a BambooHR Client is defined as all information provided, inputted, or uploaded to your database in the BambooHR® Service by you or on your behalf. BambooHR will not disclose your Data except as compelled by applicable law or as expressly authorized by you in writing and will only retain and use the Data for the purpose of providing the Client with the Service or to prevent or address any service or technical problems with the Service.

BambooHR will share your Data, including User Personal Information, in order to respond to investigations, court orders, legal process, or to investigate, prevent or take action regarding illegal activities, suspected fraud, or situations involving potential threats to the physical safety of any person, violations of BambooHR's Terms of Service, or as otherwise required by law. If BambooHR is required by law or an order of a court of competent jurisdiction to disclose your Data, BambooHR will promptly notify you of this requirement, if permitted by the court or applicable law, so that you may seek a protective order or other appropriate relief.

BambooHR may also share your Data, including Personal Information, with our trusted third-party service providers, who help us to provide the Services. We will ensure that those service providers are obligated to protect your Data under contract terms which are no less protective than those set out in this Privacy Policy.

If BambooHR is involved in a merger, acquisition, or sale of all or a portion of its assets, your Data, including Personal Information, may be transferred to the acquiring person or entity and you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of your Data, as well as any choices you may have regarding your Data.

a. Data collected through the BambooHR® Services and Access to Data controlled by our Clients

BambooHR collects Data, including Personal Information, under the direction of its Clients and has no direct relationship with the individuals whose Personal Data it processes. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct his/her request to the applicable BambooHR Client (the data controller or owner). The Client is able to correct, amend or remove the Data without BambooHR’s involvement or may request that BambooHR assist it in doing so. For more information on how the applicable BambooHR Client uses your Personal Information, please see its privacy policy.

All of your Personal Information remains private and confidential. The security of your Personal Information is important to us. When you enter sensitive information (such as a credit card number) on our order forms, we encrypt the transmission of that information using secure socket layer technology (SSL).

BambooHR maintains a comprehensive written information security program that complies with applicable law and generally accepted industry standards. Our program includes appropriate administrative, technical and physical safeguards, procedures and practices to protect Personal Information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, however, is 100% secure. Therefore, we cannot guarantee its absolute security. If you have any questions about the security on our website, the BambooHR® web application owned and operated by BambooHR, or the Services, please contact us using the contact information below.

BambooHR and its representatives will never request your account credentials. You should never share your BambooHR account information, including your username and password, with anyone else. We recommend that you use a unique password for your BambooHR account that is not associated with other websites. You should check your BambooHR account regularly to ensure that your Personal Information has not been tampered with or altered.

Any suspicious activity regarding your account, including automated messages or calls from parties you cannot identify, should be reported to your site administrator and BambooHR using the contact information below.

BambooHR will send a welcome email to account holders or Users for billing purposes, and at times may send Service-related announcements. You cannot opt out of service-related emails if you are an account holder, as this is part of the BambooHR® Services. If you wish to subscribe to our newsletter(s), we will use your name and email address to send the newsletter to you. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in each of these emails, or you can contact us using the contact information below.

You may correct, update, amend, or remove Personal Information by making the change on our User information page, sending a request to us through our contact us page, by telephone or postal mail at the contact information listed below, California Residents who are Visitors or Users may do so through the link and telephone number provided in this Privacy Policy. If you no longer desire to use our Services, you may deactivate the Services by contacting us by telephone or postal mail at the contact information listed below. You may withdraw your consent to our processing of your Personal Information at any time by contacting us using the contact information below, but that will mean we can no longer provide the Services or any other requested content to you. We will respond to your requests regarding changes to Personal Information or Service changes within the appropriate timeline under applicable law of your call or receipt of your request.

Notwithstanding anything in this Privacy Policy to the contrary, we will retain your information for as long as your account is active, as needed to provide you with the Services or necessary to fulfill the purpose for which it was collected, or as required by applicable law. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

BambooHR uses a technology called "cookies" to store session information. A cookie is a small amount of data, which often includes an anonymous unique identifier, which is sent to your browser from a website's computers and stored on your computer's hard drive. We use both session ID cookies and persistent cookies. A "session ID cookie" expires when you close your browser. We use session ID cookies to track your login status. This cookie is only ever transmitted over HTTPS. A "persistent cookie" remains on your hard drive for an extended period of time. We use persistent cookies to determine from where you were referred to our website, as well as the last user ID that you used to log in. BambooHR may set and access BambooHR cookies on your computer; cookies are required to use the BambooHR® Services. You can remove persistent cookies by following directions provided in your Internet browser's "help" directory. Click here for more information on cookies, including how to disable them. If you disable cookies, you may still use our website, but your ability to use some areas of our website, such as contests or surveys, will be limited.

We also partner with third-party ad networks to manage our advertising on other sites and with third-party analytics companies to assist us with analyzing the use of our own website. These third-party companies use cookies, web beacons, pixel tags, and related technologies to collect information about your activities on this and other websites to provide you targeted advertising based upon your interests and to provide measurement and analytic services. Specifically, we use the following third-party services: Microsoft’s Bing Ads, Google Ads and Analytics, Quora Ads, LinkedIn Ads, Twitter Ads, Facebook Ads, Instagram Ads, and Hotjar Analytics. To learn more about third-party advertising, and to opt out of certain ad-targeting activities, please visit: preferences-mgr.truste.com, aboutads.info/choices, and youronlinechoices.com. To learn more about Microsoft’s privacy practices, see: privacy.microsoft.com/en-us/privacystatement; to opt-out of interest based advertising with Microsoft, see https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads. To learn more about Google’s advertising policies, see: policies.google.com/technologies/ads; your ad settings with Google, see: adssettings.google.com; and Google’s ad personalization, see: policies.google.com/technologies/partner-sites. To learn more about Quora’s privacy practices, see quora.com/about/privacy; to opt-out of interest based advertising with Quora, see: http://www.aboutads.info/choices and https://www.youronlinechoices.com/. To learn more about LinkedIn’s privacy practices, see linkedin.com/legal/privacy-policy; to opt-out of interest based advertising from LinkedIn, see www.aboutads.info/choices and www.youronlinechoices.eu and www.youradchoices.ca/choices. To learn more about Twitter’s privacy practices, see twitter.com/en/privacy; to opt-out of interest based advertising from Twitter, see https://optout.aboutads.info. To learn more about Facebook’s privacy practices, see facebook.com/policy.php; to opt-out of interest based advertising with Facebook, see http://www.aboutads.info/choices and http://www.youronlinechoices.eu/. To learn more about Hotjar’s analytics services and privacy practices, see the ‘about Hotjar’ section of Hotjar’s support site; to opt-out data collection by Hotjar, see https://www.hotjar.com/legal/compliance/opt-out/.

This site is being monitored by one or more third-party monitoring software(s), and may capture information about your visit that will help us improve the quality of our service. You may control the data being collected from your visit by visiting https://smart-pixl.com through a universal consumer options page located at https://smart-pixl.com/Unsub/unsub.html.

Currently, various browsers offer a “do not track” or “DNT” option which sends a signal to websites’ visited by a user about the user's browser DNT preference setting. BambooHR does not currently respond to browsers' DNT signals with respect to the website, in part, because no common industry standard for DNT has been adopted by industry groups, technology companies or regulators, including no consistent standard of interpreting user intent. BambooHR takes privacy and meaningful choice seriously and will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.

Our website includes links to other websites whose privacy practices may differ from those of BambooHR. If you submit information to any of those sites, your information is governed by the privacy policies that apply to those sites. We encourage you to carefully read the privacy policy of any website you visit.

Our website offers publicly accessible blogs and community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your Personal Information from our blog or community forum, please contact us using the contact information below.

We display personal testimonials of satisfied customers on our website in addition to other endorsements. With your consent we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us using the contact information below.

Our website includes social media features, such as the Facebook Like button and widgets, the Share this button or interactive mini-programs that run on our site. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing the features.

BambooHR may update this Privacy Policy from time to time and will notify account holders of significant changes in the way we treat any Personal Information, by sending a notice to the primary email address specified in your BambooHR account. We may also place a prominent notice on our website. We encourage you to periodically review this page for the latest information on our privacy practices.

For questions related to this Privacy Policy, or to correct, update, amend or request that we remove your Personal Information, or to contact BambooHR’s Data Protection Officer, please contact [email protected] or at:

Bamboo HR LLC
BambooHR Payroll LLC
335 South 560 West
Lindon, UT 84042-1911
USA

Toll Free: 1-866-387-9595
Phone: 801-724-6600

Wherever you use our website or access our Services, you understand and acknowledge that we may transfer, process, and store information about you in the United States and other countries, both within and outside of the European Economic Area. Please see below for more information about BambooHR’s compliance with the Privacy Shield. By providing us with your information, you consent to the transfer to, and to the processing and storage of your information in, countries outside of your country of residence, which may have different data protection laws than those in the country in which you reside.

BambooHR complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Information transferred from the European Union Switzerland to the United States, respectively. BambooHR has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit www.privacyshield.gov.

BambooHR’s participation in the Privacy Shield applies to all Personal Information that is subject to this Privacy Policy and is received from individuals who are residents of the European Union, European Economic Area, Switzerland, and the United Kingdom. BambooHR will comply with the Privacy Shield Principles in respect of such Personal Information.

BambooHR’s accountability for Personal Information that it receives under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles located at https://www.privacyshield.gov/EU-US-Framework. In particular, BambooHR remains responsible and liable under the Privacy Shield Principles if third party agents that it engages to process the personal data on its behalf do so in a manner inconsistent with the Principles, unless BambooHR proves that it is not responsible for the event giving rise to the damage.

We encourage you to contact us should you have a Privacy Shield-related (or general privacy-related) complaint regarding our handling of your data. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

For human resources data of EU residents, we have agreed to cooperate with local supervisory authorities. BambooHR has chosen to cooperate with EU supervisory authorities and comply with the information and advice provided to it by an informal panel of supervisory authorities in relation to such unresolved complaints (as further described in the Privacy Shield Principles). Please contact us to be directed to the relevant supervisory authority contacts.

As further explained in the Privacy Shield Principles, a binding arbitration option will also be made available to you in order to address residual complaints not resolved by any other means. BambooHR is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).