Unless otherwise defined in this privacy policy all capitalized terms have the same meaning as in our Terms of Service.

DEC. (“DEC” or “we”, “us”, or “our”) values your privacy. This privacy policy describes in detail the types of personal information we collect, use, and disclose when you visit the DEC website and related pages at www.decsecure.com (“Website”), supply information to a DEC sales partner (“Channel Partner”), use the DEC Secure and Secure Call applications (“DEC Apps”) or other DEC products and services (collectively, “Services”), or communicate with us.

What information DEC collects

“User Personal Information” is any information about one of our Users which could, alone or together with other information, personally identify them or otherwise be reasonably linked or connected with them. Information such as a username and password, an email address, a real name, an Internet protocol (IP) address, and a photograph are examples of “User Personal Information.”

User Personal Information does not include aggregated, non-personally identifying information that does not identify a User or cannot otherwise be reasonably linked or connected with them. We may use such aggregated, non-personally identifying information for research purposes and to operate, analyze, improve, and optimize our Service.

Information users provide directly to DEC

Registration Information

If you choose to register on the DEC Site, we may require some basic information such as your name, a valid email address and phone number, optional demographic information, and your approximate location.

Other personal data may be collected with your consent directly or via the Website. Information collected via the Website may include your responses to DEC’s marketing communications or actions performed on web pages. For example, the actions performed on the Website may include information related to file downloads or filled forms.

Sales Information

When you place an order for DEC Services through the Website or through a Channel Partner we may collect your name, a valid email address, phone number, billing information, and shipping information.

Information DEC automatically collects

Website Usage Information

If you’re accessing our Website, we automatically collect the same basic information that most service providers collect, subject, where necessary, to your consent. This includes information about how you use the Website, the referring site, your IP address and session information, and the date and time of each request. This is information we collect from every visitor to the Website, whether they have an Account or not. This information may include User Personal information.

Cookies

As further described below, we automatically collect information from cookies (such as cookie ID and settings) to keep you logged in, to remember your preferences, to identify you and your device and to analyze your use of our Service.

Device Information

We may collect certain information about your device, such as its IP address, browser or client application information, language preference, operating system and application version, device type and ID, and device model and manufacturer.

We Do Not Collect Information From You

Information saved on your device

We do not have access to any of your personal information, phone numbers and email addresses, and we do not preserve or maintain copies of any content sent by you to another user, including text messages, photographs, or videos.

When accessing the Services, all the information you are entering, including your username, are saved on your device and not on our servers.

You are the only one with access to your Information. You can securely share or delete information at any time. Deleting information from your device eliminates all of the encrypted records from our servers, your phone, and all of the devices of your DEC mobile contacts. Deleted messages cannot be recovered.

Our servers store the encrypted messages that you send and receive only long enough to ensure their delivery to each device associated with your account. Such data is fully end-to-end encrypted with keys, which are, at all the time, in your sole possession. We have no ability to view, monitor, access, or decrypt messages sent between DEC users.

All Information is Encrypted

Our mobile device management application enables you to communicate through a secured and encrypted channel with the assurance that their confidential information is transferred (whether it be messages, files, photos, recordings) in an encrypted channel that is protected from any malicious attacks or espionage. If you have any question about our encryption system, please contact our privacy officer at privacy@decgroup.ca.

What information DEC does not collect

DEC NEVER COLLECTS

We do not intentionally collect “Sensitive Personal Information”, such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. If you choose to store any Sensitive Personal Information on our servers, you are responsible for complying with any regulatory controls regarding that data.

How DEC uses your information

• We may use your information for the following purposes:
• We use your registration information to create your Account.
• We provide your registration information to DEC Channel Partners in your geographic area The Channel Partner will use the registration information to contact you and offer DEC Services and products.
• We use sales information to supply and ship you DEC products.
• We use your User Personal Information, specifically your username, to identify you on DEC Services.
• We use your email address to communicate with you, if you’ve said that’s okay, and only for the reasons you’ve said that’s okay. Please see our section on email communication for more information.
• We use User Personal Information to respond to support requests.
• We may use User Personal Information to invite you to take part in special promotions, surveys, beta programs, or other research projects, subject, where necessary, with your consent.
• We may use your User Personal Information if it is necessary for security purposes or to investigate possible fraud or attempts to harm DEC or our Users.
• We may use your User Personal Information to comply with our legal obligations, protect our intellectual property, and enforce our Terms of Service.
• We limit our use of your User Personal Information to the purposes listed in this privacy policy. If we need to use your User Personal Information for other purposes, we will ask your permission first.

Our legal basis for processing information

 To the extent that our processing of your User Personal Information is subject to certain international laws (including, but not limited to, the European Union’s General Data Protection Regulation (GDPR)), DEC is required to notify you about the legal basis on which we process User Personal Information. DEC processes User Personal Information on the following legal basis:

Contract Performance

When you create a DEC Account, you provide your registration information. We require this information for you to enter into the Terms of Service agreement with us, and we process that information on the basis of performing that contract. We also process your username and email address on other legal bases, as described below.

Consent

We rely on your consent to use your User Personal Information under the following circumstances: when you enter the information on our Website or supply the information to our Channel Partners; when you decide to participate in a DEC promotion, research project, beta program, or survey. The collection and use of this User Personal Information is necessary for providing you with DEC Services. You may withdraw your consent to DEC’s use of your User Personal Information at any time by emailing us privacy@decgroup.ca and asking us to delete your account and any personal information we have collected. If you do this you will no longer be able to use or access DEC Services including the DEC Apps.

Legitimate Interest

Generally, the remainder of the processing of User Personal Information we perform is necessary for the purposes of our legitimate interest, for example, for legal compliance purposes, security purposes, or to maintain ongoing confidentiality, integrity, availability, and resilience of DEC’s systems, Website, and Service.If you would like to request deletion of data we process on the basis of consent or if you object to our processing of personal information, please contact our privacy officer at privacy@decgroup.ca.

How we share the information we collect

We may share your User Personal Information with third parties under one of the following circumstances:

With your consent

We share your User Personal Information, if you consent, after letting you know what information will be shared, with whom, and why.

With service providers

We share User Personal Information with a limited number of service providers who process it on our behalf to provide or improve our Service, and who have agreed to privacy restrictions similar to the ones in our privacy policy by making similar commitments. Our service providers perform analytics, email marketing, payment processing and other similar services. Our service providers may process data outside of Canada, the United States, or the European Union.

The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.

Analytics

We may use third-party Service providers to monitor and analyze the use of our Services

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity.

You may opt-out of certain Google Analytics features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Email Marketing

We may use Your User Personal Information to contact You with newsletters, marketing or promotional materials and other information that may be of interest to You. You may opt-out of receiving any, or all, of these communications from Us by following the unsubscribe link or instructions provided in any email We send or by contacting Us.

We may use Email Marketing Service Providers to manage and send emails to You.

Mailchimp

Mailchimp is an email marketing sending service provided by The Rocket Science Group LLC.
For more information on the privacy practices of Mailchimp, please visit their Privacy policy: https://mailchimp.com/legal/privacy/

HubSpot

Their Privacy Policy can be viewed at https://legal.hubspot.com/privacy-policy

Payments

When You use our Service to pay a product and/or service via bank transfer, We may ask You to provide information to facilitate this transaction and to verify Your identity.

We may provide paid products and/or services within the Service. In that case, we may use third-party services for payment processing (e.g. payment processors).

We will not store or collect Your payment card details. That information is provided directly to Our third-party payment processors whose use of Your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

Elavon

Their Privacy Policy can be viewed at https://www.elavon.com/privacy-pledge.html

Net-Cents

Their Privacy Policy can be viewed at https://net-cents.com/privacy

For legal disclosure

DEC strives for transparency in complying with legal process and legal obligations. Unless prevented from doing so by law or court order, or in rare, exigent circumstances, we make a reasonable effort to notify users of any legally compelled or required disclosure of their information. DEC may disclose User Personal Information or other information we collect about you to law enforcement if required in response to a valid subpoena, court order, search warrant, a similar government order, or when we believe in good faith that disclosure is necessary to comply with our legal obligations, to protect our property or rights, or those of third parties or the public at large.

The content of DEC App user communications are not available to the Company. Where law enforcement agencies seek access to user content or messages, the Company’s response will simply reflect that such information does not exist on its servers. If DEC does possess any data on its servers, such information would be fully encrypted and the Company will not have the ability to decrypt it.

For absolute precision, due to the design of DEC’s operations, the Company does not have access to, and as such, cannot provide law enforcement with any of the following information pertaining to users of DEC Apps:

• text messages, photographs, and videos;
• phone numbers;
• email addresses;
• display images;
• birth date;
• metadata for messages;
• number of sent/received messages or images;
• IP address; and
• user’s location.

Change in control or sale

We may share User Personal Information if we are involved in a merger, sale, or acquisition of corporate entities or business units. If any such change of ownership happens, we will ensure that it is under terms that preserve the confidentiality of User Personal Information, and we will notify you on our Website, through the DEC Apps, or by email before any transfer of your User Personal Information. You will have the option of cancelling your account and removing your User Personal Information prior to such a transfer. The organization receiving any User Personal Information will be asked to honor any promises we made in our privacy policy.

How you can access and control the information we collect

If you are already a DEC user, you may access, update, alter, or delete your basic user profile information by contacting DEC at privacy@decgroup.ca.

Data Portability

As a DEC User, you can always take your data with you. Contact DEC regarding extracting your data from us.

Data retention and deletion of data

Generally, DEC retains User Personal Information for as long as your account is active or as needed to provide you the Services.

If you would like to cancel your account or delete your User Personal Information, you may do so by contacting DEC. We retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, but barring legal requirements, we will delete your full profile (within reason) within 90 days of your request. You may contact DEC to request the erasure of the data we process.

After an account has been deleted, all User Personal Information will be erased and you will no longer be able to use the DEC Apps or Services ; however, certain data, such as de-identified aggregate data will remain.

Our use of cookies and tracking

Cookies

DEC only uses cookies that are necessary. Cookies are small text files that websites often store on computer hard drives or mobile devices of visitors.
We use cookies solely to provide security and improve our Service. For example, we use them to keep you logged in, remember your preferences, identify your device for security purposes, analyze your use of our service, compile statistical reports, and provide information for future development of DEC.

By using our Service, you agree that we can place these types of cookies on your computer or device. If you disable your browser or device’s ability to accept these cookies, you may be unable to access certain parts of our Service.

How DEC Secures Your Information

DEC takes all measures reasonably necessary to protect User Personal Information from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure the appropriate use of User Personal Information.

DEC may retain personal data in digital format. Digital data can be accessed within the organization only by the appropriate employees who process the personal data as a part of their work. The digital personal data stored in the systems is technically protected by modern protection measures.

DEC has implemented appropriate technical and organizational measures to protect personal data from accidental or unlawful loss, extradition, misuse, alteration, destruction or unauthorized access. The employees of DEC are obliged to keep the personal data received during the processing of personal data confidential.

In the event of a data breach that affects your User Personal Information, we will act promptly to mitigate the impact of a breach and notify any affected Users without undue delay.

Transmission of data on DEC is encrypted using SSH and HTTPS (TLS).

No method of transmission, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee the security of your information.

DEC and Global Users

We store and process the information that we collect in Canada and the United States in accordance with this privacy policy, though our service providers may store and process data outside of Canada and the United States.

We provide the same high standard of privacy protection—as described in this privacy policy—to all our users around the world, regardless of their country of origin or location, and we are proud of the levels of notice, choice, accountability, security, data integrity, access, and recourse we provide. We work hard to comply with the applicable data privacy laws wherever we do business.

In particular:

• DEC provides clear methods of unambiguous, informed, specific, and freely given consent at the time of data collection, when we collect your User Personal Information using consent as a basis.
• We collect only the minimum amount of User Personal Information necessary for our purposes, unless you choose to provide more. We encourage you to only give us the amount of data you are comfortable sharing.
• We offer you simple methods of accessing, altering, or deleting the User Personal Information we have collected, where legally permitted.
• We provide our Users notice, choice, accountability, security, and access regarding their User Personal Information, and we limit the purpose for processing it. We also provide our Users a method of recourse and enforcement.

How We Communicate With You

We use your email address to communicate with you, if you have said that’s okay, and only for the reasons you’ve said that’s okay.

Depending on your email settings, DEC may occasionally send notifications and emails about promotions, new features, requests for feedback, important policy changes, or to offer customer support. We also send marketing emails, based on your choices and in accordance with applicable laws and regulations. There is an “unsubscribe” link located at the bottom of each of the marketing emails we send you. Please note that you cannot opt out of receiving important communications from us, such as emails from our Support team or system emails, but you can configure your notifications settings in your profile to opt out of other communications.

Resolving Complaints

If you have concerns about the way DEC is handling your User Personal Information, please let us know immediately. We want to help. You may contact us directly at privacy@decgroup.ca with the subject line “Privacy Concerns.” We will respond promptly.

Changes to our Privacy Policy

Although most changes are likely to be minor, DEC may change our privacy policy from time to time. We will provide notification to Users of material changes to this privacy policy through our Website and DEC Apps at least 30 days prior to the change taking effect by posting a notice on our home page, or sending email to the primary email address specified in your DEC account, or sending a notification through the DEC Apps. For other changes to this privacy policy, we encourage Users to check our Website privacy policy page frequently.

Contacting DEC

We welcome your questions, comments, and requests regarding this privacy policy and our privacy practices. Please contact us at privacy@decgroup.ca.

We have procedures in place to receive and respond to complaints or inquiries about our handling of personal information, our compliance with this policy, and with applicable privacy laws. To discuss our compliance with this policy please contact our Privacy Officer using the contact information listed above.