Privacy Policy
Last Updated: November 5, 2025
Enboarder Inc. (Enboarder, we, us, or our) is committed to protecting your privacy.
Enboarder offers an onboarding and engagement platform available through its website and accessible on any device (Platform) to employers. Using our Platform, our employer clients (Clients) build customized workflows on their own to create engaging experiences with their employees.
This Privacy Policy applies to the information and data collected by Enboarder as a “data controller” – which means we determine the purpose and means of processing such personal information, including the information collected through our public website http://www.enboarder.com (Website), in the business relationship context with Clients or prospective Clients via the Platform, or in the employment relationship with employees or applicants. It also describes your choices regarding use, access, and correction of your personal information.
This Privacy Policy does not generally apply to the extent Enboarder processes personal information as a “data processor” or “service provider” – such as when we process the personal information of the authorized end-users of our Clients (Client Users). In these circumstances, Enboarder processes personal information in accordance with a data processing agreement, or similar data privacy contractual terms, we have executed with our Clients. Client Users access our services through their employer or another Enboarder Client and their account is controlled by that organization and subject to their respective privacy policy. If you are a Client User or other individual who wants to learn more about your personal information, we encourage you to review the privacy policies and/or notices of the relevant Client for more information about their privacy practices.
PLEASE READ THIS PRIVACY NOTICE CAREFULLY AS IT DESCRIBES YOUR RIGHTS, RESPONSIBILITIES, AND LIABILITIES. BY ACCESSING OR USING THE SERVICES OR OTHERWISE PROVIDING US WITH PERSONAL INFORMATION, YOU ARE CONSENTING TO THE TERMS OF THIS PRIVACY POLICY, OUR TERMS OF SERVICE AND COOKIE POLICY. IF YOU CHOOSE NOT TO AGREE TO THIS PRIVACY NOTICE, PLEASE DISCONTINUE USE OF THE SERVICES.
Notice at Collection
1. Categories of Personal Information We Collect
“Personal information” or “personal data” is any information that alone or in conjunction with other information or data, identifies or is linked to a particular individual or household and that is subject to, or otherwise afforded protection under a data protection law, statute, or regulation. The term “personal information” does not include anonymized or de-identified data that is not attributable to a particular individual or household and that is not otherwise subject to a data protection law, statute, or regulation.
“Sensitive personal information” is a category of personal information defined as sensitive under certain laws. This could include certain personal identifiers like Social Security numbers, passport numbers, or driver’s license numbers, financial information, racial or ethnic origin, physical or mental health condition or information, or other employment, financial or health information.
| Personal Information | ||
| Category | Description/Examples | Legal Basis |
| Personal Identifiers | Identifiers, such as your full name, mailing address, email address, and telephone number. |
|
| Registration Data | Information provided when you register for an account to use the Services, including position, usernames and passwords. |
|
| Demographic Data | Data about you such as your country of residence and preferred language. |
|
| Payment Data | Data necessary to accept and confirm payments processed by our third-party payment processor. |
|
| Online Identifiers | Persistent identifiers (IP address, cookies, device ID, beacons, ad identifiers, etc.) that recognize your device over time. |
|
| Commercial Information | Records of Services purchased, obtained, or considered, including usage tendencies. |
|
| Business Contact Data | Information about individuals from organizations we conduct or may conduct business with. |
|
| Marketing and Communications Data | Data related to marketing preferences and subscription choices. |
|
| Internet and Electronic Network Data | Browsing history, search terms, interaction logs, and WiFi-derived data. |
|
| Your Feedback | Information shared through surveys, reviews, or service feedback forms. |
|
| Visitor Information | Data provided when visiting an Enboarder facility (visitor logs, parking data). |
|
| Video and Images | Photos you provide or video recordings captured through security or conferencing systems. |
|
| Location Data | Approximate location from IP address, city, region, or postal code. |
|
| Professional or Employment Data | Job application details including CV, employment history, qualifications, references, and certain sensitive data. |
|
| Communications Content and Recordings | Emails, calls, chat interactions, forms, reviews, support requests, and online submissions. |
|
Information We Collect from Third Parties
From time to time, we may receive personal information about you from third party sources. This may include publicly available information from service providers, or contact information from partners with which we offer co-branded services or engage in joint marketing activities. Examples of these type of partnerships would be when we co-author a white paper, co-sponsor a webinar series, or attend a conference as a vendor and receive information from the host regarding attendees. In all of these situations we confirm our partners are collecting this information in accordance with applicable law.
Other service providers may use cookies and other similar technologies for marketing analytics and advertising purposes. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying information unless you choose to provide these.
We may also receive personal information about you from social media companies based on your engagement with us on their site (e.g. liking or commenting on our posts, or viewing our profile). For more information on how your engagement with us on social media may impact how your personal information is collected or shared, see Section 6 Social Media Features.
Information About Children
The Website and Platform are not intended for or targeted at children under 16, and we do not knowingly or intentionally collect information about children under 16. If you believe that we have collected information about a child under 16, please contact us at privacy@enboarder.com, so that we may delete the information.
2. How We Use Information We Collect
To Support Everyday Operations
In addition to the uses identified elsewhere in this Privacy Policy, we may use your personal information for business purposes, including to:
- Provide and maintain our services. We may use your personal information to manage your account with us, provide access to and use of our services, complete a purchase or provide customer support.
- Improve our Platform and Website. We may use your personal information to analyze, improve or deliver our services and to develop new ones. We may also use it to analyze how visitors use the Platform and Website in order to enhance and personalize your experience. Enboarder and its partners use cookies or similar technologies (such as web beacons) to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole. To find out more about how we use cookies on our Website and how to manage your cookie preferences please see our Cookie Policy available here.
- Communicate notices about Enboarder services. We may use your personal information to send information to you regarding updates and changes to our Terms of Service, Privacy Policy or other legal agreements.
- Process payments. We use Client financial information such as your signature, credit card and bank account information, VAT numbers and other tax identifiers that you use to pay for our Services. We use a third-party service provider to manage credit card processing. This service provider is not permitted to store, retain, or use information you provide except for the sole purpose of credit card processing on our behalf.
- Provide marketing communications or promote our services. We may use your personal information to send Enboarder promotional and informational content we think may be of interest to in accordance with your communication preferences. We may also use your personal information if it is contained in a client testimonial or comment on our Website. We obtain each Client’s consent via email prior to posting the client’s name and testimonial.
- Comply with legal requirements and protect the safety and security of our business.We may use your personal information to comply with laws, regulations or other legal obligations, to assist in an investigation, to protect and defend our rights and property or the rights of third parties or enforce terms and conditions. We may also use your personal information to prevent suspected fraud, threats to our network or other illegal activities, prevent misuse or for any other reason permitted by law.
- Facilitate recruiting, hiring and employment. If you are an Enboarder employee or a prospective employee of Enboarder, we may collect personal information directly from you or indirectly from recruitment agencies, your references, or past employers as part of the recruitment process and human resources management. This may include name, address, phone number, employment history and experience and other employment related information. We may also collect sensitive information about you and you consent to us collecting this information for employment relationship purposes. This may include health information or racial or ethnic origin.
3. How We Share Information We Collect
We may disclose personal information in accordance with applicable law and for the purposes described above, including:
- To your employer who is our Client;
- To our related corporate entities;
- To anyone to whom our assets or businesses (or any part of them) are transferred;
- When we may be required, authorized or permitted by law, including to government agencies, regulatory bodies and law enforcement agencies; To our business advisors acting as service providers or processors including lawyers, bankers, auditors, and insurers; and
To any other service provider, contractor or third party where you have provided your consent.
We may also disclose personal information to third parties such as our contractors, suppliers, agents and service providers who help us deliver, administer and support our functions and activities, including:
- Hosting our servers and website;
- Conducting research, surveys and data analysis;
- Providing IT services;
- Data processing, storage and back-up;
- Processing payments; and
- Delivering marketing and digital marketing services
If you facilitate a transaction with us, or request information from or otherwise engage with us, and such activities require us to share your personal information with a service provider or other third party, you hereby consent to such disclosure and/or direct us to intentionally disclose your personal information to the service provider or third party.
4. International Data Transfers
Enboarder is an international company based in the US, with locations in Australia and the UK as well. We may transfer your personal information to countries other than the one in which you live, including transfers to the United States. To the extent that personal information is transferred abroad, Enboarder will ensure compliance with the requirements of the applicable laws in the respective jurisdiction in line with our obligations.
In particular, Enboarder uses Standard Contractual Clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK where appropriate) for transfers to, among others, Australia, UK, and the United States. Enboarder will transfer your personal information to facilitate the provision of the Services. A copy of our standard data processing addendum, incorporating the Standard Contractual Clauses, can be found in our Data Protection Addendum in our Terms of Service.
5. Corporate Restructuring Events
If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company would receive all information gathered by Enboarder on the Website and the Platform. In this event, you will be notified via email and/or a prominent notice on our Website, of any change in ownership, uses of your personal information, and choices you may have regarding your personal information.
6.Compelled Disclosure
We reserve the right to use or disclose your personal information if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process.
7.Retention of Personal Information
How long we keep information we collect about you depends on the type of information collected, as further described below.
We retain personal information that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements).
When we have no ongoing legitimate business need to process your personal information, we securely delete the information or anonymize it so that it is no longer personal information or, if this is not possible, securely store your personal information and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request, as described in the “How to Access & Control Your Personal Data” section below.
If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us or ceased using your Enboarder account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.
8.Security of Your Personal Information
We use a variety of security technologies and procedures to help protect your personal information from unauthorized access, use or disclosure. We secure the personal information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All personal information is protected using appropriate physical, technical and organizational measures. For more on security at Enboarder, please see https://enboarder.com/information-security-policy/.
HOWEVER, NO INFORMATION SYSTEM CAN BE FULLY SECURE, AND WE CANNOT GUARANTEE THE ABSOLUTE SECURITY OF YOUR PERSONAL INFORMATION. MOREOVER, WE ARE NOT RESPONSIBLE FOR THE SECURITY OF PERSONAL INFORMATION YOU TRANSMIT TO THE WEBSITE AND/OR THE SERVICES OVER NETWORKS THAT WE DO NOT CONTROL, INCLUDING THE INTERNET AND WIRELESS NETWORKS, AND YOU PROVIDE US WITH ANY PERSONAL INFORMATION AND DATA AT YOUR OWN RISK. TO THE EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE OR OTHERWISE RESPONSIBLE FOR ANY DATA INCIDENT OR EVENT THAT MAY COMPROMISE THE CONFIDENTIALITY, INTEGRITY, OR SECURITY OF YOUR PERSONAL INFORMATION CAUSED BY A THIRD PARTY.
9.Cookies and Similar Technologies
Cookies. As mentioned in Section 2 above, Enboarder and its partners use cookies or similar technologies (such as web beacons or pixels) to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole. To find out more about how we use cookies on our Website and how to manage your cookie preferences please see our Cookie Policy available here.
Enboarder uses Google Analytics to learn how people interact with our Websites. To learn more about Google’s privacy practices, visit Google’s Privacy & Terms at https://policies.google.com/technologies/partner-sites. You may opt out of those cookies by visiting https://tools.google.com/dlpage/gaoptout to manage your cookie preferences. Enboarder may occasionally use other analytics providers. These third parties may combine your information with the information of other individuals for analytics purposes.
10.Direct Marketing
We may send direct marketing communications to our existing and prospective Clients about our activities and services and other material that we think you would find interesting or useful. If you do not wish to receive such direct marketing communications, you can always opt out. If you are receiving email communications from us, there will be a mechanism to opt out contained in each of those emails. To stop receiving other communications from us, you can contact us via any of the channels listed below.
If you choose to opt out of all direct marketing communications, please note that Enboarder may still contact you and your employees for other reasonable purposes, including information that Enboarder is legally required to send, notifications of changes to Enboarder services or policies and information regarding the use, rights, benefits or obligations of users of our services.
11.Social Media Features
Our Websites include social media features, such as the Facebook Like button and Widgets, such as the Share This button or interactive mini-programs that run on our Websites. These features may collect your IP address, which page you are visiting on our Websites, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Websites. This Privacy Policy does not apply to these features. Your interactions with these features are governed by the privacy policy and other policies of the companies providing them.
If You Make a Public Post, Others May See It.
Your personal information may be publicly available if you identify us in your social media pages or on various social media platforms by tagging us using a hashtag (#) or “at” (@) indicator. Your personal information also may be publicly available if you make a post on a social media site on a page we maintain. We maintain Enboarder social media pages on the following sites:
- Facebook at https://www.facebook.com/enboarder/
- X at https://twitter.com/enboarder
- LinkedIn at https://www.linkedin.com/company/enboarder/
- Instagram at https://www.instagram.com/enboarder/
When you use a social media site, your personal information is subject to the privacy policies of those sites. However, once your personal information is in our possession, we will treat it in accordance with this Privacy Policy. We strongly recommend you review the privacy policies of any third-party sites you visit to understand the data collection and use practices of that third party.
12.External Websites
Our Websites provide links to other websites. We do not control, and are not responsible for, the content or practices of these other websites. Our provision of such links does not constitute our endorsement of these other websites, their content, their owners, or their practices. This Privacy Policy does not apply to these other websites, which are subject to any privacy and other policies they may have.
13.Public Forums
We offer publicly accessible blogs. Please keep in mind that if you directly disclose any information through our public blogs, this information may be collected and used by others. We will correct or delete any information you have posted on the Websites if you so request, as described in “Opting Out and Unsubscribing” below.
14.How to Access & Control Your Personal Data
Reviewing, Correcting and Removing Your Personal Information
If you are a California resident, please refer to section 15 or for EEA/UK residents please refer to section16 for more information on access and control of your personal data.
We will take all reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up-to-date, and we will try to confirm your details through our communications with you and promptly add updated or new personal information to existing records when we are advised. However, we rely on the accuracy of personal information as provided to us both directly and indirectly. We encourage all users (whether of the Website, social channels, or Platform) to regularly review and update their personal information. If any of your details change, please notify us as soon as you can or log into your online profile or subscription center to update it. If you believe we are holding information about you that is inaccurate, incomplete, irrelevant or misleading, you can ask us to correct it or delete it altogether.
To exercise any of these options, please contact us at privacy@enboarder.com or by mail to Enboarder, 111 Congress Ave., Suite 500 Austin, TX 78701, Attention: Privacy. We will respond to your request to change, correct, or delete your information within a reasonable timeframe and notify you of the action we have taken.
15.California Privacy Rights
Data Privacy Rights. Pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, California residents are entitled to certain data privacy rights:
Right to Know(Specific Pieces of Personal Information). You have the right to know the specific pieces of your personal information that we have collected about you.
- Right to Know(Categories of Personal Information). You have the right to know (i) the categories of personal information we have collected from you; (ii) the categories of sources from which the personal information is collected; (iii) the categories of your personal information we have sold or disclosed for a business purpose; (iv) the categories of third parties to whom your personal information was sold or disclosed for a business purpose; and (v) the business or commercial purpose for collecting or selling your personal information.
- Right to Delete. You have the right to request that we delete your personal information that we have collected and retain.
- Right to Correct. You have the right to request that we correct inaccurate personal information that we have collected and retain.
- Nondiscrimination. You have the right not to be subject to discrimination for asserting your rights under the CCPA.
Submit a Privacy Request. To submit a privacy request, you (or your authorized agent) may contact us in accordance with the “Contact Us” section listed below. However, any such authorized agent must be registered with the California Secretary of State to conduct business in California.
Privacy Request Verification Process. If you (or your authorized agent) make any request related to your personal information, Company will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, Company will, to the extent required or permitted by law, require you (or your authorized agent) to verify your request via email, request certain contact information or government identifiers, and we will match at least two pieces of such personal information with data that we have previously collected from you before granting you access to, erasing, or correcting, specific pieces or categories of personal information, or otherwise responding to your request. We may require written documentation that demonstrates a third party is authorized to serve as your agent for the purposes of submitting the requests set forth herein, unless you have provided the authorized agent with power of attorney pursuant to California Probate Code §§ 4121 to 4130. None of the CCPA’s rights are absolute, and such rights are subject to legal and regulatory exceptions and exemptions. For more information about the CCPA, please see: https://oag.ca.gov/privacy/ccpa.
Opt-Out Rights / Do Not Sell My Personal Information. California residents have the right to opt out of the “sale” of their personal information. However, Enboarder does not sell your personal information to third parties for profit or monetary or other valuable consideration, and therefore we do not provide opt-out request processes for the sale of personal information (because we do not undertake such activities).
Opt-Out Rights / Do Not Share My Personal Information. California residents have the right to opt out of the “sharing” of their personal information. Enboarder uses third-party analytical and targeted advertising features on our Site and similar web tools provided by our marketing partners, and such features, tools and marketing relationships involve the disclosure of your personal information to third parties and may constitute the “sharing” of your personal information for CCPA purposes. To opt out of this sharing of your personal information in these circumstances, please click on the cookie management tool (sometimes visible as a “Cookie Settings” link on the footer of the Website) to set your cookie preferences. You, or your authorized agent, may also contact us at privacy@enboarder.com.
16.European/UK Privacy Rights
Data Privacy Rights. For individuals in the European Economic Area (EEA) and the United Kingdom, you are entitled to the following privacy rights:
- Right to Know. You may have the right to know about what personal information Company collects and processes about you, including the types of personal information we collect and process, the sources of such personal information, our retention criteria, with whom we share your personal information, cross-border data transfers, and how to file complaints and inquiries.
- Access Rights. You may have the right to ask us whether we process any of your personal information and, if so, receive access to such personal information. When complying with an access request, we will also provide you with additional information, such as the purposes of the processing, the categories of personal information concerned as well as any other information necessary for you to exercise the essence of this right.
- Rectification. You may have the right to have your personal information corrected/rectified in case of inaccuracy or incompleteness. Upon request, we will correct inaccurate personal information about you and, taking into account the purposes of the processing, update any incomplete personal information, which may include the provision of a supplementary statement.
- Erasure. You may have the right to have your personal information erased, which means the deletion of your personal information by us. However, your right to erasure is subject to statutory limits and prerequisites (e.g., where your personal information is no longer necessary in relation to the initial purposes for which it was processed, your personal information was processed unlawfully).
- Restriction of Processing. You may have the right to obtain the restriction of the processing of your personal information, which means that we suspend the processing of your personal information for a certain period of time. Circumstances which may give rise to this right include situations where the accuracy of your personal information is contested, but we need time to verify the inaccuracy (if any) of your personal information.
- Data Portability. You may have the right to request we provide you with your personal information in a structured, commonly used and machine-readable format and to have such data transmitted directly to another controller, where technically feasible.
- Right to Object. You may have the right to object to the processing of your personal information, which means you may request we no longer process your personal information. This only applies in case the “legitimate interests” ground (including profiling) constitutes the legal basis for processing (see below “Legal Basis for Processing”). However, at any time (and free of charge) you can object to having your personal information processed for direct marketing purposes.
- Automated Decision Making. You may have the right to object to having us use your personal information to conduct automated decision making. However, Company does not engage in any activity that subjects our customers, website users, survey participants, or others to a decision based solely on automated processing, including profiling, which produces legal effects, or similarly significant results, impacting them.
Withdrawing Consent. You also may withdraw your consent at any time if we are solely relying on your consent for the processing of your personal information. However, this will not impact our legal basis to process such personal information prior to the withdrawal of your consent.
17.Privacy Request
To submit these abovementioned privacy requests, please contact us at privacy@enboarder.com. You may designate an authorized agent to submit a privacy request on your behalf.
Privacy Request Verification Process. If you make any request related to your personal information, the Company will ascertain your identity (and the identity of the authorized agent, to the extent applicable) to the degree of certainty required or permitted under the law before addressing your request. In particular, before granting you access to, erasing, or correcting, specific pieces or categories of personal information or otherwise responding to your request, the Company will, to the extent required or permitted by law, (i) require you (or your authorized agent) to verify your request via email, (ii) request certain contact information or government identifiers, and (iii) match at least two pieces of such personal information with data that we have previously collected from you. None of your privacy rights are absolute, and such rights are subject to exceptions and exemptions.
18.Legal Basis for Processing
For purposes of the EU/UK GDPR, we can collect and process your data under one of the following legal bases:
- Consent. We can collect and process your data with your consent. For example, if you have given your consent to receiving marketing material from us at the point we collected your information.
- Contractual Obligations. We need your personal information to comply with our contractual obligations. For example, if you have subscribed to one of our services, we use your personal information to fulfill, and deliver that service to you.
- Legal Compliance. If the law requires us to, we may need to collect and process your data.
- Legitimate interest. We may use your data as required in the normal course of operating our businesses and services unless our legitimate interests are overridden by your rights.
Vital interests. We may need to process your personal information if the processing is necessary to protect your vital interests (for example, health and safety reasons if you attend a meeting at a Company location).
19.Complaints
Depending on applicable law, you may have the right to submit a complaint to a data protection authority responsible for overseeing our compliance with data protection law in your jurisdiction. Please see a list of potentially applicable regulatory authorities:
- For data protection authorities in the EU, please see here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
- For the data protection authority in the UK, please contact the Information Commissioner’s Office (ico.org.uk).
We would, however, appreciate the opportunity to address your concerns, so please feel free to contact us regarding any complaint you may have. We will not discriminate against individuals for exercising their data privacy rights or filing a privacy complaint.
20.Changes to the Privacy Policy
We periodically update this Privacy Policy. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice by sending you an email notification.
While we will notify you of any material changes to this Privacy Policy prior to the changes becoming effective, we encourage you to review this Privacy Policy periodically. Any revised Privacy Policy will take effect as the last updated date on our Website.
21.Contact Us
Email: privacy@enboarder.com
Postal Mail: 111 Congress Ave., Suite 500 Austin, TX 78701, Attn: Legal