Frekyl Software, Inc. (“Frekyl,” “we,” “our,” or “us”) is committed to protecting the privacy of the individuals and organizations that interact with our website, platform, and workforce communication services.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with:
Together, we refer to these as the “Services.”
Our privacy practices are designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Where the laws of another jurisdiction apply, including the European Economic Area (“EEA”) or United Kingdom, additional rights and obligations may apply as described below.
Frekyl provides workforce communication and absence-management tools to organizations that use our Services (“Employers” or “Customers”).
Depending on the context, Frekyl may handle personal information in different capacities.
When an Employer uses Frekyl to manage workforce information, absence reporting, shift communication, notifications, forms, or related workflows, the Employer determines why and how employee information is used.
In these circumstances, Frekyl processes personal information on the Employer’s behalf and in accordance with the Employer’s instructions, our agreement with the Employer, and applicable law.
Requests relating to information controlled by an Employer may need to be directed to that Employer.
Frekyl may determine how certain personal information is collected and used when, for example, you:
This distinction may affect which organization is responsible for responding to a privacy request.
The information we collect depends on how you interact with Frekyl.
Employers may provide Frekyl with workforce information necessary to configure and operate the Services.
This may include:
The specific information processed will depend on the Services and workflows configured by the Employer.
When you interact directly with the Frekyl platform, we may collect information such as:
When you contact us, request a demo, submit a website form, or otherwise inquire about Frekyl, we may collect:
We use this information to respond to your inquiry, provide requested information, schedule or conduct demonstrations, and communicate with you about Frekyl.
Where permitted by applicable law, we may receive business contact information from third-party sources such as:
We may combine this information with information already in our records in order to respond to inquiries, maintain accurate business contact information, or communicate with organizations that may have an interest in Frekyl.
When you visit our website or use our Services, we may automatically collect certain technical and usage information, including:
We may collect this information using cookies and similar technologies as described in the Cookies and Tracking Technologies section below.
We may use personal information to:
We may also use aggregated or irreversibly anonymized information for analytics, product improvement, operational reporting, and other legitimate business purposes where the information can no longer reasonably be associated with an identifiable individual.
Where permitted by applicable law, Frekyl may use business contact information to communicate about:
You may unsubscribe from promotional emails at any time by using the unsubscribe mechanism included in the communication or by contacting us.
Opting out of promotional communications does not prevent Frekyl from sending communications that are necessary to:
Frekyl does not sell, rent, or trade personal information.
We may disclose personal information in the following circumstances.
Where Frekyl provides Services to an Employer, relevant information may be made available to authorized individuals within that organization in accordance with the Employer’s configuration, permissions, and instructions.
This may include information necessary for:
We may disclose personal information to trusted third-party vendors and service providers that help us operate Frekyl.
These may include providers supporting:
We take reasonable steps to require our service providers to protect personal information and to use it only as necessary to provide services to Frekyl, subject to applicable contractual and legal obligations.
We may disclose personal information where we reasonably believe disclosure is necessary to:
If Frekyl is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as otherwise permitted or required by applicable law.
Retention periods may depend on factors such as:
Workforce information processed on behalf of an Employer may generally be retained for the duration of the Employer’s use of the Services and for an appropriate period afterward, subject to the Employer’s instructions and applicable legal requirements.
When personal information is no longer required, Frekyl will take reasonable steps to securely delete it or, where appropriate, irreversibly anonymize it.
In some circumstances, Frekyl may satisfy a deletion request by permanently and irreversibly anonymizing information so that it can no longer reasonably be associated with an identifiable individual.
Depending on the circumstances, anonymization may include removing or replacing information such as:
Certain historical or operational information may be retained in anonymized form where doing so is appropriate for purposes such as:
Anonymization is intended to be permanent and non-reversible.
Deletion or anonymization requests may be subject to legal, contractual, employment-related, regulatory, or operational retention requirements.
Where Frekyl processes information on behalf of an Employer, the Employer may be responsible for determining whether a record should be deleted, retained, or anonymized.
Depending on your location and the applicable law, you may have the right to:
To exercise a privacy right, contact:
We may need to verify your identity before completing a request.
Where Frekyl processes personal information on behalf of an Employer, we may refer your request to that Employer or assist the Employer in responding.
We will respond to privacy requests within the timeframe required by applicable law.
Certain rights may be subject to exceptions or limitations permitted by law.
You may opt out of promotional emails by using the unsubscribe link or other opt-out mechanism contained in those communications.
You may also contact us at:
Please note that you may continue to receive communications that are necessary for:
Frekyl uses reasonable technical and organizational safeguards designed to protect personal information against:
Our safeguards may include:
Where required by applicable law, Frekyl will notify affected individuals, Customers, or regulatory authorities of a privacy or security breach in accordance with applicable legal requirements.
No method of transmitting or storing information is completely secure. Although we take reasonable steps to protect personal information, we cannot guarantee absolute security.
Frekyl uses cookies and similar technologies to operate, secure, understand, and improve our website and Services.
These technologies may collect information such as:
We generally use cookies in the following categories.
These cookies are required for core functionality, including functions such as:
Because these cookies are necessary for the Services to function, they cannot always be disabled.
Analytics cookies help us understand how visitors and users interact with our website and Services so we can improve performance, usability, and functionality.
Where required by applicable law, we obtain consent before using non-essential analytics cookies.
You may be able to manage cookie preferences through available website controls, account settings, or your browser settings.
Blocking or disabling certain cookies may affect the functionality of some parts of the website or Services.
Our website or Services may contain links to websites, platforms, or services operated by third parties.
Frekyl is not responsible for the privacy practices, content, or security of third-party websites or services.
When you access a third-party site, that organization’s privacy policy and terms govern your interaction with it.
We encourage you to review the privacy policies of any third-party services you use.
Frekyl is based in Canada.
If you access the Services from outside Canada, personal information may be transferred to, stored in, or processed in Canada or in other countries where Frekyl or its service providers operate.
Privacy and data-protection laws may differ between jurisdictions.
Where required by applicable law, Frekyl uses appropriate contractual, organizational, or legal safeguards for international transfers of personal information.
Where applicable, we rely on recognized legal mechanisms for international transfers of personal information, including adequacy decisions and contractual safeguards.
This section applies where the European Union General Data Protection Regulation (“GDPR”), UK GDPR, or related data-protection laws apply to Frekyl’s processing of personal data.
When an Employer uses Frekyl to process employee or workforce personal data, the Employer generally acts as the data controller, and Frekyl acts as a data processor acting on the Employer’s documented instructions.
For certain information Frekyl collects directly for its own purposes, such as website inquiries, account administration, or direct business communications, Frekyl may act as a controller.
Where required by applicable law, Frekyl enters into appropriate data-processing terms with Employers.
To request a DPA, contact:
Where GDPR or UK GDPR applies, Frekyl processes personal data only where an appropriate legal basis exists.
Depending on the circumstances, these bases may include:
Where applicable, individuals may also have the right to:
The exercise of these rights may be subject to limitations or exceptions under applicable law.
Where personal data is transferred from the EEA or UK to a country that does not benefit from an applicable adequacy decision, Frekyl uses lawful transfer mechanisms where required.
These may include:
If you are located in the EEA or UK and believe your privacy rights have not been appropriately addressed, you may have the right to lodge a complaint with the data-protection supervisory authority in your jurisdiction.
We encourage you to contact Frekyl first so that we have an opportunity to address your concern.
Frekyl is designed for business, organizational, and workforce use and is not intended for independent use by children.
We do not knowingly collect personal information directly from children in connection with marketing, website inquiries, or independent account use.
In some circumstances, an Employer may provide workforce information relating to younger employees where lawful and appropriate. In those cases, Frekyl processes that information on behalf of the Employer and in accordance with the Employer’s instructions and applicable law.
If we become aware that personal information has been collected contrary to applicable law, we will take appropriate steps to address or delete the information.
We may update this Privacy Policy from time to time to reflect changes in:
The current version will be posted on our website with an updated Last Updated date.
Where required by law, or where changes are material, we may provide additional notice through the Services, by email, or by another appropriate method before the changes take effect.
If you have questions, concerns, complaints, or requests relating to this Privacy Policy or Frekyl’s privacy practices, please contact us at:
If your request relates to personal information that Frekyl processes on behalf of your Employer, we may refer the request to that Employer or work with the Employer to respond.
If you are not satisfied with our response, you may have the right to contact the appropriate privacy or data-protection authority in your jurisdiction.